last executing test programs: 25.477478974s ago: executing program 2 (id=1119): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002120000d1bd", 0x33fe0}], 0x1}, 0x0) 24.922871001s ago: executing program 2 (id=1122): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8f, 0x0, @wg=@response={0x2, 0x0, 0x0, "07ae81953af7f95a5a69e6cced70dbeb0b633b7741e971c8ce169551a9890626", "bc7c740024be6988143c6004da8289c0", {"c41543b4b5157af7bb4aa76d6fe81c2c", "00a1ea0e448fe5f66d8d55cd816386ba"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) 24.470272052s ago: executing program 2 (id=1124): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x8) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), 0x0) 24.015190125s ago: executing program 2 (id=1127): migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 22.363205932s ago: executing program 2 (id=1133): mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@dyn}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 20.214844377s ago: executing program 2 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfe3c) dup2(r1, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='memory.current\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x13}, 0x2, 0x0) open(0x0, 0x141040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) finit_module(r1, 0x0, 0x0) 11.493240014s ago: executing program 1 (id=1171): gettid() r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x0, 0x2000007, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000200)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "10eae400367465ec", "5b72e7f351595d23440175126a56eab2840b81a1adc6d8cfc4e551163ff66dec", '#\x00', "000000fc00"}, 0x38) sendto(0xffffffffffffffff, &(0x7f00000001c0)='W', 0x1, 0x8040, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x31, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x7c}}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) gettid() epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 9.105469538s ago: executing program 0 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 8.697068355s ago: executing program 1 (id=1180): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 8.676459843s ago: executing program 0 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000021b"], 0x1c}}, 0x0) 8.428686735s ago: executing program 0 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 8.34095078s ago: executing program 1 (id=1186): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000100), 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) 7.763719478s ago: executing program 1 (id=1188): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 7.384540869s ago: executing program 0 (id=1189): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x4000, @fd=r2, 0x20, 0x8, 0x200}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000000000000deff000000000000000000b2000000000000004000"/52]) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x107, 0x2) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$update(0x2, r0, &(0x7f0000000040)="b8", 0x1) 6.270350938s ago: executing program 4 (id=1192): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.543830351s ago: executing program 0 (id=1193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8"], 0x18}, 0x1, 0x3000000}, 0x0) 5.447141013s ago: executing program 3 (id=1194): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2040010) read$FUSE(r7, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x21, @fixed, 0x0, 0x1}, 0xe) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback={0xc00}}, 0x1c) socket$netlink(0x10, 0x3, 0x4) 5.214359672s ago: executing program 4 (id=1195): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="018000ff", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000b8008000900ffffff"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, 0x0, &(0x7f0000000140)) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000240)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.878855127s ago: executing program 3 (id=1196): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x316d, 0xf2d4, 0x4000009, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x11}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x0, 0x7ffd}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_DETACH(0x22, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7a5, &(0x7f0000000140)={{@local}, 0x1}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000240)) 3.687900793s ago: executing program 1 (id=1197): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x7, 0x100000, 0x3]}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="bdc32aff7000fedbdf2542000000080001007063690011002a3d303030303a30303a31302e30000000000d0087006c32df64726f7073000000000500830001000000"], 0x48}, 0x1, 0x0, 0x0, 0x440c1}, 0x20000840) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000001c0)=[0x4, 0x265], 0x2) 2.772735171s ago: executing program 4 (id=1198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @local}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) 2.399460517s ago: executing program 4 (id=1199): r0 = fanotify_init(0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2.193478225s ago: executing program 3 (id=1200): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 2.10440604s ago: executing program 4 (id=1201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x418, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 2.075430165s ago: executing program 3 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.317874973s ago: executing program 4 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) capget(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x800, 0xf, 0x4a1d, 0x401, 0x6, 0x6}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x4, 0x8026, 0xc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42aa, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101005, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) close(r2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000300)=0x7) 854.154546ms ago: executing program 3 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002ac4b6547575a785271f5a8fe13e864a888d0072d999988d9f998f9d79528da4ad14e6cf7f0a9a801c08d1e678d38697126ef54c859655ac8a91c6822f50849bac7be21fa57726fcc38b007cad56f9091e22b6e85bf42529dc31b37eea0c8adaf52b6930f71169774d993c07c25e72a4a81274067b2bf2702f9fea0bb16f75cdd7bd76bed516edc9e678edffc2bcf8ce76fdc1520a74c8ddea1083141062077cc2a8ec22fc14d1ace6c110de638890d8615bd45fb45d06975b8f60fa91"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000001c0)) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) creat(0x0, 0x0) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffcd6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}]}}]}, 0xa4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 411.891627ms ago: executing program 0 (id=1205): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r1, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x101040, 0x0) preadv2(r2, &(0x7f0000001700)=[{&(0x7f0000000180)=""/192, 0xc0}], 0x100000000000028b, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 407.244208ms ago: executing program 1 (id=1206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x2000) creat(&(0x7f0000000000)='./file0\x00', 0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000000140)={[0x2000000ff7ffff9]}, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0xa4002bde) open(&(0x7f00000000c0)='./file0\x00', 0xa80, 0x0) 0s ago: executing program 3 (id=1207): r0 = io_uring_setup(0x3c8e, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): the config [ 295.620604][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.628028][ T5275] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 295.638896][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.648017][ T5275] usb 2-1: config 9 has no interface number 0 [ 295.656318][ T5275] usb 2-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 295.677182][ T5275] usb 2-1: config 9 interface 1 has no altsetting 0 [ 295.690974][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.704108][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.720871][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.729699][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.737254][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.745279][ T5275] usb 2-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 295.769137][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.777525][ T5275] usb 2-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 295.810143][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.827938][ T29] audit: type=1400 audit(1722860909.572:677): avc: denied { mounton } for pid=7433 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 295.852765][ T5275] usb 2-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 295.902385][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.913483][ T5275] usb 2-1: SerialNumber: Ⰹ [ 295.915940][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.937557][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.988534][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.001568][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.015144][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.265630][ T5216] syz-executor (5216) used greatest stack depth: 21664 bytes left [ 296.349649][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.645801][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.776801][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.966065][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.378239][ T5275] ftdi_sio 2-1:9.1: FTDI USB Serial Device converter detected [ 297.429064][ T5275] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 297.505637][ T5275] usb 2-1: USB disconnect, device number 11 [ 297.514703][ T5275] ftdi_sio 2-1:9.1: device disconnected [ 297.685827][ T12] bridge_slave_1: left allmulticast mode [ 297.702724][ T12] bridge_slave_1: left promiscuous mode [ 297.708580][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.723481][ T55] Bluetooth: hci0: command tx timeout [ 297.731344][ T29] audit: type=1400 audit(1722860911.622:678): avc: denied { getopt } for pid=7453 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.758005][ T7452] Process accounting resumed [ 297.766937][ T12] bridge_slave_0: left allmulticast mode [ 297.784661][ T12] bridge_slave_0: left promiscuous mode [ 297.803805][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.037413][ T55] Bluetooth: hci3: command tx timeout [ 298.117401][ T55] Bluetooth: hci5: command tx timeout [ 298.418586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.438031][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.450333][ T12] bond0 (unregistering): Released all slaves [ 298.798064][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 298.947496][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 299.127531][ T7474] netlink: 256 bytes leftover after parsing attributes in process `syz.2.582'. [ 299.790013][ T55] Bluetooth: hci0: command tx timeout [ 299.908171][ T12] hsr_slave_0: left promiscuous mode [ 299.908184][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 299.908198][ T29] audit: type=1400 audit(1722860913.802:681): avc: denied { ioctl } for pid=7468 comm="syz.1.581" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 299.949574][ T12] hsr_slave_1: left promiscuous mode [ 299.960289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.968843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.991526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.007325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.029743][ T29] audit: type=1400 audit(1722860913.922:682): avc: denied { append } for pid=7468 comm="syz.1.581" name="vsock" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.101525][ T12] veth1_macvtap: left promiscuous mode [ 300.108992][ T12] veth0_macvtap: left promiscuous mode [ 300.110265][ T55] Bluetooth: hci3: command tx timeout [ 300.115883][ T12] veth1_vlan: left promiscuous mode [ 300.126336][ T12] veth0_vlan: left promiscuous mode [ 300.190468][ T55] Bluetooth: hci5: command tx timeout [ 301.169773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 301.387312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.871622][ T5273] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.882642][ T55] Bluetooth: hci0: command tx timeout [ 302.071741][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 302.090439][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.146194][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 302.158176][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.189974][ T55] Bluetooth: hci3: command tx timeout [ 302.208749][ T5273] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 302.233931][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.271064][ T55] Bluetooth: hci5: command tx timeout [ 302.279507][ T5273] usb 3-1: Product: syz [ 302.305140][ T5273] usb 3-1: Manufacturer: syz [ 302.309780][ T5273] usb 3-1: SerialNumber: syz [ 302.318621][ T5273] usb 3-1: config 0 descriptor?? [ 302.343668][ T5273] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 303.054842][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 303.065598][ T29] audit: type=1400 audit(1722860916.962:683): avc: denied { create } for pid=7492 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.182925][ T29] audit: type=1400 audit(1722860916.992:684): avc: denied { bind } for pid=7492 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.203147][ T29] audit: type=1400 audit(1722860916.992:685): avc: denied { name_bind } for pid=7492 comm="syz.1.585" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 303.223948][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.230450][ T29] audit: type=1400 audit(1722860916.992:686): avc: denied { node_bind } for pid=7492 comm="syz.1.585" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 303.257595][ T29] audit: type=1400 audit(1722860917.022:687): avc: denied { listen } for pid=7492 comm="syz.1.585" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.354646][ T29] audit: type=1400 audit(1722860917.032:688): avc: denied { connect } for pid=7492 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.374073][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.392858][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.403617][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.412493][ T7433] bridge_slave_0: entered allmulticast