last executing test programs: 11.770738506s ago: executing program 3 (id=967): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000140000000002c0003801400010076"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x34, 0x0, 0x0, @link_id}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x5a6, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90}, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 10.728338647s ago: executing program 2 (id=968): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f00000020c0)}], 0x1}, 0x0) 10.147311575s ago: executing program 2 (id=970): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071112d0000000000851000000200000085a562f70000000095000000000000009500a50500000000c8650b2cfc43f7d6b9d96df6264d9d088ed70469cdb4665e42063f11e6c09edb5d205622dc2c6264d6f7a24ac7dc0f635849c878cce7b785ab0be88795f1e055ed0f2899be730d207ed3f9fece99b274005d59a5"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) 8.575280712s ago: executing program 1 (id=973): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f76000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 8.282805119s ago: executing program 3 (id=974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(r1, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xffff}, {0x0, 0x0, 0x1800}], 0x2) fsopen(0x0, 0x0) 8.108816141s ago: executing program 1 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 8.027480179s ago: executing program 2 (id=976): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000e030000000000000003000000000000080000000200000000000000000000000a020000000000"], 0x0, 0x50}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) times(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') read$FUSE(r6, &(0x7f0000006480)={0x2020}, 0x2020) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000300)={0x1, "99f3763cf49058cd2bc8cf43a7e5fffffffff5ffff7994902f62c79232911790", 0x1, 0x80a, 0x0, 0xb, 0x4, 0x2, 0x9}) 7.482005108s ago: executing program 1 (id=978): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 7.39361498s ago: executing program 2 (id=979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa0080850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x800) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4f227fdb41db3f3", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="126189a02c2c9c60d848f1469842ee2bac949c64df8e9dc5b53e72640a813731303ebac5ce6acbff860fe4406d13d79fc3a01586ea615f56156ea64d3ac54e1e224948c5b96c21c3b92b84f4ef7ba932f4f96fbaf0d0a11f4f2952fa866f20476ac3a852eb6fe9af0497028e9d7cb5108086175c4e65d7ef83bdc855ba58e853a91451fb61e949b661", @ANYRES32=r1, @ANYRES8=r4], 0x22) syz_emit_vhci(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0xd5b}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x1000f0000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x14, 0x16, 0x1e40, 0x7f}, 0x48) socket(0xa, 0x3, 0x3a) 6.947840168s ago: executing program 4 (id=981): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x800, {0x5, 0x1, 0x3, 0x795a, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe15a, 0x0, 0x400002, 0x0, 0x0, "fe1d0c1cff001704000000000000000000eeff1800"}}) 6.889626564s ago: executing program 3 (id=982): r0 = io_uring_setup(0x1698, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xfffffffc, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 5.751437913s ago: executing program 1 (id=984): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000140000000002c0003801400010076"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x34, 0x0, 0x0, @link_id}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x5a6, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90}, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 5.571972397s ago: executing program 4 (id=985): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/132, 0x84}], 0x1, &(0x7f0000000240)}, 0x0) dup3(r2, r0, 0x0) 5.535240354s ago: executing program 0 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x40}}, 0x0) 5.206614699s ago: executing program 0 (id=987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000540)=""/161, 0xa1}], 0x2}, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@delqdisc={0xec, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x40}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0xec}}, 0x20048015) 5.02573491s ago: executing program 4 (id=988): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) syz_emit_ethernet(0x5a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.766462923s ago: executing program 2 (id=989): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000e030000000000000003000000000000080000000200000000000000000000000a020000000000"], 0x0, 0x50}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) times(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') read$FUSE(r6, &(0x7f0000006480)={0x2020}, 0x2020) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000300)={0x1, "99f3763cf49058cd2bc8cf43a7e5fffffffff5ffff7994902f62c79232911790", 0x1, 0x80a, 0x0, 0xb, 0x4, 0x2, 0x9}) 3.654538116s ago: executing program 0 (id=990): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 3.339826454s ago: executing program 0 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) 3.102135558s ago: executing program 0 (id=992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) 2.921336455s ago: executing program 4 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100003040000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f00000020c0)}], 0x1}, 0x0) 2.880618764s ago: executing program 2 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) pipe(&(0x7f00000000c0)) 2.759583188s ago: executing program 0 (id=995): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x800, {0x5, 0x1, 0x3, 0x795a, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe15a, 0x0, 0x400002, 0x0, 0x0, "fe1d0c1cff001704000000000000000000eeff1800"}}) 2.211770609s ago: executing program 3 (id=996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)={0x1, 0xb26, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee76096b4c8b0e182deac6221008dee32436028328ef00"}}, 0x80}}, 0x0) 1.589515157s ago: executing program 4 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 1.580837477s ago: executing program 1 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.195550378s ago: executing program 3 (id=999): iopl(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.051379116s ago: executing program 4 (id=1000): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 40.094738ms ago: executing program 3 (id=1001): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 0s ago: executing program 1 (id=1002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) kernel console output (not intermixed with test programs): d=6379 comm="syz.3.296" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 492.756931][ T5310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 493.127800][ T5310] usb 3-1: Using ep0 maxpacket: 32 [ 493.144562][ T5310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.184063][ T5310] usb 3-1: config 0 has no interfaces? [ 493.198840][ T5310] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 493.232651][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.295232][ T5310] usb 3-1: config 0 descriptor?? [ 493.661327][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 493.685485][ T25] usb 3-1: USB disconnect, device number 8 [ 494.076928][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 494.527332][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 494.563790][ T25] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 494.636948][ T25] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 494.736730][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 494.800067][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.143958][ T5308] usb 2-1: USB disconnect, device number 14 [ 501.925027][ T6442] xt_TPROXY: Can be used only with -p tcp or -p udp [ 502.099410][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.105945][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.752315][ T29] audit: type=1400 audit(1723700208.160:272): avc: denied { mount } for pid=6457 comm="syz.0.315" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 504.111956][ T6469] usb usb8: usbfs: process 6469 (syz.2.316) did not claim interface 0 before use [ 504.211514][ T5267] Bluetooth: hci0: command 0x0406 tx timeout [ 504.467990][ T5342] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 504.634995][ T29] audit: type=1400 audit(1723700209.220:273): avc: denied { unmount } for pid=5253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 504.847626][ T5342] usb 5-1: Using ep0 maxpacket: 32 [ 505.013316][ T5342] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 505.049199][ T5342] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 505.060555][ T5342] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 505.308055][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.722436][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 505.769860][ T5342] usb 5-1: USB disconnect, device number 9 [ 505.911356][ T29] audit: type=1400 audit(1723700210.500:274): avc: denied { write } for pid=6490 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 507.876944][ T29] audit: type=1400 audit(1723700212.440:275): avc: denied { create } for pid=6525 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 508.116280][ T29] audit: type=1400 audit(1723700212.500:276): avc: denied { bind } for pid=6525 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.656621][ T29] audit: type=1400 audit(1723700214.240:277): avc: denied { create } for pid=6525 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 510.939710][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 511.277000][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 511.472660][ T6554] xt_CONNSECMARK: invalid mode: 0 [ 511.728737][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 511.788674][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 511.850797][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 511.904690][ T47] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 511.936941][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.965834][ T47] usb 1-1: Product: syz [ 511.985741][ T47] usb 1-1: Manufacturer: syz [ 512.006031][ T47] usb 1-1: SerialNumber: syz [ 512.036465][ T47] usb 1-1: config 0 descriptor?? [ 512.055857][ T47] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 512.253722][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.345'. [ 512.320195][ T47] usb 1-1: USB disconnect, device number 5 [ 514.993869][ T29] audit: type=1400 audit(1723700219.580:278): avc: denied { sys_module } for pid=6594 comm="syz.0.352" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 515.697120][ T5310] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 515.776967][ T5308] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 515.916914][ T5310] usb 2-1: Using ep0 maxpacket: 32 [ 515.959758][ T5310] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 515.967262][ T5308] usb 4-1: Using ep0 maxpacket: 8 [ 515.998194][ T5308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 516.006207][ T5310] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 516.032403][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 516.049361][ T5310] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 516.085228][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 516.087009][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.123951][ T5308] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 516.186880][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.302205][ T5308] usb 4-1: Product: syz [ 516.454317][ T5308] usb 4-1: Manufacturer: syz [ 516.476637][ T5308] usb 4-1: SerialNumber: syz [ 516.499329][ T5308] usb 4-1: config 0 descriptor?? [ 516.566116][ T5308] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 516.764827][ T5308] usb 4-1: USB disconnect, device number 8 [ 517.605602][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 518.382631][ T5308] usb 2-1: USB disconnect, device number 15 [ 519.331523][ T29] audit: type=1400 audit(1723700223.920:279): avc: denied { connect } for pid=6657 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 519.379017][ T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 519.549058][ T6664] syzkaller0: entered allmulticast mode [ 519.583511][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.626545][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.658625][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 519.687266][ T47] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 519.719747][ T47] usb 3-1: Manufacturer: syz [ 519.764937][ T47] usb 3-1: config 0 descriptor?? [ 520.213886][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.257014][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.263952][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.301173][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.339071][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.348521][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.355444][ T47] wacom 0003:056A:0315.0001: unknown main item tag 0x0 [ 520.389807][ T47] wacom 0003:056A:0315.0001: Unknown device_type for 'syz'. Assuming pen. [ 520.438124][ T47] wacom 0003:056A:0315.