last executing test programs: 2m8.512850093s ago: executing program 0 (id=862): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2m8.366746378s ago: executing program 0 (id=865): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83a", 0x18, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 2m8.293416936s ago: executing program 0 (id=867): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) unshare(0x2a020400) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2m8.1354358s ago: executing program 0 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x802, 0x0) 2m8.068842572s ago: executing program 0 (id=871): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r2, 0x0, r1}) 2m7.778771652s ago: executing program 0 (id=872): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x10, 0x0, 0x0, 'queue0\x00'}) 2m7.556135391s ago: executing program 32 (id=872): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x10, 0x0, 0x0, 'queue0\x00'}) 1m10.771567385s ago: executing program 3 (id=1994): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0}, 0x94) 1m10.723728701s ago: executing program 3 (id=1996): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x800, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x3, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x74) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 1m10.643305265s ago: executing program 3 (id=1999): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m10.535305471s ago: executing program 3 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast2}, {@remote}, {@loopback}, {@private=0xa010101, 0x8}, {@remote, 0x1}, {@multicast2, 0x5}, {@empty, 0xb}]}, @rr={0x7, 0x3, 0xf7}]}}}}}}}, 0x0) 1m10.509737669s ago: executing program 3 (id=2003): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1m10.434664204s ago: executing program 3 (id=2005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) set_mempolicy(0x4005, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m5.605616888s ago: executing program 2 (id=2075): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0xd, 0x4000ffc, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1m5.537260546s ago: executing program 2 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m5.447289325s ago: executing program 2 (id=2077): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1m5.438117265s ago: executing program 2 (id=2078): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m5.383368116s ago: executing program 2 (id=2079): ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 1m5.106658361s ago: executing program 2 (id=2081): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m4.842236987s ago: executing program 33 (id=2081): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 55.39646717s ago: executing program 34 (id=2005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) set_mempolicy(0x4005, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.768782969s ago: executing program 1 (id=2994): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 4.595677979s ago: executing program 1 (id=2998): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 4.074563261s ago: executing program 5 (id=3006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001701000003000000", @ANYBLOB="e071"], 0x18, 0x4}], 0x1, 0x0) 3.875733348s ago: executing program 5 (id=3009): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 3.62110579s ago: executing program 1 (id=3013): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.57598139s ago: executing program 5 (id=3015): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x800) read$char_usb(r1, 0x0, 0x0) 3.439711388s ago: executing program 1 (id=3018): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 3.383435096s ago: executing program 7 (id=3019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa0f88a80a0081004f0008004b0000740000e000bb2f9078ac1e0501e0000002071bcee0000002ffffffffe0000001ffffffff640101020a0101"], 0x8a) 2.980149152s ago: executing program 7 (id=3021): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x8, @empty, 0x8}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90) 2.680181058s ago: executing program 7 (id=3024): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.46674605s ago: executing program 7 (id=3025): creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r1, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.446498388s ago: executing program 5 (id=3026): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2543, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.420136492s ago: executing program 1 (id=3027): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0), 0x4) 2.243037134s ago: executing program 1 (id=3029): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 2.043268771s ago: executing program 6 (id=3030): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x4, 0x3ff, 0x101, 0x0, 0xe}) 2.005240537s ago: executing program 7 (id=3031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) utime(0x0, 0x0) 1.947292584s ago: executing program 5 (id=3032): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000340)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0xff64000) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x10) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 1.929524366s ago: executing program 7 (id=3033): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0101000000000200000006241a0000000905810400020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x209, 0x4, 0x1000, 0x1, 0x10, 0x10, 0x10, 0x14, 0x2, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.879272316s ago: executing program 5 (id=3034): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.811524405s ago: executing program 6 (id=3035): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 1.754131359s ago: executing program 6 (id=3037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.576280711s ago: executing program 6 (id=3039): r0 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@isdn}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 1.442115943s ago: executing program 6 (id=3041): connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc070002596105052406000105240f"], 0x0) socketpair(0x26, 0x3, 0xfffffffc, 0x0) 1.154280981s ago: executing program 4 (id=3045): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {0xfff2, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.097348733s ago: executing program 4 (id=3046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x640, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 203.318164ms ago: executing program 4 (id=3047): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 153.321674ms ago: executing program 4 (id=3048): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x6, 0xffbc}, 0x8) 109.424087ms ago: executing program 4 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000140)="999a", 0x2}, {&(0x7f0000000040)="2655ab0cd5", 0x5}], 0x3) 16.144519ms ago: executing program 4 (id=3050): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) 0s ago: executing program 6 (id=3051): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) close(0x3) kernel console output (not intermixed with test programs): T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.866929][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.885278][T10071] syzkaller1: entered promiscuous mode [ 175.890880][T10071] syzkaller1: entered allmulticast mode [ 175.899203][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.918949][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.960402][ T841] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.978635][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.987821][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.997723][ T841] usb 2-1: USB disconnect, device number 19 [ 176.005849][ T841] usblp0: removed [ 176.155390][T10091] input: syz1 as /devices/virtual/input/input27 [ 176.181031][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 176.313192][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 176.313207][ T30] audit: type=1400 audit(1754065440.485:535): avc: denied { lock } for pid=10098 comm="syz.3.1805" path="socket:[29569]" dev="sockfs" ino=29569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 176.355726][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.367068][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.378252][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.395108][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.417579][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.448849][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.469865][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.488851][ T10] usb 3-1: Product: syz [ 176.497494][ T10] usb 3-1: Manufacturer: syz [ 176.508079][ T10] usb 3-1: SerialNumber: syz [ 176.578893][ T30] audit: type=1326 audit(1754065440.745:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.5.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ee78eb69 code=0x0 [ 176.636633][ T30] audit: type=1326 audit(1754065440.805:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.673237][ T30] audit: type=1326 audit(1754065440.805:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.718554][ T30] audit: type=1326 audit(1754065440.805:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.746926][ T30] audit: type=1326 audit(1754065440.805:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.774137][ T30] audit: type=1326 audit(1754065440.805:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.799446][ T30] audit: type=1326 audit(1754065440.805:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.826372][ T30] audit: type=1326 audit(1754065440.805:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 176.850520][ T30] audit: type=1326 audit(1754065440.805:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c638eb69 code=0x7ffc0000 [ 177.240063][T10145] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 177.249678][T10145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.257324][T10145] IPv6: NLM_F_CREATE should be set when creating new route [ 177.264590][T10145] IPv6: NLM_F_CREATE should be set when creating new route [ 177.282502][T10145] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 177.290728][T10145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.340344][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 177.405498][T10153] netlink: 'syz.5.1829': attribute type 12 has an invalid length. [ 177.550807][ T10] cdc_mbim 3-1:1.0: bind() failure [ 177.565414][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 177.582709][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 177.604004][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 177.631242][ T10] usb 3-1: USB disconnect, device number 22 [ 177.701009][T10061] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 177.874034][T10061] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.890700][T10061] usb 4-1: config 0 has no interface number 0 [ 177.900415][T10061] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 177.922127][T10061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.946543][T10061] usb 4-1: config 0 descriptor?? [ 177.966531][T10061] usb 4-1: selecting invalid altsetting 1 [ 177.976970][T10061] dvb_ttusb_budget: ttusb_init_controller: error [ 177.997487][T10061] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.195341][T10061] DVB: Unable to find symbol cx22700_attach() [ 178.265105][T10061] DVB: Unable to find symbol tda10046_attach() [ 178.272646][T10061] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 178.288500][T10061] usb 4-1: USB disconnect, device number 17 [ 178.704216][T10209] overlayfs: upper fs does not support tmpfile. [ 179.204052][T10232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.520315][T10242] netlink: 'syz.3.1868': attribute type 12 has an invalid length. [ 179.528451][T10242] netlink: 'syz.3.1868': attribute type 29 has an invalid length. [ 179.537086][T10242] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1868'. [ 179.547985][T10242] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1868'. [ 179.895192][T10269] kvm: user requested TSC rate below hardware speed [ 180.701154][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 180.851741][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 180.860342][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 180.875980][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.884346][ T24] usb 5-1: Product: syz [ 180.888704][ T24] usb 5-1: Manufacturer: syz [ 180.896975][ T24] usb 5-1: SerialNumber: syz [ 180.904386][ T24] usb 5-1: config 0 descriptor?? [ 180.916970][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 181.320845][ T24] gspca_se401: ExtraFeatures: 255 [ 181.326301][ T24] gspca_se401: Frame size: 2314x0 bayer [ 181.331984][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 181.338018][ T24] gspca_se401: Frame size: 0x47872 bayer [ 181.343865][T10064] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 181.351878][ T24] gspca_se401: Frame size: 8x0 bayer [ 181.357838][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 181.367077][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 181.374094][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 181.384967][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 181.401015][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 181.434946][T10349] infiniband syz2: set down [ 181.440040][T10349] infiniband syz2: added syzkaller0 [ 181.470787][T10349] RDS/IB: syz2: added [ 181.475694][T10349] smc: adding ib device syz2 with port count 1 [ 181.482133][T10349] smc: ib device syz2 port 1 has pnetid [ 181.524887][ T24] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 181.540686][T10064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.557876][T10064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.561324][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 181.577836][ T10] usb 4-1: config 5 has an invalid interface number: 132 but max is 0 [ 181.587898][ T10] usb 4-1: config 5 has no interface number 0 [ 181.589336][T10064] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 181.597366][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0080, bcdDevice=b5.77 [ 181.607037][T10064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.624019][ T24] usb 5-1: USB disconnect, device number 20 [ 181.631152][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.639212][ T10] usb 4-1: Product: syz [ 181.643468][ T10] usb 4-1: Manufacturer: syz [ 181.648069][ T10] usb 4-1: SerialNumber: syz [ 181.663020][T10064] usb 2-1: config 0 descriptor?? [ 181.883284][ T24] usb 4-1: USB disconnect, device number 18 [ 182.117346][T10064] sony 0003:054C:0268.0017: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 182.144385][T10064] sony 0003:054C:0268.0017: failed to claim input [ 182.219474][T10354] use of bytesused == 0 is deprecated and will be removed in the future, [ 182.235296][T10354] use the actual size instead. [ 182.318619][ T10] usb 2-1: USB disconnect, device number 20 [ 182.379128][ T12] smc: removing ib device syz2 [ 182.896840][T10379] netlink: 'syz.1.1928': attribute type 10 has an invalid length. [ 182.931068][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 183.108202][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 183.113951][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 183.134016][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.186288][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.216999][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.239208][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.258571][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.274117][T10385] ip6gretap0: entered promiscuous mode [ 183.280092][T10385] macsec0: entered promiscuous mode [ 183.298454][T10385] macsec0: entered allmulticast mode [ 183.304288][T10385] ip6gretap0: entered allmulticast mode [ 183.310887][ T10] usb 4-1: Product: syz [ 183.321149][ T10] usb 4-1: Manufacturer: syz [ 183.336335][ T10] usb 4-1: SerialNumber: syz [ 183.343416][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 183.350212][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.377790][ T9] usb 3-1: config 0 has no interface number 0 [ 183.401217][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.410546][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.420377][ T9] usb 3-1: Product: syz [ 183.425743][ T9] usb 3-1: Manufacturer: syz [ 183.430859][ T9] usb 3-1: SerialNumber: syz [ 183.443279][ T9] usb 3-1: config 0 descriptor?? [ 183.454046][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.522328][T10389] vlan2: entered allmulticast mode [ 183.527541][T10389] bond0: entered allmulticast mode [ 183.533096][T10389] bond_slave_0: entered allmulticast mode [ 183.538992][T10389] bond_slave_1: entered allmulticast mode [ 183.660843][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.673938][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 183.792333][ T10] usb 4-1: 0:2 : does not exist [ 183.878556][T10403] input: syz1 as /devices/virtual/input/input29 [ 183.913126][T10403] input: failed to attach handler leds to device input29, error: -6 [ 183.924190][T10405] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 184.056342][T10407] loop8: detected capacity change from 0 to 8 [ 184.072709][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.085027][T10407] Dev loop8: unable to read RDB block 8 [ 184.086824][ T9] usb 3-1: USB disconnect, device number 23 [ 184.090623][T10407] loop8: unable to read partition table [ 184.090796][T10407] loop8: partition table beyond EOD, [ 184.106804][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.106942][T10407] truncated [ 184.115903][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.128442][T10407] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 184.139360][ T9] quatech2 3-1:0.51: device disconnected [ 184.423853][ T10] usb 4-1: USB disconnect, device number 19 [ 184.461506][ T841] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 184.556352][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 184.556373][ T30] audit: type=1400 audit(1754065448.725:556): avc: denied { validate_trans } for pid=10421 comm="syz.4.1948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 184.623977][ T841] usb 2-1: Using ep0 maxpacket: 16 [ 184.635994][ T841] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.647299][T10426] trusted_key: syz.4.1950 sent an empty control message without MSG_MORE. [ 184.656680][ T841] usb 2-1: config 0 has no interface number 0 [ 184.664730][ T841] usb 2-1: too many endpoints for config 0 interface 1 altsetting 201: 101, using maximum allowed: 30 [ 184.686096][ T841] usb 2-1: config 0 interface 1 altsetting 201 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 184.715198][ T841] usb 2-1: config 0 interface 1 has no altsetting 0 [ 184.716733][ T30] audit: type=1400 audit(1754065448.885:557): avc: denied { getattr } for pid=10427 comm="syz.2.1951" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.726967][ T841] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 184.776955][ T841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.786193][ T841] usb 2-1: Product: syz [ 184.790987][ T841] usb 2-1: Manufacturer: syz [ 184.795587][ T841] usb 2-1: SerialNumber: syz [ 184.803340][ T841] usb 2-1: config 0 descriptor?? [ 185.047172][ T841] hub 2-1:0.1: bad descriptor, ignoring hub [ 185.059499][ T841] hub 2-1:0.1: probe with driver hub failed with error -5 [ 185.066022][T10444] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1957'. [ 185.080080][ T841] usb 2-1: selecting invalid altsetting 1 [ 185.093964][ T841] snd-usb-us122l 2-1:0.1: usb_set_interface error [ 185.111242][ T841] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 185.152926][ T841] usb 2-1: USB disconnect, device number 21 [ 185.737933][T10471] overlay: filesystem on ./file0 is read-only [ 185.813171][ T30] audit: type=1400 audit(1754065449.985:558): avc: denied { write } for pid=10474 comm="syz.1.1973" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.836334][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.852125][ T30] audit: type=1400 audit(1754065450.025:559): avc: denied { remount } for pid=10472 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 185.954830][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 186.131338][T10067] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.179027][ T6127] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.198668][ T6127] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.230209][ T30] audit: type=1400 audit(1754065450.395:560): avc: denied { accept } for pid=10492 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.230962][ T6127] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.296893][T10067] usb 5-1: Using ep0 maxpacket: 32 [ 186.310070][T10067] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.320374][ T6127] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.330737][T10067] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.351033][T10067] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.383474][T10067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.396553][T10067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.432559][T10067] usb 5-1: Product: syz [ 186.446993][T10067] usb 5-1: Manufacturer: syz [ 186.457101][T10067] usb 5-1: SerialNumber: syz [ 186.470775][T10067] cdc_ncm 5-1:1.0: skipping garbage [ 186.480121][T10067] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 186.496487][T10067] cdc_ncm 5-1:1.0: bind() failure [ 186.542635][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 186.673852][T10067] usb 5-1: USB disconnect, device number 21 [ 186.831330][T10061] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 186.991054][T10061] usb 2-1: Using ep0 maxpacket: 8 [ 187.003568][T10061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 187.021023][T10061] usb 2-1: config 1 has no interface number 0 [ 187.031876][T10061] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.043976][T10061] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 187.074628][ T30] audit: type=1400 audit(1754065451.245:561): avc: denied { setattr } for pid=5837 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.090549][T10061] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 187.131200][ T30] audit: type=1400 audit(1754065451.295:562): avc: denied { setopt } for pid=10540 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.141045][T10061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.188477][T10061] usb 2-1: Product: syz [ 187.202380][T10061] usb 2-1: Manufacturer: syz [ 187.207009][T10061] usb 2-1: SerialNumber: syz [ 187.564445][T10561] ======================================================= [ 187.564445][T10561] WARNING: The mand mount option has been deprecated and [ 187.564445][T10561] and is ignored by this kernel. Remove the mand [ 187.564445][T10561] option from the mount to silence this warning. [ 187.564445][T10561] ======================================================= [ 187.570416][ T30] audit: type=1400 audit(1754065451.735:563): avc: denied { remount } for pid=10558 comm="syz.2.2014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.619686][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.834102][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2018'. [ 187.969712][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.977598][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.984640][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.069343][T10061] cdc_ncm 2-1:1.1: bind() failure [ 188.316349][T10067] usb 2-1: USB disconnect, device number 22 [ 188.389840][T10594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.537694][T10600] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 188.561722][T10600] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2027'. [ 188.778306][T10608] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2030'. [ 189.151608][T10067] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 189.162542][T10620] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 189.396022][T10067] usb 2-1: Using ep0 maxpacket: 8 [ 189.417563][T10067] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 189.426370][T10067] usb 2-1: config 0 has no interface number 0 [ 189.433725][T10067] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.453251][T10067] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 189.469835][T10067] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.485808][T10067] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.512412][T10067] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 189.524705][T10067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.541598][T10067] usb 2-1: Product: syz [ 189.545787][T10067] usb 2-1: Manufacturer: syz [ 189.550384][T10067] usb 2-1: SerialNumber: syz [ 189.557792][T10067] usb 2-1: config 0 descriptor?? [ 189.769982][T10067] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 189.976303][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.991432][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 189.994965][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.003397][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 190.029087][T10067] usb 2-1: USB disconnect, device number 23 [ 190.711083][ T841] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.889845][ T841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.911694][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.941416][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 190.966205][ T841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.002004][ T841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.027273][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.050231][ T841] usb 5-1: config 0 descriptor?? [ 191.481188][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.495995][ T841] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.503373][ T30] audit: type=1400 audit(1754065455.675:564): avc: denied { create } for pid=10696 comm="syz.2.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.531167][T10067] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 191.567151][ T30] audit: type=1400 audit(1754065455.715:565): avc: denied { write } for pid=10696 comm="syz.2.2071" path="socket:[33967]" dev="sockfs" ino=33967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.591668][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.631624][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 191.644800][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 191.655599][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.675525][ T24] usb 6-1: Product: syz [ 191.700995][T10067] usb 2-1: Using ep0 maxpacket: 8 [ 191.706190][ T24] usb 6-1: Manufacturer: syz [ 191.710799][ T24] usb 6-1: SerialNumber: syz [ 191.729555][T10067] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 191.742868][T10067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.751684][ T24] usb 6-1: config 0 descriptor?? [ 191.761345][T10067] usb 2-1: Product: syz [ 191.767513][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 191.775476][T10067] usb 2-1: Manufacturer: syz [ 191.780096][T10067] usb 2-1: SerialNumber: syz [ 191.786859][ T5907] usb 5-1: USB disconnect, device number 22 [ 191.805136][T10067] usb 2-1: config 0 descriptor?? [ 191.813237][T10067] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 191.934244][T10705] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.943431][T10705] tipc: Enabled bearer , priority 10 [ 192.071147][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.341225][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.345520][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 192.429514][T10067] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 192.453946][T10067] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 192.486666][T10067] usb 2-1: USB disconnect, device number 24 [ 192.786374][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 192.805114][ T24] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 192.828076][ T24] usb 6-1: USB disconnect, device number 8 [ 192.865183][ T6136] bridge_slave_1: left allmulticast mode [ 192.871075][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.891109][ T6136] bridge_slave_1: left promiscuous mode [ 192.898534][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.937857][ T6136] bridge_slave_0: left allmulticast mode [ 192.949337][ T6136] bridge_slave_0: left promiscuous mode [ 192.961103][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.150265][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.173633][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.186203][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.212527][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.230242][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.358930][ T30] audit: type=1400 audit(1754065457.525:566): avc: denied { module_request } for pid=10731 comm="syz.1.2090" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 193.530996][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 193.697343][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 193.708842][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.723132][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.732405][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.740466][ T10] usb 5-1: SerialNumber: syz [ 193.740896][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.755695][T10730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.766429][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.766674][ T10] usb 5-1: bad CDC descriptors [ 193.784966][ T6136] bond0 (unregistering): Released all slaves [ 193.901090][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.925554][ T6136] tipc: Disabling bearer [ 193.933617][ T6136] tipc: Disabling bearer [ 193.971107][ T6136] tipc: Left network mode [ 193.999612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.011066][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.060308][T10747] openvswitch: netlink: Missing key (keys=40, expected=80) [ 194.075696][T10061] usb 5-1: USB disconnect, device number 23 [ 194.244719][T10724] chnl_net:caif_netlink_parms(): no params data found [ 194.358583][ T6136] hsr_slave_0: left promiscuous mode [ 194.378433][ T6136] hsr_slave_1: left promiscuous mode [ 194.384650][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.394696][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.536064][T10765] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2101'. [ 194.855795][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 194.911348][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 195.261683][ T5829] Bluetooth: hci3: command tx timeout [ 195.460792][T10763] netlink: 'syz.1.2101': attribute type 29 has an invalid length. [ 195.492704][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 195.569921][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.578501][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.591800][T10724] bridge_slave_0: entered allmulticast mode [ 195.599177][T10724] bridge_slave_0: entered promiscuous mode [ 195.638259][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.660279][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.678266][T10724] bridge_slave_1: entered allmulticast mode [ 195.690330][T10724] bridge_slave_1: entered promiscuous mode [ 195.696918][T10783] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 195.699744][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.724066][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.746627][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.761661][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 195.770820][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.809083][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.824040][ T24] usb 6-1: config 0 descriptor?? [ 195.837507][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.917157][T10724] team0: Port device team_slave_0 added [ 195.933984][T10724] team0: Port device team_slave_1 added [ 196.019103][ T6136] IPVS: stop unused estimator thread 0... [ 196.062572][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 196.068711][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 196.080041][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.088897][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.115111][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.134421][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.141514][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.168836][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.248698][ T24] wacom 0003:056A:0010.0019: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 196.282535][ T30] audit: type=1400 audit(1754065460.455:567): avc: denied { connect } for pid=10798 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.312863][ T24] wacom 0003:056A:0010.0019: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 196.330180][T10724] hsr_slave_0: entered promiscuous mode [ 196.337144][ T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0019/input/input31 [ 196.341719][T10724] hsr_slave_1: entered promiscuous mode [ 196.377327][T10724] debugfs: 'hsr0' already exists in 'hsr' [ 196.421995][T10724] Cannot create hsr debugfs directory [ 196.486164][ T10] usb 6-1: USB disconnect, device number 9 [ 196.952983][T10724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.980863][T10724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.003955][T10724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.045571][T10724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.245565][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.325429][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.344750][ T5839] Bluetooth: hci3: command tx timeout [ 197.365214][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.372339][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.451417][ T30] audit: type=1400 audit(1754065461.605:568): avc: denied { create } for pid=10835 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 197.485762][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.492914][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.531686][ T30] audit: type=1400 audit(1754065461.605:569): avc: denied { setopt } for pid=10835 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 197.699176][T10842] netlink: 'syz.5.2130': attribute type 11 has an invalid length. [ 197.864496][ T30] audit: type=1400 audit(1754065462.025:570): avc: denied { execute } for pid=10846 comm="syz.1.2132" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.034305][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.344474][ T5907] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 198.516026][ T5907] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.548247][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.569007][ T30] audit: type=1800 audit(1754065462.735:571): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2137" name="file1" dev="tmpfs" ino=1297 res=0 errno=0 [ 198.610962][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.620734][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.672771][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.686212][ T5907] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.711037][ T5907] usb 2-1: Manufacturer: syz [ 198.717824][ T5907] usb 2-1: config 0 descriptor?? [ 198.830391][T10724] veth0_vlan: entered promiscuous mode [ 198.854900][T10724] veth1_vlan: entered promiscuous mode [ 198.919555][T10724] veth0_macvtap: entered promiscuous mode [ 198.949107][T10724] veth1_macvtap: entered promiscuous mode [ 198.994764][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.031635][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.046847][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.073706][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.105842][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.121355][ T6146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.166967][ T5907] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 199.219601][ T5907] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 199.290865][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.309200][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.378431][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.410356][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.423138][ T5839] Bluetooth: hci3: command tx timeout [ 199.560758][ T841] usb 2-1: USB disconnect, device number 25 [ 200.083046][ T5943] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 200.251088][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 200.259003][ T5943] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.269572][ T5943] usb 7-1: config 0 has no interface number 0 [ 200.276862][ T5943] usb 7-1: config 0 interface 184 has no altsetting 0 [ 200.294168][ T5943] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.306900][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.324283][ T5943] usb 7-1: Product: syz [ 200.334048][ T5943] usb 7-1: Manufacturer: syz [ 200.343222][ T5943] usb 7-1: SerialNumber: syz [ 200.357817][ T5943] usb 7-1: config 0 descriptor?? [ 200.393024][ T5943] smsc75xx v1.0.0 [ 200.396819][ T5943] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 200.423436][ T5943] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 200.443726][ T5907] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.621575][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 200.645824][ T5907] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.691283][ T5907] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 200.695763][T10907] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2151'. [ 200.700357][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.718337][ T5907] usb 5-1: config 0 descriptor?? [ 200.882516][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.895251][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.919271][ T10] usb 7-1: USB disconnect, device number 2 [ 201.138984][ T5943] usb 5-1: USB disconnect, device number 24 [ 201.341273][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 201.503041][ T5839] Bluetooth: hci3: command tx timeout [ 201.512475][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.524050][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.541057][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.551284][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.562255][T10919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.572359][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.656415][T10936] netlink: 'syz.6.2163': attribute type 29 has an invalid length. [ 201.673256][T10936] netlink: 'syz.6.2163': attribute type 29 has an invalid length. [ 201.690692][T10936] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2163'. [ 201.822314][ T10] usb 2-1: USB disconnect, device number 26 [ 202.452784][T10067] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.469037][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.485776][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.494758][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.506773][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.516274][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.650979][T10067] usb 6-1: Using ep0 maxpacket: 16 [ 202.662429][T10067] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 202.681506][T10067] usb 6-1: config 0 has no interface number 0 [ 202.687642][T10067] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.731020][T10067] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.759714][T10067] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 202.777256][T10067] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 202.778000][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.816126][T10067] usb 6-1: Product: syz [ 202.835923][T10067] usb 6-1: SerialNumber: syz [ 202.857241][T10067] usb 6-1: config 0 descriptor?? [ 202.857882][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.882468][T10067] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 202.901889][T10067] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input34 [ 202.914092][T10964] chnl_net:caif_netlink_parms(): no params data found [ 202.955915][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.078556][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.149439][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 203.237026][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.264909][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.286898][T10964] bridge_slave_0: entered allmulticast mode [ 203.294402][T10964] bridge_slave_0: entered promiscuous mode [ 203.306560][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.331021][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.344154][T10964] bridge_slave_1: entered allmulticast mode [ 203.362043][T10964] bridge_slave_1: entered promiscuous mode [ 203.368530][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 203.495676][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.504819][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.512116][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.519244][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.526795][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.534353][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.541469][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.548596][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.555734][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.563260][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.576414][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.577118][T10064] usb 6-1: USB disconnect, device number 10 [ 203.587782][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 203.600046][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 203.627109][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.643792][ T10] usb 7-1: config 0 descriptor?? [ 203.648750][T10064] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 203.660828][T10964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.681854][T10964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.746483][T10964] team0: Port device team_slave_0 added [ 203.760260][ T13] batadv1: left allmulticast mode [ 203.766786][ T13] batadv1: left promiscuous mode [ 203.772332][ T13] bridge0: port 2(batadv1) entered disabled state [ 203.781223][ T13] bridge_slave_0: left allmulticast mode [ 203.786985][ T13] bridge_slave_0: left promiscuous mode [ 203.792962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.806699][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 203.822018][ T13] bond_slave_0: left promiscuous mode [ 203.827941][ T13] bond_slave_1: left promiscuous mode [ 203.958876][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 204.103520][ T10] pyra 0003:1E7D:2C24.001B: hidraw0: USB HID v0.08 Device [HID 1e7d:2c24] on usb-dummy_hcd.6-1/input0 [ 204.177310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.188402][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.198707][ T13] bond0 (unregistering): Released all slaves [ 204.217425][T10964] team0: Port device team_slave_1 added [ 204.308051][ T13] IPVS: stopping backup sync thread 6917 ... [ 204.316280][T10964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.348881][T10064] usb 7-1: USB