mode [ 303.418577][ T29] audit: type=1400 audit(1722860917.032:689): avc: denied { name_connect } for pid=7492 comm="syz.1.585" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 303.422234][ T7433] bridge_slave_0: entered promiscuous mode [ 303.439585][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.493121][ T29] audit: type=1400 audit(1722860917.152:690): avc: denied { accept } for pid=7492 comm="syz.1.585" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.576546][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.586795][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.596752][ T7436] bridge_slave_0: entered allmulticast mode [ 303.608471][ T7436] bridge_slave_0: entered promiscuous mode [ 303.625510][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.636713][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.648288][ T7433] bridge_slave_1: entered allmulticast mode [ 303.671318][ T7433] bridge_slave_1: entered promiscuous mode [ 303.703561][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.712323][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.719730][ T7436] bridge_slave_1: entered allmulticast mode [ 303.735427][ T7436] bridge_slave_1: entered promiscuous mode [ 303.947361][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.964766][ T55] Bluetooth: hci0: command tx timeout [ 304.033216][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.059762][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.085350][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.253283][ T7436] team0: Port device team_slave_0 added [ 304.277637][ T7436] team0: Port device team_slave_1 added [ 304.286711][ T55] Bluetooth: hci3: command tx timeout [ 304.291714][ T5273] pwc: Failed to set LED on/off time (-71) [ 304.312445][ T5273] pwc: send_video_command error -71 [ 304.317700][ T5273] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 304.333278][ T5304] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 304.348937][ T5273] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 304.359620][ T55] Bluetooth: hci5: command tx timeout [ 304.538684][ T5273] usb 3-1: USB disconnect, device number 9 [ 304.556185][ T7433] team0: Port device team_slave_0 added [ 304.563633][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.572245][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.582835][ T7438] bridge_slave_0: entered allmulticast mode [ 304.849201][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 304.860392][ T7438] bridge_slave_0: entered promiscuous mode [ 304.889569][ T5304] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 304.911593][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.919093][ T5304] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 304.931793][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.952086][ T5304] usb 2-1: Product: syz [ 304.960653][ T7438] bridge_slave_1: entered allmulticast mode [ 304.972888][ T5304] usb 2-1: Manufacturer: syz [ 304.994258][ T5304] usb 2-1: SerialNumber: syz [ 304.999951][ T7438] bridge_slave_1: entered promiscuous mode [ 305.128019][ T5304] usb 2-1: config 0 descriptor?? [ 305.144416][ T7433] team0: Port device team_slave_1 added [ 305.401838][ T5304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 305.744416][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.755310][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.764004][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.790275][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.796975][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.812061][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.819028][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.844942][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.856604][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.869181][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.894028][ T5304] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 305.895367][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.930877][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.953862][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.984974][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.992311][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.019098][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.057015][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.155485][ T7438] team0: Port device team_slave_0 added [ 306.169055][ T7438] team0: Port device team_slave_1 added [ 306.198474][ T5304] usb 2-1: USB disconnect, device number 12 [ 306.232400][ T5273] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.248442][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.356014][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.378493][ T7436] hsr_slave_0: entered promiscuous mode [ 306.385723][ T7436] hsr_slave_1: entered promiscuous mode [ 306.395431][ T7436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.404575][ T7436] Cannot create hsr debugfs directory [ 306.429406][ T5273] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 306.439219][ T5273] usb 3-1: config 0 has no interface number 0 [ 306.445658][ T5273] usb 3-1: config 0 interface 122 has no altsetting 0 [ 306.454578][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.462186][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.489542][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.500534][ T5273] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 306.503175][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.509579][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.509607][ T5273] usb 3-1: Product: syz [ 306.509625][ T5273] usb 3-1: Manufacturer: syz [ 306.539235][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.577176][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.579925][ T5273] usb 3-1: SerialNumber: syz [ 306.616631][ T5273] usb 3-1: config 0 descriptor?? [ 306.622580][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.673214][ T7433] hsr_slave_0: entered promiscuous mode [ 306.683228][ T7433] hsr_slave_1: entered promiscuous mode [ 306.692300][ T7433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.700991][ T7433] Cannot create hsr debugfs directory [ 306.947908][ T7438] hsr_slave_0: entered promiscuous mode [ 306.955963][ T7438] hsr_slave_1: entered promiscuous mode [ 306.963292][ T7438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.971055][ T7438] Cannot create hsr debugfs directory [ 307.654799][ T5273] usb 3-1: USB disconnect, device number 10 [ 307.664225][ T5273] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 308.228351][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.443712][ T7519] xt_nfacct: accounting object `sy' does not exists [ 308.484592][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.564972][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.766265][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.846965][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 308.846984][ T29] audit: type=1400 audit(1722860922.742:692): avc: denied { write } for pid=7523 comm="syz.1.593" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.950787][ T7529] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 309.178044][ T12] bridge_slave_1: left allmulticast mode [ 309.206092][ T12] bridge_slave_1: left promiscuous mode [ 309.225698][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.258422][ T12] bridge_slave_0: left allmulticast mode [ 309.267201][ T12] bridge_slave_0: left promiscuous mode [ 309.277528][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.299766][ T12] bridge_slave_1: left allmulticast mode [ 309.319646][ T12] bridge_slave_1: left promiscuous mode [ 309.329280][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.351999][ T12] bridge_slave_0: left allmulticast mode [ 309.366923][ T12] bridge_slave_0: left promiscuous mode [ 309.378949][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.866014][ T941] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 311.079518][ T941] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 311.088989][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.097751][ T941] usb 2-1: Product: syz [ 311.103044][ T941] usb 2-1: Manufacturer: syz [ 311.107877][ T941] usb 2-1: SerialNumber: syz [ 311.124747][ T941] usb 2-1: config 0 descriptor?? [ 311.137206][ T941] gspca_main: touptek-2.14.0 probing 0547:6801 [ 311.393716][ T941] usb 2-1: USB disconnect, device number 13 [ 311.552508][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.564382][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.575607][ T12] bond0 (unregistering): Released all slaves [ 311.591909][ T12] bond1 (unregistering): Released all slaves [ 311.793286][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.804844][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.815657][ T12] bond0 (unregistering): Released all slaves [ 311.845137][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'. [ 312.117331][ T29] audit: type=1400 audit(1722860926.012:693): avc: denied { mount } for pid=7547 comm="syz.1.602" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 312.170234][ T7548] devtmpfs: Too few inodes for current use [ 312.202912][ T29] audit: type=1400 audit(1722860926.062:694): avc: denied { remount } for pid=7547 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 312.273638][ T29] audit: type=1400 audit(1722860926.172:695): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 312.481071][ T29] audit: type=1400 audit(1722860926.382:696): avc: denied { setopt } for pid=7555 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 312.571314][ T29] audit: type=1326 audit(1722860926.472:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x0 [ 313.413600][ T29] audit: type=1400 audit(1722860927.302:698): avc: denied { write } for pid=7557 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 313.526876][ T29] audit: type=1400 audit(1722860927.422:699): avc: denied { execute_no_trans } for pid=7564 comm="syz.2.607" path="/133/file0" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.640542][ T12] hsr_slave_0: left promiscuous mode [ 313.649357][ T12] hsr_slave_1: left promiscuous mode [ 313.659661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.673575][ T29] audit: type=1804 audit(1722860927.572:700): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.608" name="/" dev="pidfs" ino=7867 res=1 errno=0 [ 313.690259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.733373][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.751526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.783784][ T12] hsr_slave_0: left promiscuous mode [ 313.803736][ T12] hsr_slave_1: left promiscuous mode [ 313.881964][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.899756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.908564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.920841][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.984489][ T7574] kvm: kvm [7569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x94500000000 [ 314.063429][ T12] veth1_macvtap: left promiscuous mode [ 314.069173][ T12] veth0_macvtap: left promiscuous mode [ 314.076143][ T12] veth1_vlan: left promiscuous mode [ 314.081645][ T12] veth0_vlan: left promiscuous mode [ 314.089362][ T12] veth1_macvtap: left promiscuous mode [ 314.095280][ T12] veth0_macvtap: left promiscuous mode [ 314.101334][ T12] veth1_vlan: left promiscuous mode [ 314.106755][ T12] veth0_vlan: left promiscuous mode [ 314.330164][ T29] audit: type=1400 audit(1722860928.162:701): avc: denied { append } for pid=7572 comm="syz.2.610" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 314.858947][ T29] audit: type=1400 audit(1722860928.182:702): avc: denied { read } for pid=7572 comm="syz.2.610" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 314.951498][ T29] audit: type=1400 audit(1722860928.182:703): avc: denied { open } for pid=7572 comm="syz.2.610" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 316.089389][ T12] team0 (unregistering): Port device team_slave_1 removed [ 316.189702][ T12] team0 (unregistering): Port device team_slave_0 removed [ 317.372901][ T12] team0 (unregistering): Port device team_slave_1 removed [ 317.434682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 317.967538][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.028157][ T7436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.074431][ T7436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.121298][ T7436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.164877][ T7436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.528415][ T29] audit: type=1400 audit(1722860932.422:704): avc: denied { watch watch_reads } for pid=7594 comm="syz.2.617" path="/139/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.588859][ T29] audit: type=1400 audit(1722860932.422:705): avc: denied { read } for pid=7594 comm="syz.2.617" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.635700][ T29] audit: type=1400 audit(1722860932.422:706): avc: denied { open } for pid=7594 comm="syz.2.617" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.660163][ T7433] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.680737][ T7433] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.790679][ T7433] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.978960][ T7433] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.189110][ T29] audit: type=1400 audit(1722860933.082:707): avc: denied { mount } for pid=7602 comm="syz.1.618" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 319.256156][ T7604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.324073][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.451138][ T29] audit: type=1400 audit(1722860933.342:708): avc: denied { read } for pid=7602 comm="syz.1.618" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.516660][ T29] audit: type=1400 audit(1722860933.392:709): avc: denied { open } for pid=7602 comm="syz.1.618" path="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.539216][ T7438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.631195][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.655507][ T7438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.730581][ T7438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.781352][ T7438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.820396][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.827681][ T941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.958382][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.983999][ T941] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.991223][ T941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.149116][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.199721][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.206922][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.225083][ T29] audit: type=1400 audit(1722860934.082:710): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 320.322814][ T7608] netlink: 208 bytes leftover after parsing attributes in process `syz.2.619'. [ 320.500539][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.507738][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.106521][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.266232][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.326187][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.333521][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.385232][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.392501][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.543282][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.569602][ T7438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.813199][ T7623] [U] v3f"S/4:XTzWtlW= [ 321.819543][ T7623] [U] J"e:" [ 321.825570][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.867073][ T7436] veth0_vlan: entered promiscuous mode [ 321.947913][ T7436] veth1_vlan: entered promiscuous mode [ 322.044084][ T29] audit: type=1400 audit(1722860935.932:711): avc: denied { setopt } for pid=7622 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.131823][ T7436] veth0_macvtap: entered promiscuous mode [ 322.180980][ T7436] veth1_macvtap: entered promiscuous mode [ 322.258464][ T7622] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 322.285775][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.305000][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.330007][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.342510][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.379098][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.433193][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.465089][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.508742][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.556723][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.589933][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.646656][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.764004][ T7436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.779560][ T29] audit: type=1400 audit(1722860936.662:712): avc: denied { write } for pid=7645 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 322.800222][ T7436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.820003][ T7436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.840161][ T7436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.978719][ T7433] veth0_vlan: entered promiscuous mode [ 323.151307][ T7433] veth1_vlan: entered promiscuous mode [ 323.243683][ T7438] veth0_vlan: entered promiscuous mode [ 323.265037][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.289220][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.306780][ T29] audit: type=1400 audit(1722860937.202:713): avc: denied { setcurrent } for pid=7652 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 323.419400][ T7438] veth1_vlan: entered promiscuous mode [ 323.462415][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.478629][ T7433] veth0_macvtap: entered promiscuous mode [ 323.489988][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.528738][ T29] audit: type=1400 audit(1722860937.422:714): avc: denied { mounton } for pid=7436 comm="syz-executor" path="/root/syzkaller.nNqSPn/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 323.530499][ T7433] veth1_macvtap: entered promiscuous mode [ 323.573666][ T29] audit: type=1400 audit(1722860937.472:715): avc: denied { mounton } for pid=7436 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 323.587360][ T7438] veth0_macvtap: entered promiscuous mode [ 323.662931][ T7438] veth1_macvtap: entered promiscuous mode [ 323.752888][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.764297][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.777170][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.788073][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.799239][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.811017][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.825999][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.856967][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.876995][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.888171][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.894761][ T29] audit: type=1400 audit(1722860937.792:716): avc: denied { getopt } for pid=7664 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.899126][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.936756][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.972852][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.985199][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.026950][ T7433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.060175][ T7433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.068947][ T7433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.088571][ T7669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.633'. [ 324.090083][ T7433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.120474][ T7669] netlink: 43 bytes leftover after parsing attributes in process `syz.1.633'. [ 324.129471][ T7669] netlink: 'syz.1.633': attribute type 5 has an invalid length. [ 324.165499][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.189851][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.199704][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.239978][ T7669] netlink: 43 bytes leftover after parsing attributes in process `syz.1.633'. [ 324.244136][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.259501][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.272104][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.286133][ T7673] syz.0.569 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 324.286915][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.307626][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.321941][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.412461][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.450112][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.479898][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.494493][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.506560][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.517341][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.527234][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.552573][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.571778][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.688123][ T29] audit: type=1400 audit(1722860938.572:717): avc: denied { execute } for pid=7676 comm="syz.2.636" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 324.741604][ T7438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.762112][ T7438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.771040][ T7438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.785011][ T7438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.810287][ T5221] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 324.914932][ T29] audit: type=1400 audit(1722860938.792:718): avc: denied { create } for pid=7674 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.032665][ T5221] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 325.092215][ T5221] usb 1-1: config 0 has no interface number 0 [ 325.114144][ T29] audit: type=1400 audit(1722860938.792:719): avc: denied { ioctl } for pid=7674 comm="syz.1.635" path="socket:[19677]" dev="sockfs" ino=19677 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.185673][ T5221] usb 1-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 325.453972][ T55] Bluetooth: hci5: command tx timeout [ 325.468622][ T5221] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 325.500154][ T5221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.531239][ T5221] usb 1-1: config 0 descriptor?? [ 325.689734][ T29] audit: type=1400 audit(1722860939.582:720): avc: denied { write } for pid=7682 comm="syz.1.638" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.790738][ T29] audit: type=1400 audit(1722860939.662:721): avc: denied { map } for pid=7682 comm="syz.1.638" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.803199][ T5221] asix 1-1:0.28 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 325.827116][ T5221] asix 1-1:0.28: probe with driver asix failed with error -61 [ 325.841456][ T29] audit: type=1400 audit(1722860939.662:722): avc: denied { execute } for pid=7682 comm="syz.1.638" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.892087][ T29] audit: type=1400 audit(1722860939.782:723): avc: denied { bind } for pid=7684 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.987960][ T29] audit: type=1400 audit(1722860939.792:724): avc: denied { listen } for pid=7684 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.106944][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.140304][ T5499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.148477][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.157939][ T5499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.242830][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.260113][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.327792][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.346939][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.370325][ T941] usb 1-1: USB disconnect, device number 5 [ 326.475572][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.568'. [ 326.987701][ T29] audit: type=1400 audit(1722860940.882:725): avc: denied { ioctl } for pid=7696 comm="syz.3.571" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.119536][ T29] audit: type=1400 audit(1722860941.002:726): avc: denied { write } for pid=7706 comm="syz.1.643" path="socket:[20139]" dev="sockfs" ino=20139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 328.111291][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 328.330029][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 328.373381][ T25] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 328.389565][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.408567][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 328.419291][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.482746][ T25] usb 3-1: config 0 descriptor?? [ 328.852933][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 328.873119][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 328.900169][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 328.928854][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 328.961979][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 328.990140][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 329.024094][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 329.058452][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 329.086313][ T941] hid-generic 0000:0000:0000.0004: item fetching failed at offset 8/43 [ 329.107282][ T941] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 330.975191][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 331.090626][ T25] usb 3-1: string descriptor 0 read error: -71 [ 331.121401][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 331.132564][ T25] usb 3-1: USB disconnect, device number 11 [ 331.244193][ T7723] Bluetooth: MGMT ver 1.23 [ 331.287597][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 331.287619][ T29] audit: type=1400 audit(1722860945.142:728): avc: denied { write } for pid=7722 comm="syz.1.648" path="socket:[19159]" dev="sockfs" ino=19159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.655554][ T29] audit: type=1400 audit(1722860945.552:729): avc: denied { setopt } for pid=7734 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 331.823583][ T29] audit: type=1400 audit(1722860945.622:730): avc: denied { write } for pid=7734 comm="syz.4.653" laddr=172.20.20.10 lport=55150 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 332.095043][ T29] audit: type=1400 audit(1722860945.992:731): avc: denied { relabelfrom } for pid=7728 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.168082][ T29] audit: type=1400 audit(1722860946.052:732): avc: denied { relabelto } for pid=7728 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.439972][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 332.677051][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.697505][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.718493][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.759996][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.803926][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 332.885194][ T7746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.931851][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.658'. [ 332.994201][ T7756] syz.2.659[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.994326][ T7756] syz.2.659[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.006544][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 333.205669][ T29] audit: type=1400 audit(1722860947.102:733): avc: denied { ioctl } for pid=7745 comm="syz.4.656" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 333.218056][ T7746] binder: 7745:7746 ioctl ae41 0 returned -22 [ 333.477996][ T7756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.037882][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.047397][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.057391][ T7765] bridge0: entered allmulticast mode [ 335.069305][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.076909][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.085889][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.093133][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.104294][ T7767] bridge0: entered promiscuous mode [ 335.126031][ T29] audit: type=1400 audit(1722860948.102:734): avc: denied { create } for pid=7762 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 335.488228][ T29] audit: type=1400 audit(1722860949.382:735): avc: denied { bind } for pid=7768 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.539134][ T29] audit: type=1400 audit(1722860949.412:736): avc: denied { name_bind } for pid=7768 comm="syz.2.662" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 335.625566][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 335.630087][ T29] audit: type=1400 audit(1722860949.412:737): avc: denied { node_bind } for pid=7768 comm="syz.2.662" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 335.909974][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 336.100027][ T8] usb 3-1: device descriptor read/64, error -71 [ 336.210044][ T9] usb 5-1: USB disconnect, device number 5 [ 336.479943][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 336.660126][ T8] usb 3-1: device descriptor read/64, error -71 [ 336.740459][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 336.740515][ T29] audit: type=1400 audit(1722860950.622:739): avc: denied { connect } for pid=7787 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.790388][ T8] usb usb3-port1: attempt power cycle [ 336.865828][ T29] audit: type=1400 audit(1722860950.762:740): avc: denied { setopt } for pid=7787 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.011345][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 337.346914][ T29] audit: type=1400 audit(1722860951.212:741): avc: denied { getopt } for pid=7787 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.414136][ T29] audit: type=1400 audit(1722860951.262:742): avc: denied { read } for pid=7787 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.470846][ T941] kernel read not supported for file inotify (pid: 941 comm: kworker/0:2) [ 337.488577][ T29] audit: type=1400 audit(1722860951.362:743): avc: denied { watch } for pid=7791 comm="syz.0.672" path="/4/control" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 337.750121][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 337.792885][ T8] usb 3-1: device descriptor read/8, error -71 [ 339.074803][ T7799] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 339.128723][ T29] audit: type=1400 audit(1722860953.002:744): avc: denied { relabelto } for pid=7794 comm="syz.4.674" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 339.194632][ T7809] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 339.208761][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 339.550026][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 340.292985][ T8] usb 3-1: device not accepting address 15, error -71 [ 340.300197][ T8] usb usb3-port1: unable to enumerate USB device [ 340.361506][ T29] audit: type=1400 audit(1722860953.012:745): avc: denied { associate } for pid=7794 comm="syz.4.674" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 340.458463][ T29] audit: type=1400 audit(1722860953.092:746): avc: denied { setopt } for pid=7805 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.478854][ T29] audit: type=1400 audit(1722860953.262:747): avc: denied { relabelto } for pid=7794 comm="syz.4.674" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 340.512383][ T29] audit: type=1400 audit(1722860953.262:748): avc: denied { associate } for pid=7794 comm="syz.4.674" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 344.279945][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 344.492369][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 344.504444][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 344.531147][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.560335][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.569475][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.598290][ T8] usb 2-1: config 0 descriptor?? [ 344.604605][ T7850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.647372][ T55] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 344.657059][ T55] Bluetooth: Frame is too long (len 18, expected len 4) [ 344.690008][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 345.905466][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 345.930067][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 345.968286][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 345.978670][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 346.007480][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.027570][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.038914][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 346.067111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 346.105669][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 346.142253][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 346.177089][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.216486][ T9] usb 5-1: config 0 descriptor?? [ 346.254238][ T7878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.268053][ T55] Bluetooth: hci1: urb ffff88802f587f00 submission failed (90) [ 346.303785][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 346.303807][ T29] audit: type=1400 audit(1722860960.192:751): avc: denied { map } for pid=7875 comm="syz.2.701" path="socket:[20428]" dev="sockfs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.332757][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.345280][ T29] audit: type=1400 audit(1722860960.192:752): avc: denied { read } for pid=7875 comm="syz.2.701" path="socket:[20428]" dev="sockfs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.405206][ T941] usb 2-1: USB disconnect, device number 14 [ 346.639603][ T2636] usb 5-1: USB disconnect, device number 6 [ 347.901017][ T29] audit: type=1326 audit(1722860961.802:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.2.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b19779f9 code=0x0 [ 348.139577][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 348.152341][ T29] audit: type=1400 audit(1722860962.052:754): avc: denied { ioctl } for pid=7899 comm="syz.4.709" path="socket:[19427]" dev="sockfs" ino=19427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.234411][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 348.705828][ T5273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 348.889899][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 348.904559][ T5273] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 348.915545][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.927404][ T5273] usb 4-1: Product: syz [ 348.931812][ T5273] usb 4-1: Manufacturer: syz [ 348.936507][ T5273] usb 4-1: SerialNumber: syz [ 348.960665][ T5273] usb 4-1: config 0 descriptor?? [ 349.213409][ T2636] usb 4-1: USB disconnect, device number 11 [ 354.625010][ T55] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 354.642720][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 354.782188][ T7913] input: syz0 as /devices/virtual/input/input15 [ 354.817007][ T29] audit: type=1400 audit(1722860968.702:755): avc: denied { setattr } for pid=7910 comm="syz.2.713" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 355.202325][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.214119][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.239280][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.247451][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.255560][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.264638][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.891455][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 355.921654][ T7941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.721'. [ 356.009089][ T7941] x_tables: unsorted underflow at hook 2 [ 356.238212][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.257627][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.266115][ T7923] bridge_slave_0: entered allmulticast mode [ 356.276529][ T7923] bridge_slave_0: entered promiscuous mode [ 356.293993][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.313677][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.326066][ T7923] bridge_slave_1: entered allmulticast mode [ 356.346880][ T29] audit: type=1400 audit(1722860970.242:756): avc: denied { bind } for pid=7950 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.370135][ T7923] bridge_slave_1: entered promiscuous mode [ 356.461945][ T29] audit: type=1400 audit(1722860970.252:757): avc: denied { connect } for pid=7950 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.546093][ T29] audit: type=1400 audit(1722860970.252:758): avc: denied { write } for pid=7950 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.320242][ T55] Bluetooth: hci1: command tx timeout [ 357.360675][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.442522][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.748259][ T7958] netlink: 277 bytes leftover after parsing attributes in process `syz.3.724'. [ 358.033811][ T7923] team0: Port device team_slave_0 added [ 358.053741][ T7923] team0: Port device team_slave_1 added [ 358.277992][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.725'. [ 358.278133][ T29] audit: type=1400 audit(1722860972.172:759): avc: denied { map } for pid=7957 comm="syz.2.725" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 358.311183][ T7960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.725'. [ 358.320700][ T7960] netlink: 'syz.2.725': attribute type 6 has an invalid length. [ 358.328509][ T7960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.725'. [ 358.519031][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802031e800: rx timeout, send abort [ 358.543940][ T29] audit: type=1400 audit(1722860972.252:760): avc: denied { ioctl } for pid=7957 comm="syz.2.725" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 358.790568][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.797765][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.854670][ T29] audit: type=1400 audit(1722860972.732:761): avc: denied { bind } for pid=7969 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.873899][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.028171][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802031e800: abort rx timeout. Force session deactivation [ 359.068605][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.090303][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.227977][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.495169][ T55] Bluetooth: hci1: command tx timeout [ 360.051573][ T7923] hsr_slave_0: entered promiscuous mode [ 360.068803][ T7923] hsr_slave_1: entered promiscuous mode [ 361.570191][ T55] Bluetooth: hci1: command tx timeout [ 361.675408][ T7923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.694694][ T29] audit: type=1400 audit(1722860975.552:762): avc: denied { mounton } for pid=7984 comm="syz.2.733" path="/174/file0" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 361.898199][ T29] audit: type=1400 audit(1722860975.792:763): avc: denied { setattr } for pid=7984 comm="syz.2.733" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 361.940959][ T7923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.977447][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 362.082839][ T7923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.308048][ T7923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.713762][ T7923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.728545][ T7923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.749637][ T7923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.779944][ T941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 362.784186][ T7923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.631113][ T55] Bluetooth: hci1: command tx timeout [ 363.926511][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 363.949673][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.982764][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.140979][ T941] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 364.153998][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.177009][ T941] usb 3-1: Product: syz [ 364.182142][ T941] usb 3-1: Manufacturer: syz [ 364.186841][ T941] usb 3-1: SerialNumber: syz [ 364.211142][ T941] usb 3-1: config 0 descriptor?? [ 364.237665][ T941] smsusb:smsusb_probe: board id=2, interface number 0 [ 364.278561][ T941] smsusb:smsusb_probe: Device initialized with return code -19 [ 364.493170][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.669595][ T941] usb 3-1: USB disconnect, device number 16 [ 366.709322][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.752501][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.759692][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.792910][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.800135][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.919937][ T5276] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 367.001852][ T29] audit: type=1400 audit(1722860980.892:764): avc: denied { create } for pid=8038 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.065221][ T29] audit: type=1400 audit(1722860980.962:765): avc: denied { ioctl } for pid=8038 comm="syz.4.750" path="socket:[20964]" dev="sockfs" ino=20964 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.104003][ T55] Bluetooth: hci4: unexpected event for opcode 0x202a [ 367.134088][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 367.145208][ T5276] usb 4-1: config 0 has no interfaces? [ 367.165282][ T29] audit: type=1326 audit(1722860981.062:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.1.