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 520.502791][ T47] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.0001/input/input6 [ 520.673423][ T47] usb 3-1: USB disconnect, device number 9 [ 521.407141][ T5267] Bluetooth: hci0: command 0x0406 tx timeout [ 522.224530][ T6697] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 522.271765][ T6697] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 524.759386][ T6725] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 524.849090][ T6725] bond1: entered promiscuous mode [ 524.921551][ T6725] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 524.977873][ T6725] bond1: (slave bridge1): making interface the new active one [ 524.984583][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 525.006554][ T6725] bridge1: entered promiscuous mode [ 525.015464][ T6725] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 525.567080][ T1169] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 525.758563][ T1169] usb 2-1: Using ep0 maxpacket: 16 [ 525.794035][ T1169] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 525.825003][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.872330][ T1169] usb 2-1: config 0 descriptor?? [ 525.901368][ T1169] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 526.127486][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.191577][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.540107][ T1169] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 526.574052][ T1169] sq905c 2-1:0.0: Get version command failed [ 526.944386][ T29] audit: type=1400 audit(1723700231.380:280): avc: denied { lock } for pid=6749 comm="syz.4.400" path="socket:[15682]" dev="sockfs" ino=15682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 527.377550][ T1169] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 527.397146][ T1169] usb 2-1: USB disconnect, device number 16 [ 531.397118][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 532.007575][ T6850] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 532.714717][ T29] audit: type=1400 audit(1723700237.290:281): avc: denied { read } for pid=6851 comm="syz.4.413" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 532.826358][ T29] audit: type=1400 audit(1723700237.290:282): avc: denied { open } for pid=6851 comm="syz.4.413" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 538.539305][ T29] audit: type=1400 audit(1723700243.130:283): avc: denied { create } for pid=6878 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 538.618379][ T29] audit: type=1400 audit(1723700243.150:284): avc: denied { setopt } for pid=6878 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 538.758921][ T5308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 538.841748][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 539.048934][ T6884] wireguard0: entered promiscuous mode [ 539.073666][ T6884] wireguard0: entered allmulticast mode [ 539.151726][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 539.166597][ T5308] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 539.188732][ T5308] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 539.719951][ T5308] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 540.014003][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.344580][ T5308] usb 5-1: USB disconnect, device number 10 [ 541.610158][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 543.020344][ T6943] netlink: 452 bytes leftover after parsing attributes in process `syz.4.439'. [ 543.996930][ T8] IPVS: starting estimator thread 0... [ 544.137072][ T6957] IPVS: using max 15 ests per chain, 36000 per kthread [ 546.043155][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.776955][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 546.978270][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 547.217780][ T47] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 547.263158][ T47] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 547.280622][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 547.291746][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.406336][ T1169] usb 1-1: USB disconnect, device number 6 [ 549.462057][ T29] audit: type=1400 audit(1723700254.050:285): avc: denied { read } for pid=7023 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.761878][ T7026] syz.0.464 (7026) used greatest stack depth: 21296 bytes left [ 550.814858][ T5342] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 551.055370][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 551.364211][ T5342] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=98.89 [ 551.391855][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.407914][ T5342] usb 4-1: Product: syz [ 551.412131][ T5342] usb 4-1: Manufacturer: syz [ 551.416748][ T5342] usb 4-1: SerialNumber: syz [ 551.459588][ T5342] usb 4-1: config 0 descriptor?? [ 551.499274][ T5342] appledisplay 4-1:0.0: Could not find int-in endpoint [ 551.791774][ T5342] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 553.210117][ T5342] usb 4-1: USB disconnect, device number 9 [ 558.878251][ T29] audit: type=1400 audit(1723700263.450:286): avc: denied { name_connect } for pid=7073 comm="syz.1.478" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 558.955045][ T29] audit: type=1400 audit(1723700263.460:287): avc: denied { ioctl } for pid=7073 comm="syz.1.478" path="socket:[16042]" dev="sockfs" ino=16042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.228508][ T29] audit: type=1400 audit(1723700263.820:288): avc: denied { getopt } for pid=7079 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.718040][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 560.872431][ T5342] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 560.937755][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 560.958121][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 560.983620][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.030457][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.044814][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.068059][ T47] usb 5-1: config 0 descriptor?? [ 561.074120][ T7093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.106893][ T5342] usb 3-1: Using ep0 maxpacket: 32 [ 561.351005][ T5342] usb 3-1: config 4 has an invalid descriptor of length 153, skipping remainder of the config [ 561.377066][ T5342] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 561.402552][ T5342] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 561.421419][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.318865][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.325393][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.546721][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 564.617024][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 564.626966][ T1169] usb 3-1: USB disconnect, device number 10 [ 564.692799][ T47] usb 5-1: USB disconnect, device number 11 [ 565.043102][ T29] audit: type=1400 audit(1723700269.630:289): avc: denied { create } for pid=7124 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 565.123172][ T29] audit: type=1400 audit(1723700269.690:290): avc: denied { setopt } for pid=7124 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 565.242319][ T29] audit: type=1400 audit(1723700269.820:291): avc: denied { getopt } for pid=7133 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 565.390893][ T29] audit: type=1400 audit(1723700269.980:292): avc: denied { read } for pid=7137 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 565.397915][ T7134] mac80211_hwsim hwsim8 wlan1 (unregistering): left allmulticast mode [ 565.456093][ T29] audit: type=1400 audit(1723700270.030:293): avc: denied { write } for pid=7137 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 567.327274][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 567.551432][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 567.792086][ T8] usb 3-1: config 4 has an invalid descriptor of length 153, skipping remainder of the config [ 567.931471][ T8] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 568.110535][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 568.149812][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.433892][ T5341] usb 3-1: USB disconnect, device number 11 [ 571.578145][ T29] audit: type=1400 audit(1723700276.170:294): avc: denied { name_bind } for pid=7167 comm="syz.3.512" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 571.606382][ T29] audit: type=1400 audit(1723700276.170:295): avc: denied { node_bind } for pid=7167 comm="syz.3.512" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 572.999209][ T29] audit: type=1400 audit(1723700277.590:296): avc: denied { block_suspend } for pid=7238 comm="syz.3.522" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.431236][ T29] audit: type=1400 audit(1723700283.010:297): avc: denied { create } for pid=7255 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 578.562477][ T29] audit: type=1400 audit(1723700283.150:298): avc: denied { nlmsg_read } for pid=7256 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 578.592618][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 578.658974][ T29] audit: type=1400 audit(1723700283.200:299): avc: denied { rename } for pid=4653 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.762861][ T29] audit: type=1400 audit(1723700283.200:300): avc: denied { unlink } for pid=4653 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.822576][ T29] audit: type=1400 audit(1723700283.200:301): avc: denied { create } for pid=4653 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.887812][ T29] audit: type=1400 audit(1723700283.290:302): avc: denied { name_bind } for pid=7264 comm="syz.4.532" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 579.038947][ T1169] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 579.228731][ T1169] usb 2-1: Using ep0 maxpacket: 32 [ 579.247675][ T1169] usb 2-1: config 4 has an invalid descriptor of length 153, skipping remainder of the config [ 579.287771][ T1169] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 579.324156][ T1169] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 579.366947][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.891488][ T1169] usb 2-1: USB disconnect, device number 17 [ 580.200378][ T7284] xt_CONNSECMARK: invalid mode: 0 [ 580.606924][ T29] audit: type=1400 audit(1723700285.190:303): avc: denied { write } for pid=7283 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 580.852640][ T7286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.013828][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 581.972796][ T7301] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 582.364231][ T7310] netlink: 100 bytes leftover after parsing attributes in process `syz.2.545'. [ 583.397229][ T5342] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 583.446907][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 583.610246][ T5342] usb 3-1: Using ep0 maxpacket: 16 [ 583.638620][ T5342] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 583.656973][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 583.682465][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.682836][ T8] usb 4-1: config 4 has an invalid descriptor of length 153, skipping remainder of the config [ 583.753347][ T5342] usb 3-1: config 0 descriptor?? [ 583.764742][ T8] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 583.788011][ T5342] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 583.806946][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 583.843174][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.992068][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.073042][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.101416][ T7345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7345 comm=syz.4.559 [ 584.141744][ T5341] usb 4-1: USB disconnect, device number 10 [ 584.155653][ T5342] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 584.166734][ T29] audit: type=1400 audit(1723700288.740:304): avc: denied { read } for pid=7339 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 584.199125][ T5342] sq905c 3-1:0.0: Get version command failed [ 584.223065][ T5342] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 589.549778][ T5342] usb 3-1: USB disconnect, device number 12 [ 590.322188][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 590.888641][ T5341] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 590.937906][ T5342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 590.938480][ T8] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 590.999123][ T8] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.033822][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.060381][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.109253][ T5341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.126871][ T5342] usb 2-1: Using ep0 maxpacket: 16 [ 591.139508][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.164979][ T5342] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 591.191024][ T5341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.207171][ T5342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 591.257043][ T5341] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 591.281789][ T5342] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 591.296984][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.312890][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.341653][ T5342] usb 2-1: Product: syz [ 591.347452][ T5342] usb 2-1: Manufacturer: syz [ 591.373011][ T5342] usb 2-1: SerialNumber: syz [ 591.421558][ T5341] usb 5-1: config 0 descriptor?? [ 591.455539][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 591.456363][ T5342] r8152-cfgselector 2-1: Unknown version 0x0000 [ 591.475654][ T29] audit: type=1400 audit(1723700296.060:305): avc: denied { getopt } for pid=7353 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 591.734714][ T5342] r8152-cfgselector 2-1: Unknown version 0x0000 [ 591.745627][ T5342] r8152-cfgselector 2-1: bad CDC descriptors [ 591.983999][ T7383] mmap: syz.0.571 (7383) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 591.997386][ T1169] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 592.009032][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 592.103955][ T5341] usb 5-1: USB disconnect, device number 12 [ 592.216891][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 592.236031][ T8] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 592.252447][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.285767][ T8] usb 3-1: config 0 descriptor?? [ 592.308847][ T8] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 592.511547][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.550965][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.600187][ T8] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 592.626869][ T8] sq905c 3-1:0.0: Get version command failed [ 592.637499][ T8] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 592.690786][ T8] usb 3-1: USB disconnect, device number 13 [ 595.277072][ T5341] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 595.296896][ T5342] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 595.360357][ T29] audit: type=1400 audit(1723700299.950:306): avc: denied { read write } for pid=7397 comm="syz.2.579" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 598.171481][ T29] audit: type=1400 audit(1723700299.950:307): avc: denied { open } for pid=7397 comm="syz.2.579" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 598.358626][ T5341] usb 5-1: device descriptor read/all, error -71 [ 598.386991][ T5342] usb 2-1: device not accepting address 19, error -71 [ 598.601192][ T7405] syzkaller1: entered promiscuous mode [ 598.606717][ T7405] syzkaller1: entered allmulticast mode [ 599.065927][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 599.563597][ T7415] xt_CONNSECMARK: invalid mode: 0 [ 606.271136][ T29] audit: type=1400 audit(1723700310.860:308): avc: denied { create } for pid=7442 comm="syz.4.