last executing test programs: 16.091614946s ago: executing program 0 (id=1600): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x20) 14.180247572s ago: executing program 0 (id=1604): r0 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x06K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf~%\xcfU\x16\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F\x92\x9e\xc8\xdc*b\x96\xd0t]\r\xd5\xc8X\xcb\x81I\x97\xd8\x9ciN\x06\xc8\x9e\xa2\xc0|3\xae\xfa\xf4\xcf]\xbe\xcbR(T\x9c\x99\xc7\xfe\x1e>rM\x12\xeb\xe021\xc2&\x06\x86\xffm:\xdb\xcc\x13\xec\x1f\xd3\x97\xce\\\x12\x88\x00\x90\x8cO\xe7\x98\xe6\x95#\xf5x\xa6l8X\x81@\xc5\x8b?\xc5 /\x9a)\xeahg\x85gis\xb5\x11\xedp-\xfdj\x13\xc3E\x12\xe2Q]\xc1\x11\xc7Fz\xc0\x88\x03\x1c\x00\xa6\x7f%\x8d*\xd4w\x1c\'\xb3\xfe\xd6[\x8a\xf7T\xd4\x02X^\tgl\x14\x17\x15\x0f\xa3MyYr5Q\x8coAv,\tJ\x10\x13\x9f\xbf@\xc2\xd7%\xdb\x9d\xf3\xad\xd4\xd1 \x19Ul\xdb\xff\x8b/\x8c\x81+\x9c\x04\xa1\xa0\x8c\xc1\xe6\x00'/375, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x200000000000, 0x0) 13.976753817s ago: executing program 0 (id=1605): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/198, 0xc6}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.640037909s ago: executing program 1 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0}, 0x90) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 13.404863286s ago: executing program 0 (id=1609): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0c) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r4, 0x0, 0x4cd) 9.5909495s ago: executing program 0 (id=1610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000000858045301000000000001090224000100000000090400000103000000092100000001220500090581030000000000f072dedce6eac8772fef"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5f, {0x5f, 0x0, "a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810ac55fbda3e39fcbe111cc28def45137dd52b615507901e312253d859be5cdac84dd1ab0ebff44827"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.910433511s ago: executing program 2 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x0, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 8.758774166s ago: executing program 4 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x8, 0x3}) 8.604438618s ago: executing program 2 (id=1616): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) 8.144895495s ago: executing program 4 (id=1617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "64d0"}, @global, @main=@item_4={0x3, 0x0, 0x0, "153c0023"}]}}, 0x0}, 0x0) 7.31570394s ago: executing program 1 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x2006e2) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r4 = memfd_secret(0x0) ftruncate(r4, 0x5) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffc, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000440)="4221fa3c7de2d20162e2bf5d0301b60a578ef8f2c4221efa44314e8196a1131d152a8517d40b6139229bcc885873ea69a94f2aa42e5f557befccac3ffe72c3a5062d1c17330a4b0b84add21799eba836de7be7e9f7c27c0b8d052f784989432f1841ee421d9bd4f0a9d8fa5a64076472f674f800b43169558f75cc4bf115ef0325569902cb63d2dfcf23b84e2af8b0c8e7081e6d41ad5e67197abceab1b51bd30cc857b696fe7790", 0xa8, 0x50af7aada91ebcf6, &(0x7f00000003c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) accept4(r6, 0x0, 0x0, 0x180800) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_ts_info={0x9}}) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000001b80), 0x0}, 0x20) 7.076751205s ago: executing program 2 (id=1619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019000300000008000a"], 0x4c}}, 0x0) 6.461943832s ago: executing program 2 (id=1620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) syz_usb_disconnect(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0) 6.204791641s ago: executing program 0 (id=1621): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f0000000180)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5) 5.452797227s ago: executing program 4 (id=1624): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x4d, 0x8826, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x44, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f0000000140)) r7 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r8 = dup(r7) write$cgroup_pid(r8, &(0x7f0000000040)=0xffffffffffffffff, 0xe) sendfile(r7, r8, &(0x7f00000003c0), 0x6c03) socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 5.386515053s ago: executing program 2 (id=1625): socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r0], 0x20}}, 0x0) 5.238866545s ago: executing program 3 (id=1626): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xee01}, {0x0, 0x0, 0x80000000000000}, {0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0xe}}, 0xe8) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x81, 0x0, 0x7, 0x0, [{0x0, 0xf776}, {0x1000007}, {0x8, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x9, 0x8}, {0x0, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0xc0844123, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) ioprio_set$uid(0x3, 0x0, 0x0) chdir(0x0) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x63) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/53, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/96, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) 5.061172835s ago: executing program 1 (id=1627): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) 3.819774045s ago: executing program 3 (id=1628): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0x2}]}}}]}, 0x48}}, 0x0) 3.701090157s ago: executing program 4 (id=1629): socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0100"], 0x13c}}, 0x0) 3.632747046s ago: executing program 2 (id=1630): pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = open(&(0x7f00000020c0)='./file0\x00', 0x12538eea49676355, 0x0) ftruncate(r1, 0x88801) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x400000e, 0x4088053, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0xff5, &(0x7f0000000800)="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", 0x0, 0x0, &(0x7f0000000380)}) r3 = dup(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000000) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x43d, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x5e, 0x401, 0x0, 0x25dfdbfb, "", [@typed={0x4}, @typed={0x8, 0x3ffd, 0x0, 0x0, @uid}]}, 0x1c}], 0x1}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYBLOB="0000000e000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001b00)=ANY=[@ANYBLOB], 0x120}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) 3.487490542s ago: executing program 1 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 3.447966376s ago: executing program 3 (id=1632): syz_open_procfs(0x0, &(0x7f0000000640)='task\x00') socket$pppoe(0x18, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000600)='comm\x00') r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.029192265s ago: executing program 3 (id=1633): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000aeb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 2.973545724s ago: executing program 4 (id=1634): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendfile(r1, r2, 0x0, 0x200) 2.951578124s ago: executing program 1 (id=1635): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 2.596311695s ago: executing program 3 (id=1636): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = userfaultfd(0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}]}]}, 0x44}}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000100)={0x10}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/167, 0xa7) 153.762114ms ago: executing program 1 (id=1637): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x8, 0xd}, {0x8, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 112.774513ms ago: executing program 4 (id=1638): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x6e20, 0x0, @empty}, 0x1c) listen(r2, 0x80) listen(r1, 0x3) 0s ago: executing program 3 (id=1639): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): ice strings: Mfr=0, Product=0, SerialNumber=0 [ 636.125557][ T5275] usb 2-1: config 0 descriptor?? [ 636.139623][ T2509] bridge_slave_1: left allmulticast mode [ 636.145476][ T2509] bridge_slave_1: left promiscuous mode [ 636.152066][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.166160][ T2509] bridge_slave_0: left allmulticast mode [ 636.172555][ T2509] bridge_slave_0: left promiscuous mode [ 636.178531][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.612987][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.628469][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.763146][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 636.779035][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 636.787208][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 636.809795][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 636.819948][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 636.850541][ T5275] samsung 0003:0419:0600.0007: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 637.411043][ T5231] Bluetooth: hci2: command tx timeout [ 638.031269][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.115817][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.179193][ T2509] bond0 (unregistering): Released all slaves [ 639.473077][ T5231] Bluetooth: hci2: command tx timeout [ 639.552726][ T8678] usb 2-1: USB disconnect, device number 17 [ 640.572721][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 640.584487][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 640.596663][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 640.607736][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 640.617515][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 640.625806][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.730376][ T2509] hsr_slave_0: left promiscuous mode [ 640.743619][ T2509] hsr_slave_1: left promiscuous mode [ 640.764191][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.777893][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.797002][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.820436][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.927198][ T2509] veth1_macvtap: left promiscuous mode [ 640.933886][ T2509] veth0_macvtap: left promiscuous mode [ 640.940908][ T2509] veth1_vlan: left promiscuous mode [ 640.948553][ T2509] veth0_vlan: left promiscuous mode [ 641.562113][ T5238] Bluetooth: hci2: command tx timeout [ 642.408871][ T2509] team0 (unregistering): Port device team_slave_1 removed [ 642.487188][ T2509] team0 (unregistering): Port device team_slave_0 removed [ 642.676122][ T5238] Bluetooth: hci5: command tx timeout [ 643.636604][ T5238] Bluetooth: hci2: command tx timeout [ 643.663298][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 643.663322][ T29] audit: type=1400 audit(1723165390.604:1136): avc: denied { mount } for pid=9388 comm="syz.4.1200" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 644.753228][ T5238] Bluetooth: hci5: command tx timeout [ 645.007278][ T9341] chnl_net:caif_netlink_parms(): no params data found [ 645.244706][ T2509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.565082][ T2509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.703654][ T9415] can0: slcan on ptm0. [ 645.888890][ T2509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.231793][ T9414] can0 (unregistered): slcan off ptm0. [ 646.300450][ T2509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.551064][ T29] audit: type=1326 audit(1723165393.484:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.4.1211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46547779f9 code=0x0 [ 646.599669][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.655340][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.689010][ T9341] bridge_slave_0: entered allmulticast mode [ 646.733878][ T9341] bridge_slave_0: entered promiscuous mode [ 646.795208][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.811060][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.826662][ T9341] bridge_slave_1: entered allmulticast mode [ 646.832985][ T5238] Bluetooth: hci5: command tx timeout [ 646.866548][ T9341] bridge_slave_1: entered promiscuous mode [ 646.889420][ T29] audit: type=1400 audit(1723165393.824:1138): avc: denied { ioctl } for pid=9428 comm="syz.4.1211" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 647.089613][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 647.138432][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.160508][ T9197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 647.223233][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.281521][ T9197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 647.302046][ T9197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.912461][ T5238] Bluetooth: hci5: command tx timeout [ 648.972470][ T9341] team0: Port device team_slave_0 added [ 649.002198][ T9197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.058784][ T9341] team0: Port device team_slave_1 added [ 649.363809][ T9453] sctp: [Deprecated]: syz.4.1215 (pid 9453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 649.363809][ T9453] Use struct sctp_sack_info instead [ 649.467255][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.506075][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.670882][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.905696][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.913619][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.921258][ T9371] bridge_slave_0: entered allmulticast mode [ 649.939648][ T9371] bridge_slave_0: entered promiscuous mode [ 649.951412][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.958426][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.018816][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.175017][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.185599][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.199828][ T9371] bridge_slave_1: entered allmulticast mode [ 650.222953][ T9371] bridge_slave_1: entered promiscuous mode [ 650.572860][ T2509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.743805][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.881536][ T2509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.974187][ T29] audit: type=1400 audit(1723165397.914:1139): avc: denied { setopt } for pid=9454 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 651.023349][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 651.066020][ T9341] hsr_slave_0: entered promiscuous mode [ 651.090305][ T9341] hsr_slave_1: entered promiscuous mode [ 651.126147][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.264704][ T2509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.447335][ T9371] team0: Port device team_slave_0 added [ 651.460106][ T9371] team0: Port device team_slave_1 added [ 651.525174][ T2509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.746862][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.760802][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.793608][ T5209] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 651.820798][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.835548][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.843442][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.869471][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.880453][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.927760][ T29] audit: type=1400 audit(1723165398.864:1140): avc: denied { mounton } for pid=9460 comm="syz.1.1220" path="/proc/405/cgroup" dev="proc" ino=30908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 651.995631][ T29] audit: type=1400 audit(1723165398.864:1141): avc: denied { mounton } for pid=9460 comm="syz.1.1220" path="/proc/405/cgroup" dev="proc" ino=30905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 652.019422][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.115310][ T5209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.227935][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.341970][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 652.354146][ T5209] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 652.364274][ T5209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.405832][ T5209] usb 5-1: config 0 descriptor?? [ 652.446672][ T9457] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 652.474771][ T5209] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.773255][ T5209] usb 5-1: USB disconnect, device number 14 [ 653.003067][ T9371] hsr_slave_0: entered promiscuous mode [ 653.010200][ T9371] hsr_slave_1: entered promiscuous mode [ 653.018084][ T9371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.026497][ T9371] Cannot create hsr debugfs directory [ 653.192799][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.564165][ T2509] bridge_slave_1: left allmulticast mode [ 653.580868][ T2509] bridge_slave_1: left promiscuous mode [ 653.586812][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.595767][ T9472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 653.614259][ T2509] bridge_slave_0: left allmulticast mode [ 653.630812][ T2509] bridge_slave_0: left promiscuous mode [ 653.641376][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.661969][ T9472] kvm: pic: level sensitive irq not supported [ 653.662072][ T9472] kvm: pic: non byte read [ 653.663474][ T2509] team0: left allmulticast mode [ 653.668754][ T9472] kvm: pic: level sensitive irq not supported [ 653.679381][ T2509] team_slave_0: left allmulticast mode [ 653.702847][ T9472] kvm: pic: non byte read [ 653.706029][ T2509] team_slave_1: left allmulticast mode [ 653.719813][ T2509] team0: left promiscuous mode [ 653.740680][ T2509] team_slave_0: left promiscuous mode [ 653.747284][ T2509] team_slave_1: left promiscuous mode [ 653.779133][ T2509] bridge0: port 3(team0) entered disabled state [ 653.822173][ T2509] bridge_slave_1: left allmulticast mode [ 653.831611][ T2509] bridge_slave_1: left promiscuous mode [ 653.837858][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.867306][ T2509] bridge_slave_0: left allmulticast mode [ 653.886457][ T2509] bridge_slave_0: left promiscuous mode [ 653.899353][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.481691][ T9484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1227'. [ 655.929820][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.948290][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.963512][ T2509] bond0 (unregistering): Released all slaves [ 655.984059][ T2509] bond1 (unregistering): Released all slaves [ 656.215756][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.228587][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.243202][ T2509] bond0 (unregistering): Released all slaves [ 656.487433][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.788508][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.000816][ T1184] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 657.058557][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.065846][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.147535][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.154876][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.180763][ T1184] usb 2-1: Using ep0 maxpacket: 32 [ 657.236359][ T1184] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 657.322496][ T1184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 657.417899][ T1184] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 657.459738][ T1184] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 657.507635][ T1184] usb 2-1: Product: syz [ 657.541120][ T1184] usb 2-1: Manufacturer: syz [ 657.545800][ T1184] usb 2-1: SerialNumber: syz [ 657.609251][ T1184] usb 2-1: config 0 descriptor?? [ 657.663871][ T1184] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 657.699925][ T1184] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 657.920882][ T2509] hsr_slave_0: left promiscuous mode [ 658.006733][ T2509] hsr_slave_1: left promiscuous mode [ 658.041731][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.060403][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.102091][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.109651][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.156978][ T1173] usb 2-1: USB disconnect, device number 18 [ 658.163437][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 658.201901][ T1173] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 658.209455][ T2509] hsr_slave_0: left promiscuous mode [ 658.221444][ T2509] hsr_slave_1: left promiscuous mode [ 658.244357][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.256010][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.268756][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.281135][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.344413][ T2509] veth1_macvtap: left promiscuous mode [ 658.350173][ T2509] veth0_macvtap: left promiscuous mode [ 658.354318][ T9498] ldusb: No device or device unplugged -19 [ 658.356007][ T2509] veth1_vlan: left promiscuous mode [ 658.368853][ T2509] veth0_vlan: left promiscuous mode [ 658.378714][ T2509] veth1_macvtap: left promiscuous mode [ 658.384485][ T2509] veth0_macvtap: left promiscuous mode [ 658.390180][ T2509] veth1_vlan: left allmulticast mode [ 658.395909][ T2509] veth1_vlan: left promiscuous mode [ 658.402564][ T2509] veth0_vlan: left promiscuous mode [ 658.510857][ T1184] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 658.707393][ T1184] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 658.717662][ T1184] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 658.736342][ T1184] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 658.747119][ T1184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.757998][ T1184] usb 5-1: Product: syz [ 658.773219][ T1184] usb 5-1: Manufacturer: syz [ 658.777900][ T1184] usb 5-1: SerialNumber: syz [ 658.788190][ T1184] usb 5-1: config 0 descriptor?? [ 658.797706][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 658.805844][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 659.033161][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 659.053529][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 659.589055][ T1184] dm9601: No valid MAC address in EEPROM, using 2a:b9:b7:a6:c2:96 [ 659.607983][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 659.829550][ T1184] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 660.333281][ T1184] usb 5-1: USB disconnect, device number 15 [ 660.909793][ T9527] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 660.929815][ T9527] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1240'. [ 660.962727][ T2509] team0 (unregistering): Port device team_slave_1 removed [ 661.091870][ T2509] team0 (unregistering): Port device team_slave_0 removed [ 662.282128][ T2509] pim6reg (unregistering): left allmulticast mode [ 662.335639][ T1173] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 662.451950][ T2509] macvlan1 (unregistering): left allmulticast mode [ 662.550792][ T1173] usb 2-1: Using ep0 maxpacket: 8 [ 662.561198][ T1173] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 662.569574][ T1173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.584036][ T1173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.595541][ T1173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.620807][ T1173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.635902][ T1173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 662.645955][ T1173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.886386][ T1173] usb 2-1: GET_CAPABILITIES returned 0 [ 662.892369][ T1173] usbtmc 2-1:16.0: can't read capabilities [ 663.091176][ T2509] team0 (unregistering): Port device team_slave_1 removed [ 663.177480][ T2509] team0 (unregistering): Port device team_slave_0 removed [ 663.340551][ T9532] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 663.372255][ T1173] usb 2-1: USB disconnect, device number 19 [ 664.093213][ T9341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.187658][ T9341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.248296][ T9341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.409960][ T9341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.629074][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.035200][ T9197] veth0_vlan: entered promiscuous mode [ 665.091221][ T5279] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 665.101481][ T9197] veth1_vlan: entered promiscuous mode [ 665.220794][ T8678] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 665.332215][ T5279] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 665.356234][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.375554][ T9371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 665.393634][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.397143][ T9371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.414567][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.427281][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.439808][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.454511][ T9371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 665.454701][ T8678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.472716][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.486980][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.492934][ T8678] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.507170][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 665.507266][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ee.8d [ 665.507309][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.538154][ T5279] pwc: Logitech QuickCam Zoom USB webcam detected. [ 665.543657][ T9371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.556748][ T5279] pwc: Warning: more than 1 configuration available. [ 665.577129][ T9197] veth0_macvtap: entered promiscuous mode [ 665.590388][ T8678] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 665.599757][ T8678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 665.626082][ T8678] usb 5-1: SerialNumber: syz [ 665.673905][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.686232][ T9197] veth1_macvtap: entered promiscuous mode [ 665.756234][ T5279] pwc: Failed to set LED on/off time (-71) [ 665.771653][ T5279] pwc: send_video_command error -71 [ 665.778282][ T5279] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 665.812531][ T5279] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 665.826804][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.898331][ T8678] usb 5-1: 0:2 : does not exist [ 665.907337][ T5279] usb 2-1: USB disconnect, device number 20 [ 665.924806][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.969542][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.990979][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.000735][ T8678] usb 5-1: USB disconnect, device number 16 [ 666.002722][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.027306][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.047013][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.071985][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.166654][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.174009][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.198125][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.205386][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.225372][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.236165][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.247452][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.263475][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.279555][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.290197][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.310746][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.329887][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.408723][ T9197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.434343][ T9197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.443674][ T9197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.452631][ T9197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.805111][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.815376][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.916004][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.064516][ T29] audit: type=1400 audit(1723165414.004:1142): avc: denied { setattr } for pid=9556 comm="syz.4.1251" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 667.101279][ T2536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.121515][ T2536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.137011][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.203820][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.211150][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.276028][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.283499][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.658032][ T29] audit: type=1400 audit(1723165414.594:1143): avc: denied { ioctl } for pid=9560 comm="syz.4.1252" path="socket:[30692]" dev="sockfs" ino=30692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 667.719802][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.241180][ T9341] veth0_vlan: entered promiscuous mode [ 668.313131][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.427725][ T9341] veth1_vlan: entered promiscuous mode [ 668.665323][ T9341] veth0_macvtap: entered promiscuous mode [ 668.738975][ T9341] veth1_macvtap: entered promiscuous mode [ 668.746117][ T5275] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 669.021592][ T5275] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 669.173391][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.295658][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.313664][ T5275] usb 3-1: config 0 descriptor?? [ 669.329984][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.359282][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.390819][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.417119][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.438267][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.457793][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.478939][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.519001][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.546374][ T9371] veth0_vlan: entered promiscuous mode [ 669.638319][ T29] audit: type=1400 audit(1723165416.574:1144): avc: denied { create } for pid=9580 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 669.695062][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.734931][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.766503][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.795636][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.820830][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.833839][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.855325][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.886530][ T9581] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 669.893569][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.913806][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.984285][ T9341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.016649][ T9341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.053044][ T9341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.066116][ T9341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.099178][ T9371] veth1_vlan: entered promiscuous mode [ 670.465311][ T9371] veth0_macvtap: entered promiscuous mode [ 670.544393][ T9371] veth1_macvtap: entered promiscuous mode [ 670.883094][ T5275] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 671.007326][ T5275] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 671.132463][ T5275] asix 3-1:0.0: probe with driver asix failed with error -71 [ 671.178504][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.267462][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.430009][ T5275] usb 3-1: USB disconnect, device number 22 [ 671.611184][ T29] audit: type=1326 audit(1723165418.454:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f725779f9 code=0x0 [ 671.803117][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.843032][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.884354][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.919010][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.988013][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.036104][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.080561][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.104429][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.125521][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.144789][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.174249][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.223771][ T2509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.236274][ T2509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.518266][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.847157][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.910732][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.040493][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.321396][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.827476][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.859853][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.882989][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.908379][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.927414][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.941693][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.010214][ T9371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.057867][ T9371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.078035][ T9371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.100495][ T9371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.875219][ T5362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.902296][ T5362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.395288][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.415949][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.021161][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 676.151714][ T8678] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 676.184833][ T29] audit: type=1400 audit(1723165423.124:1146): avc: denied { map } for pid=9638 comm="syz.0.1275" path="socket:[33401]" dev="sockfs" ino=33401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 676.311280][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'. [ 676.382561][ T8678] usb 2-1: Using ep0 maxpacket: 32 [ 676.395711][ T8678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.420559][ T8678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.466615][ T8678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 676.521973][ T8678] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 676.546315][ T8678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.578210][ T8678] usb 2-1: config 0 descriptor?? [ 677.195310][ T8678] itetech 0003:048D:8595.0008: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 677.318349][ T9665] serio: Serial port ptm0 [ 678.191530][ T5231] Bluetooth: hci0: command 0x0405 tx timeout [ 678.479402][ T5305] usb 2-1: USB disconnect, device number 21 [ 679.024048][ T29] audit: type=1400 audit(1723165425.794:1147): avc: denied { connect } for pid=9684 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 679.904247][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.911575][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.959426][ T29] audit: type=1400 audit(1723165426.884:1148): avc: denied { ioctl } for pid=9690 comm="syz.3.1292" path="socket:[32172]" dev="sockfs" ino=32172 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 680.077732][ T29] audit: type=1400 audit(1723165426.984:1149): avc: denied { ioctl } for pid=9672 comm="syz.4.1284" path="socket:[32180]" dev="sockfs" ino=32180 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 687.902925][ T9722] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 688.832668][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 688.894697][ T29] audit: type=1400 audit(1723165435.824:1150): avc: denied { listen } for pid=9728 comm="syz.0.1303" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 689.050748][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 689.064209][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 689.087794][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 689.111349][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.151458][ T9] usb 4-1: Product: syz [ 689.155697][ T9] usb 4-1: Manufacturer: syz [ 689.191284][ T9] usb 4-1: SerialNumber: syz [ 689.212594][ T9] usb 4-1: config 0 descriptor?? [ 689.243287][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 689.268783][ T29] audit: type=1400 audit(1723165436.204:1151): avc: denied { ioctl } for pid=9732 comm="syz.1.1305" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.302672][ T9] usb 4-1: Detected FT232R [ 689.540030][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 689.591880][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 689.662299][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 689.687293][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 689.766146][ T9] usb 4-1: USB disconnect, device number 20 [ 689.776308][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.791691][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.802090][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.816136][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.831685][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 689.839495][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.484985][ T29] audit: type=1400 audit(1723165437.184:1152): avc: denied { create } for pid=9735 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 690.893239][ T29] audit: type=1400 audit(1723165437.204:1153): avc: denied { write } for pid=9735 comm="syz.0.1306" path="socket:[33561]" dev="sockfs" ino=33561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 691.221348][ T1184] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 691.484138][ T1184] usb 2-1: Using ep0 maxpacket: 8 [ 691.491192][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.643832][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 691.684739][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.918144][ T9] ftdi_sio 4-1:0.0: device disconnected [ 691.953320][ T5231] Bluetooth: hci0: command tx timeout [ 692.051776][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.071674][ T1184] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 692.104735][ T1184] usb 2-1: config 1 has no interface number 1 [ 692.120993][ T1184] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 692.150908][ T1184] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 692.206824][ T1184] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.263835][ T1184] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.296989][ T1184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.351095][ T1184] usb 2-1: Product: syz [ 692.359411][ T1184] usb 2-1: Manufacturer: syz [ 692.379933][ T1184] usb 2-1: SerialNumber: syz [ 692.412711][ T9746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.558665][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.897127][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.898174][ T1184] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 692.977915][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 693.000916][ T9765] netlink: 'syz.3.1310': attribute type 25 has an invalid length. [ 693.071754][ T1184] usb 2-1: USB disconnect, device number 22 [ 693.189574][ T9765] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.199655][ T9765] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.208496][ T9765] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.217338][ T9765] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.364594][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.433247][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.070945][ T5231] Bluetooth: hci0: command tx timeout [ 694.123141][ T34] bridge_slave_1: left allmulticast mode [ 694.128860][ T34] bridge_slave_1: left promiscuous mode [ 694.192331][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.267523][ T34] bridge_slave_0: left allmulticast mode [ 694.301083][ T34] bridge_slave_0: left promiscuous mode [ 694.310265][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.433277][ T9779] hfs: can't find a HFS filesystem on dev nullb0 [ 696.110716][ T5231] Bluetooth: hci0: command tx timeout [ 698.230818][ T5231] Bluetooth: hci0: command tx timeout [ 698.512369][ T9811] Bluetooth: MGMT ver 1.23 [ 699.396135][ T29] audit: type=1400 audit(1723165446.324:1154): avc: denied { write } for pid=9815 comm="syz.0.1327" path="socket:[32426]" dev="sockfs" ino=32426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 699.865640][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.880477][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.890053][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.933503][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.943699][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 699.952269][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.084391][ T5305] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 700.119198][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.147520][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.173597][ T34] bond0 (unregistering): Released all slaves [ 700.255327][ T9734] chnl_net:caif_netlink_parms(): no params data found [ 700.288708][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.346019][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.370487][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 700.381024][ T9807] netlink: 'syz.1.1323': attribute type 30 has an invalid length. [ 700.389087][ T5305] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.404586][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.479143][ T5305] usb 4-1: config 0 descriptor?? [ 700.601185][ T5231] Bluetooth: hci0: command tx timeout [ 701.294916][ T5305] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 701.466153][ T5305] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 701.841412][ T34] hsr_slave_0: left promiscuous mode [ 701.859838][ T34] hsr_slave_1: left promiscuous mode [ 701.873895][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.883527][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.913282][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.937096][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.031295][ T5231] Bluetooth: hci6: command tx timeout [ 702.264247][ T34] veth1_macvtap: left promiscuous mode [ 702.273913][ T34] veth0_macvtap: left promiscuous mode [ 702.280090][ T34] veth1_vlan: left promiscuous mode [ 702.286859][ T34] veth0_vlan: left promiscuous mode [ 703.690668][ T1184] usb 4-1: USB disconnect, device number 21 [ 703.899685][ T29] audit: type=1400 audit(1723165450.834:1155): avc: denied { module_load } for pid=9840 comm="syz.3.1334" path=2F6D656D66643A2D42D54E49C56A9A706987B9029524F10C0B18202864656C6574656429 dev="hugetlbfs" ino=32511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 703.909377][ T9842] Invalid ELF header magic: != ELF [ 703.928927][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.120773][ T5231] Bluetooth: hci6: command tx timeout [ 704.159457][ T34] team0 (unregistering): Port device team_slave_1 removed [ 704.251899][ T34] team0 (unregistering): Port device team_slave_0 removed [ 705.140706][ T1184] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 705.176217][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.186130][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.193899][ T9734] bridge_slave_0: entered allmulticast mode [ 705.202938][ T9734] bridge_slave_0: entered promiscuous mode [ 705.234093][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.251420][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.258771][ T9734] bridge_slave_1: entered allmulticast mode [ 705.283599][ T9734] bridge_slave_1: entered promiscuous mode [ 705.340728][ T1184] usb 4-1: Using ep0 maxpacket: 8 [ 705.356252][ T1184] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 705.375814][ T1184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.404026][ T1184] usb 4-1: config 0 descriptor?? [ 705.427712][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.448639][ T1184] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.513511][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.700367][ T29] audit: type=1400 audit(1723165452.634:1156): avc: denied { connect } for pid=9850 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 705.751993][ T1184] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 705.889546][ T9734] team0: Port device team_slave_0 added [ 705.958252][ T9734] team0: Port device team_slave_1 added [ 706.072163][ T9468] udevd[9468]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.192086][ T5231] Bluetooth: hci6: command tx timeout [ 706.253051][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.261848][ T1184] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 706.281597][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.426884][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.179942][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.211541][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.269144][ T1184] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.285775][ T1184] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.300718][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.326771][ T1184] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 707.350970][ T1184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 707.359084][ T1184] usb 2-1: SerialNumber: syz [ 710.205702][ T5231] Bluetooth: hci6: command tx timeout [ 710.230782][ T5323] usb 4-1: USB disconnect, device number 22 [ 710.979921][ T1184] usb 2-1: skipping empty audio interface (v1) [ 711.096193][ T1184] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 711.171651][ T1184] usb 2-1: USB disconnect, device number 23 [ 711.263948][ T9734] hsr_slave_0: entered promiscuous mode [ 711.314758][ T9734] hsr_slave_1: entered promiscuous mode [ 711.353093][ T9734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.370902][ T9734] Cannot create hsr debugfs directory [ 711.446398][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.736290][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 711.746675][ T9864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1342'. [ 711.918758][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.308901][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.514160][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.679774][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.688554][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.697751][ T9823] bridge_slave_0: entered allmulticast mode [ 712.725825][ T9823] bridge_slave_0: entered promiscuous mode [ 712.770348][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.828917][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.847635][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.863006][ T9823] bridge_slave_1: entered allmulticast mode [ 712.871342][ T9823] bridge_slave_1: entered promiscuous mode [ 713.113222][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.280148][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.296682][ T9882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 713.331328][ T29] audit: type=1400 audit(1723165460.264:1157): avc: denied { map } for pid=9881 comm="syz.3.1347" path="socket:[33899]" dev="sockfs" ino=33899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.563757][ T9823] team0: Port device team_slave_0 added [ 713.601604][ T9823] team0: Port device team_slave_1 added [ 713.963213][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.970231][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.000533][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.044487][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.065753][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.092977][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.105273][ T34] bridge_slave_1: left allmulticast mode [ 714.114083][ T34] bridge_slave_1: left promiscuous mode [ 714.121196][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.133863][ T34] bridge_slave_0: left allmulticast mode [ 714.139636][ T34] bridge_slave_0: left promiscuous mode [ 714.147670][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.210847][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 714.421227][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 714.434729][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 714.454118][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.473502][ T9] usb 2-1: config 0 descriptor?? [ 715.177417][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.209634][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.230439][ T34] bond0 (unregistering): Released all slaves [ 715.327117][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 715.717393][ T9823] hsr_slave_0: entered promiscuous mode [ 715.961404][ T9823] hsr_slave_1: entered promiscuous mode [ 716.011027][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.030276][ T9823] Cannot create hsr debugfs directory [ 718.775883][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 718.813410][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 718.900616][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 719.014368][ T9] usb 2-1: USB disconnect, device number 24 [ 719.054770][ T9470] udevd[9470]: failed to send result of seq 19336 to main daemon: Connection refused [ 719.338513][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1357'. [ 719.472110][ T9469] udevd[9469]: failed to send result of seq 19333 to main daemon: Transport endpoint is not connected [ 719.664999][ T34] hsr_slave_0: left promiscuous mode [ 719.681069][ T34] hsr_slave_1: left promiscuous mode [ 719.687806][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.696977][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.706217][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.714201][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.838439][ T34] veth1_macvtap: left promiscuous mode [ 719.848616][ T34] veth0_macvtap: left promiscuous mode [ 719.871615][ T34] veth1_vlan: left promiscuous mode [ 719.879694][ T34] veth0_vlan: left promiscuous mode [ 719.930698][ T5277] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 720.131026][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 720.145611][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 720.157611][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 720.181825][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.218037][ T5277] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 720.228513][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 720.243436][ T5277] usb 2-1: Product: syz [ 720.247767][ T5277] usb 