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x0 [ 367.199910][ T941] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 367.203805][ T8044] block device autoloading is deprecated and will be removed. [ 367.215549][ T5276] usb 4-1: config 0 has no interfaces? [ 367.216812][ T5276] usb 4-1: config 0 has no interfaces? [ 367.277696][ T5276] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 367.288441][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.297016][ T5276] usb 4-1: SerialNumber: syz [ 367.306484][ T5276] usb 4-1: config 0 descriptor?? [ 367.377584][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.456058][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.474829][ T7923] veth0_vlan: entered promiscuous mode [ 367.483663][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.523051][ T941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.549645][ T7923] veth1_vlan: entered promiscuous mode [ 367.580445][ T941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.613109][ T8] usb 4-1: USB disconnect, device number 12 [ 367.635567][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.669173][ T7923] veth0_macvtap: entered promiscuous mode [ 367.676244][ T941] usb 3-1: config 0 descriptor?? [ 367.712606][ T7923] veth1_macvtap: entered promiscuous mode [ 367.797048][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.820497][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.839872][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.867337][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.896314][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.929718][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.946082][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.968750][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.981657][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.993938][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.013592][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.057785][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.084237][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.102874][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.121634][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.137025][ T941] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.151496][ T29] audit: type=1400 audit(1722860982.052:767): avc: denied { ioctl } for pid=8059 comm="syz.4.757" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.159872][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.200122][ T941] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.210167][ T941] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 368.461201][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.476130][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.487311][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.520593][ T29] audit: type=1400 audit(1722860982.402:768): avc: denied { bind } for pid=8059 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.345922][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.561537][ T29] audit: type=1400 audit(1722860982.402:769): avc: denied { name_bind } for pid=8059 comm="syz.4.757" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 369.605939][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.638800][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.662730][ T29] audit: type=1400 audit(1722860982.402:770): avc: denied { node_bind } for pid=8059 comm="syz.4.757" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 369.672816][ T941] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 369.805720][ T941] usb 3-1: USB disconnect, device number 17 [ 369.916973][ T7923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.980519][ T7923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.989363][ T7923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.035102][ T7923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.399780][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.448280][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.496111][ T8057] rtc_cmos 00:00: Alarms can be up to one day in the future [ 370.534985][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.563827][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.636346][ T29] audit: type=1400 audit(1722860984.532:771): avc: denied { mount } for pid=8074 comm="syz.3.759" name="/" dev="autofs" ino=21995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 371.141541][ T941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 371.150139][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 372.043990][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 372.054269][ T55] Bluetooth: hci4: hardware error 0x00 [ 372.217591][ T941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 372.240097][ T941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 372.321141][ T941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 372.396098][ T941] rtc rtc0: __rtc_set_alarm: err=-22 [ 372.587340][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 372.632704][ T8097] netlink: 72 bytes leftover after parsing attributes in process `syz.1.768'. [ 373.642614][ T29] audit: type=1400 audit(1722860987.542:772): avc: denied { unmount } for pid=7438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 374.120391][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 374.305097][ T29] audit: type=1400 audit(1722860988.202:773): avc: denied { execute } for pid=8115 comm="syz.4.774" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=22082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 374.538117][ T941] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 374.752469][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.788981][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.823361][ T941] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 374.853789][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.875861][ T941] usb 1-1: config 0 descriptor?? [ 374.920216][ T8132] netlink: 48 bytes leftover after parsing attributes in process `syz.3.780'. [ 374.959915][ T29] audit: type=1400 audit(1722860988.802:774): avc: denied { block_suspend } for pid=8125 comm="syz.1.778" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.194522][ T29] audit: type=1400 audit(1722860988.992:775): avc: denied { name_connect } for pid=8136 comm="syz.4.782" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 375.308258][ T29] audit: type=1400 audit(1722860989.202:776): avc: denied { connect } for pid=8138 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.333988][ T941] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 375.414037][ T941] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 375.525734][ T941] uclogic 0003:5543:0005.0007: No inputs registered, leaving [ 375.631828][ T941] uclogic 0003:5543:0005.0007: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 375.664156][ T941] usb 1-1: USB disconnect, device number 6 [ 375.800199][ T8147] usb usb8: usbfs: process 8147 (syz.3.787) did not claim interface 0 before use [ 375.830075][ T5274] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 376.044557][ T5274] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=1b.bf [ 376.085372][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.145369][ T5274] usb 3-1: Product: syz [ 376.173134][ T5274] usb 3-1: Manufacturer: syz [ 376.177773][ T5274] usb 3-1: SerialNumber: syz [ 376.225988][ T5274] usb 3-1: config 0 descriptor?? [ 376.240048][ T941] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 376.276373][ T5274] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 377.346629][ T941] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 377.390217][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.398284][ T941] usb 4-1: Product: syz [ 377.430400][ T941] usb 4-1: Manufacturer: syz [ 377.439024][ T941] usb 4-1: SerialNumber: syz [ 377.488449][ T941] usb 4-1: config 0 descriptor?? [ 377.496822][ T2636] usb 3-1: USB disconnect, device number 18 [ 377.512025][ T941] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 013 [ 377.721400][ T5274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 377.840005][ T5273] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 377.910154][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 377.917722][ T5274] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 377.926742][ T5274] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 377.937968][ T5274] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 377.938780][ T941] (null): failure reading functionality [ 377.948411][ T5274] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.966469][ T5274] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 377.980648][ T5274] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.985025][ T941] i2c i2c-1: connected i2c-tiny-usb device [ 377.989896][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.006746][ T5274] usb 1-1: Product: syz [ 378.011310][ T5274] usb 1-1: Manufacturer: syz [ 378.016123][ T5274] usb 1-1: SerialNumber: syz [ 378.040078][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 378.047260][ T5273] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.066912][ T5273] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 378.077830][ T5273] usb 5-1: config 1 has no interface number 1 [ 378.089918][ T5273] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 378.106066][ T5273] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.118588][ T5273] usb 5-1: config 1 interface 2 has no altsetting 0 [ 378.129605][ T5273] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.139116][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.147415][ T5273] usb 5-1: Product: syz [ 378.151686][ T5273] usb 5-1: Manufacturer: syz [ 378.156338][ T5273] usb 5-1: SerialNumber: syz [ 378.201930][ T941] usb 4-1: USB disconnect, device number 13 [ 378.858790][ T5273] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 378.866776][ T5274] usb 1-1: USB disconnect, device number 7 [ 381.683253][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.695360][ T5273] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 381.722225][ T5273] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 381.894148][ T5273] usb 5-1: selecting invalid altsetting 0 [ 382.112758][ T5273] usb 5-1: USB disconnect, device number 7 [ 382.510046][ T29] audit: type=1400 audit(1722860996.402:777): avc: denied { write } for pid=8182 comm="syz.0.795" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 383.465062][ T29] audit: type=1400 audit(1722860997.332:778): avc: denied { write } for pid=8185 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 383.580126][ T29] audit: type=1400 audit(1722860997.472:779): avc: denied { read } for pid=8182 comm="syz.0.795" path="socket:[22221]" dev="sockfs" ino=22221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.607233][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 384.069498][ T8213] Mount JFS Failure: -22 [ 384.086289][ T8213] jfs_mount failed w/return code = -22 [ 390.150253][ T5274] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 390.633030][ T8238] cgroup: none used incorrectly [ 390.742906][ T29] audit: type=1326 audit(1722861004.592:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e747779f9 code=0x0 [ 391.239471][ T8258] ubi0: attaching mtd0 [ 391.264599][ T8258] ubi0: scanning is finished [ 391.269328][ T8258] ubi0: empty MTD device detected [ 391.985618][ T8258] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 392.218116][ T29] audit: type=1400 audit(1722861006.112:781): avc: denied { setopt } for pid=8253 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.000471][ T941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 393.220039][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 393.238728][ T941] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.284526][ T941] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 393.326333][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 393.326377][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 393.326413][ T941] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.341325][ T941] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 393.341349][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.341363][ T941] usb 1-1: Product: syz [ 393.341375][ T941] usb 1-1: Manufacturer: syz [ 393.341386][ T941] usb 1-1: SerialNumber: syz [ 393.343699][ T941] usb 1-1: config 0 descriptor?? [ 393.359732][ T941] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 393.383009][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 393.687603][ T8279] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 393.760088][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 393.774542][ T5273] usb 1-1: USB disconnect, device number 8 [ 396.211910][ T8295] syz.0.834 (8295) used greatest stack depth: 21504 bytes left [ 396.536739][ T8319] netlink: 199356 bytes leftover after parsing attributes in process `syz.3.841'. [ 396.569949][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 396.672674][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 396.918914][ T8331] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 398.037030][ T2636] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.244976][ T2636] usb 4-1: Using ep0 maxpacket: 8 [ 398.275416][ T2636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 398.304800][ T2636] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 398.324171][ T2636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.350395][ T2636] usb 4-1: config 0 descriptor?? [ 398.359388][ T29] audit: type=1400 audit(1722861012.252:782): avc: denied { write } for pid=8355 comm="syz.2.854" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 398.403135][ T2636] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 398.515658][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 398.717281][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.740979][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.791713][ T55] Bluetooth: hci5: Invalid handle: 0x656e > 0x0eff [ 398.896742][ T8368] xt_l2tp: missing protocol rule (udp|l2tpip) [ 399.236922][ T29] audit: type=1400 audit(1722861013.122:783): avc: denied { bind } for pid=8379 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 399.851584][ T29] audit: type=1400 audit(1722861013.752:784): avc: denied { setopt } for pid=8393 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.300500][ T29] audit: type=1400 audit(1722861015.862:785): avc: denied { listen } for pid=8390 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.351634][ T29] audit: type=1400 audit(1722861015.862:786): avc: denied { accept } for pid=8390 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.449614][ T5273] usb 4-1: USB disconnect, device number 14 [ 404.115483][ T29] audit: type=1400 audit(1722861018.012:787): avc: denied { nlmsg_write } for pid=8420 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 404.202764][ T29] audit: type=1326 audit(1722861018.092:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e747779f9 code=0x0 [ 404.225741][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.493960][ T29] audit: type=1400 audit(1722861018.392:789): avc: denied { ioctl } for pid=8427 comm="syz.3.878" path="net:[4026534245]" dev="nsfs" ino=4026534245 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 404.525049][ T8430] fuse: Bad value for 'fd' [ 407.984714][ T8460] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.733096][ T29] audit: type=1400 audit(1722861023.962:790): avc: denied { cmd } for pid=8480 comm="syz.0.888" path="socket:[23766]" dev="sockfs" ino=23766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 413.163821][ T5273] IPVS: starting estimator thread 0... [ 413.300151][ T8517] IPVS: using max 19 ests per chain, 45600 per kthread [ 414.896412][ T8533] tipc: Enabling of bearer rejected, failed to enable media [ 414.955090][ T29] audit: type=1400 audit(1722861028.852:791): avc: denied { setopt } for pid=8530 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.917527][ T29] audit: type=1400 audit(1722861029.812:792): avc: denied { create } for pid=8550 comm="syz.0.913" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 416.048851][ T29] audit: type=1400 audit(1722861029.872:793): avc: denied { create } for pid=8550 comm="syz.0.913" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.120074][ T29] audit: type=1326 audit(1722861029.992:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.2.