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.663357][ T29] audit: type=1400 audit(1723700310.950:309): avc: denied { mounton } for pid=7442 comm="syz.4.592" path="/120/file0" dev="tmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 607.105362][ T5342] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 607.128598][ T5267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.148291][ T5267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.187307][ T5267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.202225][ T29] audit: type=1400 audit(1723700311.140:310): avc: denied { read } for pid=7442 comm="syz.4.592" name="file0" dev="tmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 607.229410][ T29] audit: type=1400 audit(1723700311.140:311): avc: denied { open } for pid=7442 comm="syz.4.592" path="/120/file0" dev="tmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 607.253459][ T5267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.275336][ T5267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 607.284728][ T5267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.347508][ T5342] usb 2-1: Using ep0 maxpacket: 16 [ 607.354718][ T5342] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 607.372467][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.398291][ T5342] usb 2-1: config 0 descriptor?? [ 607.425539][ T29] audit: type=1400 audit(1723700311.860:312): avc: denied { unlink } for pid=5252 comm="syz-executor" name="file0" dev="tmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 607.430930][ T5342] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 607.493828][ T29] audit: type=1400 audit(1723700311.890:313): avc: denied { mounton } for pid=7451 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 607.638894][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.740085][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.834507][ T5342] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 607.886406][ T5342] sq905c 2-1:0.0: Get version command failed [ 607.914925][ T5342] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 609.326987][ T55] Bluetooth: hci5: command tx timeout [ 611.354436][ T5342] usb 2-1: USB disconnect, device number 21 [ 611.414280][ T55] Bluetooth: hci5: command tx timeout [ 611.653429][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 612.199019][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'. [ 612.661710][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.683987][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.714298][ T7451] bridge_slave_0: entered allmulticast mode [ 612.734402][ T7451] bridge_slave_0: entered promiscuous mode [ 612.801950][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.827218][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.834491][ T7451] bridge_slave_1: entered allmulticast mode [ 612.881238][ T7451] bridge_slave_1: entered promiscuous mode [ 613.000660][ T29] audit: type=1400 audit(1723700317.590:314): avc: denied { append } for pid=7491 comm="syz.4.604" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 613.073196][ T7451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.216967][ T29] audit: type=1400 audit(1723700317.770:315): avc: denied { create } for pid=7491 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 613.239191][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.350036][ T5267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 613.360807][ T5267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 613.372521][ T5267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 613.385620][ T5267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 613.395740][ T5267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 613.403723][ T5267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 613.487358][ T55] Bluetooth: hci5: command tx timeout [ 614.115643][ T7451] team0: Port device team_slave_0 added [ 614.209214][ T7451] team0: Port device team_slave_1 added [ 614.381216][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.404397][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.417822][ T5341] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 614.446566][ T7451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.538713][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.565978][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.641711][ T7451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.719473][ T5341] usb 2-1: Using ep0 maxpacket: 16 [ 614.759047][ T5341] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 614.788703][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.808911][ T5341] usb 2-1: config 0 descriptor?? [ 614.832016][ T5341] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 614.890809][ T7451] hsr_slave_0: entered promiscuous mode [ 614.969617][ T7451] hsr_slave_1: entered promiscuous mode [ 614.995415][ T7451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.007524][ T7451] Cannot create hsr debugfs directory [ 615.040611][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.099753][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.228294][ T5341] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 615.235756][ T5341] sq905c 2-1:0.0: Get version command failed [ 615.335623][ T5341] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 615.417859][ T5341] usb 2-1: USB disconnect, device number 22 [ 615.496952][ T55] Bluetooth: hci6: command tx timeout [ 615.568552][ T55] Bluetooth: hci5: command tx timeout [ 615.700643][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 615.927025][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 615.934397][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 615.957039][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 615.987628][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 616.010135][ T25] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 616.025636][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.035253][ T25] usb 5-1: Product: syz [ 616.039717][ T25] usb 5-1: Manufacturer: syz [ 616.044445][ T25] usb 5-1: SerialNumber: syz [ 616.052977][ T25] usb 5-1: config 0 descriptor?? [ 616.063478][ T25] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 616.273852][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 616.296156][ T25] usb 5-1: USB disconnect, device number 15 [ 616.505180][ T7451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.715447][ T7451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.920534][ T7451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.057909][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.075432][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.108378][ T7499] bridge_slave_0: entered allmulticast mode [ 617.127947][ T7499] bridge_slave_0: entered promiscuous mode [ 617.289797][ T7451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.352095][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.368926][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.389582][ T7499] bridge_slave_1: entered allmulticast mode [ 617.411099][ T7499] bridge_slave_1: entered promiscuous mode [ 617.567142][ T55] Bluetooth: hci6: command tx timeout [ 617.717494][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.801812][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.246995][ T5310] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 619.472990][ T7499] team0: Port device team_slave_0 added [ 619.488102][ T5310] usb 2-1: Using ep0 maxpacket: 16 [ 619.647180][ T55] Bluetooth: hci6: command tx timeout [ 621.249575][ T5310] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 621.258845][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.296264][ T5310] usb 2-1: config 0 descriptor?? [ 621.316206][ T5310] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 621.333142][ T7499] team0: Port device team_slave_1 added [ 621.415019][ T5310] gspca_sonixj: reg_w1 err -71 [ 621.429350][ T5310] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 621.463338][ T5310] usb 2-1: USB disconnect, device number 23 [ 621.825578][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.875782][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.960750][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.990501][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.007745][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.069109][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.847330][ T7451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.906088][ T7451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 622.996096][ T7451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 623.091598][ T7451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 623.251952][ T7499] hsr_slave_0: entered promiscuous mode [ 623.258505][ T55] Bluetooth: hci6: command tx timeout [ 623.314224][ T7499] hsr_slave_1: entered promiscuous mode [ 623.388519][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.446585][ T7499] Cannot create hsr debugfs directory [ 623.777072][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 623.897942][ T29] audit: type=1400 audit(1723700328.470:316): avc: denied { remount } for pid=7585 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 623.985705][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.006868][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 624.021095][ T25] usb 5-1: config 1 has no interface number 0 [ 624.029216][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.065265][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.075140][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.117213][ T25] usb 5-1: Product: syz [ 624.137929][ T25] usb 5-1: Manufacturer: syz [ 624.158701][ T25] usb 5-1: SerialNumber: syz [ 624.235269][ T25] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 624.294577][ T25] cdc_ncm 5-1:1.1: bind() failure [ 624.356712][ T7499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.839536][ T7499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.941128][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.947679][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.962864][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.997323][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.050662][ T7499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.227193][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.297584][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.343231][ T7499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.423157][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.476027][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.516095][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.571873][ T8] usb 5-1: USB disconnect, device number 16 [ 625.615788][ T7451] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.679454][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.686645][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.717726][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.724992][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.023035][ T7499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 626.061724][ T7499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 626.111006][ T7499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 626.236519][ T7499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 626.572108][ T29] audit: type=1400 audit(1723700331.150:317): avc: denied { mounton } for pid=7609 comm="syz.4.636" path="/130/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 626.733675][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.813531][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.902027][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.909262][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.979523][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.986727][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.214290][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.379845][ T5341] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 627.476137][ T7451] veth0_vlan: entered promiscuous mode [ 627.552917][ T7451] veth1_vlan: entered promiscuous mode [ 627.587109][ T5341] usb 1-1: Using ep0 maxpacket: 16 [ 627.603906][ T5341] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 627.636681][ T5341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.679057][ T5341] usb 1-1: config 0 descriptor?? [ 627.722990][ T5341] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 627.768151][ T7451] veth0_macvtap: entered promiscuous mode [ 627.803040][ T7451] veth1_macvtap: entered promiscuous mode [ 627.938751][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.959007][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.969952][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.997853][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.016853][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.038057][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.063858][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.085556][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.107835][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.136899][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.152998][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.177017][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.197578][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.220632][ T5341] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 628.225523][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.248187][ T5341] sq905c 1-1:0.0: Get version command failed [ 628.290584][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.300399][ T5341] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 628.322391][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.326581][ T5341] usb 1-1: USB disconnect, device number 7 [ 628.374039][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.415748][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.446367][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.471514][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.491881][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.512728][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.537336][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.556981][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.589546][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.652771][ T7451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.674577][ T7451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.693610][ T7451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.716868][ T7451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.965407][ T7499] veth0_vlan: entered promiscuous mode [ 629.067638][ T7499] veth1_vlan: entered promiscuous mode [ 629.280933][ T7499] veth0_macvtap: entered promiscuous mode [ 629.507249][ T6168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.546710][ T6168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.621589][ T7499] veth1_macvtap: entered promiscuous mode [ 629.958177][ T5319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.967540][ T5319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.104265][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.149047][ T29] audit: type=1400 audit(1723700334.740:318): avc: denied { mount } for pid=7451 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 630.186891][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.196743][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.246970][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.274583][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.306993][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.346895][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.370293][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.398744][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.427183][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.457039][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.476885][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.509850][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.541281][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.576996][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.622272][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.666822][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.705431][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.719107][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.729148][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.739778][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.749646][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.760559][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.774200][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.786753][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.297874][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.458106][ T7499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.499551][ T7499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.567580][ T7499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.576344][ T7499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.956965][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.965131][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.048856][ T5319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.083917][ T5319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.758330][ T7664] xt_CONNSECMARK: invalid mode: 0 [ 636.828777][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 637.100207][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.157008][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.193065][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.269959][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.294238][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.311357][ T8] usb 3-1: Product: syz [ 637.318278][ T5267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 637.328664][ T5267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 637.336623][ T5267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 637.345595][ T5267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 637.354415][ T5267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 637.362006][ T5267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.388838][ T8] usb 3-1: Manufacturer: syz [ 637.396907][ T8] usb 3-1: SerialNumber: syz [ 637.603202][ T8] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 637.636923][ T8] cdc_ncm 3-1:1.0: bind() failure [ 643.109155][ T5267] Bluetooth: hci7: command tx timeout [ 643.374677][ T5342] usb 3-1: USB disconnect, device number 14 [ 643.532331][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 644.052542][ T29] audit: type=1400 audit(1723700348.640:319): avc: denied { write } for pid=7693 comm="syz.2.655" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 644.174123][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.186210][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.202622][ T7674] bridge_slave_0: entered allmulticast mode [ 644.245511][ T7674] bridge_slave_0: entered promiscuous mode [ 644.338965][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.391147][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.417187][ T7674] bridge_slave_1: entered allmulticast mode [ 644.425095][ T7674] bridge_slave_1: entered promiscuous mode [ 644.732829][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.756752][ T5267] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 644.768152][ T5267] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 644.780873][ T5267] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 644.790369][ T5267] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 644.798502][ T5267] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 644.806114][ T5267] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 644.810945][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.168426][ T5267] Bluetooth: hci7: command tx timeout [ 645.876596][ T7674] team0: Port device team_slave_0 added [ 646.273773][ T7674] team0: Port device team_slave_1 added [ 646.454466][ T29] audit: type=1400 audit(1723700351.030:320): avc: denied { ioctl } for pid=7718 comm="syz.4.661" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 646.598536][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 646.639663][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.710738][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.846973][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 646.849945][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.927531][ T5267] Bluetooth: hci8: command tx timeout [ 646.934617][ T8] usb 5-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 646.956860][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.978362][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.998372][ T8] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 647.012483][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.016881][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.118850][ T8] usb 5-1: Product: syz [ 647.126875][ T8] usb 5-1: Manufacturer: syz [ 647.131513][ T8] usb 5-1: SerialNumber: syz [ 647.131632][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.150219][ T8] usb 5-1: config 0 descriptor?? [ 647.247237][ T5267] Bluetooth: hci7: command tx timeout [ 647.363694][ T6782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.600151][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.633055][ T29] audit: type=1400 audit(1723700352.190:321): avc: denied { read write } for pid=7718 comm="syz.4.661" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.682504][ T29] audit: type=1400 audit(1723700352.190:322): avc: denied { open } for pid=7718 comm="syz.4.661" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.759948][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.797111][ T29] audit: type=1400 audit(1723700352.290:323): avc: denied { map } for pid=7731 comm="syz.2.665" path="socket:[19984]" dev="sockfs" ino=19984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 647.956918][ T29] audit: type=1400 audit(1723700352.370:324): avc: denied { setopt } for pid=7731 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 647.992399][ T6782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.042106][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.131606][ T7728] xt_CONNSECMARK: invalid mode: 0 [ 648.477585][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.504815][ T5341] usb 5-1: USB disconnect, device number 17 [ 648.638220][ T6782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.696583][ T7674] hsr_slave_0: entered promiscuous mode [ 648.727711][ T7674] hsr_slave_1: entered promiscuous mode [ 648.748941][ T7674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.756659][ T7674] Cannot create hsr debugfs directory [ 648.816496][ T6782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.008679][ T5267] Bluetooth: hci8: command tx timeout [ 649.614322][ T5267] Bluetooth: hci7: command tx timeout [ 650.196926][ T5308] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 650.426942][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 650.478153][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.507081][ T5308] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 650.516174][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.580193][ T5308] usb 3-1: config 0 descriptor?? [ 650.710296][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 651.097376][ T5267] Bluetooth: hci8: command tx timeout [ 651.139218][ T5308] hid-alps 0003:044E:121E.0003: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 651.264497][ T7674] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.310028][ T5308] usb 3-1: USB disconnect, device number 15 [ 651.715889][ T7674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.879616][ T6782] bridge_slave_1: left allmulticast mode [ 651.885785][ T6782] bridge_slave_1: left promiscuous mode [ 651.922538][ T29] audit: type=1400 audit(1723700356.490:325): avc: denied { search } for pid=4885 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.958871][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.987706][ T29] audit: type=1400 audit(1723700356.490:326): avc: denied { read } for pid=4885 comm="dhcpcd" name="n68" dev="tmpfs" ino=4267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.040158][ T6782] bridge_slave_0: left allmulticast mode [ 652.045851][ T6782] bridge_slave_0: left promiscuous mode [ 652.057839][ T29] audit: type=1400 audit(1723700356.490:327): avc: denied { open } for pid=4885 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=4267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.081868][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.100339][ T29] audit: type=1400 audit(1723700356.490:328): avc: denied { getattr } for pid=4885 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=4267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.250103][ T29] audit: type=1400 audit(1723700356.840:329): avc: denied { create } for pid=7766 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 652.308909][ T29] audit: type=1400 audit(1723700356.870:330): avc: denied { bind } for pid=7766 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 652.887569][ T5310] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 653.110221][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.126888][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.148207][ T5310] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 653.167604][ T5267] Bluetooth: hci8: command tx timeout [ 653.167609][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.183578][ T5310] usb 5-1: config 0 descriptor?? [ 653.401395][ T6782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.456980][ T6782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.486179][ T6782] bond0 (unregistering): Released all slaves [ 653.639057][ T5310] usbhid 5-1:0.0: can't add hid device: -71 [ 653.664518][ T7674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.676323][ T5310] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 653.722793][ T5310] usb 5-1: USB disconnect, device number 18 [ 655.211364][ T29] audit: type=1400 audit(1723700359.770:331): avc: denied { append } for pid=7788 comm="syz.4.679" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 655.511481][ T7674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.094651][ T7796] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 657.459127][ T7796] bridge0: port 3(erspan0) entered disabled state [ 657.465994][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.474090][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.553381][ T7796] bridge0: entered allmulticast mode [ 657.559461][ T29] audit: type=1400 audit(1723700362.140:332): avc: denied { read } for pid=7802 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.623400][ T29] audit: type=1400 audit(1723700362.140:333): avc: denied { open } for pid=7802 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.777093][ T29] audit: type=1400 audit(1723700362.140:334): avc: denied { getattr } for pid=7802 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.417429][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.438622][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.448583][ T29] audit: type=1400 audit(1723700363.040:335): avc: denied { search } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.488477][ T7700] bridge_slave_0: entered allmulticast mode [ 658.508106][ T7700] bridge_slave_0: entered promiscuous mode [ 658.546233][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.559785][ T29] audit: type=1400 audit(1723700363.120:336): avc: denied { listen } for pid=7824 comm="syz.0.686" lport=49299 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 658.588052][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.626063][ T7700] bridge_slave_1: entered allmulticast mode [ 658.668608][ T7700] bridge_slave_1: entered promiscuous mode [ 658.677532][ T29] audit: type=1400 audit(1723700363.130:337): avc: denied { accept } for pid=7824 comm="syz.0.686" lport=49299 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 658.751322][ T29] audit: type=1400 audit(1723700363.140:338): avc: denied { setopt } for pid=7824 comm="syz.0.686" lport=49299 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 658.854487][ T29] audit: type=1400 audit(1723700363.220:339): avc: denied { write } for pid=7794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.882181][ T6782] hsr_slave_0: left promiscuous mode [ 658.927805][ T6782] hsr_slave_1: left promiscuous mode [ 658.957075][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.957177][ T29] audit: type=1400 audit(1723700363.220:340): avc: denied { add_name } for pid=7794 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.964577][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.027458][ T7839] loop0: detected capacity change from 0 to 7 [ 659.051867][ T7839] Dev loop0: unable to read RDB block 7 [ 659.070695][ T7839] loop0: AHDI p2 p4 [ 659.077473][ T7839] loop0: partition table partially beyond EOD, truncated [ 659.099003][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.107044][ T29] audit: type=1400 audit(1723700363.220:341): avc: denied { create } for pid=7794 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 659.110570][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.223612][ T6782] veth1_macvtap: left promiscuous mode [ 659.254057][ T6782] veth0_macvtap: left promiscuous mode [ 659.277546][ T6782] veth1_vlan: left promiscuous mode [ 659.285813][ T6782] veth0_vlan: left promiscuous mode [ 659.627104][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 659.831325][ T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 659.851487][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.878525][ T8] usb 5-1: config 0 descriptor?? [ 660.134822][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 660.478839][ T5308] usb 5-1: USB disconnect, device number 19 [ 662.560659][ T7864] dlm: no local IP address has been set [ 662.581369][ T7864] dlm: cannot start dlm midcomms -107 [ 662.751723][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 662.751742][ T29] audit: type=1326 audit(1723700367.340:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6b7799b9 code=0x7ffc0000 [ 662.818621][ T6782] team0 (unregistering): Port device team_slave_1 removed [ 662.837469][ T29] audit: type=1326 audit(1723700367.380:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6b7799b9 code=0x7ffc0000 [ 662.947257][ T6782] team0 (unregistering): Port device team_slave_0 removed [ 664.197009][ T7874] netlink: 64 bytes leftover after parsing attributes in process `syz.4.699'. [ 664.321076][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.365254][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.591568][ T7700] team0: Port device team_slave_0 added [ 664.610992][ T29] audit: type=1400 audit(1723700369.200:364): avc: denied { connect } for pid=7877 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 664.641471][ T7700] team0: Port device team_slave_1 added [ 664.667378][ T7674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.804815][ T7674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.838795][ T7674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 664.881859][ T7674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 664.935779][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.963729][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.042007][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.105912][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.137319][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.186833][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.539949][ T7700] hsr_slave_0: entered promiscuous mode [ 665.583766][ T7700] hsr_slave_1: entered promiscuous mode [ 665.684383][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.797439][ T7700] Cannot create hsr debugfs directory [ 666.895420][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.022709][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.035075][ T29] audit: type=1400 audit(1723700371.620:365): avc: denied { bind } for pid=7900 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.095191][ T29] audit: type=1400 