last executing test programs: 3m27.306401245s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m27.113776911s ago: executing program 0 (id=10): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 3m26.859004153s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x93cd, 0x10000, 0x0, 0x4e}, &(0x7f0000000980)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m26.546861168s ago: executing program 0 (id=15): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m26.137950818s ago: executing program 0 (id=19): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r1, 0xe6a36000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 3m25.921135958s ago: executing program 32 (id=19): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r1, 0xe6a36000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2m52.648502424s ago: executing program 4 (id=256): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) 2m52.384172129s ago: executing program 4 (id=258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 2m52.110568489s ago: executing program 4 (id=262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2m51.911233704s ago: executing program 4 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m51.752623811s ago: executing program 4 (id=267): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) 2m51.324847274s ago: executing program 4 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) shutdown(r0, 0x1) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 2m51.036738141s ago: executing program 33 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) shutdown(r0, 0x1) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 2m35.037631477s ago: executing program 2 (id=424): kexec_load(0x9, 0x3, &(0x7f0000000980)=[{0x0, 0x0, 0x8000000000000001, 0x5}, {0x0, 0x0, 0x8000000040006, 0x2}, {0x0, 0x0, 0x3, 0x4}], 0x2a0000) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="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", 0x359, 0x6, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2m34.90159634s ago: executing program 2 (id=426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eaf}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 2m34.640981019s ago: executing program 2 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 2m34.340877618s ago: executing program 2 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m34.122996102s ago: executing program 2 (id=435): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xd9d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m33.717812585s ago: executing program 2 (id=440): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/81, 0x51}], 0x1, 0x0, 0x0, 0x8dff}, 0x0) 2m33.182867916s ago: executing program 34 (id=440): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/81, 0x51}], 0x1, 0x0, 0x0, 0x8dff}, 0x0) 50.408380025s ago: executing program 7 (id=1460): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000400)=""/55, 0x37}], 0x2}}], 0x1, 0x101, 0x0) 49.382103271s ago: executing program 7 (id=1464): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104eef606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000600)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786", 0x71}], 0x5}, 0x40000) 49.061679981s ago: executing program 7 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x8, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 48.764074225s ago: executing program 7 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 48.585049802s ago: executing program 7 (id=1468): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') 47.909915224s ago: executing program 7 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x414b, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x3, 0x2ce}, &(0x7f0000002200)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x800}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) io_uring_enter(r1, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 47.353168431s ago: executing program 35 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x414b, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x3, 0x2ce}, &(0x7f0000002200)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x800}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) io_uring_enter(r1, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 6.217974412s ago: executing program 5 (id=1785): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x10813, 0xb, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.048228123s ago: executing program 5 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xb) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.788155176s ago: executing program 1 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="66b8010000000f01d9660f38814c000ff69fbb9c650f09e42dbaf80c66b88d15a48466efbafc0cec66b8100000000f23c80f21f86635040040000f23f8660fd2e10fba650000660fe96a5c", 0x4b}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.700978655s ago: executing program 5 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.390429999s ago: executing program 8 (id=1792): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 5.269790326s ago: executing program 8 (id=1793): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x113) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000001340)=""/4096, 0x1000) 4.889448073s ago: executing program 8 (id=1794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) shutdown(r0, 0x1) 4.843341931s ago: executing program 1 (id=1795): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.769624202s ago: executing program 5 (id=1796): socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0xfffffffffffffffc, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000404c05001000000000000109022400010000400009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1110901a1007508897609309102c0c0"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 4.761767811s ago: executing program 6 (id=1797): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) 4.349762171s ago: executing program 6 (id=1799): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 4.115723208s ago: executing program 6 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2b, &(0x7f0000000040)) 3.984335524s ago: executing program 8 (id=1801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) close(r1) 3.983571058s ago: executing program 6 (id=1802): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.86532144s ago: executing program 6 (id=1803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000540)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 3.630158246s ago: executing program 3 (id=1804): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x0, 0x5, 0x6, 0x5, 0x9, 0x800, 0x1, 0x8c8, 0x2, 0x6f8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.452688716s ago: executing program 8 (id=1805): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.938744181s ago: executing program 1 (id=1806): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2.901901156s ago: executing program 6 (id=1807): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 2.558136853s ago: executing program 5 (id=1808): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) 2.52893813s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000340)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.472779626s ago: executing program 1 (id=1810): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=','], 0x2c}}, 0x40) 2.322487785s ago: executing program 5 (id=1811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) 2.124861429s ago: executing program 1 (id=1812): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 944.866532ms ago: executing program 3 (id=1813): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 238.561961ms ago: executing program 3 (id=1814): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 163.459433ms ago: executing program 3 (id=1815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000841}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/20, 0x14}], 0x1}, 0x9}], 0x1, 0x10122, 0x0) 124.508615ms ago: executing program 8 (id=1816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20010}]}) 76.895877ms ago: executing program 3 (id=1817): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 3 (id=1818): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0xc, 0x0, [{0x9, 0x0, 0x4}, {0x8, 0x0, 0x100000001}, {0x7, 0x0, 0x6}, {0x8, 0x0, 0x8000200100000000}, {0x4, 0x0, 0xfffffffffffff51d}, {0x2, 0x0, 0xedc}, {0x5, 0x0, 0x81}, {0x6, 0x0, 0x5}, {0x8, 0x0, 0xfffffffffffff595}, {0x1, 0x0, 0x85}, {0x8, 0x0, 0x7fff}, {0xce, 0x0, 0x7}, {0x4, 0x0, 0x6}, {0x9, 0x0, 0x207ff}, {0x7, 0x0, 0x5}, {0x9, 0x0, 0x7f}]}) kernel console output (not intermixed with test programs): d_vmcs=1 to dump internal KVM state. [ 210.198264][ T24] usb 6-1: USB disconnect, device number 18 [ 210.406816][ T9419] gadgetfs: bound to dummy_udc driver [ 210.485233][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1174'. ..._ mtdblock1^ mtd1ro\mtd1 [ 210.810736][ T9435] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801  ublkc2  ttyGS0I  ublkc1  ublkc0  i2c-1 md0  binderfs  gadgetfs  tap62 ptp_kvm vim2mv4lxdiskv block. rtc*char) core(~ log'} stderr&| stdout%{ stdin$z fd#yshm"xpts!w(btrfs-control v(cpu_dma_latencyu qrtr-tunt vsocks mixer2r admmidi2q amidi2p dmmidi2o midi2n mixer1m adsp1l audio1kdsp1 j mixeri audiohdspg sequencer2f sequenceresndd(comedi4_subd1c(comedi4_subd0b comedi4a comedi3` comedi2_ comedi1^ comedi0] vhost-vsock\ vhost-net[uhidZ infinibandYvhciX mapperTptp0S media27R v4l-touch23Q video102P video101O radio47N radio46M swradio23L vbi47K vbi46J video100I cec47H video99G cec46F media26E v4l-touch22D video98C video97B radio45A radio44@ swradio22? vbi45> vbi44= video96< cec45; video95: cec449 media258 v4l-touch217 video946 video935 radio434 radio423 swradio212 vbi431 vbi420 video92/ cec43. video91- cec42, media24+ v4l-touch20* video90) video89( radio41' radio40& swradio20% vbi41$ vbi40# video88" cec41! video87  cec40 media23 v4l-touch19 video86 video85 radio39 radio38 swradio19 vbi39 vbi38 video84 cec39 video83 cec38[ 211.152208][ T5705] usb 7-1: new high-speed USB device number 12 using dummy_hcd  media22 v4l-touch18 video82 video81[ 211.312120][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 211.327194][ T5705] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 211.346432][ T5705] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.359756][ T5705] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.384053][ T5705] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.412765][ T5705] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.430735][ T5705] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.476878][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.521663][ T42] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 211.693887][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.710768][ T5705] usb 7-1: usb_control_msg returned -32 [ 211.717898][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.728325][ T5705] usbtmc 7-1:16.0: can't read capabilities [ 211.739539][ T42] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 211.750621][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.781687][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 211.806381][ T42] usb 2-1: config 0 descriptor?? [ 211.919378][ T9] usb 7-1: USB disconnect, device number 12 [ 211.973408][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.995873][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.017702][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.040113][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.064024][ T9465] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 212.087353][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.274857][ T42] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 212.431148][ T10] usb 8-1: USB disconnect, device number 15 [ 212.441773][ T42] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00 [ 212.634484][ T9475] smpboot: CPU 1 is now offline [ 212.726920][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.740536][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.751094][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.766123][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.775682][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.854889][ T9476] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 212.883461][ T29] audit: type=1400 audit(1786102067.288:715): avc: denied { getopt } for pid=9479 comm="syz.6.1197" laddr=fe80::16 lport=52666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.054508][ T42] cp2112 0003:10C4:EA90.001E: error reading lock byte: -71 [ 213.100125][ T42] usb 2-1: USB disconnect, device number 27 [ 213.115528][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 213.164267][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 213.679995][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.687709][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.695027][ T9477] bridge_slave_0: entered allmulticast mode [ 213.703392][ T9477] bridge_slave_0: entered promiscuous mode [ 213.705782][ T29] audit: type=1400 audit(1786102068.118:716): avc: denied { read } for pid=9510 comm="syz.3.1205" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.713415][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.738522][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.747122][ T9477] bridge_slave_1: entered allmulticast mode [ 213.755002][ T9477] bridge_slave_1: entered promiscuous mode [ 213.829102][ T29] audit: type=1400 audit(1786102068.118:717): avc: denied { read open } for pid=9510 comm="syz.3.1205" path="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.947924][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.965759][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.105594][ T9477] team0: Port device team_slave_0 added [ 214.130336][ T9477] team0: Port device team_slave_1 added [ 214.218389][ T9526] smpboot: CPU 1 is now offline [ 214.279017][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.303727][ T9527] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 214.338298][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.377864][ T5597] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 214.521143][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.575037][ T5597] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.637906][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.653921][ T5597] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.676418][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.714050][ T5597] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.734707][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.760530][ T9524] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.793287][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.838007][ T5597] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.847877][ T50] Bluetooth: hci4: command tx timeout [ 215.026700][ T9477] hsr_slave_0: entered promiscuous mode [ 215.064077][ T9477] hsr_slave_1: entered promiscuous mode [ 215.084934][ T9477] debugfs: 'hsr0' already exists in 'hsr' [ 215.100770][ T9477] Cannot create hsr debugfs directory [ 215.252717][ T5597] usb 4-1: USB disconnect, device number 16 [ 215.287351][ T29] audit: type=1400 audit(1786102069.698:718): avc: denied { watch } for pid=9550 comm="syz.1.1221" path="/209/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 216.061428][ T9477] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.188247][ T9477] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.359123][ T9477] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.388303][ T9587] smpboot: CPU 1 is now offline [ 216.492785][ T9590] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 216.604980][ T9477] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.861775][ T50] Bluetooth: hci4: command tx timeout [ 217.185929][ T9599] smpboot: CPU 1 is now offline [ 217.293741][ T9604] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 217.342181][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.390442][ T9477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.407665][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.428333][ T9477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.438734][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.459320][ T9477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.484098][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.495490][ T9477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.509057][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.533616][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.557947][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.582291][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.611379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.646425][ T9601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.670868][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.692232][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.777240][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.807248][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.814415][ T6717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.869172][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.876328][ T6717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.066032][ T42] usb 4-1: USB disconnect, device number 17 [ 218.205325][ T9627] smpboot: CPU 1 is now offline [ 218.266138][ T9629] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 218.791161][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.818516][ T29] audit: type=1400 audit(1786102073.228:719): avc: denied { create } for pid=9639 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.856269][ T29] audit: type=1400 audit(1786102073.228:720): avc: denied { bind } for pid=9639 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.877150][ T29] audit: type=1400 audit(1786102073.228:721): avc: denied { write } for pid=9639 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.922180][ T50] Bluetooth: hci4: command tx timeout [ 219.057134][ T9477] veth0_vlan: entered promiscuous mode [ 219.070082][ T9477] veth1_vlan: entered promiscuous mode [ 219.103337][ T9477] veth0_macvtap: entered promiscuous mode [ 219.111777][ T9477] veth1_macvtap: entered promiscuous mode [ 219.127937][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.143768][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.198565][ T6717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.240252][ T6717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.284048][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.298434][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.327397][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.335777][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.351806][ T562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.362527][ T1163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.512675][ T9660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.523734][ T9662] vivid-002: disconnect [ 219.543256][ T9662] vivid-002: reconnect [ 219.693029][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 219.866465][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.885330][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.907441][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.926258][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.965858][ T9654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.994094][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.012192][ T980] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 220.173847][ T980] usb 7-1: Using ep0 maxpacket: 32 [ 220.187570][ T980] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 220.216884][ T980] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 220.249618][ T980] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.266543][ T5713] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 220.285677][ T980] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.292665][ T980] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 220.301909][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.314146][ T980] usb 7-1: config 0 descriptor?? [ 220.341520][ T24] usb 2-1: USB disconnect, device number 28 [ 220.434129][ T5713] usb 8-1: Using ep0 maxpacket: 8 [ 220.497991][ T5713] usb 8-1: unable to get BOS descriptor or descriptor too short [ 220.520572][ T5713] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 220.539489][ T5713] usb 8-1: can't read configurations, error -71 [ 220.571233][ T9682] smpboot: CPU 1 is now offline [ 220.595887][ T9682] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 220.734875][ T980] hid_parser_main: 460 callbacks suppressed [ 220.734904][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.747963][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.755861][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.765219][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.772778][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.779656][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.792174][ T980] betop 0003:11C0:5506.001F: unknown main item tag 0x0 [ 220.799078][ T980] betop 0003:11C0:5506.001F: item fetching failed at offset 10/40 [ 220.807668][ T980] betop 0003:11C0:5506.001F: parse failed [ 220.813570][ T980] betop 0003:11C0:5506.001F: probe with driver betop failed with error -22 [ 220.858397][ T29] audit: type=1400 audit(1786102075.268:722): avc: denied { write } for pid=9687 comm="syz.5.1264" name="functions" dev="configfs" ino=8821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.911893][ T29] audit: type=1400 audit(1786102075.298:723): avc: denied { write } for pid=9687 comm="syz.5.1264" name="configs" dev="configfs" ino=8822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.956396][ T29] audit: type=1400 audit(1786102075.298:724): avc: denied { write } for pid=9687 comm="syz.5.1264" name="c.1" dev="configfs" ino=28948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.959907][ T24] usb 7-1: USB disconnect, device number 13 [ 221.008564][ T50] Bluetooth: hci4: command tx timeout [ 221.020851][ T29] audit: type=1400 audit(1786102075.298:725): avc: denied { create } for pid=9687 comm="syz.5.1264" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 221.062269][ T29] audit: type=1400 audit(1786102075.298:726): avc: denied { write } for pid=9687 comm="syz.5.1264" name="c.1" dev="configfs" ino=28948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.408515][ T9710] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1274'. [ 222.131810][ T5705] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 222.273481][ T29] audit: type=1400 audit(1786102076.678:727): avc: denied { execute } for pid=9725 comm="syz.7.1282" name="file2" dev="ramfs" ino=29007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 222.335733][ T5705] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.357046][ T5705] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.378520][ T29] audit: type=1400 audit(1786102076.678:728): avc: denied { execute_no_trans } for pid=9725 comm="syz.7.1282" path="/file2" dev="ramfs" ino=29007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 222.390029][ T5705] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.486301][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.524088][ T9719] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 222.573459][ T5705] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.727025][ T9740] device-mapper: ioctl: populate_table: no targets specified [ 223.030576][ T5705] usb 7-1: USB disconnect, device number 14 [ 223.152119][ T5597] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 223.267293][ T9759] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 223.275873][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1294'. [ 223.326845][ T5597] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.372429][ T5597] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.389179][ T5597] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.407960][ T5597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.418394][ T5597] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 223.428174][ T5597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.439311][ T5597] usb 2-1: config 0 descriptor?? [ 223.695638][ T9761] smpboot: CPU 1 is now offline [ 223.726249][ T9766] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 223.857311][ T5597] acrux 0003:1A34:F705.0020: unknown main item tag 0x0 [ 223.873521][ T5597] acrux 0003:1A34:F705.0020: unknown main item tag 0x0 [ 223.878074][ T9769] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.901092][ T5597] acrux 0003:1A34:F705.0020: unknown main item tag 0x0 [ 223.913248][ T5705] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 223.923171][ T5597] acrux 0003:1A34:F705.0020: item fetching failed at offset 9/41 [ 223.943242][ T5597] acrux 0003:1A34:F705.0020: parse failed [ 223.963454][ T5597] acrux 0003:1A34:F705.0020: probe with driver acrux failed with error -22 [ 224.024503][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 224.024518][ T29] audit: type=1400 audit(1786102078.438:732): avc: denied { mount } for pid=9770 comm="syz.6.1298" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 224.073482][ T5597] usb 2-1: USB disconnect, device number 29 [ 224.104326][ T5705] usb 8-1: Using ep0 maxpacket: 16 [ 224.136476][ T5705] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 224.167325][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.192995][ T5705] usb 8-1: Product: syz [ 224.197208][ T5705] usb 8-1: Manufacturer: syz [ 224.205795][ T5705] usb 8-1: SerialNumber: syz [ 224.229495][ T5705] usb 8-1: config 0 descriptor?? [ 224.244181][ T5705] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 224.912441][ T980] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 225.074357][ T980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.110218][ T980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.141798][ T980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.161101][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.187236][ T9789] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 225.209548][ T980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.432773][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.460165][ T9816] binder: 9815:9816 ioctl c0306201 200000000640 returned -22 [ 225.468629][ T5705] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 225.489791][ T5705] usb 8-1: USB disconnect, device number 18 [ 225.587049][ T42] usb 6-1: USB disconnect, device number 19 [ 225.602160][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 225.610997][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 225.633432][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.638565][ T9822] loop4: detected capacity change from 0 to 2640 [ 225.643663][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.668713][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.684559][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.698026][ T9822] buffer_io_error: 138 callbacks suppressed [ 225.698044][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.708538][ T9824] Buffer I/O error on dev loop4, logical block 73, async page read [ 225.726359][ T29] audit: type=1400 audit(1786102080.108:733): avc: denied { map } for pid=9821 comm="syz.6.1321" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.730698][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.754969][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.783492][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.790275][ T9824] Buffer I/O error on dev loop4, logical block 73, async page read [ 225.793213][ T29] audit: type=1400 audit(1786102080.108:734): avc: denied { execute } for pid=9821 comm="syz.6.1321" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.834342][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.844182][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.852395][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.855319][ T9826] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 225.860399][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.882681][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.890535][ T9822] Buffer I/O error on dev loop4, logical block 0, async page read [ 225.901403][ T9822] ldm_validate_partition_table(): Disk read failed. [ 225.911294][ T9822] Dev loop4: unable to read RDB block 0 [ 225.917265][ T9822] loop4: unable to read partition table [ 225.937296][ T9822] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 226.039842][ T24] usb 4-1: usb_control_msg returned -32 [ 226.056352][ T24] usbtmc 4-1:16.0: can't read capabilities [ 226.061680][ T29] audit: type=1400 audit(1786102080.468:735): avc: denied { mounton } for pid=9829 comm="syz.6.1324" path="/216/file0" dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.115078][ T9832] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1325'. [ 226.148113][ T9833] 9pnet_fd: p9_fd_create_unix (9833): problem connecting socket: ./file0: -13 [ 226.231748][ T42] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 226.303533][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1329'. [ 226.327965][ T9837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.377341][ T9837] kvm: kvm [9836]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 226.402159][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 226.409284][ T9845] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 226.430074][ T42] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 226.439653][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.453440][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.466325][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.476787][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.492270][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.520341][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.621645][ T5597] usb 4-1: USB disconnect, device number 18 [ 226.754032][ T42] usb 2-1: usb_control_msg returned -32 [ 226.771260][ T42] usbtmc 2-1:16.0: can't read capabilities [ 226.970216][ T980] usb 2-1: USB disconnect, device number 30 [ 227.175959][ T42] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 227.236408][ T29] audit: type=1400 audit(1786102081.648:736): avc: denied { read } for pid=9863 comm="syz.3.1337" dev="nsfs" ino=4026532858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.279023][ T29] audit: type=1400 audit(1786102081.648:737): avc: denied { open } for pid=9863 comm="syz.3.1337" path="net:[4026532858]" dev="nsfs" ino=4026532858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.351773][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 227.359442][ T42] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 227.368770][ T42] usb 6-1: config 179 has no interface number 0 [ 227.375437][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 227.390658][ T29] audit: type=1400 audit(1786102081.798:738): avc: denied { watch_mount } for pid=9866 comm="syz.3.1340" path="/303/file0" dev="tmpfs" ino=1619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.414628][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 227.427688][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.439376][ T42] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 227.481380][ T42] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.506684][ T42] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 227.531124][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.558763][ T9855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.933073][ T9885] coredump: 364(syz.7.1339): Core dump to core aborted: cannot preserve file permissions [ 228.400975][ T980] usb 6-1: USB disconnect, device number 20 [ 228.401010][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.416281][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 228.547615][ T29] audit: type=1400 audit(1786102082.958:739): avc: denied { setopt } for pid=9895 comm="syz.7.