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b19779f9 code=0x0 [ 416.202088][ T29] audit: type=1400 audit(1722861030.052:795): avc: denied { unlink } for pid=7923 comm="syz-executor" name="file5" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.261323][ T29] audit: type=1400 audit(1722861030.152:796): avc: denied { accept } for pid=8565 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 416.318554][ T29] audit: type=1400 audit(1722861030.182:797): avc: denied { lock } for pid=8557 comm="syz.2.914" path="socket:[23132]" dev="sockfs" ino=23132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 416.447594][ T8567] ebtables: ebtables: counters copy to user failed while replacing table [ 416.759249][ T2636] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 417.721954][ T2636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.799852][ T2636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.848723][ T2636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.917067][ T2636] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 417.947524][ T2636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.960219][ T8587] netlink: 'syz.0.921': attribute type 62 has an invalid length. [ 417.985372][ T2636] usb 5-1: config 0 descriptor?? [ 418.021032][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.924'. [ 418.190161][ T55] Bluetooth: hci1: command tx timeout [ 418.334060][ T29] audit: type=1400 audit(1722861032.232:798): avc: denied { getattr } for pid=8597 comm="syz.3.926" path="socket:[23945]" dev="sockfs" ino=23945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 418.559475][ T29] audit: type=1400 audit(1722861032.452:799): avc: denied { accept } for pid=8595 comm="syz.0.925" lport=51330 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.653152][ T29] audit: type=1400 audit(1722861032.492:800): avc: denied { setopt } for pid=8595 comm="syz.0.925" lport=51330 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 418.766013][ T29] audit: type=1400 audit(1722861032.512:801): avc: denied { read } for pid=8595 comm="syz.0.925" lport=51330 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 420.518424][ T2636] usbhid 5-1:0.0: can't add hid device: -71 [ 420.530146][ T2636] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 420.578128][ T2636] usb 5-1: USB disconnect, device number 8 [ 421.647648][ T8630] xt_SECMARK: invalid security context 'unconfined' [ 422.137992][ T2636] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 422.591903][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 422.598097][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 422.858473][ T2636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.950852][ T2636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.986057][ T2636] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 423.011818][ T2636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.027901][ T2636] usb 1-1: config 0 descriptor?? [ 423.350252][ T5276] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 423.439946][ T29] audit: type=1400 audit(1722861037.302:802): avc: denied { getopt } for pid=8641 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 424.108691][ T29] audit: type=1400 audit(1722861037.992:803): avc: denied { append } for pid=8643 comm="syz.3.941" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.223630][ T8646] trusted_key: encrypted_key: master key parameter 'usesyz' is invalid [ 424.281185][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 424.296976][ T5276] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 424.322769][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.348369][ T5276] usb 3-1: Product: syz [ 424.352861][ T5276] usb 3-1: Manufacturer: syz [ 424.357504][ T5276] usb 3-1: SerialNumber: syz [ 424.366015][ T5276] usb 3-1: config 0 descriptor?? [ 424.375702][ T5276] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 424.440435][ T2636] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 424.469617][ T2636] usb 1-1: USB disconnect, device number 9 [ 424.752866][ T5276] usb 3-1: USB disconnect, device number 19 [ 424.788149][ T2041] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 425.489892][ T2041] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 425.757376][ T5304] kernel write not supported for file /vbi5 (pid: 5304 comm: kworker/0:5) [ 426.190115][ T941] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 426.419995][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 426.564447][ T941] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.903352][ T941] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 426.931683][ T8681] xt_TCPMSS: Only works on TCP SYN packets [ 426.978280][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 427.029559][ T8681] loop7: detected capacity change from 0 to 16384 [ 427.062004][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 427.067345][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 427.097313][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.127041][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.136950][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 427.195186][ T941] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 427.204678][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.225040][ T941] usb 5-1: Product: syz [ 427.239380][ T941] usb 5-1: Manufacturer: syz [ 427.250650][ T941] usb 5-1: SerialNumber: syz [ 427.275661][ T941] usb 5-1: config 0 descriptor?? [ 427.287744][ T8661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 427.311447][ T941] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 427.343350][ T941] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 427.410161][ T2636] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 427.543627][ T941] usb 5-1: USB disconnect, device number 9 [ 427.581179][ T941] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 427.609178][ T941] iuu_phoenix 5-1:0.0: device disconnected [ 427.636254][ T2636] usb 1-1: Using ep0 maxpacket: 32 [ 427.650384][ T2636] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.686565][ T2636] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 427.709955][ T2636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.736297][ T2636] usb 1-1: Product: syz [ 427.749941][ T2636] usb 1-1: Manufacturer: syz [ 427.760055][ T2636] usb 1-1: SerialNumber: syz [ 427.794134][ T2636] usb 1-1: config 0 descriptor?? [ 427.802346][ T2636] usb 1-1: bad CDC descriptors [ 427.813224][ T2636] usb 1-1: unsupported MDLM descriptors [ 427.834571][ T8697] [U] v3f"S/4:XTzWtlW= [ 427.840539][ T8697] [U] J"e:" [ 428.144312][ T2636] usb 1-1: USB disconnect, device number 10 [ 428.391350][ T8696] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 429.449779][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'. [ 429.636493][ T8716] netlink: zone id is out of range [ 429.671530][ T8716] netlink: zone id is out of range [ 429.681297][ T8716] netlink: zone id is out of range [ 429.686771][ T8716] netlink: zone id is out of range [ 429.692318][ T8716] netlink: zone id is out of range [ 429.697491][ T8716] netlink: zone id is out of range [ 429.702730][ T8716] netlink: zone id is out of range [ 429.717116][ T8716] netlink: zone id is out of range [ 429.724699][ T8716] netlink: zone id is out of range [ 429.735057][ T8716] netlink: zone id is out of range [ 429.850956][ T29] audit: type=1400 audit(1722861043.752:804): avc: denied { read write } for pid=8738 comm="syz.3.974" name="file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 429.975914][ T29] audit: type=1400 audit(1722861043.772:805): avc: denied { ioctl open } for pid=8738 comm="syz.3.974" path="/72/file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.054990][ T8741] input: syz0 as /devices/virtual/input/input17 [ 430.096053][ T29] audit: type=1400 audit(1722861043.972:806): avc: denied { ioctl } for pid=8733 comm="syz.0.969" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 430.382013][ T29] audit: type=1400 audit(1722861044.282:807): avc: denied { read } for pid=8749 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 430.558453][ T29] audit: type=1400 audit(1722861044.452:808): avc: denied { mount } for pid=8751 comm="syz.2.978" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 432.052351][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'. [ 433.075955][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 435.660159][ T8797] vivid-000: kernel_thread() failed [ 435.783072][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 435.995676][ T8] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 436.045618][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.067233][ T8] usb 5-1: config 0 descriptor?? [ 436.081443][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 436.653427][ T5304] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 436.662500][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 436.669501][ T8] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 437.687614][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 437.720420][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 437.771809][ T5304] usb 4-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=dd.c4 [ 438.576612][ T8] kernel write not supported for file /snd/seq (pid: 8 comm: kworker/0:0) [ 438.588530][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.599513][ T5304] usb 4-1: Product: syz [ 438.656787][ T5304] usb 4-1: Manufacturer: syz [ 438.689905][ T5304] usb 4-1: SerialNumber: syz [ 438.720667][ T5304] usb 4-1: config 0 descriptor?? [ 439.883979][ T8818] 9pnet_fd: Insufficient options for proto=fd [ 440.070783][ T2636] usb 5-1: USB disconnect, device number 10 [ 440.228476][ T8] usb 4-1: USB disconnect, device number 15 [ 440.367615][ C0] net_ratelimit: 11 callbacks suppressed [ 440.367642][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 440.403509][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.434857][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.454864][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.474821][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.504835][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.566491][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.617850][ T29] audit: type=1326 audit(1722861054.512:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b19779f9 code=0x0 [ 440.645587][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.664970][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.700251][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.768077][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.795785][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.816392][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.839988][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.863361][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.902747][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.924872][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.952746][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 440.986838][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.009758][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.036486][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.085356][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.124826][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.154824][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.193295][ T8830] 9pnet_fd: p9_fd_create_tcp (8830): problem connecting socket to 127.0.0.1 [ 441.633044][ T8850] binder: 8848:8850 ioctl c0046209 0 returned -22 [ 441.717688][ T29] audit: type=1400 audit(1722861055.612:810): avc: denied { getopt } for pid=8852 comm="syz.2.1010" laddr=127.0.0.1 lport=58414 faddr=127.0.0.