disconnect, device number 3 [ 204.354763][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.354792][T10964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.356256][T10964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.419992][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.446780][T10964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.605000][T10964] hsr_slave_0: entered promiscuous mode [ 204.617517][T10964] hsr_slave_1: entered promiscuous mode [ 204.624549][T10964] debugfs: 'hsr0' already exists in 'hsr' [ 204.627042][ T5839] Bluetooth: hci5: command tx timeout [ 204.630380][T10964] Cannot create hsr debugfs directory [ 204.776084][ T13] hsr_slave_0: left promiscuous mode [ 204.777846][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'. [ 204.807634][ T13] hsr_slave_1: left promiscuous mode [ 204.818588][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.833566][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.843693][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.852941][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.882322][ T13] veth1_macvtap: left promiscuous mode [ 204.887963][ T13] veth0_macvtap: left promiscuous mode [ 204.894321][ T13] veth1_vlan: left promiscuous mode [ 204.899726][ T13] veth0_vlan: left promiscuous mode [ 204.950467][T11042] netlink: 'syz.6.2206': attribute type 1 has an invalid length. [ 204.965560][T11042] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2206'. [ 205.081019][ T841] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 205.235306][ T841] usb 5-1: Using ep0 maxpacket: 32 [ 205.244681][ T841] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 205.258682][ T841] usb 5-1: config 0 has no interface number 0 [ 205.276778][ T841] usb 5-1: config 0 interface 184 has no altsetting 0 [ 205.295215][ T841] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 205.315957][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.330525][ T841] usb 5-1: Product: syz [ 205.336006][ T841] usb 5-1: Manufacturer: syz [ 205.349339][ T841] usb 5-1: SerialNumber: syz [ 205.359597][ T841] usb 5-1: config 0 descriptor?? [ 205.381180][ T841] smsc75xx v1.0.0 [ 205.558128][ T13] team0 (unregistering): Port device team_slave_1 removed [ 205.618217][ T13] team0 (unregistering): Port device team_slave_0 removed [ 205.973469][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 206.151660][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 206.177432][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 206.207953][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.233639][ T10] usb 2-1: config 0 descriptor?? [ 206.250151][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 206.250875][T10964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.285923][T10964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 206.307212][T10964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.334274][T10964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.399411][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 206.420947][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.447847][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 206.479199][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 206.492401][T10964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.499523][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 206.519804][ T841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 206.533188][ T841] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 206.545446][T10964] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.549287][ T841] usb 5-1: USB disconnect, device number 25 [ 206.576667][T11081] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2219'. [ 206.577477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.593103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.665801][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.673014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.701177][ T5839] Bluetooth: hci5: command tx timeout [ 207.070488][T10964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.217390][ T30] audit: type=1400 audit(1754065727.389:572): avc: denied { setopt } for pid=11094 comm="syz.5.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.275512][T11098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.285103][ T10] gspca_sunplus: reg_w_riv err -71 [ 207.290426][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 207.309145][ T10] usb 2-1: USB disconnect, device number 27 [ 207.615700][T10964] veth0_vlan: entered promiscuous mode [ 207.664543][T10964] veth1_vlan: entered promiscuous mode [ 207.718667][T11113] loop6: detected capacity change from 0 to 524287999 [ 207.728146][T10964] veth0_macvtap: entered promiscuous mode [ 207.756359][T10964] veth1_macvtap: entered promiscuous mode [ 207.792914][T11115] bridge0: entered promiscuous mode [ 207.799096][T11115] bond0: entered promiscuous mode [ 207.828831][T11115] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 207.850403][T11115] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 207.862061][T11115] hsr1: entered allmulticast mode [ 207.868970][T11115] bridge0: entered allmulticast mode [ 207.874867][T11115] bond0: entered allmulticast mode [ 207.923453][T10964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.957378][T10964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.989077][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.027409][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.053875][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.076501][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.086384][ T5907] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.239294][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.251407][ T5907] usb 7-1: Using ep0 maxpacket: 32 [ 208.271847][ T5907] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.272834][T11129] ptrace attach of "./syz-executor exec"[7074] was attempted by ""[11129] [ 208.282307][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.302962][ T5907] usb 7-1: config 0 has no interface number 0 [ 208.320159][ T5907] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.341226][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.349263][ T5907] usb 7-1: Product: syz [ 208.358661][ T5907] usb 7-1: Manufacturer: syz [ 208.363750][ T5907] usb 7-1: SerialNumber: syz [ 208.385995][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.398227][ T5907] usb 7-1: config 0 descriptor?? [ 208.412610][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.425180][ T5907] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.515776][ T30] audit: type=1400 audit(1754065728.689:573): avc: denied { execute_no_trans } for pid=11134 comm="syz.4.2240" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=36806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 208.594539][T11137] input: syz0 as /devices/virtual/input/input35 [ 208.644028][ T5907] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.674084][ T5907] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 208.781533][ T5839] Bluetooth: hci5: command tx timeout [ 208.873486][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 97 [ 209.087341][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.098347][ T5825] usb 7-1: USB disconnect, device number 4 [ 209.115171][ T5825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.153872][ T5825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.174058][ T5825] quatech2 7-1:0.51: device disconnected [ 209.232743][T11169] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2254'. [ 209.444174][ T30] audit: type=1400 audit(1754065729.619:574): avc: denied { write } for pid=11174 comm="syz.1.2257" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.067899][T11210] vivid-004: disconnect [ 210.087301][T11209] vivid-004: reconnect [ 210.249096][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 210.770990][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 210.861383][ T5839] Bluetooth: hci5: command tx timeout [ 210.930969][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 210.942352][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.961032][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 210.980336][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.998168][ T24] usb 5-1: config 0 descriptor?? [ 211.339268][T11248] program syz.5.2290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.359170][T11248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.427457][ T24] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 211.469987][ T30] audit: type=1400 audit(1754065731.639:575): avc: denied { listen } for pid=11251 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 211.775538][ T30] audit: type=1400 audit(1754065731.949:576): avc: denied { ioctl } for pid=11266 comm="syz.6.2299" path="socket:[39145]" dev="sockfs" ino=39145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.800420][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.858171][ T24] usb 5-1: USB disconnect, device number 26 [ 211.998488][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2305'. [ 212.201069][ T5907] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.361249][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 212.367833][ T5907] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.381877][ T5907] usb 6-1: config 0 has no interface number 0 [ 212.388220][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.421282][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.437539][ T5907] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.448841][ T5907] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.464883][ T5907] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.474428][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.484619][ T5907] usb 6-1: config 0 descriptor?? [ 212.493807][ T5907] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.716174][ T5907] usb 6-1: USB disconnect, device number 11 [ 212.726192][ T5907] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 212.734339][T11297] netem: change failed [ 213.083208][T11314] block nbd6: NBD_DISCONNECT [ 213.091363][T11314] block nbd6: Send disconnect failed -22 [ 213.097213][ T30] audit: type=1400 audit(1754065733.259:577): avc: denied { write } for pid=11313 comm="syz.6.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 213.125726][T11313] block nbd6: Disconnected due to user request. [ 213.141209][T11313] block nbd6: shutting down sockets [ 213.203823][ T30] audit: type=1326 audit(1754065733.379:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.259394][ T30] audit: type=1326 audit(1754065733.399:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.282724][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.302339][ T30] audit: type=1326 audit(1754065733.399:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.350776][ T30] audit: type=1326 audit(1754065733.399:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.391027][ T30] audit: type=1326 audit(1754065733.399:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.414340][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.451002][ T30] audit: type=1326 audit(1754065733.399:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.491001][ T30] audit: type=1326 audit(1754065733.409:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.514410][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.542496][ T30] audit: type=1326 audit(1754065733.409:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.565926][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.584959][ T5907] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 213.597540][ T30] audit: type=1326 audit(1754065733.409:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0818eb69 code=0x7ffc0000 [ 213.962627][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.974543][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.000992][ T5907] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 214.010062][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.053019][ T5907] usb 6-1: config 0 descriptor?? [ 214.487337][ T5907] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 214.494697][ T5907] isku 0003:1E7D:319C.001D: item fetching failed at offset 6/7 [ 214.516259][ T5907] isku 0003:1E7D:319C.001D: parse failed [ 214.533606][ T5907] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22 [ 214.701656][ T5907] usb 6-1: USB disconnect, device number 12 [ 215.015078][T11388] netlink: 'syz.4.2353': attribute type 10 has an invalid length. [ 215.045594][T11388] bond0: (slave 0!): Enslaving as an active interface with an up link [ 215.470987][ T841] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 215.626151][ T841] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 215.650975][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.670145][ T841] usb 7-1: config 0 descriptor?? [ 215.683570][ T841] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 215.698120][T11433] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 215.891942][ T841] gp8psk: usb in 128 operation failed. [ 216.102361][ T841] gp8psk: usb in 146 operation failed. [ 216.112349][ T841] gp8psk: failed to get FW version [ 216.125400][ T841] gp8psk: FPGA Version = 247 [ 216.327505][ T841] gp8psk: usb in 138 operation failed. [ 216.333519][ T841] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 216.359923][ T841] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 216.378703][ T841] usb 7-1: USB disconnect, device number 5 [ 216.402571][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2391'. [ 216.491029][ T5943] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 216.646960][ T5943] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 216.658698][ T5943] usb 6-1: config 0 has no interface number 1 [ 216.665166][ T5943] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 216.675230][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.689637][ T5943] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 216.700456][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.726058][ T5943] usb 6-1: SerialNumber: syz [ 216.733006][ T5943] usb 6-1: config 0 descriptor?? [ 216.960468][ T5943] usb 6-1: Found UVC 0.00 device (0002:0000) [ 216.981027][ T5943] usb 6-1: No valid video chain found. [ 217.002091][ T5943] usb 6-1: USB disconnect, device number 13 [ 217.051074][ T5907] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 217.231059][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 