2-1: Manufacturer: syz [ 720.252835][ T5277] usb 2-1: SerialNumber: syz [ 720.263611][ T9922] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.280208][ T5277] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15 [ 720.358517][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 720.512739][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 720.567852][ T5277] usb 2-1: USB disconnect, device number 25 [ 720.649768][ T5277] appletouch 2-1:1.0: input: appletouch disconnected [ 721.519405][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'. [ 721.910645][ T34] team0 (unregistering): Port device team_slave_1 removed [ 722.048484][ T34] team0 (unregistering): Port device team_slave_0 removed [ 723.254215][ T29] audit: type=1400 audit(1723165470.194:1158): avc: denied { ioctl } for pid=9940 comm="syz.0.1367" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 723.350444][ T9734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 723.459770][ T9734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.497390][ T9734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.546897][ T9734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 724.531906][ T9951] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 725.638768][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.729938][ T9734] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.774230][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.781535][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.860475][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.867789][ T5209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.960769][ T1184] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 726.192516][ T1184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.220245][ T1184] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.248031][ T9823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.254408][ T1184] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 726.279844][ T1184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.310726][ T1184] usb 2-1: Product: syz [ 726.315067][ T1184] usb 2-1: Manufacturer: syz [ 726.325373][ T1184] usb 2-1: SerialNumber: syz [ 726.345457][ T1184] usb 2-1: config 0 descriptor?? [ 726.368927][ T9823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 726.386433][ T9823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 726.399543][ T1184] usb 2-1: Found UVC 0.00 device syz (468c:90ea) [ 726.419819][ T1184] usb 2-1: No valid video chain found. [ 726.437990][ T9823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.479413][ T9734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.059972][ T29] audit: type=1400 audit(1723165473.994:1159): avc: denied { read } for pid=9957 comm="syz.1.1372" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 727.209956][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.449890][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.516205][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.565722][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.573030][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.706592][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.713950][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.023150][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 728.820789][ T5209] usb 2-1: USB disconnect, device number 26 [ 728.824471][ T9734] veth0_vlan: entered promiscuous mode [ 728.952522][ T9734] veth1_vlan: entered promiscuous mode [ 729.551085][ T5305] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 730.233840][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 730.268735][ T5305] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice= 5.fc [ 730.298609][ T9734] veth0_macvtap: entered promiscuous mode [ 730.300952][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.348584][ T5305] usb 4-1: Product: syz [ 730.356351][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.356463][ T5305] usb 4-1: Manufacturer: syz [ 730.381954][ T9734] veth1_macvtap: entered promiscuous mode [ 730.392861][ T5305] usb 4-1: SerialNumber: syz [ 730.402524][ T5305] usb 4-1: config 0 descriptor?? [ 730.497976][ T9997] netlink: 'syz.0.1381': attribute type 2 has an invalid length. [ 730.519451][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 730.545175][ T9997] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 730.623925][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.643891][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.661350][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.682882][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.724712][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.745756][ T5305] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 730.763859][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.796271][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.807008][ T5305] usb 4-1: USB disconnect, device number 23 [ 730.832533][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.853262][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.905711][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.919703][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.931146][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.945064][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.955443][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.989536][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.002960][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.014057][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.027362][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.146645][ T9734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.200987][ T9734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.209811][ T9734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.219249][ T9734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.258477][ T9823] veth0_vlan: entered promiscuous mode [ 731.340503][ T9823] veth1_vlan: entered promiscuous mode [ 731.747509][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.780628][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.839088][ T9823] veth0_macvtap: entered promiscuous mode [ 731.935485][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.948394][ T9823] veth1_macvtap: entered promiscuous mode [ 731.967469][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.062513][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.092006][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.104117][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.117167][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.131086][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.154124][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.180261][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.195468][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.207372][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.229843][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.263587][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.359985][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.387881][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.446768][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.471776][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.517957][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.546101][T10005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.556435][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.587391][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.664238][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.690664][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.708291][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.735881][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.919994][ T9823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.957707][ T9823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.988236][ T9823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.038541][T10023] netlink: 'syz.4.1388': attribute type 20 has an invalid length. [ 733.068694][ T9823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.747985][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.761537][ T5323] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 733.769896][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.977431][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.991269][ T5323] usb 4-1: Using ep0 maxpacket: 16 [ 733.995247][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.027559][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 734.071603][ T5323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 734.091043][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.118374][ T5323] usb 4-1: Product: syz [ 734.130857][ T5323] usb 4-1: Manufacturer: syz [ 734.156073][ T5323] usb 4-1: SerialNumber: syz [ 734.201979][ T5323] usb 4-1: config 0 descriptor?? [ 734.233687][ T5323] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 734.266970][ T5323] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 734.873442][ T5323] em28xx 4-1:0.0: chip ID is em2860 [ 735.230485][ T5323] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 735.246184][ T5323] em28xx 4-1:0.0: board has no eeprom [ 735.314612][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1397'. [ 735.400697][ T5323] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 735.418880][ T5323] em28xx 4-1:0.0: dvb set to bulk mode. [ 735.446501][ T5305] em28xx 4-1:0.0: Binding DVB extension [ 735.487583][ T5323] usb 4-1: USB disconnect, device number 24 [ 735.532126][ T5323] em28xx 4-1:0.0: Disconnecting em28xx [ 735.702507][ T5305] em28xx 4-1:0.0: Registering input extension [ 735.936809][ T5305] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 735.991200][ T5305] Registered IR keymap rc-empty [ 736.045486][ T5305] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 736.092895][ T5305] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 736.173282][ T5305] em28xx 4-1:0.0: Input extension successfully initialized [ 736.181587][ T5209] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 736.216752][ T5323] em28xx 4-1:0.0: Closing input extension [ 736.402576][ T5209] usb 2-1: Using ep0 maxpacket: 16 [ 736.454870][ T5209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 736.510784][ T5209] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 736.533698][ T5323] em28xx 4-1:0.0: Freeing device [ 736.597088][ T5209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.673729][ T5209] usb 2-1: config 0 descriptor?? [ 736.708277][ T29] audit: type=1400 audit(1723165483.624:1160): avc: denied { nlmsg_write } for pid=10038 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 736.794611][ T5209] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 737.011124][ T4655] bcm5974 2-1:0.0: could not read from device [ 737.046213][ T4655] bcm5974 2-1:0.0: could not read from device [ 737.326686][ T4655] bcm5974 2-1:0.0: could not read from device [ 737.354798][ T5209] usb 2-1: USB disconnect, device number 27 [ 737.380403][ T4655] bcm5974 2-1:0.0: could not read from device [ 745.156929][ T29] audit: type=1400 audit(1723165492.094:1161): avc: denied { append } for pid=10107 comm="syz.1.1415" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 745.194050][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 745.453862][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.518956][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.585433][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 745.633900][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 745.669309][ T9] usb 3-1: SerialNumber: syz [ 745.692212][T10109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.816483][T10115] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 746.200359][ T9] usb 3-1: 0:2 : does not exist [ 746.330827][ T9] usb 3-1: USB disconnect, device number 23 [ 746.430868][ T29] audit: type=1400 audit(1723165493.344:1162): avc: denied { ioctl } for pid=10118 comm="syz.3.1419" path="socket:[35993]" dev="sockfs" ino=35993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.742455][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 746.758464][ T29] audit: type=1400 audit(1723165493.684:1163): avc: denied { name_bind } for pid=10121 comm="syz.3.1421" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 747.307967][T10124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 747.694214][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 747.716962][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 747.726664][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 747.916496][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 747.927040][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 747.943908][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.715137][ T987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.821875][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.834034][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.859781][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.879924][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.901109][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 748.919142][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.138659][ T987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.344198][ T987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.833146][ T29] audit: type=1400 audit(1723165496.764:1164): avc: denied { map } for pid=10151 comm="syz.3.1431" path="/dev/net/tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 750.562021][ T5231] Bluetooth: hci1: command tx timeout [ 750.631369][ T29] audit: type=1400 audit(1723165496.764:1165): avc: denied { execute } for pid=10151 comm="syz.3.1431" path="/dev/net/tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 750.764574][ T987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.991540][ T5231] Bluetooth: hci0: command tx timeout [ 751.780707][T10176] Bluetooth: MGMT ver 1.23 [ 752.552435][ T987] bridge_slave_1: left allmulticast mode [ 752.558257][ T987] bridge_slave_1: left promiscuous mode [ 752.824168][ T5231] Bluetooth: hci1: command tx timeout [ 752.855599][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.661708][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.668109][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.751206][ T5231] Bluetooth: hci0: command tx timeout [ 756.760725][ T5231] Bluetooth: hci1: command tx timeout [ 756.824100][ T987] bridge_slave_0: left allmulticast mode [ 756.840141][ T987] bridge_slave_0: left promiscuous mode [ 756.869400][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.967310][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.989790][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.005558][ T987] bond0 (unregistering): Released all slaves [ 758.275898][T10130] chnl_net:caif_netlink_parms(): no params data found [ 758.859912][ T5238] Bluetooth: hci1: command tx timeout [ 758.859926][ T5231] Bluetooth: hci0: command tx timeout [ 760.920967][ T5238] Bluetooth: hci0: command tx timeout [ 761.937042][T10138] chnl_net:caif_netlink_parms(): no params data found [ 762.073151][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'. [ 762.134461][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.341855][T10211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.992763][ T5238] Bluetooth: hci0: command tx timeout [ 763.978420][ T987] hsr_slave_0: left promiscuous mode [ 764.004582][ T987] hsr_slave_1: left promiscuous mode [ 764.022170][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.041431][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.055965][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.082163][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.133964][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.157683][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.158393][ T987] veth1_macvtap: left promiscuous mode [ 764.171267][ T987] veth0_macvtap: left promiscuous mode [ 764.177172][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.177290][ T987] veth1_vlan: left promiscuous mode [ 764.190032][ T987] veth0_vlan: left promiscuous mode [ 764.244540][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.252946][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 764.260904][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.280810][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 764.472600][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 764.500405][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.552162][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.578321][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 764.598225][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.618092][ T9] usb 3-1: config 0 descriptor?? [ 764.634042][ T9] qmi_wwan 3-1:0.0: bogus CDC Union: master=0, slave=2 [ 765.331060][ T29] audit: type=1400 audit(1723165511.594:1166): avc: denied { accept } for pid=10236 comm="syz.3.1450" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 