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 441.982331][ T8859] block nbd4: shutting down sockets [ 443.715051][ T8868] syz.3.1015 (8868): drop_caches: 2 [ 446.396908][ T8883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 446.404098][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 446.422999][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 446.673279][ T8] vhci_hcd: vhci_device speed not set [ 446.774198][ T8] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 448.050025][ T941] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 448.122138][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'. [ 448.174821][ T8885] vhci_hcd: connection reset by peer [ 448.201306][ T1102] vhci_hcd: stop threads [ 448.207440][ T1102] vhci_hcd: release socket [ 448.260730][ T1102] vhci_hcd: disconnect device [ 448.300307][ T29] audit: type=1400 audit(1722861062.152:811): avc: denied { getopt } for pid=8919 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.319855][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.430194][ T5275] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 448.514705][ T941] usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 448.923560][ T941] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 449.400548][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 449.419295][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 449.459498][ T5275] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 449.491288][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.670969][ T5275] usb 5-1: config 0 descriptor?? [ 449.726428][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 449.851233][ T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.863180][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.875347][ T941] usb 1-1: SerialNumber: syz [ 449.898444][ T941] usb 1-1: bad CDC descriptors [ 449.947413][ T8936] 8021q: VLANs not supported on lo [ 450.127878][ T9] usb 1-1: USB disconnect, device number 11 [ 450.162074][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.193978][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.209311][ T5275] hid (null): report_id 0 is invalid [ 450.230776][ T5275] hid (null): invalid report_size 6778482 [ 450.263368][ T5273] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 450.280074][ T5275] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 450.309473][ T5275] hid-generic 0003:0158:0100.0009: unexpected long global item [ 450.328779][ T5275] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 450.364505][ T8947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1044'. [ 450.426590][ T9] usb 5-1: USB disconnect, device number 11 [ 450.477516][ T8950] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 450.486383][ T8950] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 450.489948][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 450.498365][ T8950] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 450.512580][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.529737][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 450.541641][ T29] audit: type=1400 audit(1722861064.432:812): avc: denied { map } for pid=8949 comm="syz.3.1046" path="socket:[24546]" dev="sockfs" ino=24546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.577656][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 450.608610][ T5273] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 450.609609][ T29] audit: type=1400 audit(1722861064.442:813): avc: denied { read } for pid=8949 comm="syz.3.1046" path="socket:[24546]" dev="sockfs" ino=24546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.623662][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.711665][ T5273] usb 2-1: config 0 descriptor?? [ 450.758501][ T29] audit: type=1326 audit(1722861064.652:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b19779f9 code=0x0 [ 450.941462][ T5273] usb 2-1: string descriptor 0 read error: -71 [ 450.951680][ T5273] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 450.967520][ T5273] usb 2-1: USB disconnect, device number 16 [ 452.060154][ T29] audit: type=1400 audit(1722861065.942:815): avc: denied { bind } for pid=8966 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 452.241707][ T8] vhci_hcd: vhci_device speed not set [ 453.479351][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 453.740147][ T5273] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 453.920116][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 453.935864][ T5273] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 453.965022][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.986827][ T5273] usb 1-1: Product: syz [ 454.009323][ T5273] usb 1-1: Manufacturer: syz [ 454.023583][ T5273] usb 1-1: SerialNumber: syz [ 454.044220][ T5273] usb 1-1: config 0 descriptor?? [ 454.327558][ T5273] msi2500 1-1:0.0: Registered as swradio16 [ 454.347235][ T5273] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 454.686809][ T29] audit: type=1400 audit(1722861068.582:816): avc: denied { read } for pid=9006 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.444363][ T941] usb 1-1: USB disconnect, device number 12 [ 455.627686][ T29] audit: type=1400 audit(1722861069.522:817): avc: denied { map } for pid=9027 comm="syz.1.1073" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 456.682798][ T29] audit: type=1400 audit(1722861070.532:818): avc: denied { create } for pid=9035 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 458.407119][ T29] audit: type=1400 audit(1722861070.572:819): avc: denied { write } for pid=9035 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 458.660884][ T9047] [U]  [ 459.537503][ T9083] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 459.623974][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 460.471532][ T29] audit: type=1400 audit(1722861074.372:820): avc: denied { ioctl } for pid=9088 comm="syz.4.1095" path="socket:[25812]" dev="sockfs" ino=25812 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.163912][ T29] audit: type=1326 audit(1722861077.062:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.4.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a15779f9 code=0x0 [ 463.268664][ T29] audit: type=1326 audit(1722861077.162:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.4.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a15779f9 code=0x0 [ 463.495445][ T29] audit: type=1400 audit(1722861077.392:823): avc: denied { watch watch_reads } for pid=9114 comm="syz.3.1105" path="pipe:[25850]" dev="pipefs" ino=25850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 463.593256][ T29] audit: type=1400 audit(1722861077.402:824): avc: denied { relabelfrom } for pid=9114 comm="syz.3.1105" name="" dev="pipefs" ino=25851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 464.952375][ T29] audit: type=1804 audit(1722861078.852:825): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1109" name="/newroot/106/bus/bus" dev="overlay" ino=582 res=1 errno=0 [ 477.262633][ T9162] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 477.306272][ T9162] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1119'. [ 477.396409][ T9162] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 479.028380][ T9193] ax25_connect(): syz.3.1128 uses autobind, please contact jreuter@yaina.de [ 479.110171][ T29] audit: type=1400 audit(1722861092.922:826): avc: denied { connect } for pid=9186 comm="syz.3.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 482.070059][ T29] audit: type=1400 audit(1722861095.952:827): avc: denied { mount } for pid=9207 comm="syz.2.1133" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.091713][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.354446][ T29] audit: type=1400 audit(1722861096.252:828): avc: denied { unmount } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.424446][ T29] audit: type=1400 audit(1722861096.322:829): avc: denied { write } for pid=9225 comm="syz.4.1140" path="socket:[25414]" dev="sockfs" ino=25414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 482.427452][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.541037][ T29] audit: type=1400 audit(1722861096.422:830): avc: denied { link } for pid=9223 comm="syz.0.1139" name="#27" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 482.661311][ T9224] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 483.026422][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 483.106824][ T29] audit: type=1400 audit(1722861097.002:831): avc: denied { ioctl } for pid=9232 comm="syz.4.1143" path="socket:[25992]" dev="sockfs" ino=25992 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 483.174328][ T9236] Invalid ELF header magic: != ELF [ 483.180279][ T9234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.219500][ T29] audit: type=1400 audit(1722861097.072:832): avc: denied { module_load } for pid=9231 comm="syz.2.1142" path="/268/bus/bus" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 483.243009][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.643734][ T9248] netlink: 'syz.0.1148': attribute type 17 has an invalid length. [ 483.735133][ T9250] Driver unsupported XDP return value 0 on prog (id 228) dev N/A, expect packet loss! [ 483.858655][ T29] audit: type=1400 audit(1722861097.722:833): avc: denied { create } for pid=9240 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 484.384746][ T29] audit: type=1326 audit(1722861097.742:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.1.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x0 [ 484.413954][ T9248] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 486.057375][ T29] audit: type=1326 audit(1722861099.642:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 486.167787][ T29] audit: type=1326 audit(1722861099.642:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 486.240244][ T29] audit: type=1326 audit(1722861099.662:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33b7f76390 code=0x7ffc0000 [ 486.265236][ T29] audit: type=1326 audit(1722861099.662:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33b7f76390 code=0x7ffc0000 [ 486.299927][ T29] audit: type=1326 audit(1722861099.672:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 487.288565][ T9267] tty tty21: ldisc open failed (-12), clearing slot 20 [ 487.376518][ T29] audit: type=1326 audit(1722861099.672:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 487.402434][ T2041] pvrusb2: request_firmware fatal error with code=-110 [ 487.487181][ T2041] pvrusb2: Failure uploading firmware1 [ 487.529919][ T29] audit: type=1326 audit(1722861099.702:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 487.530019][ T2041] pvrusb2: Device initialization was not successful. [ 487.614629][ T29] audit: type=1326 audit(1722861099.702:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 487.638022][ T2041] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 487.638071][ T2041] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 487.688422][ T5276] pvrusb2: Device being rendered inoperable [ 487.760413][ T29] audit: type=1326 audit(1722861099.702:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x7ffc0000 [ 491.209711][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 491.209729][ T29] audit: type=1326 audit(1722861105.102:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.1.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b7f779f9 code=0x0 [ 491.254157][ T9314] netlink: zone id is out of range [ 491.270371][ T9314] netlink: zone id is out of range [ 491.276841][ T9314] netlink: zone id is out of range [ 491.286073][ T9314] netlink: zone id is out of range [ 491.292534][ T9314] netlink: zone id is out of range [ 491.297860][ T9314] netlink: zone id is out of range [ 491.307655][ T9314] netlink: zone id is out of range [ 491.313829][ T9314] netlink: zone id is out of range [ 491.332170][ T9314] netlink: zone id is out of range [ 491.344177][ T9314] netlink: zone id is out of range [ 492.361902][ T29] audit: type=1400 audit(1722861106.262:871): avc: denied { read write } for pid=9340 comm="syz.4.1174" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 492.551266][ T9343] VFS: could not find a valid V7 on nullb0. [ 493.277490][ T29] audit: type=1400 audit(1722861106.282:872): avc: denied { open } for pid=9340 comm="syz.4.1174" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 493.367923][ T29] audit: type=1400 audit(1722861106.302:873): avc: denied { bind } for pid=9340 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 493.473224][ T29] audit: type=1400 audit(1722861106.302:874): avc: denied { write } for pid=9340 comm="syz.4.1174" path="socket:[26220]" dev="sockfs" ino=26220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 493.827490][ T5226] Bluetooth: hci0: unexpected event 0x01 length: 13 > 1 [ 493.880444][ T29] audit: type=1400 audit(1722861107.762:875): avc: denied { create } for pid=9346 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 493.908930][ T9348] IPVS: Unknown mcast interface: syzkaller1 [ 494.701558][ T9365] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1186'. [ 494.811126][ T29] audit: type=1400 audit(1722861108.696:876): avc: denied { bind } for pid=9360 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 494.843151][ T9362] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 495.137471][ T9372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.176324][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 495.493641][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 495.541831][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 495.673756][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 495.701220][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 495.709732][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 496.055072][ T941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 496.076450][ T9385] binder: BC_ATTEMPT_ACQUIRE not supported [ 496.092535][ T9385] binder: 9384:9385 ioctl c0306201 20000140 returned -22 [ 496.267125][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 496.292137][ T941] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 496.373826][ T941] usb 2-1: config 179 has no interface number 0 [ 496.395632][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 496.458976][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 496.511145][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 496.543318][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 496.564969][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 496.589729][ T941] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 496.657488][ T941] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 496.685547][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.745505][ T9378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.007468][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.014881][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.023112][ T9371] bridge_slave_0: entered allmulticast mode [ 497.030937][ T9371] bridge_slave_0: entered promiscuous mode [ 497.043016][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.050268][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.057727][ T9371] bridge_slave_1: entered allmulticast mode [ 497.086044][ T9371] bridge_slave_1: entered promiscuous mode [ 497.363868][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.710517][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.837316][ T55] Bluetooth: hci6: command tx timeout [ 498.634063][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 498.675424][ T5499] Bluetooth: hci2: Frame reassembly failed (-84) [ 498.816316][ T5273] usb 2-1: USB disconnect, device number 17 [ 498.816320][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 498.816536][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 498.939132][ T29] audit: type=1400 audit(1722861112.795:877): avc: denied { create } for pid=9402 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 499.549680][ T9371] team0: Port device team_slave_0 added [ 499.570746][ T9371] team0: Port device team_slave_1 added [ 