217.237625][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.249277][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.263308][ T5907] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 217.272808][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.282144][ T5907] usb 5-1: config 0 descriptor?? [ 217.696488][ T5907] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 217.894578][ T5907] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 217.910533][ T5907] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -71 [ 217.927396][ T5907] usb 5-1: USB disconnect, device number 27 [ 218.549372][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 218.549392][ T30] audit: type=1400 audit(1754065738.719:596): avc: denied { execute } for pid=11526 comm="syz.1.2416" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 218.881738][ T30] audit: type=1400 audit(1754065739.059:597): avc: denied { watch } for pid=11541 comm="syz.5.2423" path="/314/file0" dev="rpc_pipefs" ino=40969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 219.075350][ T30] audit: type=1400 audit(1754065739.249:598): avc: denied { mount } for pid=11555 comm="syz.5.2430" name="/" dev="autofs" ino=41013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.102838][ T30] audit: type=1400 audit(1754065739.259:599): avc: denied { ioctl } for pid=11555 comm="syz.5.2430" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.128622][ T30] audit: type=1400 audit(1754065739.279:600): avc: denied { unmount } for pid=8011 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.361428][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 219.522714][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.543717][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.557497][ T30] audit: type=1400 audit(1754065739.719:601): avc: denied { watch_sb } for pid=11572 comm="syz.6.2437" path="/56" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.591193][ T24] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 219.610427][ T30] audit: type=1400 audit(1754065739.779:602): avc: denied { append } for pid=11574 comm="syz.7.2438" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 219.610530][T11575] random: crng reseeded on system resumption [ 219.641756][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.662734][ T30] audit: type=1400 audit(1754065739.779:603): avc: denied { open } for pid=11574 comm="syz.7.2438" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 219.687495][ T24] usb 6-1: config 0 descriptor?? [ 219.918680][ T30] audit: type=1326 audit(1754065740.089:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178eb69 code=0x7ffc0000 [ 219.986506][ T30] audit: type=1326 audit(1754065740.089:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178eb69 code=0x7ffc0000 [ 220.322656][ T24] hid-led 0003:1D34:0004.001F: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input0 [ 220.360700][ T24] hid-led 0003:1D34:0004.001F: Dream Cheeky Webmail Notifier initialized [ 220.541524][ T841] usb 6-1: USB disconnect, device number 14 [ 220.996909][T11611] tun0: tun_chr_ioctl cmd 1074025675 [ 221.013853][T11611] tun0: persist enabled [ 221.027324][T11611] tun0: tun_chr_ioctl cmd 1074025675 [ 221.046537][T11611] tun0: persist disabled [ 221.490989][ T841] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 221.654541][ T841] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.670709][ T841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.696694][ T841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.711458][ T841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.726123][ T841] usb 6-1: Product: syz [ 221.730844][ T841] usb 6-1: Manufacturer: syz [ 221.738516][ T841] usb 6-1: SerialNumber: syz [ 221.751673][ T841] usb 6-1: config 0 descriptor?? [ 221.788007][ T841] usb 6-1: selecting invalid altsetting 0 [ 222.041818][ T841] usb 6-1: USB disconnect, device number 15 [ 222.506065][T11680] syzkaller1: entered promiscuous mode [ 222.515130][T11680] syzkaller1: entered allmulticast mode [ 222.891084][T10067] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 223.051694][T10067] usb 2-1: Using ep0 maxpacket: 16 [ 223.060020][T10067] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 223.068473][T10067] usb 2-1: config 0 has no interface number 0 [ 223.077272][T11713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.079551][T10067] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 223.107383][T10067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.117356][T10067] usb 2-1: Product: syz [ 223.125690][T10067] usb 2-1: Manufacturer: syz [ 223.139033][T10067] usb 2-1: SerialNumber: syz [ 223.158485][T10067] usb 2-1: config 0 descriptor?? [ 223.165943][T11715] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2499'. [ 223.183568][T10067] hub 2-1:0.132: bad descriptor, ignoring hub [ 223.190527][T10067] hub 2-1:0.132: probe with driver hub failed with error -5 [ 223.201760][T10067] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input36 [ 223.378545][T11723] SELinux: ebitmap: truncated map [ 223.447561][T11723] SELinux: failed to load policy [ 223.622438][ T24] usb 2-1: USB disconnect, device number 28 [ 223.711673][T10067] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 223.841337][ T5825] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 223.861906][T10067] usb 6-1: Using ep0 maxpacket: 16 [ 223.869210][T10067] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 223.877489][T10067] usb 6-1: config 0 has no interface number 0 [ 223.883707][T10067] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 223.893903][T10067] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.904750][T10067] usb 6-1: config 0 interface 41 has no altsetting 0 [ 223.916547][T10067] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 223.926253][T10067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.934309][T10067] usb 6-1: Product: syz [ 223.938480][T10067] usb 6-1: Manufacturer: syz [ 223.943133][T10067] usb 6-1: SerialNumber: syz [ 223.949982][T10067] usb 6-1: config 0 descriptor?? [ 223.956063][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 223.963514][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 223.993995][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.006596][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.017977][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 252, setting to 64 [ 224.028837][ T5825] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 224.038109][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.049909][ T5825] usb 7-1: config 0 descriptor?? [ 224.058480][T11740] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 224.077088][ T5825] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input37 [ 224.095828][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.104684][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.113750][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.121060][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.128365][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.137592][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.144920][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.152229][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.159576][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.167289][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.174746][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.188546][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.196391][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.204032][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.211909][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.221169][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.228649][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.236234][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 224.236433][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.251186][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.258624][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 224.258653][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.274040][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.281503][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.288867][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.296360][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.303948][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.311922][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.319347][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.326732][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.334350][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.341644][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.346612][T11757] Bluetooth: MGMT ver 1.23 [ 224.348967][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.361247][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.368569][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.375869][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.383282][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.390589][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.398172][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.405550][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.413509][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.420909][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.428529][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.435849][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.443169][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.450498][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.457994][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.465280][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.472606][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.479916][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.479936][ T5186] usb 7-1: control msg error: -71 [ 224.487510][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.500965][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.508302][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.517015][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.524800][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.532113][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.539317][ C1] usb 7-1: pegasus_irq - usb_submit_urb failed with result -1 [ 224.557858][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 224.565252][ T5186] usb 7-1: control msg error: -71 [ 224.570442][ C1] usb 7-1: pegasus_irq - urb shutting down with status: -2 [ 224.581634][ T5825] usb 7-1: USB disconnect, device number 6 [ 224.733523][T10067] Error reading MAC address [ 224.739889][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 224.747404][T11730] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 224.891160][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 224.958548][T10067] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 224.971424][T10067] usb 6-1: USB disconnect, device number 16 [ 225.050995][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 225.057381][ T24] usb 5-1: config 254 has an invalid interface number: 160 but max is 0 [ 225.065892][ T24] usb 5-1: config 254 has no interface number 0 [ 225.076122][ T24] usb 5-1: config 254 interface 160 has no altsetting 0 [ 225.085303][ T24] usb 5-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 225.094831][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.103284][ T24] usb 5-1: Product: syz [ 225.107580][ T24] usb 5-1: Manufacturer: syz [ 225.112307][ T24] usb 5-1: SerialNumber: syz [ 225.530710][ T24] usb 5-1: bad CDC descriptors [ 225.546638][ T24] usb 5-1: USB disconnect, device number 28 [ 225.651063][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 225.811076][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 225.822364][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 225.832100][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.842800][ T10] usb 7-1: config 0 descriptor?? [ 225.849905][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 226.462491][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 226.471045][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 226.687499][T11832] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2553'. [ 226.702839][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 226.704123][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 226.815702][T11840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.859885][ T10] gspca_sonixj: reg_w1 err -71 [ 226.891448][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 226.915584][ T10] usb 7-1: USB disconnect, device number 7 [ 227.201077][ T5943] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 227.352280][ T5943] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 227.366937][ T5943] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 227.376149][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.384950][ T5943] usb 5-1: Product: syz [ 227.390806][ T5943] usb 5-1: Manufacturer: syz [ 227.395949][ T5943] usb 5-1: SerialNumber: syz [ 227.408913][ T5943] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 227.417044][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 227.443248][ T5943] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 227.458631][ T5943] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 227.468175][ T5943] dvb_usb_umt_010 5-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 227.628590][T10067] usb 5-1: USB disconnect, device number 29 [ 227.970509][T11880] SELinux: ebitmap: truncated map [ 227.983499][T11880] SELinux: failed to load policy [ 228.143991][ T5943] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 228.244752][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 228.244769][ T30] audit: type=1400 audit(1754065748.419:622): avc: denied { ioctl } for pid=11888 comm="syz.4.2577" path="socket:[42204]" dev="sockfs" ino=42204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.245072][T11889] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 228.285646][T10067] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 228.301963][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 228.316795][ T5943] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 228.336282][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.354684][ T5943] usb 6-1: Product: syz [ 228.364813][ T5943] usb 6-1: Manufacturer: syz [ 228.374308][ T5943] usb 6-1: SerialNumber: syz [ 228.391618][ T5943] usb 