765.402352][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 765.670089][ T9] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 765.695089][ T9] usb 3-1: USB disconnect, device number 24 [ 766.449112][ T54] Bluetooth: hci2: command tx timeout [ 766.585199][ T54] Bluetooth: hci5: unknown advertising packet type: 0x6b [ 766.585406][ T54] Bluetooth: hci5: Dropping invalid advertising data [ 766.635042][ T54] Bluetooth: hci5: Malformed LE Event: 0x02 [ 767.428282][ T987] team0 (unregistering): Port device team_slave_1 removed [ 767.515320][ T987] team0 (unregistering): Port device team_slave_0 removed [ 768.513650][ T54] Bluetooth: hci2: command tx timeout [ 768.707002][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.726128][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.741045][T10130] bridge_slave_0: entered allmulticast mode [ 768.759430][T10130] bridge_slave_0: entered promiscuous mode [ 768.908731][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.953504][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.000339][T10130] bridge_slave_1: entered allmulticast mode [ 769.035431][T10130] bridge_slave_1: entered promiscuous mode [ 769.089563][T10138] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.122796][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.130259][T10138] bridge_slave_0: entered allmulticast mode [ 769.143096][T10138] bridge_slave_0: entered promiscuous mode [ 769.153769][T10138] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.161830][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.169250][T10138] bridge_slave_1: entered allmulticast mode [ 769.177970][T10138] bridge_slave_1: entered promiscuous mode [ 769.387882][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.454597][ T5279] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 769.462231][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.524293][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.612386][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.703175][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 769.724354][ T5279] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 769.741529][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.756340][ T5279] usb 3-1: Product: syz [ 769.773309][ T5279] usb 3-1: Manufacturer: syz [ 769.789197][ T5279] usb 3-1: SerialNumber: syz [ 769.802726][T10130] team0: Port device team_slave_0 added [ 769.821154][ T5279] usb 3-1: config 0 descriptor?? [ 769.843668][T10130] team0: Port device team_slave_1 added [ 769.984557][T10138] team0: Port device team_slave_0 added [ 769.998132][T10138] team0: Port device team_slave_1 added [ 770.111871][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.118915][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.149820][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.257426][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.273131][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.304623][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.316750][ T5279] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 770.336037][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.348860][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.380105][ T5279] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.414685][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.427680][ T5279] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 770.439281][ T5279] usb 3-1: media controller created [ 770.458938][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.482549][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.547591][ T5279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.556176][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.591230][ T54] Bluetooth: hci2: command tx timeout [ 770.736418][ T5279] zl10353_read_register: readreg error (reg=127, ret==0) [ 770.767827][ T5279] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 770.798933][ T5279] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 770.838894][ T5279] usb 3-1: USB disconnect, device number 25 [ 771.001313][ T5279] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 771.189118][T10138] hsr_slave_0: entered promiscuous mode [ 771.199972][T10138] hsr_slave_1: entered promiscuous mode [ 771.318224][ T987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.338132][ T29] audit: type=1400 audit(1723165518.274:1167): avc: denied { setopt } for pid=10264 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 771.496156][T10130] hsr_slave_0: entered promiscuous mode [ 771.539621][T10130] hsr_slave_1: entered promiscuous mode [ 771.556775][T10130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.569593][T10130] Cannot create hsr debugfs directory [ 771.619528][ T987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.591036][ T29] audit: type=1400 audit(1723165518.764:1168): avc: denied { accept } for pid=10270 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 772.670729][ T54] Bluetooth: hci2: command tx timeout [ 772.684845][T10235] chnl_net:caif_netlink_parms(): no params data found [ 772.854851][ T987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.866180][T10278] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 774.064209][ T987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.076744][T10282] overlayfs: missing 'lowerdir' [ 776.109682][T10303] overlayfs: missing 'lowerdir' [ 776.223641][ T5279] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 776.512903][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 776.535031][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.596665][ T5279] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 776.600959][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.611181][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.722520][T10235] bridge_slave_0: entered allmulticast mode [ 776.740018][ T5279] usb 4-1: Product: syz [ 776.764347][ T5279] usb 4-1: Manufacturer: syz [ 776.788580][T10235] bridge_slave_0: entered promiscuous mode [ 776.817813][ T5279] usb 4-1: SerialNumber: syz [ 776.831224][ T5279] usb 4-1: config 0 descriptor?? [ 776.863159][ T5279] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 776.966442][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.980853][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.988283][T10235] bridge_slave_1: entered allmulticast mode [ 777.001169][T10235] bridge_slave_1: entered promiscuous mode [ 777.092774][ T5279] gspca_sn9c2028: read1 error -71 [ 777.098895][ T5279] gspca_sn9c2028: read1 error -71 [ 777.109937][ T5279] gspca_sn9c2028: read1 error -71 [ 777.132793][ T5279] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 777.145303][ T5279] usb 4-1: USB disconnect, device number 25 [ 777.447956][T10308] kvm: pic: non byte write [ 777.503869][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.999558][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.220926][T10235] team0: Port device team_slave_0 added [ 778.320801][ T987] bridge_slave_1: left allmulticast mode [ 778.326521][ T987] bridge_slave_1: left promiscuous mode [ 778.340933][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.619067][ T987] bridge_slave_0: left allmulticast mode [ 778.680243][ T987] bridge_slave_0: left promiscuous mode [ 779.214012][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.940750][ T5209] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 780.173581][ T5209] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 780.182895][ T5209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.207637][ T5209] usb 4-1: config 0 descriptor?? [ 780.220438][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.236343][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.249515][ T987] bond0 (unregistering): Released all slaves [ 780.301347][T10235] team0: Port device team_slave_1 added [ 780.653868][ T5209] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 780.654562][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.667739][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.706452][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.765535][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.783373][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.819740][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.085939][ T987] hsr_slave_0: left promiscuous mode [ 781.090852][ T5209] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 781.101744][ T5209] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 781.121068][ T987] hsr_slave_1: left promiscuous mode [ 781.127222][ T5209] usb 4-1: USB disconnect, device number 26 [ 781.134672][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.149506][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.158534][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.170085][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.208414][ T987] veth1_macvtap: left promiscuous mode [ 781.217671][ T987] veth0_macvtap: left promiscuous mode [ 781.223569][ T987] veth1_vlan: left promiscuous mode [ 781.229140][ T987] veth0_vlan: left promiscuous mode [ 781.810990][ T5305] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 782.023867][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.037917][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.048256][ T5305] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 782.058894][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.071233][ T5305] usb 3-1: config 0 descriptor?? [ 782.192441][ T5209] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 782.388769][ T5209] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.401816][ T5209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.412773][ T5209] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.422169][ T5209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.437496][ T5209] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 782.459622][ T5209] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 782.469872][ T5209] usb 4-1: Product: syz [ 782.486056][ T5209] usb 4-1: Manufacturer: syz [ 782.502271][ T5209] cdc_wdm 4-1:1.0: skipping garbage [ 782.507641][ T5209] cdc_wdm 4-1:1.0: skipping garbage [ 782.530133][ T5305] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 782.544272][ T5209] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 782.552723][ T5305] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 782.555406][ T987] team0 (unregistering): Port device team_slave_1 removed [ 782.560113][ T5209] cdc_wdm 4-1:1.0: Unknown control protocol [ 782.582234][ T5305] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000A/input/input18 [ 782.635202][ T5305] cm6533_jd 0003:0D8C:0022.000A: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 782.688746][ T987] team0 (unregistering): Port device team_slave_0 removed [ 782.870064][ T5277] usb 4-1: USB disconnect, device number 27 [ 782.929136][ T5305] usb 3-1: USB disconnect, device number 26 [ 783.943137][T10235] hsr_slave_0: entered promiscuous mode [ 783.952242][T10235] hsr_slave_1: entered promiscuous mode [ 783.963749][T10235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.983054][T10235] Cannot create hsr debugfs directory [ 784.301328][ T5279] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 784.422906][T10138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 784.436302][T10138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 784.509078][ T5279] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 784.521270][T10138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 784.540172][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.543824][T10138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 784.548470][ T5279] usb 4-1: Product: syz [ 784.569605][ T5279] usb 4-1: Manufacturer: syz [ 784.576465][ T5279] usb 4-1: SerialNumber: syz [ 784.585457][ T5279] usb 4-1: config 0 descriptor?? [ 784.851931][ T5279] usb 4-1: USB disconnect, device number 28 [ 784.955841][ T987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.140619][ T987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.288749][ T987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.533407][T10138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.693068][T10138] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.746508][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.753839][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.804812][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.812162][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.024704][ T987] bridge_slave_1: left allmulticast mode [ 786.038963][ T987] bridge_slave_1: left promiscuous mode [ 786.050944][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.075635][ T987] bridge_slave_0: left allmulticast mode [ 786.089983][ T987] bridge_slave_0: left promiscuous mode [ 786.098260][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.441329][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.514491][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.566411][ T987] bond0 (unregistering): Released all slaves [ 788.149188][ T1174] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 788.373513][ T1174] usb 4-1: Using ep0 maxpacket: 32 [ 788.388439][ T1174] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 788.419502][ T1174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.436179][ T1174] usb 4-1: Product: syz [ 788.456245][ T1174] usb 4-1: Manufacturer: syz [ 788.461213][ T1174] usb 4-1: SerialNumber: syz [ 788.477815][ T1174] usb 4-1: config 0 descriptor?? [ 788.492618][ T1174] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 788.611389][ T987] hsr_slave_0: left promiscuous mode [ 788.618351][ T987] hsr_slave_1: left promiscuous mode [ 788.633037][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.654825][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.674549][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.691755][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.739251][ T987] veth1_macvtap: left promiscuous mode [ 788.770437][ T987] veth0_macvtap: left promiscuous mode [ 788.787683][ T987] veth1_vlan: left promiscuous mode [ 788.794334][ T987] veth0_vlan: left promiscuous mode [ 789.118311][ T5323] usb 4-1: USB disconnect, device number 29 [ 791.324402][ T987] team0 (unregistering): Port device team_slave_1 removed [ 791.399821][ T5323] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 791.425381][ T987] team0 (unregistering): Port device team_slave_0 removed [ 791.611529][ T5323] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 791.619923][ T5323] usb 3-1: config 0 has no interface number 0 [ 791.631886][ T5323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.648881][ T5323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.659143][ T5323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00 [ 791.678937][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.691311][ T5323] usb 3-1: config 0 descriptor?? [ 792.166065][ T5323] uclogic 0003:256C:006D.000B: No inputs registered, leaving [ 792.185435][ T5323] uclogic 0003:256C:006D.000B: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 792.565768][ T1174] usb 3-1: USB disconnect, device number 27 [ 792.621606][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.715562][T10235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 792.795700][ T29] audit: type=1400 audit(1723165539.704:1169): avc: denied { read } for pid=10396 comm="syz.3.1501" laddr=127.0.0.1 lport=48692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 792.827431][T10235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 793.054853][T10235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 793.118858][T10235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 793.216406][T10130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 793.270739][ T5209] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 793.288635][ T987] IPVS: stop unused estimator thread 0... [ 793.295903][T10130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 793.368041][T10130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 793.403241][T10130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.460729][ T5209] usb 4-1: Using ep0 maxpacket: 8 [ 793.481680][ T5209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 793.499469][ T5209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.514242][ T5209] usb 4-1: Product: syz [ 793.518484][ T5209] usb 4-1: Manufacturer: syz [ 793.523924][ T5209] usb 4-1: SerialNumber: syz [ 793.532458][ T5209] usb 4-1: config 0 descriptor?? [ 793.776483][T10138] veth0_vlan: entered promiscuous mode [ 793.796165][ T5209] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 793.858906][T10138] veth1_vlan: entered promiscuous mode [ 793.973797][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.079207][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.090334][T10138] veth0_macvtap: entered promiscuous mode [ 794.138643][T10138] veth1_macvtap: entered promiscuous mode [ 