audit(1723700371.660:366): avc: denied { read } for pid=7900 comm="syz.2.703" path="socket:[21569]" dev="sockfs" ino=21569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.146907][ T29] audit: type=1400 audit(1723700371.720:367): avc: denied { setopt } for pid=7900 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.247340][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.254669][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.632201][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.639503][ T6803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.767443][ T5398] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 667.852381][ T7674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.996750][ T5398] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 668.020054][ T5398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.081576][ T5398] usb 5-1: config 0 descriptor?? [ 668.223965][ T7700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.279383][ T7700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.343411][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 668.343484][ T7700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.633282][ T7700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.026478][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.434127][ T5310] usb 5-1: USB disconnect, device number 20 [ 669.610262][ T7674] veth0_vlan: entered promiscuous mode [ 669.651671][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 669.662237][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 669.672649][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 669.672969][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.691442][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 669.699437][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 669.709772][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 669.770274][ T7674] veth1_vlan: entered promiscuous mode [ 669.849511][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.903291][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.910533][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.002233][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.009465][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.261813][ T7674] veth0_macvtap: entered promiscuous mode [ 670.336349][ T7674] veth1_macvtap: entered promiscuous mode [ 670.488389][ T29] audit: type=1400 audit(1723700375.070:368): avc: denied { map } for pid=7943 comm="syz.4.708" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 670.540528][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.598425][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.636878][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.676895][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.712374][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.730173][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.763567][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.795227][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.816390][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.838441][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.866932][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.887680][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.915295][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.083070][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.146453][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.162149][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.226488][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.275862][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.306110][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.339297][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.387205][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.416959][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.436923][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.458466][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.482934][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.509465][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.555354][ T7674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.578227][ T5308] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 671.586064][ T7674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.607602][ T7674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.627111][ T7674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.667192][ T5398] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 671.798646][ T5308] usb 3-1: Using ep0 maxpacket: 16 [ 671.809872][ T5267] Bluetooth: hci4: command tx timeout [ 671.837422][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.859437][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.879638][ T5308] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 671.892621][ T5398] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 671.909160][ T5398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.940679][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.972641][ T5398] usb 5-1: config 0 descriptor?? [ 672.013414][ T5308] usb 3-1: config 0 descriptor?? [ 672.306241][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 672.315410][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 672.562359][ T5308] hid-led 0003:1D34:0004.0004: unknown main item tag 0xd [ 672.613746][ T6803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.645471][ T6803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.784468][ T5310] usb 5-1: USB disconnect, device number 21 [ 672.957757][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.993254][ T6803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.021937][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.045066][ T6803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.047058][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.082830][ T7934] bridge_slave_0: entered allmulticast mode [ 673.106396][ T7934] bridge_slave_0: entered promiscuous mode [ 673.133041][ T5308] hid-led 0003:1D34:0004.0004: probe with driver hid-led failed with error -71 [ 673.177944][ T5308] usb 3-1: USB disconnect, device number 16 [ 673.187787][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.195071][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.221244][ T7934] bridge_slave_1: entered allmulticast mode [ 673.249237][ T7934] bridge_slave_1: entered promiscuous mode [ 673.570086][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.653004][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.757189][ T5308] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 673.860646][ T7934] team0: Port device team_slave_0 added [ 673.888712][ T5267] Bluetooth: hci4: command tx timeout [ 673.891357][ T7934] team0: Port device team_slave_1 added [ 673.956943][ T5308] usb 2-1: Using ep0 maxpacket: 16 [ 673.964855][ T5308] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 673.983747][ T7700] veth0_vlan: entered promiscuous mode [ 673.996920][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.044762][ T5308] usb 2-1: config 0 descriptor?? [ 674.089824][ T5308] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 674.288641][ T5308] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 674.296089][ T5308] sq905c 2-1:0.0: Get version command failed [ 674.336997][ T5308] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 674.364287][ T5308] usb 2-1: USB disconnect, device number 24 [ 674.366478][ T7700] veth1_vlan: entered promiscuous mode [ 674.453415][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.494157][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.547343][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.588687][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.616480][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.664529][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.783792][ T29] audit: type=1400 audit(1723700379.370:369): avc: denied { create } for pid=8027 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 674.807338][ T5311] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 674.822840][ T29] audit: type=1400 audit(1723700379.410:370): avc: denied { setopt } for pid=8027 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 674.955099][ T7934] hsr_slave_0: entered promiscuous mode [ 674.977508][ T7934] hsr_slave_1: entered promiscuous mode [ 675.002462][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.028340][ T7934] Cannot create hsr debugfs directory [ 675.053060][ T5311] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 675.075365][ T8029] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 675.093327][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.164207][ T5311] usb 3-1: config 0 descriptor?? [ 675.196037][ T8029] team0: Device ipvlan1 failed to register rx_handler [ 675.583074][ T7700] veth0_macvtap: entered promiscuous mode [ 675.811171][ T7700] veth1_macvtap: entered promiscuous mode [ 675.967714][ T5267] Bluetooth: hci4: command tx timeout [ 676.027155][ T5307] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 676.133952][ T5311] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 676.173596][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.209346][ T5311] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 676.227638][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.242204][ T5311] [drm:udl_init] *ERROR* Selecting channel failed [ 676.256987][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.299189][ T5307] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 676.308716][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.324505][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.351947][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.369510][ T5307] usb 5-1: config 0 descriptor?? [ 676.375904][ T5311] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 676.406501][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.420825][ T5311] [drm] Initialized udl on minor 2 [ 676.434533][ T5311] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.443144][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.458999][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.477734][ T5311] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 676.489248][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.516220][ T5307] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.525470][ T5311] usb 3-1: USB disconnect, device number 17 [ 676.531921][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.554467][ T5307] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 676.564137][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.589782][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.634472][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 676.636850][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.684105][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.730129][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.863294][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.915934][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.936313][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.970765][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.048146][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.077846][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.122442][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.152851][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.195678][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.211439][ T5308] usb 5-1: USB disconnect, device number 22 [ 677.259865][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.305115][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.357078][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.406725][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.427027][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.461445][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.585597][ T7700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.637179][ T7700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.645937][ T7700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.719291][ T7700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.764300][ T8071] capability: warning: `syz.2.728' uses 32-bit capabilities (legacy support in use) [ 678.048086][ T5267] Bluetooth: hci4: command tx timeout [ 678.076093][ T7934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.374512][ T7934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.459549][ T6168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.510373][ T6168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.744322][ T7934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.938686][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 678.967276][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.006846][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.230219][ T7934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.586997][ T5308] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 679.746593][ T5307] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 679.799897][ T5308] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 679.804946][ T7934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.827015][ T5308] usb 2-1: config 0 has no interface number 0 [ 679.833272][ T5308] usb 2-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 679.836204][ T7934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 679.881924][ T7934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.890685][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.920279][ T5308] usb 2-1: config 0 descriptor?? [ 679.930452][ T5308] ftdi_sio 2-1:0.125: FTDI USB Serial Device converter detected [ 679.948826][ T7934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.949085][ T5308] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 679.989797][ T5307] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 680.012794][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.116478][ T5307] usb 5-1: config 0 descriptor?? [ 680.221942][ T5311] usb 2-1: USB disconnect, device number 25 [ 680.268168][ T5311] ftdi_sio 2-1:0.125: device disconnected [ 680.402836][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 680.425472][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.532964][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.554998][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.562210][ T6803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.625513][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.633005][ T6803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.721361][ T47] usb 5-1: USB disconnect, device number 23 [ 681.709825][ T29] audit: type=1400 audit(1723700386.290:371): avc: denied { setattr } for pid=8125 comm="syz.4.747" name="RAWv6" dev="sockfs" ino=22401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.736720][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.777372][ T8130] input: syz0 as /devices/virtual/input/input9 [ 681.818170][ T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 681.883512][ T7934] veth0_vlan: entered promiscuous mode [ 682.035820][ T7934] veth1_vlan: entered promiscuous mode [ 682.047495][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 682.054793][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 