6-1: config 0 descriptor?? [ 228.454938][T10067] usb 7-1: config 235 has an invalid interface number: 71 but max is 1 [ 228.463826][T10067] usb 7-1: config 235 has an invalid interface number: 169 but max is 1 [ 228.472448][T10067] usb 7-1: config 235 has an invalid interface number: 4 but max is 1 [ 228.481582][T10067] usb 7-1: config 235 has an invalid descriptor of length 0, skipping remainder of the config [ 228.492361][T10067] usb 7-1: config 235 has 3 interfaces, different from the descriptor's value: 2 [ 228.501551][T10067] usb 7-1: config 235 has no interface number 0 [ 228.516443][T10067] usb 7-1: config 235 has no interface number 1 [ 228.523769][T10067] usb 7-1: config 235 has no interface number 2 [ 228.530149][T10067] usb 7-1: config 235 interface 71 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 228.552085][T10067] usb 7-1: config 235 interface 71 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 228.592176][T10067] usb 7-1: config 235 interface 71 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 228.627644][T10067] usb 7-1: config 235 interface 169 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 228.650802][T10067] usb 7-1: too many endpoints for config 235 interface 4 altsetting 110: 132, using maximum allowed: 30 [ 228.664606][T10067] usb 7-1: config 235 interface 4 altsetting 110 has an invalid endpoint descriptor of length 2, skipping [ 228.678196][T10067] usb 7-1: config 235 interface 4 altsetting 110 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 228.693959][T10067] usb 7-1: config 235 interface 71 has no altsetting 0 [ 228.700833][T10067] usb 7-1: config 235 interface 169 has no altsetting 0 [ 228.713695][T10067] usb 7-1: config 235 interface 4 has no altsetting 0 [ 228.722471][T10067] usb 7-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=84.d8 [ 228.748930][T10067] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.763819][T10067] usb 7-1: Product: syz [ 228.768087][T10067] usb 7-1: Manufacturer: syz [ 228.772871][T10067] usb 7-1: SerialNumber: syz [ 228.782566][T11882] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 228.829507][ T5943] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 228.834519][T11913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 228.854766][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.870198][ T5943] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 228.885633][ T5943] usb 6-1: media controller created [ 228.923138][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.955305][ T30] audit: type=1400 audit(1754065749.129:623): avc: denied { read } for pid=11917 comm="syz.7.2590" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.012746][T10067] usb 7-1: unknown interface protocol 0xae, assuming v1 [ 229.020743][T10067] usb 7-1: cannot find UAC_HEADER [ 229.026289][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 229.036490][T11918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.044028][T11918] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 229.052802][T10067] snd-usb-audio 7-1:235.71: probe with driver snd-usb-audio failed with error -22 [ 229.068210][T11918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.071739][T10067] usb 7-1: USB disconnect, device number 8 [ 229.074731][T11918] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 229.097300][T11918] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 229.108517][T11918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.116510][T11918] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 229.126914][T11918] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 229.135939][T11918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.144249][T11918] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.155398][T11918] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.162675][T11918] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 229.168694][T11918] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 229.177382][T11918] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 229.193473][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.210861][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.232740][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 229.243015][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.257179][ T24] usb 5-1: SerialNumber: syz [ 229.267009][ T24] usb 5-1: 0:2 : does not exist [ 229.491210][ T5943] zl10353_read_register: readreg error (reg=127, ret==0) [ 229.491333][T11876] dtv5100: wlen = 0, aborting. [ 229.498355][ T5943] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 229.498373][ T5943] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 229.577042][T11940] veth0: entered promiscuous mode [ 229.584766][T11940] veth0: left promiscuous mode [ 229.591973][ T24] usb 6-1: USB disconnect, device number 17 [ 229.640536][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 229.738094][T11944] IPVS: Scheduler module ip_vs_sip not found [ 229.745631][T10067] usb 5-1: USB disconnect, device number 30 [ 230.215603][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2618'. [ 230.227466][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2618'. [ 230.326823][ T30] audit: type=1400 audit(1754065750.499:624): avc: denied { setopt } for pid=11990 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.393757][ T30] audit: type=1400 audit(1754065750.569:625): avc: denied { execute } for pid=11993 comm="syz.4.2624" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.417270][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.421536][T11995] vivid-001: disconnect [ 230.450406][T11986] vivid-001: reconnect [ 230.831119][ T5900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 230.951064][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2638'. [ 231.002380][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 231.009081][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.020331][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.031284][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.037057][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 231.053478][ T5900] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.053507][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.055647][ T5900] usb 2-1: config 0 descriptor?? [ 231.105167][ T5840] Bluetooth: hci0: command 0x0405 tx timeout [ 231.111549][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 231.181290][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 231.187447][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.193556][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 231.234740][ T24] hid-generic 0000:0D17:0000.0020: unknown main item tag 0x0 [ 231.250975][ T24] hid-generic 0000:0D17:0000.0020: unknown main item tag 0x0 [ 231.268775][ T24] hid-generic 0000:0D17:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 231.519341][ T5900] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0021/input/input40 [ 231.538051][ T30] audit: type=1400 audit(1754065751.709:626): avc: denied { setopt } for pid=12053 comm="syz.5.2648" lport=37050 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 231.605426][ T5900] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 231.749664][ T5943] usb 2-1: USB disconnect, device number 29 [ 231.951296][ T5900] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 232.052460][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 232.111270][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 232.117674][ T5900] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 232.126831][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.136210][ T5900] usb 6-1: config 0 descriptor?? [ 232.143399][ T5900] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 232.211016][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 232.220075][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 232.228619][ T10] usb 7-1: config 0 has no interface number 0 [ 232.239738][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 232.251531][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.259725][ T10] usb 7-1: Product: syz [ 232.263975][ T10] usb 7-1: Manufacturer: syz [ 232.267010][T12066] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 232.279583][T12066] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2654'. [ 232.281664][ T10] usb 7-1: SerialNumber: syz [ 232.299507][ T10] usb 7-1: config 0 descriptor?? [ 232.307958][ T10] smsc95xx v2.0.0 [ 233.148994][ T5900] gspca_vc032x: reg_w err -71 [ 233.156901][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.162333][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.167791][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.175964][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.182869][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.188222][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.191209][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 233.197208][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.200683][ T5840] Bluetooth: hci0: command 0x0405 tx timeout [ 233.205549][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.220249][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.227031][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.235674][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.241678][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.247157][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.254660][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.260123][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.266449][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.271793][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 233.271831][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.271898][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 233.292540][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.297847][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 233.306107][ T5900] gspca_vc032x: Unknown sensor... [ 233.312898][ T5900] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 233.322116][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 233.333080][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 233.343841][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 233.347993][ T5900] usb 6-1: USB disconnect, device number 18 [ 233.371448][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 233.383037][ T10] usb 7-1: USB disconnect, device number 9 [ 235.261152][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 235.307349][ T30] audit: type=1326 audit(1754065755.479:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.5.2699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ee78eb69 code=0x0 [ 235.341086][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 235.347210][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.354613][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 235.531044][ T30] audit: type=1400 audit(1754065755.699:628): avc: denied { connect } for pid=12183 comm="syz.7.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.743627][ T5943] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 235.905107][ T5943] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 235.916237][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.928957][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.942942][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.954866][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.970575][ T5943] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.979826][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.990628][ T5943] usb 2-1: config 0 descriptor?? [ 235.996400][T12182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.424442][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.431909][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.439310][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.447351][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.456956][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.471009][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.478450][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.506941][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.514754][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.522303][ T5943] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 236.539574][ T5943] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.770368][T10067] usb 2-1: USB disconnect, device number 30 [ 236.911983][T12229] block nbd1: server does not support multiple connections per device. [ 236.923532][T12229] block nbd1: shutting down sockets [ 237.006853][T12238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.196403][ T30] audit: type=1400 audit(1754065757.369:629): avc: denied { read write } for pid=12252 comm="syz.5.2737" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.236340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.276851][ T30] audit: type=1400 audit(1754065757.369:630): avc: denied { open } for pid=12252 comm="syz.5.2737" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.381545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.400250][T12259] binder: 12256:12259 ioctl c0306201 200000000080 returned -14 [ 237.603066][T12270] IPVS: Error joining to the multicast group [ 238.050983][ T5943] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 238.181633][T12308] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2762'. [ 238.235142][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.271160][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.296544][ T5943] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.310862][ T30] audit: type=1400 audit(1754065758.479:631): avc: denied { ioctl } for pid=12313 comm="syz.7.2765" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.338003][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.346180][ T5943] usb 2-1: SerialNumber: syz [ 238.575480][ T5943] usb 2-1: 0:2 : does not exist [ 238.613619][ T5943] usb 2-1: USB disconnect, device number 31 [ 238.647768][T12327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.682497][ T30] audit: type=1400 audit(1754065758.849:632): avc: denied { listen } for pid=12331 comm="syz.6.