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.869485][ T980] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 229.036500][ T980] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 229.054796][ T980] usb 2-1: config 127 has no interface number 0 [ 229.100645][ T980] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 229.131866][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.162111][ T29] audit: type=1400 audit(1786102083.578:740): avc: denied { write } for pid=9904 comm="syz.5.1354" name="nullb" dev="configfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.189900][ T980] usb 2-1: Product: syz [ 229.199365][ T980] usb 2-1: Manufacturer: syz [ 229.215098][ T980] usb 2-1: SerialNumber: syz [ 229.443452][ T980] usb 2-1: probing VID:PID(0424:012C) [ 229.477731][ T980] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 229.503539][ T980] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 229.544232][ T980] vub300 2-1:127.138: probe with driver vub300 failed with error -22 [ 229.591243][ T980] usb 2-1: USB disconnect, device number 31 [ 229.598787][ T29] audit: type=1400 audit(1786102084.018:741): avc: denied { append } for pid=9918 comm="syz.5.1370" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.717641][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 229.743053][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 229.832236][ T6714] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.858811][ T6714] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.875720][ T6714] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.042585][ T6710] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.172088][ T980] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 230.192060][ T29] audit: type=1400 audit(1786102084.608:742): avc: denied { write } for pid=9952 comm="syz.3.1369" path="socket:[29502]" dev="sockfs" ino=29502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.332565][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 230.348163][ T980] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 230.376173][ T980] usb 6-1: config 251 has no interface number 0 [ 230.389288][ T980] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.405612][ T980] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.427636][ T980] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 230.452248][ T980] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 230.489224][ T980] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 230.539009][ T980] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.584450][ T980] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.607213][ T980] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.659622][ T980] usb 6-1: config 251 interface 202 has no altsetting 0 [ 230.700756][ T980] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 230.730173][ T980] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 230.768855][ T980] usb 6-1: Product: syz [ 230.783988][ T980] usb 6-1: SerialNumber: syz [ 231.031967][ T5727] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 231.061702][ T5597] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 231.088919][ T980] cxacru 6-1:251.202: cxacru_bind: interface has incorrect endpoints [ 231.120895][ T980] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19! [ 231.148023][ T980] usb 6-1: USB disconnect, device number 21 [ 231.223317][ T5727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.235731][ T5727] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.250228][ T5727] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.259361][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.267666][ T5597] usb 8-1: Using ep0 maxpacket: 8 [ 231.272797][ T5727] usb 7-1: Product: syz [ 231.278121][ T5727] usb 7-1: Manufacturer: syz [ 231.283053][ T5727] usb 7-1: SerialNumber: syz [ 231.288485][ T5597] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.304438][ T5597] usb 8-1: config 0 has no interface number 0 [ 231.332710][ T50] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 231.348110][ T5727] cdc_ncm 7-1:1.0: skipping garbage [ 231.353679][ T5597] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.376479][ T5597] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.386181][ T5597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.400805][ T5597] usb 8-1: config 0 descriptor?? [ 231.417247][ T5597] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 231.428063][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 231.583201][ T10] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 231.591663][ T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 231.600303][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.612018][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 231.624502][ T10] usb 2-1: config 1 has no interface number 0 [ 231.632414][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 231.648351][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 231.657464][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.676358][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 231.971028][ T10] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 231.979953][ T10] snd_usb_pod 2-1:1.1: invalid control EP [ 231.986107][ T10] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 231.993317][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 232.007715][ T10] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 232.198499][ T5705] usb 2-1: USB disconnect, device number 32 [ 232.330112][ T5727] cdc_ncm 7-1:1.0: bind() failure [ 232.339083][ T5727] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 232.346199][ T5727] cdc_ncm 7-1:1.1: bind() failure [ 232.541322][ T10] usb 7-1: USB disconnect, device number 15 [ 232.601890][ T6716] wlan1: Trigger new scan to find an IBSS to join [ 232.647442][ T29] audit: type=1400 audit(1786102087.058:743): avc: denied { mounton } for pid=10015 comm="syz.3.1387" path="/" dev="ramfs" ino=30094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 232.690072][ T5727] usb 8-1: USB disconnect, device number 19 [ 232.807756][T10019] syzkaller1: entered promiscuous mode [ 232.807778][T10019] syzkaller1: entered allmulticast mode [ 232.853242][T10022] gadgetfs: bound to dummy_udc driver [ 232.859957][T10020] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 233.649351][ T42] hid_parser_main: 3 callbacks suppressed [ 233.649371][ T42] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 233.691301][ T562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.735623][ T42] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.862608][ T5727] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 235.052037][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 235.074623][ T5727] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 235.105824][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.136113][ T5727] usb 6-1: Product: syz [ 235.149510][ T5727] usb 6-1: Manufacturer: syz [ 235.168185][ T5727] usb 6-1: SerialNumber: syz [ 235.196259][ T5727] usb 6-1: config 0 descriptor?? [ 235.468692][ T5727] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 022 [ 235.563886][ T6710] wlan1: Trigger new scan to find an IBSS to join [ 236.016230][ T29] audit: type=1326 audit(1786102090.428:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.1.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5d779e0d9 code=0x0 [ 236.418516][T10121] overlayfs: failed to verify upper (168/file1, ino=908, err=-116) [ 236.437025][T10121] overlayfs: failed to verify index dir 'upper' xattr [ 236.452205][T10121] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 237.635024][ T42] usb 6-1: USB disconnect, device number 22 [ 238.264434][ T29] audit: type=1326 audit(1786102092.668:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f311319e0d9 code=0x0 [ 238.603493][ T1163] wlan1: Trigger new scan to find an IBSS to join [ 238.674459][T10186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.831750][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 238.896238][T10193] binder: 10191:10193 unknown command 0 [ 238.927904][T10193] binder: 10191:10193 ioctl c0306201 200000000080 returned -22 [ 238.991726][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 239.008209][ T24] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 239.015682][ T29] audit: type=1400 audit(1786102093.418:746): avc: denied { read } for pid=10197 comm="syz.1.1447" name="midi1_first_group" dev="configfs" ino=30851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 239.027751][ T24] usb 8-1: config 0 has no interface number 0 [ 239.063943][ T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 239.068087][ T29] audit: type=1800 audit(1786102093.418:747): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1447" name="midi1_first_group" dev="configfs" ino=30851 res=0 errno=0 [ 239.078657][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.130980][ T24] usb 8-1: Product: syz [ 239.172070][ T42] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 239.185973][ T24] usb 8-1: Manufacturer: syz [ 239.201817][ T24] usb 8-1: SerialNumber: syz [ 239.228172][ T24] usb 8-1: config 0 descriptor?? [ 239.245674][ T24] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 239.331827][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 239.344071][ T42] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 239.356956][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.383820][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.400761][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.412246][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.428396][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.471244][ T24] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 239.482583][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.491696][ T5727] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 239.503498][ T24] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 239.557836][ T6714] wlan1: Creating new IBSS network, BSSID ea:ea:fb:07:8c:e8 [ 239.654345][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.699702][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.735024][ T5727] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 239.754084][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 239.763782][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.793300][ T42] usb 7-1: usb_control_msg returned -32 [ 239.800734][T10216] jffs2: notice: (10216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.802703][ T42] usbtmc 7-1:16.0: can't read capabilities [ 239.827034][ T5727] usb 2-1: config 0 descriptor?? [ 239.931894][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1456'. [ 239.963021][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 239.969490][ T5597] usb 8-1: USB disconnect, device number 20 [ 240.014785][ T5597] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 240.060640][ T5597] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 240.080901][ T5597] quatech2 8-1:0.51: device disconnected [ 240.280822][ T5727] elan 0003:04F3:0755.0022: unknown main item tag 0x0 [ 240.301737][ T5727] elan 0003:04F3:0755.0022: unknown main item tag 0x0 [ 240.312917][ T10] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 240.326217][ T5727] elan 0003:04F3:0755.0022: unknown main item tag 0x0 [ 240.338199][ T5727] elan 0003:04F3:0755.0022: unknown main item tag 0x0 [ 240.350457][ T5727] elan 0003:04F3:0755.0022: unknown main item tag 0x0 [ 240.359239][ T5727] elan 0003:04F3:0755.0022: failed to start in urb: -90 [ 240.369095][ T5727] elan 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 240.483403][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.501688][ T10] usb 6-1: config 179 has no interface number 0 [ 240.511699][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 