682.066987][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.076663][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.106534][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 682.129521][ T29] audit: type=1400 audit(1723700386.720:372): avc: denied { view } for pid=8132 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 682.161281][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 682.182395][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 682.204605][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.265609][ T29] audit: type=1400 audit(2000000000.070:373): avc: denied { create } for pid=8132 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 682.350833][ T47] usb 3-1: config 0 descriptor?? [ 682.401217][ T7934] veth0_macvtap: entered promiscuous mode [ 682.469293][ T5267] Bluetooth: hci5: urb ffff88803afd0300 submission failed (90) [ 682.504978][ T7934] veth1_macvtap: entered promiscuous mode [ 682.571730][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.654133][ T47] usb 3-1: USB disconnect, device number 18 [ 682.657104][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.710409][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.787252][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.857102][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.921860][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.000054][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.091666][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.111173][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.164413][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.259158][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.323634][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.406986][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.474030][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.555708][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.609047][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.620160][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.646432][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.711542][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.740875][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.775678][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.826478][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.878436][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.911214][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.972995][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.001513][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.037041][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.077015][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.118562][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.160547][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.201743][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.237083][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.268365][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.296983][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.328637][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.360692][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.443346][ T7934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.507091][ T7934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.515840][ T7934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.597178][ T7934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.996976][ T5307] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 685.061760][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.088689][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.278555][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.304307][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.305076][ T5307] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 685.371689][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.761'. [ 685.377201][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.435902][ T5307] usb 2-1: config 0 descriptor?? [ 685.780345][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 686.106475][ T29] audit: type=1400 audit(2000000003.850:374): avc: denied { relabelfrom } for pid=8170 comm="syz.2.762" name="" dev="pipefs" ino=23218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 686.448824][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.455180][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.922482][ T8187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.122575][ T8187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.147210][ T5225] usb 2-1: USB disconnect, device number 26 [ 688.107003][ T5307] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 688.302195][ T8177] netlink: 5 bytes leftover after parsing attributes in process `syz.0.706'. [ 688.323116][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.353153][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 688.372802][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 688.402088][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 688.470236][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 688.488668][ T8177] netlink: 696 bytes leftover after parsing attributes in process `syz.0.706'. [ 688.512539][ T5307] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 688.547288][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.605344][ T5307] usb 5-1: Product: syz [ 688.624794][ T5307] usb 5-1: Manufacturer: syz [ 688.647067][ T5307] usb 5-1: SerialNumber: syz [ 688.685096][ T5307] usb 5-1: config 0 descriptor?? [ 688.743946][ T8210] xt_CONNSECMARK: invalid mode: 0 [ 688.762898][ T5307] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 688.810186][ T8177] syz.0.706 (8177) used greatest stack depth: 21216 bytes left [ 689.036082][ T5307] usb 5-1: USB disconnect, device number 24 [ 690.556935][ T47] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 690.817093][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 690.877822][ T47] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 690.916863][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.987720][ T47] usb 2-1: config 0 descriptor?? [ 691.034213][ T47] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 691.224087][ T47] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 691.273947][ T47] sq905c 2-1:0.0: Get version command failed [ 691.313112][ T47] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 691.379568][ T47] usb 2-1: USB disconnect, device number 27 [ 692.115733][ T29] audit: type=1400 audit(2000000009.930:375): avc: denied { ioctl } for pid=8252 comm="syz.1.785" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.277003][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 692.300001][ T29] audit: type=1400 audit(2000000009.930:376): avc: denied { set_context_mgr } for pid=8252 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 692.472395][ T29] audit: type=1400 audit(2000000009.980:377): avc: denied { map } for pid=8252 comm="syz.1.785" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.586495][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.746697][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 692.746747][ T29] audit: type=1400 audit(2000000010.010:378): avc: denied { call } for pid=8252 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 692.817630][ T47] usb 1-1: config 1 has no interface number 0 [ 692.887172][ T47] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.960945][ T47] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 693.041512][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.082620][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.117494][ T47] usb 1-1: Product: syz [ 693.124028][ T47] usb 1-1: Manufacturer: syz [ 693.146920][ T47] usb 1-1: SerialNumber: syz [ 694.196574][ T47] cdc_ncm 1-1:1.1: bind() failure [ 695.651968][ T5311] usb 1-1: USB disconnect, device number 8 [ 695.867040][ T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 696.032354][ T47] usb 3-1: device descriptor read/64, error -71 [ 696.057433][ T8271] Bluetooth: MGMT ver 1.23 [ 696.316976][ T47] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 696.496887][ T47] usb 3-1: device descriptor read/64, error -71 [ 696.536973][ T5342] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 696.637102][ T29] audit: type=1400 audit(2000000014.450:379): avc: denied { create } for pid=8279 comm="syz.4.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 696.687397][ T47] usb usb3-port1: attempt power cycle [ 696.939442][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.136946][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.146766][ T5342] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 697.229994][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.268213][ T5342] usb 2-1: config 0 descriptor?? [ 697.778530][ T5342] usbhid 2-1:0.0: can't add hid device: -71 [ 698.066110][ T5342] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 698.079577][ T5342] usb 2-1: USB disconnect, device number 28 [ 701.897461][ T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 701.907529][ T8341] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 702.107086][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 702.194218][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 702.260249][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 702.303660][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 702.350728][ T47] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 702.376942][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.397797][ T47] usb 5-1: Product: syz [ 702.402008][ T47] usb 5-1: Manufacturer: syz [ 702.406622][ T47] usb 5-1: SerialNumber: syz [ 702.448826][ T47] usb 5-1: config 0 descriptor?? [ 702.502842][ T47] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0206 [ 702.623888][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.738024][ T47] usb 5-1: USB disconnect, device number 25 [ 702.761067][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.886470][ T29] audit: type=1400 audit(2000000020.670:380): avc: denied { read append } for pid=8352 comm="syz.0.821" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 703.014967][ T29] audit: type=1400 audit(2000000020.700:381): avc: denied { open } for pid=8352 comm="syz.0.821" path="/dev/sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 704.276353][ T29] audit: type=1400 audit(2000000021.960:382): avc: denied { bind } for pid=8369 comm="syz.4.826" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 704.729092][ T29] audit: type=1400 audit(2000000021.960:383): avc: denied { node_bind } for pid=8369 comm="syz.4.826" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 705.693821][ T8396] tipc: Started in network mode [ 705.718231][ T8396] tipc: Node identity f7, cluster identity 4711 [ 705.747170][ T8396] tipc: Node number set to 247 [ 712.617801][ T8441] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 712.982633][ T8441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 713.139836][ T8452] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 713.289276][ T29] audit: type=1400 audit(2000000031.110:384): avc: denied { write } for pid=8458 comm="syz.0.855" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 713.319151][ T8452] bond1: entered promiscuous mode [ 713.475920][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 713.591791][ T29] audit: type=1400 audit(2000000031.350:385): avc: denied { connect } for pid=8458 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 713.811086][ T5308] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 714.139563][ T8454] bond1: left promiscuous mode [ 714.144778][ T8454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.392270][ T5308] usb 3-1: config index 0 descriptor too short (expected 61202, got 18) [ 714.439397][ T5308] usb 3-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 714.470670][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.501492][ T5308] usb 3-1: Product: syz [ 714.505891][ T5308] usb 3-1: Manufacturer: syz [ 714.533326][ T5308] usb 3-1: SerialNumber: syz [ 714.568412][ T5308] usb 3-1: config 0 descriptor?? [ 714.819754][ T5308] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 714.869052][ T5308] usb 3-1: Detected FT2232HP [ 714.906754][ T5308] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 714.941513][ T5308] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 715.068521][ T1169] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 715.465896][ T1169] usb 1-1: Using ep0 maxpacket: 8 [ 715.538638][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.586843][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.651619][ T1169] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 715.736074][ T5308] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 715.736931][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.757307][ T5308] usb 3-1: USB disconnect, device number 22 [ 715.775983][ T5308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 715.810409][ T5308] ftdi_sio 3-1:0.0: device disconnected [ 715.838098][ T1169] usb 1-1: config 0 descriptor?? [ 715.946933][ T29] audit: type=1400 audit(2000000033.750:386): avc: denied { ioctl } for pid=8481 comm="syz.4.863" path="socket:[24356]" dev="sockfs" ino=24356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 715.980256][ T8482] team_slave_0: entered promiscuous mode [ 715.986397][ T8482] team_slave_1: entered promiscuous mode [ 716.015292][ T8482] macsec1: entered promiscuous mode [ 716.051180][ T8482] team0: entered promiscuous mode [ 716.070084][ T8482] macsec1: entered allmulticast mode [ 716.092229][ T8482] team0: entered allmulticast mode [ 716.102392][ T8482] team_slave_0: entered allmulticast mode [ 716.119067][ T8482] team_slave_1: entered allmulticast mode [ 722.271081][ T1169] usbhid 1-1:0.0: can't add hid device: -32 [ 722.277238][ T1169] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 722.487433][ T8482] team0: left allmulticast mode [ 722.492350][ T8482] team_slave_0: left allmulticast mode [ 722.576363][ T8482] team_slave_1: left allmulticast mode [ 722.590639][ T5398] usb 1-1: USB disconnect, device number 9 [ 722.617112][ T8482] team0: left promiscuous mode [ 722.628710][ T8482] team_slave_0: left promiscuous mode [ 722.634178][ T8482] team_slave_1: left promiscuous mode [ 722.944380][ T8494] syzkaller1: entered promiscuous mode [ 723.002479][ T8494] syzkaller1: entered allmulticast mode [ 725.478833][ T8513] lo speed is unknown, defaulting to 1000 [ 725.507628][ T8513] lo speed is unknown, defaulting to 1000 [ 725.576449][ T8513] lo speed is unknown, defaulting to 1000 [ 725.620391][ T8513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 726.275617][ T8513] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 726.624761][ T8513] lo speed is unknown, defaulting to 1000 [ 726.701051][ T8513] lo speed is unknown, defaulting to 1000 [ 726.791676][ T8513] lo speed is unknown, defaulting to 1000 [ 726.879065][ T8513] lo speed is unknown, defaulting to 1000 [ 726.937456][ T8513] lo speed is unknown, defaulting to 1000 [ 726.955564][ T8513] lo speed is unknown, defaulting to 1000 [ 726.991029][ T8513] lo speed is unknown, defaulting to 1000 [ 727.023446][ T8513] lo speed is unknown, defaulting to 1000 [ 727.143337][ T8513] lo speed is unknown, defaulting to 1000 [ 730.447169][ T1169] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 730.677020][ T1169] usb 1-1: Using ep0 maxpacket: 