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.779705][T12336] (syz.6.2774,12336,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 238.788409][ T30] audit: type=1400 audit(1754065758.949:633): avc: denied { associate } for pid=12335 comm="syz.6.2774" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 238.831673][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.142973][T10067] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 239.224840][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2781'. [ 239.257830][T12352] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2781'. [ 239.288740][T12352] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2781'. [ 239.303661][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2781'. [ 239.325155][T10067] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.337673][T10067] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.368609][T10067] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.392562][T10067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.416423][T10067] usb 7-1: SerialNumber: syz [ 239.651327][T10067] usb 7-1: 0:2 : does not exist [ 239.656295][T10067] usb 7-1: usbmixer: too many channels (61) in unit 5 [ 239.701465][T10067] usb 7-1: USB disconnect, device number 10 [ 239.981092][ T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 240.152519][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.179168][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 288, setting to 64 [ 240.201987][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.239461][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.307782][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.330842][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.351272][ T24] usb 5-1: SerialNumber: syz [ 240.368851][T12377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.389156][ T24] cdc_acm 5-1:1.0: skipping garbage [ 240.403880][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 240.430991][ T24] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 240.437472][ T24] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 240.643102][ T5943] usb 5-1: USB disconnect, device number 31 [ 240.869271][T12434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.186653][T12449] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 241.217659][T12449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.237214][T12449] overlayfs: failed to set uuid (401/file1, err=-13); falling back to uuid=null. [ 241.282292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.367326][T12455] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2826'. [ 241.407643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 241.475384][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'. [ 241.564357][T12455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.576565][T12455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.588095][T12455] bond0 (unregistering): Released all slaves [ 241.966363][ T24] IPVS: starting estimator thread 0... [ 242.054629][T12470] infiniband syz0: set down [ 242.059420][T12470] infiniband syz0: added ipvlan1 [ 242.071374][T12476] IPVS: using max 44 ests per chain, 105600 per kthread [ 242.131856][T12470] RDS/IB: syz0: added [ 242.136043][T12470] smc: adding ib device syz0 with port count 1 [ 242.145951][T12470] smc: ib device syz0 port 1 has pnetid [ 242.235850][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2842'. [ 242.368622][T12497] netlink: 'syz.1.2844': attribute type 5 has an invalid length. [ 242.379002][T12497] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.2844'. [ 242.581336][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2848'. [ 242.665671][T12509] pim6reg1: entered promiscuous mode [ 242.671230][T12509] pim6reg1: entered allmulticast mode [ 243.095505][T12519] kernel read not supported for file /eth0 (pid: 12519 comm: syz.4.2854) [ 243.110294][ T30] audit: type=1800 audit(1754066019.273:634): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2854" name="eth0" dev="mqueue" ino=46185 res=0 errno=0 [ 243.358237][ T30] audit: type=1400 audit(1754066019.523:635): avc: denied { remount } for pid=12535 comm="syz.5.2862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 243.447164][T12542] binder: 12541:12542 ioctl c0306201 0 returned -14 [ 243.449901][T12540] tap0: tun_chr_ioctl cmd 1074025675 [ 243.459285][T12540] tap0: persist enabled [ 243.468831][T12540] tap0: tun_chr_ioctl cmd 1074025675 [ 243.474909][T12540] tap0: persist enabled [ 243.679123][T12558] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2872'. [ 243.759401][T12562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.774711][T12562] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 243.887477][ T30] audit: type=1400 audit(1754066020.053:636): avc: denied { watch_mount } for pid=12569 comm="syz.7.2878" path="/96" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.866784][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2900'. [ 245.067844][T12631] netlink: 'syz.4.2905': attribute type 3 has an invalid length. [ 245.091129][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 245.272960][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.283985][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.293120][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.303249][ T10] usb 6-1: config 0 descriptor?? [ 245.718479][ T10] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 245.732634][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0023/input/input43 [ 245.738339][T12646] binder: 12645:12646 ioctl c0306201 200000000040 returned -14 [ 245.812978][ T10] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 245.906160][ T30] audit: type=1400 audit(1754066022.073:637): avc: denied { write } for pid=12652 comm="syz.1.2915" path="socket:[46007]" dev="sockfs" ino=46007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.261061][T12634] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 247.261096][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 248.127650][T12634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.135406][T12634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.141650][T12634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.147650][T12634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.226751][ T841] usb 6-1: USB disconnect, device number 19 [ 248.289344][T12664] input: syz0 as /devices/virtual/input/input44 [ 248.315177][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 248.365169][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12670 comm=syz.6.2917 [ 248.401425][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2917'. [ 248.874449][T12695] syzkaller1: entered promiscuous mode [ 248.880109][T12695] syzkaller1: entered allmulticast mode [ 248.951535][ T30] audit: type=1400 audit(1754066025.113:638): avc: denied { remount } for pid=12697 comm="syz.5.2936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 249.268865][T12712] netlink: 'syz.7.2942': attribute type 1 has an invalid length. [ 249.281509][T12712] netlink: 'syz.7.2942': attribute type 1 has an invalid length. [ 249.309699][T12712] netlink: 'syz.7.2942': attribute type 1 has an invalid length. [ 249.329231][T12721] loop8: detected capacity change from 0 to 8 [ 249.329916][T12712] netlink: 'syz.7.2942': attribute type 1 has an invalid length. [ 249.339527][T12721] Dev loop8: unable to read RDB block 8 [ 249.351563][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2942'. [ 249.352859][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 249.369549][ T30] audit: type=1400 audit(1754066025.533:639): avc: denied { map } for pid=12723 comm="syz.5.2948" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.392221][T12721] loop8: unable to read partition table [ 249.392530][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.405149][ T30] audit: type=1400 audit(1754066025.533:640): avc: denied { execute } for pid=12723 comm="syz.5.2948" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.428451][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.433303][T12721] loop8: partition table beyond EOD, truncated [ 249.441428][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.462210][T12721] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 249.543012][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 249.605049][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.620647][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.673649][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.699128][ T24] usb 7-1: config 0 descriptor?? [ 250.134722][ T24] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 250.151780][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 250.168906][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0024/input/input45 [ 250.223390][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 250.230124][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.298426][ T24] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 250.392528][ C1] Mem-Info: [ 250.395996][ C1] active_anon:17314 inactive_anon:3 isolated_anon:0 [ 250.395996][ C1] active_file:13619 inactive_file:3523 isolated_file:0 [ 250.395996][ C1] unevictable:768 dirty:587 writeback:0 [ 250.395996][ C1] slab_reclaimable:13498 slab_unreclaimable:99658 [ 250.395996][ C1] mapped:29366 shmem:13936 pagetables:1641 [ 250.395996][ C1] sec_pagetables:0 bounce:0 [ 250.395996][ C1] kernel_misc_reclaimable:0 [ 250.395996][ C1] free:1323690 free_pcp:19350 free_cma:0 [ 250.441356][ C1] Node 0 active_anon:69256kB inactive_anon:12kB active_file:54348kB inactive_file:13956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:2348kB writeback:0kB shmem:54208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:6504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.473237][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.503293][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.532069][ C1] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 250.537807][ C1] Node 0 DMA32 free:1390844kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69052kB inactive_anon:12kB active_file:54224kB inactive_file:12980kB unevictable:1536kB writepending:2324kB present:3129332kB managed:2539844kB mlocked:0kB bounce:0kB free_pcp:51220kB local_pcp:15968kB free_cma:0kB [ 250.570113][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 250.574812][ C1] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:224kB inactive_anon:0kB active_file:124kB inactive_file:976kB unevictable:0kB writepending:24kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:4kB free_cma:0kB [ 250.604069][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.608754][ C1] Node 1 Normal free:3888536kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26004kB local_pcp:5312kB free_cma:0kB [ 250.640008][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.644692][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.657325][ C1] Node 0 DMA32: 42*4kB (UE) 4*8kB (UM) 3*16kB (UE) 146*32kB (UME) 199*64kB (UME) 420*128kB (UME) 544*256kB (UME) 361*512kB (UME) 158*1024kB (UM) 13*2048kB (UME) 197*4096kB (UM) = 1390840kB [ 250.675946][ C1] Node 0 Normal: 4*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 250.688171][ C1] Node 1 Normal: 196*4kB (UME) 33*8kB (UME) 36*16kB (UME) 124*32kB (UME) 37*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 6*2048kB (UME) 943*4096kB (M) = 3888536kB [ 250.706364][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.715881][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.725142][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.734657][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.743913][ C1] 31048 total pagecache pages [ 250.748563][ C1] 3 pages in swap cache [ 250.752689][ C1] Free swap = 124984kB [ 250.756820][ C1] Total swap = 124996kB [ 250.760952][ C1] 2097051 pages RAM [ 250.764732][ C1] 0 pages HighMem/MovableOnly [ 250.769379][ C1] 430112 pages reserved [ 250.773503][ C1] 0 pages cma reserved [ 250.951098][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 251.013176][ T30] audit: type=1400 audit(1754066027.183:641): avc: denied { read } for pid=12773 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 251.112784][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.123273][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.145224][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.166128][ T10] usb 6-1: config 0 descriptor?? [ 251.178399][ T841] usb 7-1: USB disconnect, device number 11 [ 251.178498][ C1] keytouch 0003:0926:3333.0024: usb_submit_urb(ctrl) failed: -19 [ 251.201144][ T5943] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 251.212107][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 251.362750][ T5943] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.380940][ T5943] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.417565][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.437559][ T5943] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 251.451681][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.475037][ T5943] usb 2-1: config 0 descriptor?? [ 251.626925][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.635424][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.863081][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 251.888183][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 251.905633][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 251.925301][ T5943] hid_parser_main: 1 callbacks suppressed [ 251.925327][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 251.949453][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 251.956904][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 251.971784][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 251.978363][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 251.999829][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 252.008749][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 252.024288][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 252.036033][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 252.045971][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 252.057682][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 252.071018][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 252.077573][ T5943] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 252.090989][ T10] pwc: recv_control_msg error -71 req 02 val 2900 Stopping sshd: [ 252.099998][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 252.111340][ T5943] semitek 0003:1EA7:0907.0025: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 252.128236][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2983'. [ 252.139692][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 252.148002][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2983'. [ 252.152924][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 252.163719][ T5943] usb 2-1: USB disconnect, device number 32 stopped /usr/sbin/sshd (pid 5583) [ 252.170655][T12813] netlink: 50 bytes leftover after parsing attributes in process `syz.6.2983'. [ 252.191063][ T10] pwc: Registered as video103. [ 252.197340][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 OK [ 252.240357][ T10] usb 6-1: USB disconnect, device number 20 Stopping crond: stopped /usr/sbin/crond (pid 5570) OK [ 252.539968][ T30] audit: type=1400 audit(1754066028.703:642): avc: denied { execmem } for pid=12829 comm="syz.5.