240.540888][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 240.548570][T10230] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 240.554236][ T5727] usb 2-1: USB disconnect, device number 33 [ 240.581668][ T5597] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 240.595333][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 240.620743][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 240.635614][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.650579][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.662785][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.688943][T10222] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 240.704050][ T10] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 240.718969][ T10] xpad 6-1:179.65: probe with driver xpad failed with error -90 [ 240.763405][ T5597] usb 4-1: config 0 has no interfaces? [ 240.770366][ T5597] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 240.782349][ T10] usb 7-1: USB disconnect, device number 16 [ 240.789427][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.810942][ T5597] usb 4-1: config 0 descriptor?? [ 240.913583][ T42] usb 6-1: USB disconnect, device number 23 [ 241.034588][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.045293][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.054843][ T5597] usb 4-1: USB disconnect, device number 19 [ 241.511709][ T5597] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 241.686731][ T5597] usb 4-1: Using ep0 maxpacket: 16 [ 241.716901][ T5597] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.753336][ T5597] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.785779][ T5597] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 241.838395][ T5597] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.856324][ T5597] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 241.891116][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.932329][ T5597] usb 4-1: config 0 descriptor?? [ 242.373480][ T5597] kye 0003:0458:5011.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 242.413554][ T5597] kye 0003:0458:5011.0023: unknown main item tag 0x0 [ 242.445899][ T5597] kye 0003:0458:5011.0023: unknown main item tag 0x0 [ 242.468560][ T5597] kye 0003:0458:5011.0023: unknown main item tag 0x0 [ 242.500830][ T5597] kye 0003:0458:5011.0023: unknown main item tag 0x0 [ 242.508903][ T24] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 242.578412][ T5597] kye 0003:0458:5011.0023: hidraw1: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 242.578932][ T24] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.655756][ T5597] kye 0003:0458:5011.0023: tablet-enabling feature report not found [ 242.731751][ T5597] kye 0003:0458:5011.0023: tablet enabling failed [ 242.799823][ T5597] usb 4-1: USB disconnect, device number 20 [ 242.949233][T10254] fido_id[10254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 243.296671][ T6716] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.605465][ T6716] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.734501][ T29] audit: type=1400 audit(1786102098.148:748): avc: denied { bind } for pid=10260 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.912354][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 243.915816][ T6716] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.958295][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.975614][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.983603][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.994554][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.011283][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.085451][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 244.130710][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 244.172698][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 244.217782][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 244.273362][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 244.300974][ T6716] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.308627][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 244.344490][ T10] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 244.383297][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 244.407372][ T10] usb 6-1: Product: syz [ 244.427309][ T10] usb 6-1: Manufacturer: syz [ 244.456778][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.483260][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.513986][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.563213][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.571860][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.625003][T10259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.659864][ T10] usb 6-1: USB2VGA dongle found at address 24 [ 244.706618][ T10] usb 6-1: Allocated 8 output buffers [ 244.744878][ T10] usb 6-1: Failed to early initialize device [ 245.031497][ T5597] usb 6-1: USB disconnect, device number 24 [ 245.116733][ T6716] bridge_slave_1: left allmulticast mode [ 245.134578][ T6716] bridge_slave_1: left promiscuous mode [ 245.153131][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.250954][ T6716] bridge_slave_0: left allmulticast mode [ 245.262218][ T6716] bridge_slave_0: left promiscuous mode [ 245.268621][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.497432][ T29] audit: type=1400 audit(1786102099.908:749): avc: denied { create } for pid=10300 comm="syz.6.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 245.548061][ T29] audit: type=1400 audit(1786102099.938:750): avc: denied { write } for pid=10300 comm="syz.6.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 245.967934][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.006660][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.020301][ T6716] bond0 (unregistering): Released all slaves [ 246.098346][T10305] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.141782][ T5608] Bluetooth: hci3: command tx timeout [ 246.163066][T10305] bond1: (slave lo): Enslaving as an active interface with an up link [ 246.199873][T10305] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 246.788119][ T29] audit: type=1400 audit(1786102101.198:751): avc: denied { append } for pid=10337 comm="syz.3.1494" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.031819][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 247.063238][ T6716] hsr_slave_0: left promiscuous mode [ 247.108924][ T6716] hsr_slave_1: left promiscuous mode [ 247.135066][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.168650][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.212666][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.223161][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 247.239301][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.242031][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 247.285704][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.296867][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.297937][ T29] audit: type=1400 audit(1786102101.698:752): avc: denied { write } for pid=10328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.309611][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.345023][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.355602][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.401190][T10357] netlink: 'syz.5.1500': attribute type 20 has an invalid length. [ 247.412938][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 247.432251][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.442357][ T6716] veth1_macvtap: left promiscuous mode [ 247.442408][ T6716] veth0_macvtap: left promiscuous mode [ 247.442542][ T6716] veth1_vlan: left promiscuous mode [ 247.442600][ T6716] veth0_vlan: left promiscuous mode [ 247.512314][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.532025][ T24] usb 4-1: Manufacturer: syz [ 247.546265][ T5597] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 247.553493][ T24] usb 4-1: config 0 descriptor?? [ 247.614627][ T29] audit: type=1400 audit(1786102102.028:753): avc: denied { write } for pid=10359 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.730379][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 247.750995][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 247.765238][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 247.808491][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 247.843413][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 247.860804][ T5597] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 247.880645][ T5597] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 247.896906][ T5597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 247.906883][ T5597] usb 7-1: Product: syz [ 247.912686][ T24] rc_core: IR keymap rc-hauppauge not found [ 247.912869][ T5597] usb 7-1: Manufacturer: syz [ 247.936024][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.940014][ T24] Registered IR keymap rc-empty [ 247.945615][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.956865][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.958191][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 247.965710][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.980333][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.987951][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 248.001780][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.014948][ T5597] usb 7-1: USB2VGA dongle found at address 17 [ 248.052990][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 248.082826][ T5597] usb 7-1: Allocated 8 output buffers [ 248.092847][ T5597] usb 7-1: Failed to early initialize device [ 248.095987][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 248.169549][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.201764][ T50] Bluetooth: hci3: command tx timeout [ 248.208360][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.241882][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.265833][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.275049][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 248.292657][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.320254][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 248.323207][T10352] usb 7-1: Failed to initialize device [ 248.328520][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.372042][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.391277][ T42] usb 7-1: USB disconnect, device number 17 [ 248.402008][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.432549][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.473649][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.524209][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.534961][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.555021][ T24] usb 4-1: USB disconnect, device number 21 [ 248.686241][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 248.736040][T10357] netlink: 'syz.5.1500': attribute type 20 has an