32 [ 730.689671][ T1169] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 730.738880][ T1169] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 730.812586][ T1169] usb 1-1: config 0 has no interface number 0 [ 730.836956][ T1169] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 48, using maximum allowed: 30 [ 730.837004][ T5308] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 730.876012][ T1169] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 731.111301][ T1169] usb 1-1: config 0 interface 255 has no altsetting 0 [ 731.123318][ T1169] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 731.145030][ T1169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.147195][ T5308] usb 3-1: Using ep0 maxpacket: 16 [ 731.153298][ T1169] usb 1-1: Product: syz [ 731.163275][ T1169] usb 1-1: Manufacturer: syz [ 731.209760][ T5308] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 731.272072][ T1169] usb 1-1: SerialNumber: syz [ 731.333636][ T1169] usb 1-1: config 0 descriptor?? [ 731.913502][ T5308] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 731.926878][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.965841][ T5308] usb 3-1: config 0 descriptor?? [ 732.030962][ T5308] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 732.051320][ T1169] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.405818][ T1169] snd-usb-audio 1-1:0.255: probe with driver snd-usb-audio failed with error -2 [ 732.418814][ T1169] usb 1-1: USB disconnect, device number 10 [ 733.424365][ T8603] udevd[8603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.776366][ T5308] usb 3-1: USB disconnect, device number 23 [ 733.793615][ T8618] syzkaller1: entered promiscuous mode [ 733.856862][ T8618] syzkaller1: entered allmulticast mode [ 734.465248][ T8626] lo speed is unknown, defaulting to 1000 [ 734.518630][ T8629] xt_CONNSECMARK: invalid mode: 0 [ 735.377111][ T5310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 735.617134][ T5310] usb 1-1: Using ep0 maxpacket: 32 [ 735.638626][ T5310] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 735.735436][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.766126][ T5310] usb 1-1: config 0 descriptor?? [ 735.835088][ T5310] gspca_main: sunplus-2.14.0 probing 041e:400b [ 736.683128][ T5310] gspca_sunplus: reg_w_riv err -110 [ 736.690116][ T5310] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 738.193817][ T47] usb 1-1: USB disconnect, device number 11 [ 740.626066][ T8682] lo speed is unknown, defaulting to 1000 [ 741.299694][ T8682] xt_CONNSECMARK: invalid mode: 0 [ 741.569896][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 741.585495][ T8680] syzkaller1: entered promiscuous mode [ 741.607336][ T29] audit: type=1400 audit(2000000059.430:387): avc: denied { create } for pid=8689 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 741.622574][ T8680] syzkaller1: entered allmulticast mode [ 742.231432][ T8691] ax25_connect(): syz.1.923 uses autobind, please contact jreuter@yaina.de [ 742.241914][ T29] audit: type=1400 audit(2000000060.050:388): avc: denied { connect } for pid=8689 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 742.330506][ T8693] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 742.340168][ T8693] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 742.467603][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 742.491907][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.566490][ T8] usb 1-1: config 0 descriptor?? [ 743.176355][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 743.713220][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.927'. [ 744.127229][ T47] usb 1-1: USB disconnect, device number 12 [ 744.927564][ T8703] Bluetooth: hci6: command 0x0406 tx timeout [ 746.565066][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 746.585908][ T8727] macvlan2: entered promiscuous mode [ 746.605094][ T8727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 746.907001][ T1169] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 747.112543][ T8745] lo speed is unknown, defaulting to 1000 [ 747.323665][ T1169] usb 1-1: Using ep0 maxpacket: 32 [ 747.440005][ T8748] xt_CONNSECMARK: invalid mode: 0 [ 747.471124][ T1169] usb 1-1: config 0 has no interfaces? [ 747.596854][ T1169] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=17.22 [ 747.606183][ T1169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.614940][ T1169] usb 1-1: Product: syz [ 747.881269][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.886887][ T1169] usb 1-1: Manufacturer: syz [ 747.891688][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.892127][ T1169] usb 1-1: SerialNumber: syz [ 748.300722][ T1169] usb 1-1: config 0 descriptor?? [ 748.439681][ T1169] usb 1-1: can't set config #0, error -71 [ 748.496712][ T1169] usb 1-1: USB disconnect, device number 13 [ 750.616920][ T5308] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 750.651212][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.946'. [ 750.832044][ T5308] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 750.862076][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.895792][ T5308] usb 2-1: config 0 descriptor?? [ 751.787568][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 753.057798][ T47] usb 2-1: USB disconnect, device number 29 [ 757.108263][ T29] audit: type=1400 audit(2000000074.910:389): avc: denied { execute } for pid=8822 comm="syz.0.958" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=25349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 758.451008][ T29] audit: type=1400 audit(2000000076.270:390): avc: denied { ioctl } for pid=8822 comm="syz.0.958" path="socket:[25379]" dev="sockfs" ino=25379 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 758.517921][ T8844] lo speed is unknown, defaulting to 1000 [ 758.550165][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 759.056948][ T47] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 759.317898][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.387079][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.477242][ T8841] xt_CONNSECMARK: invalid mode: 0 [ 759.596064][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.637239][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.646100][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.673364][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.824866][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.872768][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.943562][ T47] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 759.984831][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.074315][ T47] usb 2-1: config 0 descriptor?? [ 760.093552][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 760.130787][ T8703] Bluetooth: hci7: command 0x0406 tx timeout [ 760.567254][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.610166][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.638523][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.770040][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.787051][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.807032][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.847035][ T47] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 760.921140][ T47] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 761.182123][ T47] cp2112 0003:10C4:EA90.0005: error requesting version [ 761.194244][ T47] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 761.910939][ T47] usb 2-1: USB disconnect, device number 30 [ 763.439204][ T8903] @: renamed from vlan0 (while UP) [ 763.528464][ T29] audit: type=1400 audit(2000000081.340:391): avc: denied { bind } for pid=8904 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 763.633372][ T29] audit: type=1400 audit(2000000081.340:392): avc: denied { name_bind } for pid=8904 comm="syz.1.978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 763.757996][ T29] audit: type=1400 audit(2000000081.340:393): avc: denied { node_bind } for pid=8904 comm="syz.1.978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 763.867030][ T29] audit: type=1400 audit(2000000081.380:394): avc: denied { listen } for pid=8904 comm="syz.1.978" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 764.176292][ T29] audit: type=1400 audit(2000000081.390:395): avc: denied { connect } for pid=8904 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 764.452950][ T8904] dccp_close: ABORT with 32 bytes unread [ 764.819633][ T8919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.980'. [ 764.909915][ T8910] lo speed is unknown, defaulting to 1000 [ 764.966911][ T29] audit: type=1400 audit(2000000081.390:396): avc: denied { name_connect } for pid=8904 comm="syz.1.978" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 765.087750][ T29] audit: type=1400 audit(2000000081.440:397): avc: denied { accept } for pid=8904 comm="syz.1.978" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 765.217095][ T29] audit: type=1400 audit(2000000081.440:398): avc: denied { write } for pid=8904 comm="syz.1.978" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=36028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 765.336991][ T29] audit: type=1400 audit(2000000081.440:399): avc: denied { read } for pid=8904 comm="syz.1.978" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=36028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 765.446236][ T29] audit: type=1400 audit(2000000083.240:400): avc: denied { listen } for pid=8929 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.465598][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.478220][ T5307] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 765.566406][ T8907] xt_CONNSECMARK: invalid mode: 0 [ 765.707668][ T5307] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 765.722837][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.936516][ T5307] usb 2-1: config 0 descriptor?? [ 766.528411][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 767.450095][ T47] usb 2-1: USB disconnect, device number 31 [ 768.370579][ T8973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.993'. [ 769.951927][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 770.027201][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 770.092392][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 770.167035][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 770.270207][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 770.279243][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 770.324162][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 770.366960][ T8703] Bluetooth: hci8: command 0x0406 tx timeout [ 770.370792][ T8978] kvm: kvm [8977]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 770.847376][ T30] INFO: task syz.2.588:7433 blocked for more than 145 seconds. [ 770.876854][ T30] Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 770.884530][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.982457][ T30] task:syz.2.588 state:D stack:29040 pid:7433 tgid:7430 ppid:5247 flags:0x00000004 [ 771.065018][ T30] Call Trace: [ 771.090003][ T30] [ 771.092989][ T30] __schedule+0xe37/0x5490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 771.143085][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 771.227040][ T30] ? __pfx___schedule+0x10/0x10 [ 771.252347][ T30] ? schedule+0x298/0x350 [ 771.282639][ T30] ? __pfx_lock_release+0x10/0x10 [ 771.320675][ T30] ? __ww_mutex_lock.constprop.0+0xf50/0x2650 [ 771.373629][ T30] ? __mutex_trylock_common+0x78/0x250 [ 771.400198][ T30] schedule+0xe7/0x350 [ 771.418016][ T30] schedule_preempt_disabled+0x13/0x30 [ 771.446985][ T30] __ww_mutex_lock.constprop.0+0xf55/0x2650 [ 771.453080][ T30] ? drm_modeset_lock+0x7a/0x90 [ 771.470836][ T30] ? __pfx___ww_mutex_lock.constprop.0+0x10/0x10 [ 771.478175][ T30] ? __drm_mode_object_find+0x2d4/0x420 [ 771.483764][ T30] ? __pfx___might_resched+0x10/0x10 [ 771.508155][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 771.536848][ T30] ? ww_mutex_lock+0x37/0x140 [ 771.541600][ T30] ww_mutex_lock+0x37/0x140 [ 771.546146][ T30] drm_modeset_lock+0x7a/0x90 [ 771.586908][ T30] drm_mode_getplane+0x14a/0x8b0 [ 771.591930][ T30] drm_ioctl_kernel+0x1ec/0x3e0 [ 771.659282][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 771.664810][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 771.697170][ T30] drm_ioctl+0x5dc/0xc00 [ 771.701567][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 771.756911][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 771.761822][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 771.776852][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 771.781685][ T30] __x64_sys_ioctl+0x193/0x220 [ 771.786479][ T30] do_syscall_64+0xcd/0x250 [ 771.847089][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.853051][ T30] RIP: 0033:0x7fa2377799b9 [ 771.887913][ T30] RSP: 002b:00007fa2385ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.896386][ T30] RAX: ffffffffffffffda RBX: 00007fa237915f80 RCX: 00007fa2377799b9 [ 771.957189][ T30] RDX: 00000000200001c0 RSI: 00000000c02064b6 RDI: 0000000000000004 [ 771.965214][ T30] RBP: 00007fa2377e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 772.044953][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.067176][ T30] R13: 0000000000000000 R14: 00007fa237915f80 R15: 00007fff2ae1f218 [ 772.075195][ T30] [ 772.107282][ T30] INFO: task syz.2.588:7434 blocked for more than 146 seconds. [ 772.114875][ T30] Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 772.153347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 772.187094][ T30] task:syz.2.588 state:D stack:29440 pid:7434 tgid:7430 ppid:5247 flags:0x00000004 [ 772.228929][ T30] Call Trace: [ 772.232262][ T30] [ 772.256846][ T30] __schedule+0xe37/0x5490 [ 772.261325][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 772.266565][ T30] ? __pfx___schedule+0x10/0x10 [ 772.312796][ T30] ? schedule+0x298/0x350 [ 772.321634][ T30] ? __pfx_lock_release+0x10/0x10 [ 772.326703][ T30] ? __ww_mutex_lock.constprop.0+0xf50/0x2650 [ 772.367414][ T30] ? __mutex_trylock_common+0x78/0x250 [ 772.372951][ T30] schedule+0xe7/0x350 [ 772.399865][ T30] schedule_preempt_disabled+0x13/0x30 [ 772.405926][ T30] __ww_mutex_lock.constprop.0+0xf55/0x2650 [ 772.436023][ T30] ? drm_modeset_lock+0x7a/0x90 [ 772.467501][ T30] ? __pfx___ww_mutex_lock.constprop.0+0x10/0x10 [ 772.473902][ T30] ? __drm_mode_object_find+0x2d4/0x420 [ 772.491721][ T30] ? __pfx___might_resched+0x10/0x10 [ 772.516847][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 772.522812][ T30] ? ww_mutex_lock+0x37/0x140 [ 772.556851][ T30] ww_mutex_lock+0x37/0x140 [ 772.561432][ T30] drm_modeset_lock+0x7a/0x90 [ 772.566138][ T30] drm_mode_getplane+0x14a/0x8b0 [ 772.592642][ T30] drm_ioctl_kernel+0x1ec/0x3e0 [ 772.629256][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 772.634788][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 772.706488][ T30] drm_ioctl+0x5dc/0xc00 [ 772.710947][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 772.716452][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 772.757195][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 772.762370][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 772.796848][ T30] __x64_sys_ioctl+0x193/0x220 [ 772.802238][ T30] do_syscall_64+0xcd/0x250 [ 772.826846][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.832809][ T30] RIP: 0033:0x7fa2377799b9 [ 772.876923][ T30] RSP: 