794.182902][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.190146][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.258245][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.311720][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.318993][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.365607][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.376522][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.394967][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.407288][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.424000][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.498460][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.509474][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.526338][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.538434][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.548388][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.559560][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.573059][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.606726][T10138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.628441][T10138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.645294][T10138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.655779][T10138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.673060][T10130] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.713794][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.721184][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.778373][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.785799][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.164802][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.194554][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.352107][ T5209] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 795.386359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.396645][ T5209] usb 4-1: USB disconnect, device number 30 [ 795.427911][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.688324][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.908921][T10235] veth0_vlan: entered promiscuous mode [ 795.930317][T10235] veth1_vlan: entered promiscuous mode [ 796.045726][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.053990][ T5275] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 796.226891][T10235] veth0_macvtap: entered promiscuous mode [ 796.268191][ T5275] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 796.310561][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 796.365596][T10235] veth1_macvtap: entered promiscuous mode [ 796.390915][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 796.440866][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 796.497281][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 796.703218][ T29] audit: type=1400 audit(1723165543.534:1170): avc: denied { connect } for pid=10431 comm="syz.4.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 796.892845][ T5275] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.904353][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.916881][ T5275] usb 3-1: config 0 descriptor?? [ 796.923878][T10430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 796.945250][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.120840][ T29] audit: type=1400 audit(1723165543.994:1171): avc: denied { mount } for pid=10436 comm="syz.3.1510" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 797.249198][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.435240][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.639073][ T29] audit: type=1400 audit(1723165544.574:1172): avc: denied { unmount } for pid=9371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 797.659715][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.690224][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.715275][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.743780][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.276220][ T5275] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 798.318037][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.322163][ T5275] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 798.341130][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.379216][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.390744][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.400904][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.412118][ T5275] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 798.428204][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.448911][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.460358][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.473933][ T54] Bluetooth: hci5: unexpected event 0x04 length: 14 > 10 [ 798.502401][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.823293][T10448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.197896][T10130] veth0_vlan: entered promiscuous mode [ 799.704113][T10235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.748327][T10235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.784697][ T5209] usb 3-1: USB disconnect, device number 28 [ 799.799438][T10235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.871312][T10235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.929264][T10130] veth1_vlan: entered promiscuous mode [ 800.391815][T10130] veth0_macvtap: entered promiscuous mode [ 800.399576][T10456] input: syz0 as /devices/virtual/input/input20 [ 800.512904][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 800.547589][T10130] veth1_macvtap: entered promiscuous mode [ 800.699501][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.720244][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.963114][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.980301][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.990466][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.999635][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.012156][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.023072][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.033490][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.061041][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.151931][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.180726][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.221625][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.287962][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.308969][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.320096][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.343467][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.374791][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.394030][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.405550][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.452731][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.501350][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.523043][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.536800][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.565618][T10130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.578121][T10130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.603023][T10130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.618742][T10130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.646739][T10463] netlink: 'syz.2.1517': attribute type 3 has an invalid length. [ 801.661526][T10463] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1517'. [ 801.892853][T10465] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 802.093435][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.400813][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.465097][T10471] syz.2.1518[10471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.465363][T10471] syz.2.1518[10471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 803.904928][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.749635][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.129219][T10479] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1520'. [ 805.351018][T10483] netlink: 'syz.2.1521': attribute type 16 has an invalid length. [ 805.385434][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1521'. [ 805.421713][T10484] block nbd4: Device being setup by another task [ 805.450153][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.036031][ T54] block nbd4: Receive control failed (result -32) [ 807.037443][T10482] block nbd4: shutting down sockets [ 807.581435][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 808.054720][ T29] audit: type=1400 audit(1723165554.964:1173): avc: denied { mount } for pid=10501 comm="syz.2.1529" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 808.080941][ T1173] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 808.404852][ T1173] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 808.450657][ T1173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.471007][ T1173] usb 2-1: Product: syz [ 808.475264][ T1173] usb 2-1: Manufacturer: syz [ 808.479923][ T1173] usb 2-1: SerialNumber: syz [ 808.541460][ T1173] usb 2-1: config 0 descriptor?? [ 808.578453][ T1173] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 808.626575][ T1173] nokiaca42v2 ttyUSB0: required endpoint is missing [ 808.837919][ T29] audit: type=1400 audit(1723165555.774:1174): avc: denied { unmount } for pid=9823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 809.093902][ T1173] usb 2-1: USB disconnect, device number 28 [ 809.103535][ T1173] cypress_m8 2-1:0.0: device disconnected [ 809.270650][ T5209] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 809.339007][ T29] audit: type=1400 audit(1723165556.274:1175): avc: denied { setopt } for pid=10531 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 809.443393][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 809.491238][ T5209] usb 3-1: Using ep0 maxpacket: 16 [ 809.513458][ T5209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.541776][ T5209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.561065][ T5209] usb 3-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 809.582368][ T5209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.611820][ T5209] usb 3-1: config 0 descriptor?? [ 810.076105][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0 [ 810.090681][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0 [ 810.109439][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0 [ 810.117302][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0 [ 810.137884][ T5209] ortek 0003:05A4:1700.000D: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.2-1/input0 [ 810.317287][ T8678] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 810.376335][ T1173] usb 3-1: USB disconnect, device number 29 [ 810.528675][ T8678] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 810.539988][ T8678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.548201][ T8678] usb 5-1: Product: syz [ 810.552742][ T8678] usb 5-1: Manufacturer: syz [ 810.557452][ T8678] usb 5-1: SerialNumber: syz [ 810.581899][ T8678] usb 5-1: config 0 descriptor?? [ 810.844765][ T8678] hso 5-1:0.0: Failed to find INT IN ep [ 810.854426][ T8678] usb-storage 5-1:0.0: USB Mass Storage device detected [ 811.286524][T10560] 9pnet_fd: Insufficient options for proto=fd [ 811.294050][ T5209] usb 5-1: USB disconnect, device number 17 [ 811.348151][T10560] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 811.374185][T10560] bond0: (slave bond_slave_0): Releasing backup interface [ 811.510944][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 811.712067][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 811.740169][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 811.757422][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.790379][ T9] usb 3-1: Product: syz [ 811.810041][ T9] usb 3-1: Manufacturer: syz [ 811.820184][ T9] usb 3-1: SerialNumber: syz [ 811.855793][ T9] usb 3-1: config 0 descriptor?? [ 812.111393][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 812.438649][T10574] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1557'. [ 813.085901][ T29] audit: type=1400 audit(1723165559.884:1176): avc: denied { watch watch_reads } for pid=10577 comm="syz.3.1559" path="pipe:[28499]" dev="pipefs" ino=28499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 813.868615][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 813.889385][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 814.371178][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.569931][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.658005][ T9] usb 3-1: USB disconnect, device number 30 [ 814.956263][T10597] netlink: 'syz.1.1564': attribute type 11 has an invalid length. [ 815.580153][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'. [ 815.617240][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'. [ 816.001423][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 816.063424][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 816.943445][ T29] audit: type=1326 audit(1723165563.884:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.3.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f129a1779f9 code=0x0 [ 817.016071][ T5209] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 817.067844][ T5209] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 817.174199][ T5209] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 819.880675][ T29] audit: type=1400 audit(1723165566.804:1178): avc: denied { create } for pid=10638 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 820.374164][ T29] audit: type=1400 audit(1723165566.804:1179): avc: denied { sys_admin } for pid=10638 comm="syz.4.1578" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 820.616555][ T29] audit: type=1400 audit(1723165567.554:1180): avc: denied { getopt } for pid=10652 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 820.781249][ T5275] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 820.992298][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 821.004461][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.039806][ T5275] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 821.083218][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.107740][ T5275] usb 2-1: Product: syz [ 821.114356][ T5275] usb 2-1: Manufacturer: syz [ 821.130480][ T5275] usb 2-1: SerialNumber: syz [ 821.150883][T10666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32792 sclass=netlink_route_socket pid=10666 comm=syz.0.1587 [ 821.191858][ T5275] usb 2-1: config 0 descriptor?? [ 821.216858][T10666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.278922][T10666] batadv_slave_0: entered allmulticast mode [ 821.455675][ T5275] usb 2-1: Cannot retrieve CPort count: -71 [ 821.470966][ T5275] usb 2-1: Cannot retrieve CPort count: -71 [ 821.477787][ T5275] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 821.495259][ T5275] usb 2-1: USB disconnect, device number 29 [ 821.835321][T10659] block nbd0: shutting down sockets [ 822.540715][ T5275] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 822.788384][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 823.616754][ T5275] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 823.646383][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.206998][ T5275] usb 4-1: config 0 descriptor?? [ 824.217132][ T5275] gspca_main: sunplus-2.14.0 probing 041e:400b [ 824.761509][ T5277] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 824.980871][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 825.009652][ T5277] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 825.028549][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.047049][ T5277] usb 3-1: Product: syz [ 825.051709][ T5277] usb 3-1: Manufacturer: syz [ 825.056413][ T5277] usb 3-1: SerialNumber: syz [ 825.067733][ T5277] usb 3-1: config 0 descriptor?? [ 825.314476][ T5275] gspca_sunplus: reg_w_riv err -71 [ 825.340959][ T5275] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 825.386592][ T5275] usb 4-1: USB disconnect, device number 31 [ 825.443128][ T8678] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 825.479283][ T5277] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 829.009266][ T5231] Bluetooth: hci6: command 0x0406 tx timeout [ 829.040636][ T5277] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 829.279482][ T8] usb 3-1: USB disconnect, device number 31 [ 829.506354][ T5231] Bluetooth: hci7: sending frame failed (-49) [ 829.517485][ T54] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 829.831064][ T5275] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 829.881322][T10734] tipc: Started in network mode [ 829.886267][T10734] tipc: Node identity 4, cluster identity 4711 [ 829.921927][T10734] tipc: Node number set to 4 [ 829.980668][ T8678] usb 5-1: device not accepting address 18, error -71 [ 830.033757][ T5275] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 830.046693][ T5275] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 830.080601][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 830.089603][ T5275] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 830.136125][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 