499.787285][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.803259][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.840512][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.872916][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.899006][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.006713][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.161205][ T9371] hsr_slave_0: entered promiscuous mode [ 500.182286][ T9371] hsr_slave_1: entered promiscuous mode [ 500.199414][ T9371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.215926][ T9371] Cannot create hsr debugfs directory [ 500.236436][ T5226] Bluetooth: hci6: command tx timeout [ 500.286333][ T29] audit: type=1400 audit(1722861114.125:878): avc: denied { watch_sb } for pid=9420 comm="syz.4.1199" path="/124/blkio.bfq.sectors_recursive" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 500.721316][ T55] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 501.979018][ T29] audit: type=1400 audit(1722861115.813:879): avc: denied { accept } for pid=9431 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 502.054904][ T29] audit: type=1400 audit(1722861115.883:880): avc: denied { shutdown } for pid=9431 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 502.077424][ T9371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.137979][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1204'. [ 502.456862][ T29] audit: type=1400 audit(1722861116.280:881): avc: denied { map } for pid=9437 comm="syz.0.1205" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 502.483666][ T5226] Bluetooth: hci6: command tx timeout [ 502.489568][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.511470][ T9371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.523745][ T29] audit: type=1400 audit(1722861116.280:882): avc: denied { execute } for pid=9437 comm="syz.0.1205" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 504.989151][ T30] INFO: task syz-executor:7436 blocked for more than 143 seconds. [ 504.997144][ T30] Not tainted 6.11.0-rc2-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 505.331897][ T5226] Bluetooth: hci6: command tx timeout [ 505.344731][ T29] audit: type=1400 audit(1722861119.151:883): avc: denied { write } for pid=5205 comm="syz-executor" path="pipe:[3038]" dev="pipefs" ino=3038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 505.347246][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.511593][ T30] task:syz-executor state:D stack:23744 pid:7436 tgid:7436 ppid:1 flags:0x00004004 [ 505.603095][ T30] Call Trace: [ 505.606519][ T30] [ 505.609483][ T30] __schedule+0xe37/0x5490 [ 505.663481][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 505.670210][ T30] ? __pfx___schedule+0x10/0x10 [ 505.703982][ T30] ? schedule+0x298/0x350 [ 505.708374][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.734509][ T30] ? mark_held_locks+0x9f/0xe0 [ 505.739348][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 505.753726][ T30] ? prepare_to_wait_event+0x94/0x690 [ 505.759161][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.773959][ T30] schedule+0xe7/0x350 [ 505.778088][ T30] fuse_wait_aborted+0x1b2/0x230 [ 505.783059][ T30] ? __pfx_fuse_wait_aborted+0x10/0x10 [ 505.814196][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.819290][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 505.856788][ T30] ? down_write+0x14e/0x200 [ 505.861365][ T30] fuse_conn_destroy+0x9c/0x290 [ 505.866398][ T30] fuse_kill_sb_anon+0x22a/0x2f0 [ 505.871401][ T30] deactivate_locked_super+0xbe/0x1a0 [ 505.882566][ T30] deactivate_super+0xde/0x100 [ 505.894653][ T30] cleanup_mnt+0x222/0x450 [ 505.899128][ T30] task_work_run+0x14e/0x250 [ 505.903748][ T30] ? __pfx_task_work_run+0x10/0x10 [ 505.909820][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 505.915536][ T30] do_syscall_64+0xda/0x250 [ 505.920075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.926174][ T30] RIP: 0033:0x7ff2d8d78d27 [ 505.930625][ T30] RSP: 002b:00007fff88a3fec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 505.939373][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2d8d78d27 [ 505.950417][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff88a3ff80 [ 505.964274][ T30] RBP: 00007fff88a3ff80 R08: 0000000000000000 R09: 0000000000000000 [ 505.975510][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff88a41000 [ 505.993727][ T30] R13: 00007ff2d8de578c R14: 0000000000053d7e R15: 00007fff88a41040 [ 506.004115][ T30] [ 506.013266][ T30] [ 506.013266][ T30] Showing all locks held in the system: [ 506.029179][ T30] 1 lock held by khungtaskd/30: [ 506.034079][ T30] #0: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 506.044672][ T30] 2 locks held by getty/4971: [ 506.053083][ T30] #0: ffff88802fd090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 506.083721][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 506.106061][ T30] 1 lock held by syz-executor/5227: [ 506.111315][ T30] #0: ffff8880242080e0 (&type->s_umount_key#74){++++}-{3:3}, at: deactivate_super+0xd6/0x100 [ 506.136365][ T30] 2 locks held by kworker/1:5/5273: [ 506.141606][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 506.166535][ T30] #1: ffffc900036bfd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 506.176295][ T30] 3 locks held by kworker/1:7/5275: [ 506.215015][ T30] 1 lock held by syz-executor/7436: [ 506.220900][ T30] #0: ffff888053b480e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100 [ 506.254596][ T30] 2 locks held by syz-executor/7438: [ 506.267404][ T30] #0: ffff88805a860d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 506.296046][ T30] #1: ffff88805a860078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 506.317446][ T30] 7 locks held by syz-executor/9371: [ 506.322798][ T30] #0: ffff88802ff6a420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 506.347772][ T30] #1: ffff8880653f7088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 506.368516][ T30] #2: ffff8880235924b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 506.388030][ T30] #3: ffffffff8efb9748 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 506.408428][ T30] #4: ffff88806b4080e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 506.423433][ T30] #5: ffff88806b409250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 506.433665][ T30] #6: ffffffff8fa20ee8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0 [ 506.443183][ T30] 3 locks held by syz.4.1203/9433: [ 506.459015][ T30] #0: ffff88807d5bdc48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xeb/0x180 [ 506.468228][ T30] #1: ffff88801d37c420 (sb_writers#13){.+.+}-{0:0}, at: do_writev+0x137/0x370 [ 506.479559][ T30] #2: ffff88805524df88 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: fuse_file_write_iter+0x379/0x8a0 [ 506.491107][ T30] 3 locks held by syz.0.1205/9437: [ 506.496907][ T30] #0: ffff88805a938d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 506.506631][ T30] #1: ffff88805a938078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 506.516396][ T30] #2: ffffffff8fc85668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 506.526923][ T30] 1 lock held by dhcpcd/9446: [ 506.531830][ T30] #0: ffff88805503b208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 506.542506][ T30] 2 locks held by dhcpcd/9447: [ 506.547256][ T30] #0: ffff888011f91408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 506.558178][ T30] #1: ffffffff8ddc1438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 506.568297][ T30] 2 locks held by dhcpcd/9449: [ 506.573229][ T30] #0: ffff888011f97a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 506.586894][ T30] #1: ffffffff8ddc1438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 506.599535][ T30] 1 lock held by dhcpcd/9450: [ 506.604241][ T30] #0: ffff888011f93208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 506.615657][ T30] [ 506.618552][ T30] ============================================= [ 506.618552][ T30] [ 506.627368][ T30] NMI backtrace for cpu 0 [ 506.631716][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller #0 [ 506.640495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 506.650568][ T30] Call Trace: [ 506.653869][ T30] [ 506.656817][ T30] dump_stack_lvl+0x116/0x1f0 [ 506.661642][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 506.667141][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.673157][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 506.679175][ T30] watchdog+0xf4e/0x1280 [ 506.683454][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.688155][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.693371][ T30] ? __kthread_parkme+0x148/0x220 [ 506.698396][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.703075][ T30] kthread+0x2c1/0x3a0 [ 506.707143][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.712336][ T30] ? __pfx_kthread+0x10/0x10 [ 506.716917][ T30] ret_from_fork+0x45/0x80 [ 506.721332][ T30] ? __pfx_kthread+0x10/0x10 [ 506.725931][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.730703][ T30] [ 506.735476][ T30] Sending NMI from CPU 0 to CPUs 1: [ 506.741190][ C1] NMI backtrace for cpu 1 [ 506.741203][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.11.0-rc2-syzkaller #0 [ 506.741232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 506.741246][ C1] RIP: 0010:unwind_next_frame+0x14f/0x23a0 [ 506.741278][ C1] Code: 3b 0c 00 00 45 0f b7 a4 24 88 00 00 00 31 ff 41 83 e4 03 44 89 e6 e8 f0 97 4d 00 66 45 85 e4 0f 85 d9 02 00 00 e8 11 9d 4d 00 <4c> 8d 7b 35 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 0f [ 506.741301][ C1] RSP: 0018:ffffc900001e7830 EFLAGS: 00000246 [ 506.741321][ C1] RAX: 0000000000000000 RBX: ffffc900001e78b0 RCX: 1ffffffff29e1824 [ 506.741338][ C1] RDX: ffff8880186b0000 RSI: ffffffff813ce04f RDI: 0000000000000001 [ 506.741354][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 506.741369][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 506.741384][ C1] R13: ffffffff817613b0 R14: ffffc900001e7970 R15: ffff8880186b0000 [ 506.741402][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 506.741427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.741444][ C1] CR2: 00005623051c0680 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 506.741461][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 506.741476][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 506.741492][ C1] Call Trace: [ 506.741499][ C1] [ 506.741507][ C1] ? show_regs+0x8c/0xa0 [ 506.741544][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 506.741575][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 506.741610][ C1] ? nmi_handle+0x1a9/0x5c0 [ 506.741632][ C1] ? unwind_next_frame+0x14f/0x23a0 [ 506.741657][ C1] ? default_do_nmi+0x6a/0x160 [ 506.741694][ C1] ? exc_nmi+0x170/0x1e0 [ 506.741730][ C1] ? end_repeat_nmi+0xf/0x53 [ 506.741766][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.741795][ C1] ? unwind_next_frame+0x14f/0x23a0 [ 506.741819][ C1] ? unwind_next_frame+0x14f/0x23a0 [ 506.741843][ C1] ? unwind_next_frame+0x14f/0x23a0 [ 506.741867][ C1] ? unwind_next_frame+0x14f/0x23a0 [ 506.741897][ C1] [ 506.741904][ C1] [ 506.741912][ C1] ? smpboot_thread_fn+0x661/0xa10 [ 506.741950][ C1] ? smpboot_thread_fn+0x661/0xa10 [ 506.741988][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.742014][ C1] arch_stack_walk+0x100/0x170 [ 506.742043][ C1] ? smpboot_thread_fn+0x661/0xa10 [ 506.742082][ C1] ? rcu_core+0x828/0x16b0 [ 506.742111][ C1] stack_trace_save+0x95/0xd0 [ 506.742135][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 506.742162][ C1] kasan_save_stack+0x33/0x60 [ 506.742190][ C1] ? kasan_save_stack+0x33/0x60 [ 506.742216][ C1] ? kasan_save_track+0x14/0x30 [ 506.742242][ C1] ? kasan_save_free_info+0x3b/0x60 [ 506.742280][ C1] ? poison_slab_object+0xf7/0x160 [ 506.742307][ C1] ? __kasan_slab_free+0x32/0x50 [ 506.742335][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 506.742362][ C1] ? rcu_core+0x828/0x16b0 [ 506.742390][ C1] ? handle_softirqs+0x216/0x8f0 [ 506.742426][ C1] ? run_ksoftirqd+0x3a/0x60 [ 506.742460][ C1] ? smpboot_thread_fn+0x661/0xa10 [ 506.742510][ C1] kasan_save_track+0x14/0x30 [ 506.742537][ C1] kasan_save_free_info+0x3b/0x60 [ 506.742574][ C1] poison_slab_object+0xf7/0x160 [ 506.742602][ C1] __kasan_slab_free+0x32/0x50 [ 506.742631][ C1] kmem_cache_free+0x12f/0x3a0 [ 506.742658][ C1] ? rcu_core+0x828/0x16b0 [ 506.742686][ C1] ? rcu_core+0x826/0x16b0 [ 506.742715][ C1] rcu_core+0x828/0x16b0 [ 506.742746][ C1] ? __pfx_rcu_core+0x10/0x10 [ 506.742778][ C1] handle_softirqs+0x216/0x8f0 [ 506.742817][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 506.742854][ C1] ? rcu_is_watching+0x12/0xc0 [ 506.742889][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 506.742925][ C1] ? smpboot_thread_fn+0x59d/0xa10 [ 506.742963][ C1] run_ksoftirqd+0x3a/0x60 [ 506.742998][ C1] smpboot_thread_fn+0x661/0xa10 [ 506.743035][ C1] ? __kthread_parkme+0x148/0x220 [ 506.743073][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 506.743112][ C1] kthread+0x2c1/0x3a0 [ 506.743132][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.743158][ C1] ? __pfx_kthread+0x10/0x10 [ 506.743180][ C1] ret_from_fork+0x45/0x80 [ 506.743216][ C1] ? __pfx_kthread+0x10/0x10 [ 506.743237][ C1] ret_from_fork_asm+0x1a/0x30 [ 506.743276][ C1] [ 506.748650][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 507.177561][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller #0 [ 507.186345][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 507.196398][ T30] Call Trace: [ 507.199673][ T30] [ 507.202621][ T30] dump_stack_lvl+0x3d/0x1f0 [ 507.207229][ T30] panic+0x6f5/0x7a0 [ 507.211126][ T30] ? __pfx_panic+0x10/0x10 [ 507.215566][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 507.220984][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 507.226985][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 507.232368][ T30] ? watchdog+0xd8a/0x1280 [ 507.236816][ T30] ? watchdog+0xd7d/0x1280 [ 507.241252][ T30] watchdog+0xd9b/0x1280 [ 507.245508][ T30] ? __pfx_watchdog+0x10/0x10 [ 507.250193][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.255409][ T30] ? __kthread_parkme+0x148/0x220 [ 507.260458][ T30] ? __pfx_watchdog+0x10/0x10 [ 507.265147][ T30] kthread+0x2c1/0x3a0 [ 507.269216][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.274418][ T30] ? __pfx_kthread+0x10/0x10 [ 507.279006][ T30] ret_from_fork+0x45/0x80 [ 507.283430][ T30] ? __pfx_kthread+0x10/0x10 [ 507.288015][ T30] ret_from_fork_asm+0x1a/0x30 [ 507.292789][ T30] [ 507.296062][ T30] Kernel Offset: disabled [ 507.300373][ T30] Rebooting in 86400 seconds..