002b:00007fa2385cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.916900][ T30] RAX: ffffffffffffffda RBX: 00007fa237916058 RCX: 00007fa2377799b9 [ 772.936739][ T30] RDX: 0000000020000200 RSI: 00000000c02064b6 RDI: 0000000000000003 [ 773.016873][ T30] RBP: 00007fa2377e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 773.049092][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.066845][ T30] R13: 0000000000000001 R14: 00007fa237916058 R15: 00007fff2ae1f218 [ 773.074870][ T30] [ 773.128333][ T30] INFO: task syz.1.633:7600 blocked for more than 147 seconds. [ 773.135931][ T30] Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 773.188155][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.226841][ T30] task:syz.1.633 state:D stack:29088 pid:7600 tgid:7599 ppid:5254 flags:0x00004004 [ 773.256842][ T30] Call Trace: [ 773.260172][ T30] [ 773.263125][ T30] __schedule+0xe37/0x5490 [ 773.296850][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 773.302117][ T30] ? __pfx___schedule+0x10/0x10 [ 773.327790][ T30] ? schedule+0x298/0x350 [ 773.332185][ T30] ? __pfx_lock_release+0x10/0x10 [ 773.359949][ T30] ? __ww_mutex_lock.constprop.0+0xf50/0x2650 [ 773.366100][ T30] ? __mutex_trylock_common+0x78/0x250 [ 773.429537][ T30] schedule+0xe7/0x350 [ 773.433678][ T30] schedule_preempt_disabled+0x13/0x30 [ 773.459709][ T30] __ww_mutex_lock.constprop.0+0xf55/0x2650 [ 773.465697][ T30] ? drm_modeset_lock+0x7a/0x90 [ 773.497583][ T30] ? __pfx___ww_mutex_lock.constprop.0+0x10/0x10 [ 773.503989][ T30] ? __drm_mode_object_find+0x2d4/0x420 [ 773.536845][ T30] ? __pfx___might_resched+0x10/0x10 [ 773.542199][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 773.568975][ T30] ? ww_mutex_lock+0x37/0x140 [ 773.573719][ T30] ww_mutex_lock+0x37/0x140 [ 773.597850][ T30] drm_modeset_lock+0x7a/0x90 [ 773.602591][ T30] drm_mode_getplane+0x14a/0x8b0 [ 773.629583][ T30] drm_ioctl_kernel+0x1ec/0x3e0 [ 773.634495][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 773.664922][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 773.689598][ T30] drm_ioctl+0x5dc/0xc00 [ 773.693909][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 773.726855][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 773.731690][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 773.756842][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 773.787434][ T30] __x64_sys_ioctl+0x193/0x220 [ 773.792270][ T30] do_syscall_64+0xcd/0x250 [ 773.817307][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.856846][ T30] RIP: 0033:0x7f28da5799b9 [ 773.861320][ T30] RSP: 002b:00007f28db27c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.906940][ T30] RAX: ffffffffffffffda RBX: 00007f28da715f80 RCX: 00007f28da5799b9 [ 773.914972][ T30] RDX: 00000000200001c0 RSI: 00000000c02064b6 RDI: 0000000000000004 [ 773.980180][ T30] RBP: 00007f28da5e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 774.007132][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.015156][ T30] R13: 0000000000000000 R14: 00007f28da715f80 R15: 00007ffd866e0e18 [ 774.039358][ T30] [ 774.120037][ T30] [ 774.120037][ T30] Showing all locks held in the system: [ 774.186851][ T30] 1 lock held by khungtaskd/30: [ 774.191750][ T30] #0: ffffffff8ddb5ba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 774.259162][ T30] 1 lock held by kcompactd0/33: [ 774.264099][ T30] 2 locks held by kworker/u8:9/2900: [ 774.299201][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 774.326840][ T30] #1: ffff8880b9328a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 774.367646][ T30] 2 locks held by getty/4973: [ 774.372376][ T30] #0: ffff88802b4c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 774.446850][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 774.485432][ T30] 3 locks held by kworker/1:3/5308: [ 774.496848][ T30] 3 locks held by kworker/u8:15/6168: [ 774.502265][ T30] 3 locks held by syz.3.565/7356: [ 774.536848][ T30] 1 lock held by syz.2.588/7433: [ 774.557174][ T30] #0: ffff8880204780b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x7a/0x90 [ 774.596929][ T30] 1 lock held by syz.2.588/7434: [ 774.601912][ T30] #0: ffff8880204780b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x7a/0x90 [ 774.636847][ T30] 1 lock held by syz.1.633/7600: [ 774.677492][ T30] #0: ffff8880204780b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x7a/0x90 [ 774.716846][ T30] 4 locks held by syz-executor/7700: [ 774.722175][ T30] #0: ffff88802e19cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 774.766884][ T30] #1: ffff88802e19c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 774.776637][ T30] #2: ffffffff8fc86a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 774.826900][ T30] #3: ffffffff8ddc1338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 774.876850][ T30] 1 lock held by syz.0.686/7825: [ 774.881835][ T30] #0: ffff8880204780b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x7a/0x90 [ 774.927227][ T30] 2 locks held by syz.0.686/7829: [ 774.932294][ T30] #0: ffffc90003fe7bb0 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_get_properties_ioctl+0x229/0x660 [ 775.016841][ T30] #1: ffff888020390518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x488/0x6c0 [ 775.046848][ T30] 3 locks held by syz.2.994/8969: [ 775.052436][ T30] #0: ffff88802c83cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 775.097277][ T30] #1: ffff88802c83c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 775.124738][ T30] #2: ffffffff8fc86a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 775.162446][ T30] 1 lock held by syz.0.995/8970: [ 775.189895][ T30] #0: ffff8880204780b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x7a/0x90 [ 775.226947][ T30] 1 lock held by syz.4.1000/8988: [ 775.232040][ T30] 2 locks held by syz.1.1002/8993: [ 775.266837][ T30] #0: ffffffff8fa222e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 775.275907][ T30] #1: ffffffff8ddc1338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 775.346907][ T30] [ 775.349774][ T30] ============================================= [ 775.349774][ T30] [ 775.376928][ T30] NMI backtrace for cpu 1 [ 775.381390][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 775.391914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 775.401988][ T30] Call Trace: [ 775.405287][ T30] [ 775.408230][ T30] dump_stack_lvl+0x116/0x1f0 [ 775.412929][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 775.417892][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 775.423897][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 775.429910][ T30] watchdog+0xf4e/0x1280 [ 775.434177][ T30] ? __pfx_watchdog+0x10/0x10 [ 775.438877][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.444100][ T30] ? __kthread_parkme+0x148/0x220 [ 775.449158][ T30] ? __pfx_watchdog+0x10/0x10 [ 775.453860][ T30] kthread+0x2c1/0x3a0 [ 775.457945][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 775.463170][ T30] ? __pfx_kthread+0x10/0x10 [ 775.467776][ T30] ret_from_fork+0x45/0x80 [ 775.472216][ T30] ? __pfx_kthread+0x10/0x10 [ 775.476821][ T30] ret_from_fork_asm+0x1a/0x30 [ 775.481608][ T30] [ 775.487823][ T30] Sending NMI from CPU 1 to CPUs 0: [ 775.493086][ C0] NMI backtrace for cpu 0 [ 775.493098][ C0] CPU: 0 UID: 0 PID: 7356 Comm: syz.3.565 Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 775.493126][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 775.493140][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0xb/0x150 [ 775.493178][ C0] Code: 1b 19 43 03 e9 6a ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 15 ad fe 92 7e <81> e2 00 00 f0 00 b8 01 00 00 00 75 0a 8b 15 42 07 a2 0e 85 d2 75 [ 775.493201][ C0] RSP: 0018:ffffc90003cd6b48 EFLAGS: 00000202 [ 775.493219][ C0] RAX: 0000000000000001 RBX: 00000000000248da RCX: ffffc9000953a000 [ 775.493238][ C0] RDX: 0000000080000000 RSI: ffffffff8bb09300 RDI: ffffffff8d7b4b40 [ 775.493254][ C0] RBP: ffff88813fff9080 R08: 0000000000000007 R09: 000000000007ffff [ 775.493269][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888016200000 [ 775.493289][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 775.493303][ C0] FS: 00007f9c2ff8e6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 775.493326][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.493342][ C0] CR2: 0000000020a7e030 CR3: 000000007a53c000 CR4: 00000000003506f0 [ 775.493358][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 775.493372][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 775.493387][ C0] Call Trace: [ 775.493394][ C0] [ 775.493401][ C0] ? show_regs+0x8c/0xa0 [ 775.493435][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 775.493465][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 775.493497][ C0] ? nmi_handle+0x1a9/0x5c0 [ 775.493518][ C0] ? rcu_lockdep_current_cpu_online+0xb/0x150 [ 775.493550][ C0] ? default_do_nmi+0x6a/0x160 [ 775.493571][ C0] ? exc_nmi+0x170/0x1e0 [ 775.493591][ C0] ? end_repeat_nmi+0xf/0x53 [ 775.493616][ C0] ? rcu_lockdep_current_cpu_online+0xb/0x150 [ 775.493647][ C0] ? rcu_lockdep_current_cpu_online+0xb/0x150 [ 775.493678][ C0] ? rcu_lockdep_current_cpu_online+0xb/0x150 [ 775.493709][ C0] [ 775.493716][ C0] [ 775.493723][ C0] rcu_read_lock_held+0x27/0x50 [ 775.493756][ C0] page_ext_get+0x132/0x310 [ 775.493783][ C0] __page_table_check_zero+0xcd/0x370 [ 775.493814][ C0] post_alloc_hook+0x2c0/0x350 [ 775.493841][ C0] get_page_from_freelist+0x1351/0x2e50 [ 775.493874][ C0] ? __pfx___might_resched+0x10/0x10 [ 775.493907][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 775.493937][ C0] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 775.493963][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 775.493994][ C0] ? __pfx_mark_lock+0x10/0x10 [ 775.494020][ C0] ? lock_acquire+0x1b1/0x560 [ 775.494047][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 775.494077][ C0] ? hlock_class+0x4e/0x130 [ 775.494110][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 775.494138][ C0] ? __lock_acquire+0xbdd/0x3cb0 [ 775.494165][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.494198][ C0] ? policy_nodemask+0xea/0x4e0 [ 775.494226][ C0] alloc_pages_mpol_noprof+0x275/0x610 [ 775.494259][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 775.494297][ C0] ? find_held_lock+0x2d/0x110 [ 775.494332][ C0] folio_alloc_mpol_noprof+0x36/0xd0 [ 775.494365][ C0] shmem_alloc_folio+0x135/0x160 [ 775.494400][ C0] shmem_alloc_and_add_folio+0x19c/0xce0 [ 775.494424][ C0] ? filemap_get_entry+0x1b2/0x3c0 [ 775.494454][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 775.494485][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 775.494510][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.494541][ C0] ? __shmem_is_huge+0x213/0x300 [ 775.494571][ C0] shmem_get_folio_gfp+0xa62/0x15e0 [ 775.494597][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 775.494622][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 775.494654][ C0] shmem_read_folio_gfp+0xa3/0x120 [ 775.494679][ C0] ? __pfx_shmem_read_folio_gfp+0x10/0x10 [ 775.494705][ C0] ? drm_gem_get_pages+0x27e/0x8f0 [ 775.494733][ C0] drm_gem_get_pages+0x20b/0x8f0 [ 775.494762][ C0] ? __pfx_drm_gem_get_pages+0x10/0x10 [ 775.494794][ C0] ? drm_gem_vmap_unlocked+0x3f/0xa0 [ 775.494819][ C0] ? dma_resv_get_singleton+0x149/0x340 [ 775.494847][ C0] drm_gem_shmem_get_pages+0xbd/0x300 [ 775.494877][ C0] drm_gem_shmem_vmap+0x322/0x760 [ 775.494906][ C0] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 775.494936][ C0] drm_gem_vmap+0xc5/0x1c0 [ 775.494959][ C0] drm_gem_vmap_unlocked+0x4a/0xa0 [ 775.494984][ C0] drm_gem_fb_vmap+0xc7/0x4b0 [ 775.495014][ C0] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 775.495049][ C0] vkms_prepare_fb+0x87/0xb0 [ 775.495070][ C0] drm_atomic_helper_prepare_planes+0x1e4/0xbc0 [ 775.495102][ C0] drm_atomic_helper_commit+0x18e/0x380 [ 775.495133][ C0] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 775.495164][ C0] drm_atomic_commit+0x229/0x300 [ 775.495197][ C0] ? __pfx_drm_atomic_commit+0x10/0x10 [ 775.495231][ C0] ? __pfx___drm_printfn_info+0x10/0x10 [ 775.495255][ C0] ? drm_atomic_set_fb_for_plane+0x147/0x290 [ 775.495296][ C0] ? drm_atomic_set_fb_for_plane+0x18a/0x290 [ 775.495333][ C0] drm_atomic_helper_update_plane+0x323/0x420 [ 775.495365][ C0] __setplane_atomic+0x250/0x360 [ 775.495399][ C0] drm_mode_cursor_universal+0x4a7/0xcb0 [ 775.495435][ C0] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 775.495470][ C0] ? __pfx_drm_lease_held+0x10/0x10 [ 775.495500][ C0] ? modeset_lock+0x10e/0x6c0 [ 775.495529][ C0] drm_mode_cursor_common+0x318/0x970 [ 775.495564][ C0] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 775.495600][ C0] ? lock_acquire+0x1b1/0x560 [ 775.495626][ C0] ? find_held_lock+0x2d/0x110 [ 775.495661][ C0] drm_mode_cursor_ioctl+0xd2/0x110 [ 775.495695][ C0] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 775.495730][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 775.495763][ C0] drm_ioctl_kernel+0x1ec/0x3e0 [ 775.495793][ C0] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 775.495827][ C0] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 775.495859][ C0] drm_ioctl+0x5dc/0xc00 [ 775.495889][ C0] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 775.495923][ C0] ? __pfx_drm_ioctl+0x10/0x10 [ 775.495955][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 775.495979][ C0] ? __pfx_drm_ioctl+0x10/0x10 [ 775.496008][ C0] __x64_sys_ioctl+0x193/0x220 [ 775.496039][ C0] do_syscall_64+0xcd/0x250 [ 775.496070][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.496105][ C0] RIP: 0033:0x7f9c2f1799b9 [ 775.496123][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.496144][ C0] RSP: 002b:00007f9c2ff8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.496165][ C0] RAX: ffffffffffffffda RBX: 00007f9c2f315f80 RCX: 00007f9c2f1799b9 [ 775.496181][ C0] RDX: 0000000020000100 RSI: 00000000c01c64a3 RDI: 0000000000000005 [ 775.496195][ C0] RBP: 00007f9c2f1e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 775.496210][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.496224][ C0] R13: 0000000000000000 R14: 00007f9c2f315f80 R15: 00007ffe504d4648 [ 775.496242][ C0] [ 776.504926][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 776.511902][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 776.522506][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 776.532579][ T30] Call Trace: [ 776.535866][ T30] [ 776.538806][ T30] dump_stack_lvl+0x3d/0x1f0 [ 776.543421][ T30] panic+0x6f5/0x7a0 [ 776.547337][ T30] ? __pfx_panic+0x10/0x10 [ 776.551768][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 776.557157][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 776.563172][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 776.568563][ T30] ? watchdog+0xd8a/0x1280 [ 776.572998][ T30] ? watchdog+0xd7d/0x1280 [ 776.577433][ T30] watchdog+0xd9b/0x1280 [ 776.581692][ T30] ? __pfx_watchdog+0x10/0x10 [ 776.586384][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.591611][ T30] ? __kthread_parkme+0x148/0x220 [ 776.596659][ T30] ? __pfx_watchdog+0x10/0x10 [ 776.601356][ T30] kthread+0x2c1/0x3a0 [ 776.605441][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 776.610654][ T30] ? __pfx_kthread+0x10/0x10 [ 776.615254][ T30] ret_from_fork+0x45/0x80 [ 776.619690][ T30] ? __pfx_kthread+0x10/0x10 [ 776.624290][ T30] ret_from_fork_asm+0x1a/0x30 [ 776.629078][ T30] [ 776.632337][ T30] Kernel Offset: disabled [ 776.636650][ T30] Rebooting in 86400 seconds..