830.166421][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 830.430315][ T5275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 831.070829][ T54] Bluetooth: hci4: command 0x1003 tx timeout [ 831.088278][ T5238] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 831.360863][ T8678] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 831.524104][ T5275] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 831.540968][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.555753][ T5275] usb 4-1: Product: 䇜띔➒䬎잃♞ᨨ䂹鋰禪䤸︉畘䒋䘊菁㲝佸ꚃ깆㰵ၹ៍㯁ᒒ빒䁴䱕鴺餹偖᛭到⿣꺤溽ᗆ䃲 [ 831.570633][ T8678] usb 5-1: Using ep0 maxpacket: 32 [ 831.601881][ T5275] usb 4-1: config 0 descriptor?? [ 831.610123][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.623187][ T5275] hub 4-1:0.0: bad descriptor, ignoring hub [ 831.629115][ T5275] hub 4-1:0.0: probe with driver hub failed with error -5 [ 831.675952][ T5275] input: 䇜띔➒䬎잃♞ᨨ䂹鋰禪䤸︉畘䒋䘊菁㲝佸ꚃ깆㰵ၹ៍㯁ᒒ빒䁴䱕鴺餹偖᛭到⿣꺤溽ᗆ as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 831.685781][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.770821][ T8678] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 831.800378][ T8678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.833993][ T8678] usb 5-1: config 0 descriptor?? [ 831.877563][T10749] bridge_slave_1: left allmulticast mode [ 831.900785][T10749] bridge_slave_1: left promiscuous mode [ 831.909721][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.955298][ T29] audit: type=1804 audit(1723165578.893:1181): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1618" name="/newroot/19/bus/bus" dev="overlay" ino=121 res=1 errno=0 [ 832.184294][ T5305] usb 4-1: USB disconnect, device number 32 [ 832.263493][ T8678] savu 0003:1E7D:2D5A.000F: item fetching failed at offset 4/8 [ 832.289962][ T8678] savu 0003:1E7D:2D5A.000F: parse failed [ 832.296367][ T8678] savu 0003:1E7D:2D5A.000F: probe with driver savu failed with error -22 [ 832.494356][ T5305] usb 5-1: USB disconnect, device number 19 [ 832.541986][ T62] Bluetooth: (null): Invalid header checksum [ 832.548173][ T62] Bluetooth: (null): Invalid header checksum [ 835.331928][T10784] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10784 comm=syz.4.1629 [ 835.421192][ T1173] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 835.523764][T10788] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1631'. [ 835.680730][ T1173] usb 3-1: Using ep0 maxpacket: 8 [ 835.697519][ T1173] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 835.721432][ T1173] usb 3-1: config 179 has no interface number 0 [ 835.735574][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 835.810974][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 835.863408][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 835.892924][ T1173] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 835.928526][ T1173] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 835.960916][ T1173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.015195][T10779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 836.163112][T10801] Bluetooth: hci4: Frame reassembly failed (-84) [ 836.172942][T10801] Bluetooth: hci4: Frame reassembly failed (-84) [ 836.183164][T10801] Bluetooth: hci4: Frame reassembly failed (-84) [ 836.191498][T10801] Bluetooth: hci4: Frame reassembly failed (-84) [ 838.272496][ T5238] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 838.629383][ T8678] usb 3-1: USB disconnect, device number 32 [ 838.629541][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 838.643718][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 838.654114][ C0] ================================================================== [ 838.662224][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x271/0x2c0 [ 838.670082][ C0] Read of size 4 at addr ffff88801c70785c by task syz-executor/9371 [ 838.678244][ C0] [ 838.680589][ C0] CPU: 0 UID: 0 PID: 9371 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 838.691455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 838.701513][ C0] Call Trace: [ 838.704791][ C0] [ 838.707646][ C0] dump_stack_lvl+0x116/0x1f0 [ 838.712347][ C0] print_report+0xc3/0x620 [ 838.716786][ C0] ? __virt_addr_valid+0x5e/0x590 [ 838.721826][ C0] ? __phys_addr+0xc6/0x150 [ 838.726431][ C0] kasan_report+0xd9/0x110 [ 838.731050][ C0] ? do_raw_spin_lock+0x271/0x2c0 [ 838.736102][ C0] ? do_raw_spin_lock+0x271/0x2c0 [ 838.741146][ C0] do_raw_spin_lock+0x271/0x2c0 [ 838.746036][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.751443][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 838.757024][ C0] ? __pfx_lock_release+0x10/0x10 [ 838.762067][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 838.767304][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 838.772516][ C0] ? __wake_up+0x1c/0x60 [ 838.776765][ C0] __wake_up+0x1c/0x60 [ 838.780848][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 838.786361][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 838.791745][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 838.796949][ C0] dummy_timer+0x17c3/0x38d0 [ 838.801637][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 838.807292][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 838.812523][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 838.817914][ C0] ? __pfx_lock_release+0x10/0x10 [ 838.823025][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 838.828012][ C0] ? timerqueue_del+0x83/0x150 [ 838.832813][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 838.837783][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 838.843367][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 838.849134][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 838.855228][ C0] hrtimer_interrupt+0x31b/0x800 [ 838.860233][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 838.866228][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 838.871907][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.878170][ C0] RIP: 0010:__orc_find+0xa1/0x130 [ 838.883222][ C0] Code: a6 4d 00 48 89 e8 48 29 d8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 4c 8d 3c 83 4c 89 fa 48 c1 ea 03 42 0f b6 0c 32 <4c> 89 fa 83 e2 07 83 c2 03 38 ca 7c 04 84 c9 75 73 49 63 17 4c 89 [ 838.903009][ C0] RSP: 0018:ffffc90000006a00 EFLAGS: 00000a06 [ 838.909135][ C0] RAX: 0000000000000004 RBX: ffffffff90811f88 RCX: 0000000000000000 [ 838.917135][ C0] RDX: 1ffffffff21023f3 RSI: ffffffff813cd3da RDI: 0000000000000005 [ 838.925131][ C0] RBP: ffffffff90811fa8 R08: 0000000000000005 R09: 0000000000000000 [ 838.933215][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff88e4acab [ 838.941377][ C0] R13: ffffffff9130b5d6 R14: dffffc0000000000 R15: ffffffff90811f98 [ 838.949371][ C0] ? skb_release_data+0x75b/0x980 [ 838.954416][ C0] ? __orc_find+0x7a/0x130 [ 838.958881][ C0] ? skb_release_data+0x75b/0x980 [ 838.963926][ C0] unwind_next_frame+0x335/0x23a0 [ 838.968982][ C0] ? skb_release_data+0x75c/0x980 [ 838.974168][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 838.980366][ C0] arch_stack_walk+0x100/0x170 [ 838.985153][ C0] ? skb_release_data+0x75c/0x980 [ 838.990219][ C0] ? skb_free_head+0x18a/0x1d0 [ 838.995019][ C0] stack_trace_save+0x95/0xd0 [ 838.999815][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 839.005247][ C0] ? mark_lock+0xb5/0xc60 [ 839.009612][ C0] ? __pfx_mark_lock+0x10/0x10 [ 839.014398][ C0] kasan_save_stack+0x33/0x60 [ 839.019174][ C0] ? kasan_save_stack+0x33/0x60 [ 839.024035][ C0] ? kasan_save_track+0x14/0x30 [ 839.028915][ C0] ? kasan_save_free_info+0x3b/0x60 [ 839.034146][ C0] ? poison_slab_object+0xf7/0x160 [ 839.039360][ C0] ? __kasan_slab_free+0x32/0x50 [ 839.044340][ C0] ? kmem_cache_free+0x12f/0x3a0 [ 839.049380][ C0] ? skb_free_head+0x18a/0x1d0 [ 839.054171][ C0] ? skb_release_data+0x75c/0x980 [ 839.059224][ C0] kasan_save_track+0x14/0x30 [ 839.063925][ C0] kasan_save_free_info+0x3b/0x60 [ 839.069001][ C0] poison_slab_object+0xf7/0x160 [ 839.073983][ C0] __kasan_slab_free+0x32/0x50 [ 839.078760][ C0] kmem_cache_free+0x12f/0x3a0 [ 839.083556][ C0] ? __pfx_mark_lock+0x10/0x10 [ 839.088416][ C0] ? skb_free_head+0x18a/0x1d0 [ 839.093303][ C0] skb_free_head+0x18a/0x1d0 [ 839.097936][ C0] skb_release_data+0x75c/0x980 [ 839.102813][ C0] __kfree_skb+0x4f/0x70 [ 839.107062][ C0] tcp_ack+0x1eb7/0x5ba0 [ 839.111324][ C0] ? __pfx_tcp_ack+0x10/0x10 [ 839.115939][ C0] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 839.121683][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.126902][ C0] ? ktime_get+0xfb/0x1a0 [ 839.131244][ C0] tcp_rcv_established+0x60f/0x21c0 [ 839.136452][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 839.142110][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 839.147171][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 839.152474][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 839.157163][ C0] tcp_v4_rcv+0x344c/0x44e0 [ 839.161683][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 839.166544][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 839.172101][ C0] ? nf_hook.constprop.0+0x467/0x750 [ 839.177406][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 839.182273][ C0] ip_protocol_deliver_rcu+0xba/0x4e0 [ 839.187679][ C0] ip_local_deliver_finish+0x316/0x570 [ 839.193152][ C0] ip_local_deliver+0x18e/0x1f0 [ 839.198016][ C0] ip_sublist_rcv_finish+0x2c1/0x620 [ 839.203318][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 839.208702][ C0] ip_list_rcv_finish.constprop.0+0x559/0x720 [ 839.214799][ C0] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 839.221404][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 839.226530][ C0] ip_list_rcv+0x339/0x450 [ 839.230981][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 839.235932][ C0] ? find_held_lock+0x2d/0x110 [ 839.240716][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 839.245927][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 839.250880][ C0] __netif_receive_skb_list_core+0x755/0x950 [ 839.256907][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 839.263434][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 839.269164][ C0] netif_receive_skb_list_internal+0x753/0xda0 [ 839.275338][ C0] ? tick_program_event+0xb0/0x140 [ 839.280477][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 839.287189][ C0] ? mark_held_locks+0x9f/0xe0 [ 839.291971][ C0] napi_complete_done+0x23f/0x9a0 [ 839.297027][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 839.302589][ C0] ? virtnet_poll+0x118a/0x3ab0 [ 839.307444][ C0] virtnet_poll+0x1c26/0x3ab0 [ 839.312133][ C0] ? __free_old_xmit+0x3db/0x5e0 [ 839.317084][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 839.322121][ C0] ? find_held_lock+0x2d/0x110 [ 839.326907][ C0] ? virtnet_poll_tx+0x362/0x6b0 [ 839.331899][ C0] ? __pfx_lock_release+0x10/0x10 [ 839.336934][ C0] ? napi_complete_done+0x3fa/0x9a0 [ 839.342259][ C0] ? virtqueue_poll+0x1b0/0x290 [ 839.347114][ C0] ? rcu_is_watching+0x12/0xc0 [ 839.351891][ C0] ? xdp_do_check_flushed+0x28f/0x4e0 [ 839.357270][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 839.362660][ C0] net_rx_action+0xa92/0x1010 [ 839.367362][ C0] ? __common_interrupt+0xdf/0x250 [ 839.372489][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 839.377614][ C0] ? mark_held_locks+0x9f/0xe0 [ 839.382421][ C0] handle_softirqs+0x216/0x8f0 [ 839.387221][ C0] ? handle_edge_irq+0x40f/0xd10 [ 839.392174][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 839.397479][ C0] irq_exit_rcu+0xbb/0x120 [ 839.401914][ C0] common_interrupt+0xb0/0xd0 [ 839.406610][ C0] [ 839.409814][ C0] [ 839.412745][ C0] asm_common_interrupt+0x26/0x40 [ 839.417789][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 839.424212][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 d1 53 f6 48 89 df e8 ce 4e 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 c2 45 f6 65 8b 05 06 44 ef 74 85 c0 74 16 5b [ 839.443829][ C0] RSP: 0018:ffffc90003b57658 EFLAGS: 00000246 [ 839.449928][ C0] RAX: 0000000000000006 RBX: ffffffff9513cbb8 RCX: 1ffffffff28c8e94 [ 839.457916][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc500 RDI: ffffffff8bb08900 [ 839.465896][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff28c5ae0 [ 839.473878][ C0] R10: ffffffff9462d707 R11: ffffffff8b4e4da0 R12: 0000000000000001 [ 839.481868][ C0] R13: ffffc90003ad0000 R14: 1ffff9200076aed2 R15: ffffffff9513cbb0 [ 839.489886][ C0] debug_object_activate+0x34d/0x540 [ 839.495196][ C0] ? __pfx_mark_lock+0x10/0x10 [ 839.499970][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 839.505788][ C0] ? finish_task_switch.isra.0+0x89a/0xcc0 [ 839.511618][ C0] ? __pfx_thread_stack_free_rcu+0x10/0x10 [ 839.517452][ C0] ? __call_rcu_common.constprop.0+0x2c/0x790 [ 839.523532][ C0] __call_rcu_common.constprop.0+0x2c/0x790 [ 839.529441][ C0] ? mark_held_locks+0x9f/0xe0 [ 839.534214][ C0] put_task_stack+0x23a/0x390 [ 839.538914][ C0] finish_task_switch.isra.0+0x8a5/0xcc0 [ 839.544561][ C0] ? __switch_to+0x749/0x1180 [ 839.549245][ C0] __schedule+0xe3f/0x5490 [ 839.553669][ C0] ? hlock_class+0x4e/0x130 [ 839.558187][ C0] ? __pfx_mark_lock+0x10/0x10 [ 839.562959][ C0] ? __pfx___schedule+0x10/0x10 [ 839.567814][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.573054][ C0] preempt_schedule_irq+0x51/0x90 [ 839.578104][ C0] irqentry_exit+0x36/0x90 [ 839.582540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.588547][ C0] RIP: 0010:tomoyo_check_acl+0x30e/0x410 [ 839.594195][ C0] Code: 49 0f a3 5d 00 8d 43 01 41 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 31 e8 46 fd 45 84 ff 75 29 e8 47 e6 46 fd 0f b7 74 24 16 00 01 00 00 48 83 c3 01 e8 44 e8 46 fd 48 81 fb 00 01 00 00 75 [ 839.613809][ C0] RSP: 0018:ffffc90003b57ab8 EFLAGS: 00000293 [ 839.619880][ C0] RAX: 0000000000000000 RBX: 000000000000006d RCX: ffffffff8443944f [ 839.627855][ C0] RDX: ffff888020c73c00 RSI: 000000000000006e RDI: 0000000000000001 [ 839.635835][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 839.643814][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b57b78 [ 839.651786][ C0] R13: ffff8880218f8030 R14: 000000000000006d R15: 0000000000000000 [ 839.659761][ C0] ? tomoyo_check_acl+0x2ff/0x410 [ 839.664890][ C0] ? tomoyo_check_acl+0x309/0x410 [ 839.669918][ C0] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 839.676351][ C0] tomoyo_path_number_perm+0x34a/0x590 [ 839.681831][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 839.687840][ C0] ? find_held_lock+0x2d/0x110 [ 839.692634][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 839.697846][ C0] ? _raw_spin_unlock+0x28/0x50 [ 839.702708][ C0] ? d_add+0x43c/0x730 [ 839.706791][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 839.712005][ C0] ? simple_lookup+0xd6/0x110 [ 839.716696][ C0] tomoyo_path_mkdir+0x9c/0xe0 [ 839.721467][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 839.726935][ C0] ? get_current_fs_domain+0x188/0x1f0 [ 839.732402][ C0] security_path_mkdir+0x111/0x170 [ 839.737538][ C0] do_mkdirat+0x176/0x3a0 [ 839.741893][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 839.746790][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 839.752193][ C0] __x64_sys_mkdirat+0x83/0xb0 [ 839.756977][ C0] do_syscall_64+0xcd/0x250 [ 839.761500][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.767526][ C0] RIP: 0033:0x7f129a176297 [ 839.771953][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.791579][ C0] RSP: 002b:00007ffed262d5d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 839.800003][ C0] RAX: ffffffffffffffda RBX: 00007ffed262d620 RCX: 00007f129a176297 [ 839.807979][ C0] RDX: 00000000000001ff RSI: 00007ffed262d620 RDI: 00000000ffffff9c [ 839.816127][ C0] RBP: 00007ffed262d60c R08: 0000000000000005 R09: 00007ffed262d375 [ 839.824102][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 839.832089][ C0] R13: 00000000000ccac4 R14: 00000000000cc18b R15: 00007ffed262d660 [ 839.840090][ C0] [ 839.843109][ C0] [ 839.845431][ C0] Allocated by task 1173: [ 839.849763][ C0] kasan_save_stack+0x33/0x60 [ 839.854491][ C0] kasan_save_track+0x14/0x30 [ 839.859197][ C0] __kasan_kmalloc+0xaa/0xb0 [ 839.863833][ C0] xpad_probe+0x27e/0x1f50 [ 839.868260][ C0] usb_probe_interface+0x309/0x9d0 [ 839.873390][ C0] really_probe+0x23e/0xa90 [ 839.877925][ C0] __driver_probe_device+0x1de/0x440 [ 839.883219][ C0] driver_probe_device+0x4c/0x1b0 [ 839.888251][ C0] __device_attach_driver+0x1df/0x310 [ 839.893982][ C0] bus_for_each_drv+0x157/0x1e0 [ 839.898865][ C0] __device_attach+0x1e8/0x4b0 [ 839.903654][ C0] bus_probe_device+0x17f/0x1c0 [ 839.908628][ C0] device_add+0x114b/0x1a70 [ 839.913141][ C0] usb_set_configuration+0x10cb/0x1c50 [ 839.918617][ C0] usb_generic_driver_probe+0xb1/0x110 [ 839.924084][ C0] usb_probe_device+0xec/0x3e0 [ 839.928879][ C0] really_probe+0x23e/0xa90 [ 839.933399][ C0] __driver_probe_device+0x1de/0x440 [ 839.938690][ C0] driver_probe_device+0x4c/0x1b0 [ 839.943740][ C0] __device_attach_driver+0x1df/0x310 [ 839.949237][ C0] bus_for_each_drv+0x157/0x1e0 [ 839.954115][ C0] __device_attach+0x1e8/0x4b0 [ 839.958892][ C0] bus_probe_device+0x17f/0x1c0 [ 839.963823][ C0] device_add+0x114b/0x1a70 [ 839.968343][ C0] usb_new_device+0xd90/0x1a10 [ 839.973122][ C0] hub_event+0x2db0/0x4e20 [ 839.977555][ C0] process_one_work+0x9c5/0x1b40 [ 839.982507][ C0] worker_thread+0x6c8/0xf20 [ 839.987117][ C0] kthread+0x2c1/0x3a0 [ 839.991187][ C0] ret_from_fork+0x45/0x80 [ 839.995634][ C0] ret_from_fork_asm+0x1a/0x30 [ 840.000417][ C0] [ 840.002739][ C0] Freed by task 8678: [ 840.006738][ C0] kasan_save_stack+0x33/0x60 [ 840.011427][ C0] kasan_save_track+0x14/0x30 [ 840.016140][ C0] kasan_save_free_info+0x3b/0x60 [ 840.021187][ C0] poison_slab_object+0xf7/0x160 [ 840.026134][ C0] __kasan_slab_free+0x32/0x50 [ 840.030908][ C0] kfree+0x12a/0x3b0 [ 840.034819][ C0] xpad_disconnect+0x1cf/0x580 [ 840.039701][ C0] usb_unbind_interface+0x1e8/0x970 [ 840.044932][ C0] device_remove+0x122/0x170 [ 840.049678][ C0] device_release_driver_internal+0x44a/0x610 [ 840.055758][ C0] bus_remove_device+0x22f/0x420 [ 840.060723][ C0] device_del+0x396/0x9f0 [ 840.065053][ C0] usb_disable_device+0x36c/0x7f0 [ 840.070091][ C0] usb_disconnect+0x2e1/0x920 [ 840.074778][ C0] hub_event+0x1dbb/0x4e20 [ 840.079209][ C0] process_one_work+0x9c5/0x1b40 [ 840.084170][ C0] worker_thread+0x6c8/0xf20 [ 840.088774][ C0] kthread+0x2c1/0x3a0 [ 840.092864][ C0] ret_from_fork+0x45/0x80 [ 840.097324][ C0] ret_from_fork_asm+0x1a/0x30 [ 840.102141][ C0] [ 840.104463][ C0] The buggy address belongs to the object at ffff88801c707800 [ 840.104463][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 840.118540][ C0] The buggy address is located 92 bytes inside of [ 840.118540][ C0] freed 1024-byte region [ffff88801c707800, ffff88801c707c00) [ 840.132354][ C0] [ 840.134681][ C0] The buggy address belongs to the physical page: [ 840.141100][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c700 [ 840.149864][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 840.158373][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 840.165930][ C0] page_type: 0xfdffffff(slab) [ 840.170636][ C0] raw: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 840.179240][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 840.187906][ C0] head: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 840.196596][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 840.205285][ C0] head: 00fff00000000003 ffffea000071c001 ffffffffffffffff 0000000000000000 [ 840.213984][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 840.222672][ C0] page dumped because: kasan: bad access detected [ 840.229086][ C0] page_owner tracks the page as allocated [ 840.234880][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1109, tgid 1109 (kworker/u8:6), ts 674519957146, free_ts 673948577556 [ 840.255903][ C0] post_alloc_hook+0x2d1/0x350 [ 840.260679][ C0] get_page_from_freelist+0x1351/0x2e50 [ 840.266251][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 840.271557][ C0] alloc_slab_page+0x4e/0xf0 [ 840.276169][ C0] new_slab+0x84/0x260 [ 840.280259][ C0] ___slab_alloc+0xdac/0x1870 [ 840.284947][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 840.290344][ C0] __kmalloc_noprof+0x367/0x400 [ 840.295243][ C0] ieee802_11_parse_elems_full+0xea/0x1680 [ 840.301078][ C0] ieee80211_inform_bss+0xfd/0x1100 [ 840.306317][ C0] cfg80211_inform_single_bss_data+0x8e2/0x1dc0 [ 840.312581][ C0] cfg80211_inform_bss_data+0x205/0x39c0 [ 840.318431][ C0] cfg80211_inform_bss_frame_data+0x271/0x7a0 [ 840.324616][ C0] ieee80211_bss_info_update+0x311/0xab0 [ 840.330361][ C0] ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40 [ 840.336620][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 840.341917][ C0] page last free pid 9607 tgid 9606 stack trace: [ 840.348237][ C0] free_unref_page+0x64a/0xe40 [ 840.353009][ C0] vfree+0x181/0x7a0 [ 840.356913][ C0] __vmalloc_node_range_noprof+0x11f5/0x1520 [ 840.362909][ C0] vmalloc_user_noprof+0x6b/0x90 [ 840.367947][ C0] xskq_create+0xfb/0x1d0 [ 840.372287][ C0] xsk_setsockopt+0x757/0xa10 [ 840.376973][ C0] do_sock_setsockopt+0x222/0x480 [ 840.382008][ C0] __sys_setsockopt+0x1a4/0x270 [ 840.386889][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 840.392018][ C0] do_syscall_64+0xcd/0x250 [ 840.396529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.402523][ C0] [ 840.404846][ C0] Memory state around the buggy address: [ 840.410470][ C0] ffff88801c707700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.418535][ C0] ffff88801c707780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.426626][ C0] >ffff88801c707800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.434699][ C0] ^ [ 840.441632][ C0] ffff88801c707880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.449708][ C0] ffff88801c707900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.457764][ C0] ================================================================== [ 840.465824][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 840.473015][ C0] CPU: 0 UID: 0 PID: 9371 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 840.483869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 840.493925][ C0] Call Trace: [ 840.497209][ C0] [ 840.500052][ C0] dump_stack_lvl+0x3d/0x1f0 [ 840.504687][ C0] panic+0x6f5/0x7a0 [ 840.508596][ C0] ? __pfx_panic+0x10/0x10 [ 840.513025][ C0] ? rcu_is_watching+0x12/0xc0 [ 840.517822][ C0] ? __pfx_lock_release+0x10/0x10 [ 840.522860][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 840.528067][ C0] check_panic_on_warn+0xab/0xb0 [ 840.533130][ C0] end_report+0x117/0x180 [ 840.537489][ C0] kasan_report+0xe9/0x110 [ 840.541929][ C0] ? do_raw_spin_lock+0x271/0x2c0 [ 840.546981][ C0] ? do_raw_spin_lock+0x271/0x2c0 [ 840.552031][ C0] do_raw_spin_lock+0x271/0x2c0 [ 840.556924][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 840.562312][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 840.567867][ C0] ? __pfx_lock_release+0x10/0x10 [ 840.572902][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 840.578114][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 840.583321][ C0] ? __wake_up+0x1c/0x60 [ 840.587575][ C0] __wake_up+0x1c/0x60 [ 840.591658][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 840.597250][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 840.602643][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 840.607871][ C0] dummy_timer+0x17c3/0x38d0 [ 840.612773][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 840.618426][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 840.623642][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 840.629031][ C0] ? __pfx_lock_release+0x10/0x10 [ 840.634068][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 840.639020][ C0] ? timerqueue_del+0x83/0x150 [ 840.643797][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 840.648740][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 840.653970][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 840.659713][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 840.665794][ C0] hrtimer_interrupt+0x31b/0x800 [ 840.670839][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 840.676846][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 840.682497][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.688505][ C0] RIP: 0010:__orc_find+0xa1/0x130 [ 840.693555][ C0] Code: a6 4d 00 48 89 e8 48 29 d8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 4c 8d 3c 83 4c 89 fa 48 c1 ea 03 42 0f b6 0c 32 <4c> 89 fa 83 e2 07 83 c2 03 38 ca 7c 04 84 c9 75 73 49 63 17 4c 89 [ 840.713274][ C0] RSP: 0018:ffffc90000006a00 EFLAGS: 00000a06 [ 840.719354][ C0] RAX: 0000000000000004 RBX: ffffffff90811f88 RCX: 0000000000000000 [ 840.727351][ C0] RDX: 1ffffffff21023f3 RSI: ffffffff813cd3da RDI: 0000000000000005 [ 840.735331][ C0] RBP: ffffffff90811fa8 R08: 0000000000000005 R09: 0000000000000000 [ 840.743306][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff88e4acab [ 840.751280][ C0] R13: ffffffff9130b5d6 R14: dffffc0000000000 R15: ffffffff90811f98 [ 840.759364][ C0] ? skb_release_data+0x75b/0x980 [ 840.764426][ C0] ? __orc_find+0x7a/0x130 [ 840.768866][ C0] ? skb_release_data+0x75b/0x980 [ 840.773905][ C0] unwind_next_frame+0x335/0x23a0 [ 840.778944][ C0] ? skb_release_data+0x75c/0x980 [ 840.784149][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 840.790321][ C0] arch_stack_walk+0x100/0x170 [ 840.795099][ C0] ? skb_release_data+0x75c/0x980 [ 840.800187][ C0] ? skb_free_head+0x18a/0x1d0 [ 840.804975][ C0] stack_trace_save+0x95/0xd0 [ 840.809666][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 840.815060][ C0] ? mark_lock+0xb5/0xc60 [ 840.819414][ C0] ? __pfx_mark_lock+0x10/0x10 [ 840.824307][ C0] kasan_save_stack+0x33/0x60 [ 840.829022][ C0] ? kasan_save_stack+0x33/0x60 [ 840.833902][ C0] ? kasan_save_track+0x14/0x30 [ 840.838773][ C0] ? kasan_save_free_info+0x3b/0x60 [ 840.844015][ C0] ? poison_slab_object+0xf7/0x160 [ 840.849151][ C0] ? __kasan_slab_free+0x32/0x50 [ 840.854137][ C0] ? kmem_cache_free+0x12f/0x3a0 [ 840.859084][ C0] ? skb_free_head+0x18a/0x1d0 [ 840.863981][ C0] ? skb_release_data+0x75c/0x980 [ 840.869051][ C0] kasan_save_track+0x14/0x30 [ 840.873836][ C0] kasan_save_free_info+0x3b/0x60 [ 840.878899][ C0] poison_slab_object+0xf7/0x160 [ 840.883850][ C0] __kasan_slab_free+0x32/0x50 [ 840.888626][ C0] kmem_cache_free+0x12f/0x3a0 [ 840.893402][ C0] ? __pfx_mark_lock+0x10/0x10 [ 840.898178][ C0] ? skb_free_head+0x18a/0x1d0 [ 840.902962][ C0] skb_free_head+0x18a/0x1d0 [ 840.907588][ C0] skb_release_data+0x75c/0x980 [ 840.912538][ C0] __kfree_skb+0x4f/0x70 [ 840.916813][ C0] tcp_ack+0x1eb7/0x5ba0 [ 840.921076][ C0] ? __pfx_tcp_ack+0x10/0x10 [ 840.925669][ C0] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 840.931398][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.936608][ C0] ? ktime_get+0xfb/0x1a0 [ 840.940944][ C0] tcp_rcv_established+0x60f/0x21c0 [ 840.946156][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 840.951815][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 840.956873][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 840.962091][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 840.966708][ C0] tcp_v4_rcv+0x344c/0x44e0 [ 840.971232][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 840.976111][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 840.981591][ C0] ? nf_hook.constprop.0+0x467/0x750 [ 840.986909][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 840.991778][ C0] ip_protocol_deliver_rcu+0xba/0x4e0 [ 840.997177][ C0] ip_local_deliver_finish+0x316/0x570 [ 841.002682][ C0] ip_local_deliver+0x18e/0x1f0 [ 841.007653][ C0] ip_sublist_rcv_finish+0x2c1/0x620 [ 841.012959][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 841.018406][ C0] ip_list_rcv_finish.constprop.0+0x559/0x720 [ 841.024528][ C0] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 841.031206][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 841.036349][ C0] ip_list_rcv+0x339/0x450 [ 841.040788][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 841.045744][ C0] ? find_held_lock+0x2d/0x110 [ 841.050538][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 841.055769][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 841.060721][ C0] __netif_receive_skb_list_core+0x755/0x950 [ 841.066719][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 841.073246][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 841.078981][ C0] netif_receive_skb_list_internal+0x753/0xda0 [ 841.085172][ C0] ? tick_program_event+0xb0/0x140 [ 841.090313][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 841.097023][ C0] ? mark_held_locks+0x9f/0xe0 [ 841.101812][ C0] napi_complete_done+0x23f/0x9a0 [ 841.106864][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 841.112438][ C0] ? virtnet_poll+0x118a/0x3ab0 [ 841.117301][ C0] virtnet_poll+0x1c26/0x3ab0 [ 841.121998][ C0] ? __free_old_xmit+0x3db/0x5e0 [ 841.126977][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 841.132016][ C0] ? find_held_lock+0x2d/0x110 [ 841.136813][ C0] ? virtnet_poll_tx+0x362/0x6b0 [ 841.141781][ C0] ? __pfx_lock_release+0x10/0x10 [ 841.146819][ C0] ? napi_complete_done+0x3fa/0x9a0 [ 841.152036][ C0] ? virtqueue_poll+0x1b0/0x290 [ 841.157008][ C0] ? rcu_is_watching+0x12/0xc0 [ 841.161796][ C0] ? xdp_do_check_flushed+0x28f/0x4e0 [ 841.167182][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 841.172576][ C0] net_rx_action+0xa92/0x1010 [ 841.177266][ C0] ? __common_interrupt+0xdf/0x250 [ 841.182392][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 841.187517][ C0] ? mark_held_locks+0x9f/0xe0 [ 841.192303][ C0] handle_softirqs+0x216/0x8f0 [ 841.197106][ C0] ? handle_edge_irq+0x40f/0xd10 [ 841.202061][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 841.207391][ C0] irq_exit_rcu+0xbb/0x120 [ 841.211835][ C0] common_interrupt+0xb0/0xd0 [ 841.216551][ C0] [ 841.219484][ C0] [ 841.222437][ C0] asm_common_interrupt+0x26/0x40 [ 841.227509][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 841.233944][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 d1 53 f6 48 89 df e8 ce 4e 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 c2 45 f6 65 8b 05 06 44 ef 74 85 c0 74 16 5b [ 841.253564][ C0] RSP: 0018:ffffc90003b57658 EFLAGS: 00000246 [ 841.259639][ C0] RAX: 0000000000000006 RBX: ffffffff9513cbb8 RCX: 1ffffffff28c8e94 [ 841.267617][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc500 RDI: ffffffff8bb08900 [ 841.275593][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff28c5ae0 [ 841.283565][ C0] R10: ffffffff9462d707 R11: ffffffff8b4e4da0 R12: 0000000000000001 [ 841.291538][ C0] R13: ffffc90003ad0000 R14: 1ffff9200076aed2 R15: ffffffff9513cbb0 [ 841.299519][ C0] debug_object_activate+0x34d/0x540 [ 841.304825][ C0] ? __pfx_mark_lock+0x10/0x10 [ 841.309598][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 841.315428][ C0] ? finish_task_switch.isra.0+0x89a/0xcc0 [ 841.321251][ C0] ? __pfx_thread_stack_free_rcu+0x10/0x10 [ 841.327103][ C0] ? __call_rcu_common.constprop.0+0x2c/0x790 [ 841.333188][ C0] __call_rcu_common.constprop.0+0x2c/0x790 [ 841.339091][ C0] ? mark_held_locks+0x9f/0xe0 [ 841.343865][ C0] put_task_stack+0x23a/0x390 [ 841.348557][ C0] finish_task_switch.isra.0+0x8a5/0xcc0 [ 841.354201][ C0] ? __switch_to+0x749/0x1180 [ 841.358885][ C0] __schedule+0xe3f/0x5490 [ 841.363329][ C0] ? hlock_class+0x4e/0x130 [ 841.367854][ C0] ? __pfx_mark_lock+0x10/0x10 [ 841.372652][ C0] ? __pfx___schedule+0x10/0x10 [ 841.377514][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 841.382737][ C0] preempt_schedule_irq+0x51/0x90 [ 841.387817][ C0] irqentry_exit+0x36/0x90 [ 841.392279][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 841.398286][ C0] RIP: 0010:tomoyo_check_acl+0x30e/0x410 [ 841.403976][ C0] Code: 49 0f a3 5d 00 8d 43 01 41 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 31 e8 46 fd 45 84 ff 75 29 e8 47 e6 46 fd 0f b7 74 24 16 00 01 00 00 48 83 c3 01 e8 44 e8 46 fd 48 81 fb 00 01 00 00 75 [ 841.423605][ C0] RSP: 0018:ffffc90003b57ab8 EFLAGS: 00000293 [ 841.429692][ C0] RAX: 0000000000000000 RBX: 000000000000006d RCX: ffffffff8443944f [ 841.437671][ C0] RDX: ffff888020c73c00 RSI: 000000000000006e RDI: 0000000000000001 [ 841.445652][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 841.453636][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b57b78 [ 841.461612][ C0] R13: ffff8880218f8030 R14: 000000000000006d R15: 0000000000000000 [ 841.469689][ C0] ? tomoyo_check_acl+0x2ff/0x410 [ 841.474730][ C0] ? tomoyo_check_acl+0x309/0x410 [ 841.479764][ C0] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 841.486194][ C0] tomoyo_path_number_perm+0x34a/0x590 [ 841.491681][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.497680][ C0] ? find_held_lock+0x2d/0x110 [ 841.502467][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 841.507691][ C0] ? _raw_spin_unlock+0x28/0x50 [ 841.512551][ C0] ? d_add+0x43c/0x730 [ 841.516634][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 841.521950][ C0] ? simple_lookup+0xd6/0x110 [ 841.526641][ C0] tomoyo_path_mkdir+0x9c/0xe0 [ 841.531424][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 841.536894][ C0] ? get_current_fs_domain+0x188/0x1f0 [ 841.542362][ C0] security_path_mkdir+0x111/0x170 [ 841.547485][ C0] do_mkdirat+0x176/0x3a0 [ 841.551826][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 841.556688][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 841.562180][ C0] __x64_sys_mkdirat+0x83/0xb0 [ 841.566967][ C0] do_syscall_64+0xcd/0x250 [ 841.571581][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.577605][ C0] RIP: 0033:0x7f129a176297 [ 841.582201][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.601907][ C0] RSP: 002b:00007ffed262d5d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 841.610328][ C0] RAX: ffffffffffffffda RBX: 00007ffed262d620 RCX: 00007f129a176297 [ 841.618306][ C0] RDX: 00000000000001ff RSI: 00007ffed262d620 RDI: 00000000ffffff9c [ 841.626386][ C0] RBP: 00007ffed262d60c R08: 0000000000000005 R09: 00007ffed262d375 [ 841.634456][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 841.642454][ C0] R13: 00000000000ccac4 R14: 00000000000cc18b R15: 00007ffed262d660 [ 841.650439][ C0] [ 841.653727][ C0] Kernel Offset: disabled [ 841.658091][ C0] Rebooting in 86400 seconds..