invalid length. [ 248.746887][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 248.977937][ T29] audit: type=1400 audit(1786102103.378:754): avc: denied { read } for pid=10375 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.422828][ T29] audit: type=1400 audit(1786102103.828:755): avc: denied { write } for pid=10396 comm="syz.3.1509" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.864079][ T29] audit: type=1400 audit(1786102104.278:756): avc: denied { write } for pid=10374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.217376][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.250045][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.270009][ T29] audit: type=1400 audit(1786102104.678:757): avc: denied { write } for pid=10424 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.302592][ T50] Bluetooth: hci3: command tx timeout [ 250.323140][T10265] bridge_slave_0: entered allmulticast mode [ 250.360039][T10265] bridge_slave_0: entered promiscuous mode [ 250.463030][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.496160][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.526785][T10265] bridge_slave_1: entered allmulticast mode [ 250.630306][T10265] bridge_slave_1: entered promiscuous mode [ 250.989534][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 251.209959][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.269128][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.486893][T10265] team0: Port device team_slave_0 added [ 251.524170][T10265] team0: Port device team_slave_1 added [ 251.584110][ T29] audit: type=1326 audit(1786102105.998:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.3.1520" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f311319e0d9 code=0x0 [ 251.761475][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.784163][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.885968][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.975388][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.002753][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.079996][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.095156][ T5698] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 252.135804][ T29] audit: type=1400 audit(1786102106.548:759): avc: denied { write } for pid=10455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.239807][T10265] hsr_slave_0: entered promiscuous mode [ 252.249333][T10265] hsr_slave_1: entered promiscuous mode [ 252.255602][T10265] debugfs: 'hsr0' already exists in 'hsr' [ 252.261482][T10265] Cannot create hsr debugfs directory [ 252.292087][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 252.304972][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.334945][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.341683][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 252.354953][ T5698] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 252.365057][ T50] Bluetooth: hci3: command tx timeout [ 252.391968][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.421114][ T5698] usb 2-1: config 0 descriptor?? [ 252.434975][ T29] audit: type=1400 audit(1786102106.828:760): avc: denied { write } for pid=10482 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.526949][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.552288][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.590940][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.624417][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.669238][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.727754][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.762472][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.785991][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 252.795455][ T10] usb 7-1: Product: syz [ 252.810299][ T10] usb 7-1: Manufacturer: syz [ 252.846674][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 252.858379][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 252.914583][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 252.939067][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 252.947182][ T5698] savu 0003:1E7D:2D5A.0025: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 253.101959][ T980] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 253.130367][ T10] usb 7-1: USB disconnect, device number 18 [ 253.151002][ T5713] usb 2-1: USB disconnect, device number 34 [ 253.217779][T10491] fido_id[10491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 253.261849][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 253.273743][ T980] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 253.283885][ T29] audit: type=1804 audit(1786102107.688:761): pid=10496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1528" name="/newroot/53/file1" dev="tmpfs" ino=292 res=1 errno=0 [ 253.308009][ T980] usb 4-1: config 0 has no interface number 0 [ 253.342306][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 253.358142][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.367870][ T980] usb 4-1: Product: syz [ 253.372299][ T980] usb 4-1: Manufacturer: syz [ 253.376956][ T980] usb 4-1: SerialNumber: syz [ 253.387417][ T980] usb 4-1: config 0 descriptor?? [ 253.476817][T10265] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 253.508051][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.517396][T10265] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 253.536895][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.560970][T10265] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 253.591047][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.619634][T10265] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 253.678277][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.823398][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 253.859630][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.977438][ T29] audit: type=1400 audit(1786102108.388:762): avc: denied { write } for pid=10492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.995786][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.139932][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.199997][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.207901][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.256718][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.264620][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.299101][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 254.326029][ T980] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 254.378439][ T29] audit: type=1400 audit(1786102108.778:763): avc: denied { write } for pid=10522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.406720][ T980] usb 4-1: USB disconnect, device number 22 [ 254.668144][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 254.912441][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1536'. [ 254.958096][ T29] audit: type=1400 audit(1786102109.348:764): avc: denied { create } for pid=10534 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.076477][ T29] audit: type=1400 audit(1786102109.398:765): avc: denied { ioctl } for pid=10534 comm="syz.6.1536" path="socket:[32926]" dev="sockfs" ino=32926 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.209111][ T29] audit: type=1400 audit(1786102109.408:766): avc: denied { write } for pid=10534 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.380237][ T29] audit: type=1400 audit(1786102109.788:767): avc: denied { write } for pid=10546 comm="syz.6.1540" path="socket:[32945]" dev="sockfs" ino=32945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.439300][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.859973][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.884590][ T29] audit: type=1400 audit(1786102111.288:768): avc: denied { write } for pid=10579 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.895316][T10265] veth0_vlan: entered promiscuous mode [ 256.956398][T10265] veth1_vlan: entered promiscuous mode [ 257.100882][T10265] veth0_macvtap: entered promiscuous mode [ 257.136442][T10265] veth1_macvtap: entered promiscuous mode [ 257.151872][ T5328] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.225564][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.283926][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.331737][ T5328] usb 2-1: Using ep0 maxpacket: 32 [ 257.364083][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.420478][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.458776][ T5328] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.482477][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.493939][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.519732][ T5328] usb 2-1: config 0 descriptor?? [ 257.525915][ T6710] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.570091][ T5328] hub 2-1:0.0: USB hub found [ 257.580228][ T6710] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.612137][ T6707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.716764][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.792141][ T5328] hub 2-1:0.0: 1 port detected [ 257.874462][ T6714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.916522][ T6714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.005267][ T5328] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 258.028657][ T29] audit: type=1400 audit(1786102112.438:769): avc: denied { map } for pid=10595 comm="syz.6.1553" path="socket:[33838]" dev="sockfs" ino=33838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 258.038659][ T5328] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 258.089274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.097518][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.148247][ T5328] usbhid 2-1:0.0: can't add hid device: -71 [ 258.167994][ T5328] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 258.229804][ T5328] usb 2-1: USB disconnect, device number 35 [ 258.835846][ T29] audit: type=1400 audit(1786102113.238:770): avc: denied { create } for pid=10618 comm="syz.1.1562" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.955472][ T29] audit: type=1400 audit(1786102113.278:771): avc: denied { write } for pid=10618 comm="syz.1.1562" name="file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.066662][ T29] audit: type=1400 audit(1786102113.278:772): avc: denied { open } for pid=10618 comm="syz.1.1562" path="/275/file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.691728][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 259.875665][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 259.918803][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.946354][ T10] usb 2-1: Product: syz [ 259.951190][ T10] usb 2-1: Manufacturer: syz [ 259.957422][ T10] usb 2-1: SerialNumber: syz [ 260.090414][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 260.090432][ T29] audit: type=1400 audit(1786102114.498:775): avc: denied { write } for pid=10652 comm="syz.6.1577" name="functions" dev="configfs" ino=8821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.191556][ T29] audit: type=1400 audit(1786102114.538:776): avc: denied { write } for pid=10652 comm="syz.6.1577" name="c.1" dev="configfs" ino=28948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.299345][ T29] audit: type=1400 audit(1786102114.538:777): avc: denied { write } for pid=10652 comm="syz.6.1577" name="c.1" dev="configfs" ino=28948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.345896][T10657] syzkaller1: entered promiscuous mode [ 260.381716][T10657] syzkaller1: entered allmulticast mode [ 260.460836][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 260.515425][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 260.690260][T10668] veth1_to_bond: entered allmulticast mode [ 260.699341][T10668] veth1_to_bond: entered promiscuous mode [ 260.728018][T10668] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1582'. [ 260.792605][T10668] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.878592][T10668] bridge_slave_0 (unregistering): left allmulticast mode [ 260.898034][T10668] bridge_slave_0 (unregistering): left promiscuous mode [ 260.917335][T10668] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.047208][T10667] veth1_to_bond: left promiscuous mode [ 261.102949][T10667] veth1_to_bond: left allmulticast mode [ 261.121731][ T5727] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 261.184328][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 261.201950][T10678] input: syz0 as /devices/virtual/input/input51 [ 261.204614][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 261.232759][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.274384][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 261.301682][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 261.314525][ T5727] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.350028][ T10] usb 2-1: USB disconnect, device number 36 [ 261.356038][ T5727] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 261.373949][ T5727] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.418873][ T5727] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 261.456333][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.481131][ T5727] usb 6-1: Product: syz [ 261.490767][ T5727] usb 6-1: Manufacturer: syz [ 261.500058][ T5727] usb 6-1: SerialNumber: syz [ 261.510662][ T5727] usb 6-1: config 0 descriptor?? [ 261.552572][ T5328] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 261.753616][ T5328] usb 9-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 261.773436][ T5328] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.798144][ T5328] usb 9-1: Product: syz [ 261.820694][ T5328] usb 9-1: Manufacturer: syz [ 261.834296][ T5328] usb 9-1: SerialNumber: syz [ 261.871691][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 261.878030][ T5328] gspca_main: spca500-2.14.0 probing 046d:0900 [ 261.943499][ T5727] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 261.964070][ T29] audit: type=1400 audit(1786102116.368:778): avc: denied { link } for pid=10685 comm="syz.6.1589" name="#38" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 262.061826][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 262.067058][ T29] audit: type=1400 audit(1786102116.418:779): avc: denied { rename } for pid=10685 comm="syz.6.1589" name="#39" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 262.096897][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 262.128337][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 262.173681][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 262.195667][T10690] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.203407][ T10] usb 4-1: Product: syz [ 262.218556][ T10] usb 4-1: Manufacturer: syz [ 262.230886][ T10] usb 4-1: SerialNumber: syz [ 262.280518][ T10] usb 4-1: config 0 descriptor?? [ 262.290275][T10684] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 262.307572][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 262.330389][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 262.417324][ T5328] gspca_spca500: reg write: error -32 [ 262.445564][ T5328] gspca_spca500: reg write: error -32 [ 262.459292][ T5328] gspca_spca500: reg write: error -32 [ 262.508220][ T5328] gspca_spca500: reg write: error -32 [ 262.517952][ T5328] gspca_spca500: reg write: error -32 [ 262.525496][ T5328] gspca_spca500: reg write: error -32 [ 262.532144][ T5328] gspca_spca500: reg write: error -32 [ 262.573207][ T5328] gspca_spca500: reg write: error -32 [ 262.607379][ T5328] gspca_spca500: reg write: error -32 [ 262.631955][ T5328] gspca_spca500: reg write: error -32 [ 262.638280][ T5727] usb 6-1: USB disconnect, device number 25 [ 262.660400][ T5328] gspca_spca500: reg write: error -32 [ 262.693468][ T5328] gspca_spca500: reg write: error -32 [ 262.699760][ T5328] gspca_spca500: reg write: error -32 [ 262.707954][ T5328] gspca_spca500: reg write: error -32 [ 262.907048][ T29] audit: type=1400 audit(1786102117.318:780): avc: denied { write } for pid=10698 comm="syz.1.1594" name="functions" dev="configfs" ino=8821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.989572][ T29] audit: type=1400 audit(1786102117.348:781): avc: denied { write } for pid=10698 comm="syz.1.1594" name="extensions" dev="configfs" ino=33549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.300473][ T5328] usb 9-1: USB disconnect, device number 2 [ 263.357658][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1597'. [ 263.421403][T10710] netlink: 'syz.1.1597': attribute type 7 has an invalid length. [ 263.453477][T10710] netlink: 'syz.1.1597': attribute type 8 has an invalid length. [ 263.484662][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 263.562751][T10710] erspan0: entered promiscuous mode [ 263.591566][T10710] gretap0: entered promiscuous mode [ 263.613691][T10710] erspan0: left promiscuous mode [ 263.637377][T10710] gretap0: left promiscuous mode [ 263.845680][T10727] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 263.971349][ T29] audit: type=1400 audit(1786102118.378:782): avc: denied { write } for pid=10703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.034647][ T6707] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.111542][T10731] gadgetfs: bound to dummy_udc driver [ 264.122793][T10684] raw-gadget.2 gadget.3: failed to queue resume event [ 264.125839][T10735] tipc: Started in network mode [ 264.127756][T10735] tipc: Node identity 7f000001, cluster identity 4711 [ 264.143557][ T6714] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.200226][T10735] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.232462][T10684] raw-gadget.2 gadget.3: failed to queue resume event [ 264.284640][T10735] tipc: Enabled bearer , priority 10 [ 264.291968][ T57] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.311821][T10739] tipc: Disabling bearer [ 264.370947][ T29] audit: type=1400 audit(1786102118.778:783): avc: denied { write } for pid=10740 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.381911][T10684] raw-gadget.2 gadget.3: failed to queue resume event [ 264.476069][ T6707] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.563503][T10684] raw-gadget.2 gadget.3: failed to queue resume event [ 264.605938][ T6714] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.718274][ T6707] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.732129][T10684] raw-gadget.2 gadget.3: failed to queue resume event [ 264.794538][ T6714] raw-gadget.2 gadget.3: failed to queue suspend event [ 264.897014][T10684] raw-gadget.2 gadget.3: failed to queue disconnect event [ 265.012822][ T5705] usb 4-1: USB disconnect, device number 23 [ 265.449431][T10767] SELinux: invalid class [ 265.461510][T10767] SELinux: failed to load policy [ 266.094417][ T29] audit: type=1400 audit(1786102120.498:784): avc: denied { write } for pid=10752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.503434][ T29] audit: type=1400 audit(1786102120.918:785): avc: denied { write } for pid=10796 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.689006][ T29] audit: type=1400 audit(1786102122.098:786): avc: denied { relabelfrom } for pid=10823 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 267.761438][ T29] audit: type=1400 audit(1786102122.128:787): avc: denied { relabelto } for pid=10823 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 267.901912][ T29] audit: type=1400 audit(1786102122.308:788): avc: denied { write } for pid=10808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.083283][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 268.147410][T10842] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 268.208126][T10842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.253445][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 268.272790][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.290989][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.303429][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.317125][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.326303][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.344265][ T10] usb 2-1: config 0 descriptor?? [ 268.364651][T10846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.372333][T10846] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 268.386558][ T29] audit: type=1400 audit(1786102122.788:789): avc: denied { write } for pid=10843 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.387949][T10846] bond2: (slave vti0): Error -95 calling set_mac_address [ 268.714212][T10852] loop6: detected capacity change from 0 to 2640 [ 268.738687][T10852] buffer_io_error: 13 callbacks suppressed [ 268.738730][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.758747][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.777887][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.783956][ T10] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 268.787517][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.802859][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.820059][T10855] blk_print_req_error: 95 callbacks suppressed [ 268.820092][T10855] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 268.838342][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.856296][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.873116][T10855] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 268.877737][ T10] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 268.893748][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.941918][T10855] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 268.985901][T10852] ldm_validate_partition_table(): Disk read failed. [ 269.024456][T10855] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 269.083627][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.104352][T10855] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 269.123925][T10852] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.155176][T10852] Dev loop6: unable to read RDB block 0 [ 269.177554][T10852] loop6: unable to read partition