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.559234][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.634579][T12835] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2991'. [ 252.806039][T12842] netlink: 'syz.6.2993': attribute type 10 has an invalid length. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5495) [ 253.029441][T12853] kvm: requested 4190 ns i8254 timer period limited to 200000 ns Stopping network: [ 253.313765][ T30] audit: type=1400 audit(1754066029.483:643): avc: denied { create } for pid=12870 comm="syz.4.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.391787][ T30] audit: type=1400 audit(1754066029.513:644): avc: denied { setopt } for pid=12870 comm="syz.4.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.454751][ T30] audit: type=1400 audit(1754066029.513:645): avc: denied { ioctl } for pid=12870 comm="syz.4.3003" path="socket:[49662]" dev="sockfs" ino=49662 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.479454][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.694145][ T30] audit: type=1400 audit(1754066029.863:646): avc: denied { allowed } for pid=12891 comm="syz.7.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.771156][ T30] audit: type=1400 audit(1754066029.923:647): avc: denied { create } for pid=12893 comm="syz.5.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.804374][T12897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.819404][T12901] block nbd5: shutting down sockets [ 253.998631][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 254.047524][ T24] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.258458][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 254.258474][ T30] audit: type=1400 audit(1754066030.423:652): avc: denied { execute } for pid=12916 comm="syz.1.3018" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 OK Stopping iptables: [ 254.639834][ T30] audit: type=1400 audit(1754066030.803:653): avc: denied { read write } for pid=12933 comm="iptables" path="/dev/console" dev="rootfs" ino=56 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 254.750991][ T30] audit: type=1400 audit(1754066030.913:654): avc: denied { search } for pid=12933 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.844030][ T30] audit: type=1400 audit(1754066030.913:655): avc: denied { search } for pid=12933 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 modprobe: can't change directory to '6.16.0-syzkaller-10499-g89748acdf226': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL [ 254.947405][ T30] audit: type=1400 audit(1754066030.913:656): avc: denied { add_name } for pid=12933 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.064043][ T30] audit: type=1400 audit(1754066030.913:657): avc: denied { create } for pid=12933 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Stopping system message bus: [ 255.183207][ T30] audit: type=1400 audit(1754066030.913:658): avc: denied { read open } for pid=12933 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=2865 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.264904][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3028'. [ 255.268886][ T30] audit: type=1400 audit(1754066030.913:659): avc: denied { lock } for pid=12933 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=2865 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.299854][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3028'. [ 255.333309][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3028'. [ 255.351227][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3028'. [ 255.364253][ T30] audit: type=1400 audit(1754066030.963:660): avc: denied { read write } for pid=12941 comm="modprobe" path="/dev/console" dev="rootfs" ino=56 scontext=system_u:system_r:kmod_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 255.441314][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.447653][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.466151][ T30] audit: type=1400 audit(1754066030.963:661): avc: denied { read } for pid=12941 comm="modprobe" path="/run/xtables.lock" dev="tmpfs" ino=2865 scontext=system_u:system_r:kmod_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 255.951021][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 256.122835][ T24] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 256.134467][ T24] usb 6-1: config 0 has no interface number 0 [ 256.140577][ T24] usb 6-1: config 0 interface 98 has no altsetting 0 [ 256.155240][ T24] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 256.167950][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.180866][ T24] usb 6-1: Product: syz [ 256.185970][ T24] usb 6-1: Manufacturer: syz [ 256.194134][ T24] usb 6-1: SerialNumber: syz [ 256.208191][ T24] usb 6-1: config 0 descriptor?? [ 256.307610][T12993] netlink: 'syz.4.3044': attribute type 11 has an invalid length. [ 256.342452][T10067] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 256.433143][ T24] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 256.524251][T10067] usb 7-1: Using ep0 maxpacket: 8 [ 256.533836][T10067] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 256.551795][T10067] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 256.571096][T10067] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 256.593034][T10067] usb 7-1: config 150 has no interface number 0 [ 256.599346][T10067] usb 7-1: config 150 interface 204 has no altsetting 0 [ 256.623214][T10067] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 256.643135][T10067] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.660973][T10067] usb 7-1: Product: syz [ 256.673388][T10067] usb 7-1: Manufacturer: syz [ 256.678025][T10067] usb 7-1: SerialNumber: syz killall: udevd: no process killed [ 256.921464][T10067] usb 7-1: USB disconnect, device number 12 Stopping klogd: start-stop-daemon: warning: killing process 5190: No such process [ 257.082935][ T24] usb 6-1: reset high-speed USB device number 21 using dummy_hcd FAIL Stopping acpid: [ 257.451426][ T24] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 257.464681][ T24] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 257.478790][ T24] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 257.491629][ T5825] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 257.507404][ T24] usb 6-1: USB disconnect, device number 21 [ 257.513821][ T5825] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 257.527868][ T5825] ------------[ cut here ]------------ [ 257.533958][ T5825] WARNING: CPU: 1 PID: 5825 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 257.542969][ T5825] Modules linked in: [ 257.547326][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/1:3 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 257.559421][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.569541][ T5825] Workqueue: events request_firmware_work_func [ 257.575783][ T5825] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 257.581648][ T5825] Code: c8 f9 5a ff 85 ed 74 1c e8 7f fe 5a ff be 04 00 00 00 48 89 df e8 32 39 c1 ff f0 ff 03 5b 5d e9 58 6e 31 09 e8 63 fe 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 15 31 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 257.601483][ T5825] RSP: 0018:ffffc90003ab7668 EFLAGS: 00010293 [ 257.607568][ T5825] RAX: 0000000000000000 RBX: ffff888059a98960 RCX: ffffffff82606ae8 [ 257.615872][ T5825] RDX: ffff8880250b8000 RSI: ffffffff82606b0d RDI: 0000000000000005 [ 257.623921][ T5825] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 257.632056][ T5825] R10: 0000000000000000 R11: ffffffff812c109a R12: 0000000000000000 [ 257.640044][ T5825] R13: 00000000000041ed R14: 00000000000041ed R15: 0000000000000000 [ 257.648360][ T5825] FS: 0000000000000000(0000) GS:ffff8881247fb000(0000) knlGS:0000000000000000 [ 257.657335][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.663986][ T5825] CR2: 0000000000000000 CR3: 00000000627cd000 CR4: 00000000003526f0 [ 257.672287][ T5825] Call Trace: [ 257.675573][ T5825] [ 257.678488][ T5825] kernfs_new_node+0x15c/0x1e0 [ 257.683274][ T5825] kernfs_create_dir_ns+0x4c/0x1a0 [ 257.688373][ T5825] sysfs_create_dir_ns+0x13a/0x2b0 [ 257.693565][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 257.699177][ T5825] ? find_held_lock+0x2b/0x80 [ 257.704064][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 257.709246][ T5825] kobject_add_internal+0x2c4/0x9b0 [ 257.714462][ T5825] kobject_add+0x16e/0x240 [ 257.718860][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 257.723840][ T5825] get_device_parent+0x399/0x4e0 [ 257.728764][ T5825] device_add+0x1ad/0x1a70 [ 257.733445][ T5825] ? __pfx_device_add+0x10/0x10 [ 257.738282][ T5825] ? __init_waitqueue_head+0xca/0x150 [ 257.743675][ T5825] firmware_fallback_sysfs+0x2ec/0xbe0 [ 257.749121][ T5825] _request_firmware+0xfe9/0x1470 [ 257.754182][ T5825] ? __pfx__request_firmware+0x10/0x10 [ 257.759656][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.765702][ T5825] ? debug_object_deactivate+0x1ec/0x3a0 [ 257.771364][ T5825] request_firmware_work_func+0xea/0x250 [ 257.776979][ T5825] ? __pfx_request_firmware_work_func+0x10/0x10 [ 257.783293][ T5825] ? rcu_is_watching+0x12/0xc0 [ 257.788081][ T5825] process_one_work+0x9cf/0x1b70 [ 257.793295][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 257.798658][ T5825] ? assign_work+0x1a0/0x250 [ 257.803297][ T5825] worker_thread+0x6c8/0xf10 [ 257.807880][ T5825] ? __kthread_parkme+0x19e/0x250 [ 257.812914][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 257.818007][ T5825] kthread+0x3c5/0x780 [ 257.822300][ T5825] ? __pfx_kthread+0x10/0x10 [ 257.826879][ T5825] ? rcu_is_watching+0x12/0xc0 [ 257.831654][ T5825] ? __pfx_kthread+0x10/0x10 [ 257.836250][ T5825] ret_from_fork+0x5d4/0x6f0 [ 257.840816][ T5825] ? __pfx_kthread+0x10/0x10 [ 257.845422][ T5825] ret_from_fork_asm+0x1a/0x30 [ 257.850183][ T5825] [ 257.853404][ T5825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.860687][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/1:3 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 257.872379][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.882419][ T5825] Workqueue: events request_firmware_work_func [ 257.888560][ T5825] Call Trace: [ 257.891834][ T5825] [ 257.894742][ T5825] dump_stack_lvl+0x3d/0x1f0 [ 257.899317][ T5825] vpanic+0x6a3/0x780 [ 257.903281][ T5825] ? __pfx_vpanic+0x10/0x10 [ 257.907766][ T5825] ? kernfs_get.part.0+0x6e/0x80 [ 257.912685][ T5825] panic+0xca/0xd0 [ 257.916397][ T5825] ? __pfx_panic+0x10/0x10 [ 257.920807][ T5825] ? check_panic_on_warn+0x1f/0xb0 [ 257.925907][ T5825] check_panic_on_warn+0xab/0xb0 [ 257.930831][ T5825] __warn+0xf6/0x3c0 [ 257.934705][ T5825] ? kernfs_get.part.0+0x6e/0x80 [ 257.939627][ T5825] report_bug+0x3c3/0x580 [ 257.943940][ T5825] ? kernfs_get.part.0+0x6e/0x80 [ 257.948861][ T5825] handle_bug+0x184/0x210 [ 257.953180][ T5825] exc_invalid_op+0x17/0x50 [ 257.957670][ T5825] asm_exc_invalid_op+0x1a/0x20 [ 257.962502][ T5825] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 257.968035][ T5825] Code: c8 f9 5a ff 85 ed 74 1c e8 7f fe 5a ff be 04 00 00 00 48 89 df e8 32 39 c1 ff f0 ff 03 5b 5d e9 58 6e 31 09 e8 63 fe 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 15 31 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 257.987624][ T5825] RSP: 0018:ffffc90003ab7668 EFLAGS: 00010293 [ 257.993672][ T5825] RAX: 0000000000000000 RBX: ffff888059a98960 RCX: ffffffff82606ae8 [ 258.001623][ T5825] RDX: ffff8880250b8000 RSI: ffffffff82606b0d RDI: 0000000000000005 [ 258.009571][ T5825] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 258.017520][ T5825] R10: 0000000000000000 R11: ffffffff812c109a R12: 0000000000000000 [ 258.025468][ T5825] R13: 00000000000041ed R14: 00000000000041ed R15: 0000000000000000 [ 258.033418][ T5825] ? ret_from_fork_asm+0x1a/0x30 [ 258.038340][ T5825] ? kernfs_get.part.0+0x48/0x80 [ 258.043258][ T5825] ? kernfs_get.part.0+0x6d/0x80 [ 258.048189][ T5825] ? kernfs_get.part.0+0x6d/0x80 [ 258.053109][ T5825] kernfs_new_node+0x15c/0x1e0 [ 258.057861][ T5825] kernfs_create_dir_ns+0x4c/0x1a0 [ 258.062961][ T5825] sysfs_create_dir_ns+0x13a/0x2b0 [ 258.068058][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 258.073671][ T5825] ? find_held_lock+0x2b/0x80 [ 258.078332][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 258.083512][ T5825] kobject_add_internal+0x2c4/0x9b0 [ 258.088702][ T5825] kobject_add+0x16e/0x240 [ 258.093106][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 258.098041][ T5825] get_device_parent+0x399/0x4e0 [ 258.102971][ T5825] device_add+0x1ad/0x1a70 [ 258.107369][ T5825] ? __pfx_device_add+0x10/0x10 [ 258.112199][ T5825] ? __init_waitqueue_head+0xca/0x150 [ 258.117558][ T5825] firmware_fallback_sysfs+0x2ec/0xbe0 [ 258.123008][ T5825] _request_firmware+0xfe9/0x1470 [ 258.128023][ T5825] ? __pfx__request_firmware+0x10/0x10 [ 258.133465][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 258.139255][ T5825] ? debug_object_deactivate+0x1ec/0x3a0 [ 258.144876][ T5825] request_firmware_work_func+0xea/0x250 [ 258.150493][ T5825] ? __pfx_request_firmware_work_func+0x10/0x10 [ 258.156720][ T5825] ? rcu_is_watching+0x12/0xc0 [ 258.161473][ T5825] process_one_work+0x9cf/0x1b70 [ 258.166405][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 258.171765][ T5825] ? assign_work+0x1a0/0x250 [ 258.176336][ T5825] worker_thread+0x6c8/0xf10 [ 258.180911][ T5825] ? __kthread_parkme+0x19e/0x250 [ 258.185928][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 258.191018][ T5825] kthread+0x3c5/0x780 [ 258.195067][ T5825] ? __pfx_kthread+0x10/0x10 [ 258.199636][ T5825] ? rcu_is_watching+0x12/0xc0 [ 258.204380][ T5825] ? __pfx_kthread+0x10/0x10 [ 258.208950][ T5825] ret_from_fork+0x5d4/0x6f0 [ 258.213520][ T5825] ? __pfx_kthread+0x10/0x10 [ 258.218087][ T5825] ret_from_fork_asm+0x1a/0x30 [ 258.222843][ T5825] [ 258.226036][ T5825] Kernel Offset: disabled [ 258.230336][ T5825] Rebooting in 86400 seconds..