table [ 269.196527][ T5727] usb 2-1: USB disconnect, device number 37 [ 269.221090][T10855] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 269.226115][T10852] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 269.298086][T10855] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 269.364562][T10855] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 269.635477][ T1089] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.921827][ T5713] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 269.999541][ T29] audit: type=1400 audit(1786102124.408:790): avc: denied { write } for pid=10859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.127279][ T5713] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.168020][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.212775][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.230833][ T1089] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.251465][T10894] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.266124][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.311325][ T5713] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 270.333818][ T5713] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 270.347105][ T29] audit: type=1400 audit(1786102124.758:791): avc: denied { write } for pid=10895 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.405706][ T5713] usb 4-1: Manufacturer: syz [ 270.437194][ T5713] usb 4-1: config 0 descriptor?? [ 270.886821][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1656'. [ 270.913505][ T5713] hid_parser_main: 37 callbacks suppressed [ 270.913525][ T5713] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 270.986671][ T5713] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 271.194061][ T29] audit: type=1400 audit(1786102125.608:792): avc: denied { write } for pid=10917 comm="syz.8.1658" name="dlm" dev="configfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.258357][ T29] audit: type=1400 audit(1786102125.608:793): avc: denied { write } for pid=10917 comm="syz.8.1658" name="comms" dev="configfs" ino=34348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.341278][T10915] SELinux: security_context_str_to_sid (p) failed with errno=-22 [ 271.382239][T10923] Bluetooth: MGMT ver 1.23 [ 271.699743][T10926] overlayfs: failed to verify upper (18/file1, ino=117, err=-116) [ 271.714772][ T29] audit: type=1400 audit(1786102126.128:794): avc: denied { read write } for pid=10930 comm="syz.1.1661" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 271.763943][T10926] overlayfs: failed to verify index dir 'upper' xattr [ 271.798267][T10926] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 271.827206][ T29] audit: type=1400 audit(1786102126.128:795): avc: denied { open } for pid=10930 comm="syz.1.1661" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 271.897388][ T29] audit: type=1400 audit(1786102126.268:796): avc: denied { write } for pid=10908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.102243][ T29] audit: type=1400 audit(1786102126.508:797): avc: denied { write } for pid=10938 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.954565][T10965] overlay: filesystem on ./file0 not supported [ 272.976212][ T29] audit: type=1400 audit(1786102127.368:798): avc: denied { mounton } for pid=10963 comm="syz.1.1668" path="/291/file1/file0" dev="autofs" ino=35392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 273.119128][ T10] usb 4-1: USB disconnect, device number 24 [ 273.193642][ T29] audit: type=1400 audit(1786102127.598:799): avc: denied { write } for pid=10944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.225606][T10969] kvm: user requested TSC rate below hardware speed [ 273.521784][ T5713] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 273.619819][ T29] audit: type=1400 audit(1786102128.028:800): avc: denied { write } for pid=10986 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.673344][ T29] audit: type=1804 audit(1786102128.068:801): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1678" name="/newroot/290/file1" dev="tmpfs" ino=1543 res=1 errno=0 [ 273.711718][ T5705] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 273.719648][ T5713] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 273.719677][ T5713] usb 2-1: config 0 has no interface number 0 [ 273.719720][ T5713] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 273.719746][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.755602][ T5713] usb 2-1: config 0 descriptor?? [ 273.781331][ T5713] cp210x 2-1:0.32: cp210x converter detected [ 273.860267][T10994] jffs2: notice: (10994) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.998929][ T5705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.023470][ T5705] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 274.035636][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.041844][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 274.054315][ T5705] usb 6-1: Product: syz [ 274.060970][ T5705] usb 6-1: Manufacturer: syz [ 274.067578][ T5705] usb 6-1: SerialNumber: syz [ 274.090890][ T5705] symbolserial 6-1:1.0: symbol converter detected [ 274.150093][ T5705] usb 6-1: symbol converter now attached to ttyUSB0 [ 274.184872][ T5713] cp210x 2-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 274.409279][ T5713] cp210x 2-1:0.32: GPIO initialisation failed: -19 [ 274.428961][ T5597] usb 6-1: USB disconnect, device number 26 [ 274.439144][ T5713] usb 2-1: cp210x converter now attached to ttyUSB1 [ 274.483247][ T5597] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 274.504904][ T5597] symbolserial 6-1:1.0: device disconnected [ 274.634977][ T5713] usb 2-1: USB disconnect, device number 38 [ 274.645712][ T5713] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 274.659161][ T5713] cp210x 2-1:0.32: device disconnected [ 275.480915][T11031] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1697'. [ 275.533890][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1697'. [ 275.584205][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.599071][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.682539][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 275.881710][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 275.898392][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 275.928187][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.948527][T11046] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 275.961953][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.990002][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.033924][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.079609][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.120924][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.150446][T11052] binder: 11049:11052 ioctl 4018620d 0 returned -22 [ 276.263625][T11053] bridge1: entered promiscuous mode [ 276.291776][T11053] bridge1: entered allmulticast mode [ 276.404541][T11053] team0: Port device bridge1 added [ 276.407286][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 276.417741][ T24] usbtmc 7-1:16.0: can't read capabilities [ 276.425747][T11055] bridge0: port 1(team0) entered blocking state [ 276.461502][T11055] bridge0: port 1(team0) entered disabled state [ 276.468786][T11055] team0: entered allmulticast mode [ 276.475563][T11055] team_slave_0: entered allmulticast mode [ 276.485535][T11055] team_slave_1: entered allmulticast mode [ 276.516424][T11055] team0: entered promiscuous mode [ 276.530061][T11055] team_slave_0: entered promiscuous mode [ 276.541693][ T5597] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 276.552171][T11055] team_slave_1: entered promiscuous mode [ 276.570729][T11055] bridge0: port 1(team0) entered blocking state [ 276.578257][T11055] bridge0: port 1(team0) entered forwarding state [ 276.693888][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.713134][ T5597] usb 6-1: Using ep0 maxpacket: 32 [ 276.725728][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 276.725744][ T29] audit: type=1400 audit(1786102131.138:806): avc: denied { create } for pid=11069 comm="syz.3.1711" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.765664][ T5597] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 276.776708][ T5597] usb 6-1: config 0 has no interface number 0 [ 276.789286][ T5727] usb 7-1: USB disconnect, device number 19 [ 276.805341][ T5597] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.832990][ T29] audit: type=1400 audit(1786102131.148:807): avc: denied { write } for pid=11069 comm="syz.3.1711" name="file0" dev="tmpfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.856710][ T5597] usb 6-1: config 0 interface 85 has no altsetting 0 [ 276.886795][ T5597] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 276.904162][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.912968][ T29] audit: type=1400 audit(1786102131.148:808): avc: denied { open } for pid=11069 comm="syz.3.1711" path="/394/file0" dev="tmpfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.945706][ T5597] usb 6-1: Product: syz [ 276.954174][ T5597] usb 6-1: Manufacturer: syz [ 276.959376][ T5597] usb 6-1: SerialNumber: syz [ 276.964522][ T29] audit: type=1400 audit(1786102131.248:809): avc: denied { unlink } for pid=5592 comm="syz-executor" name="file0" dev="tmpfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.993264][ T5597] usb 6-1: config 0 descriptor?? [ 277.191098][ T29] audit: type=1400 audit(1786102131.598:810): avc: denied { cmd } for pid=11081 comm="iou-wrk-11082" path="socket:[35780]" dev="sockfs" ino=35780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 277.645008][ T5597] appletouch 6-1:0.85: Geyser mode initialized. [ 277.659939][ T5597] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input53 [ 277.791919][ T5705] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 277.924947][ T24] usb 6-1: USB disconnect, device number 27 [ 277.989239][ T24] appletouch 6-1:0.85: input: appletouch disconnected [ 277.997251][ T5705] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.018849][ T5705] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 278.046048][ T5705] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 278.059670][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.068650][ T5705] usb 4-1: Product: syz [ 278.076642][ T5705] usb 4-1: Manufacturer: syz [ 278.081880][ T5705] usb 4-1: SerialNumber: syz [ 278.215252][ T29] audit: type=1400 audit(1786102132.628:811): avc: denied { read } for pid=11110 comm="syz.8.1723" path="socket:[34614]" dev="sockfs" ino=34614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.367233][ T6707] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 278.572108][ T5713] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 278.585964][T11117] jffs2: notice: (11117) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 278.773462][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 278.809174][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.850970][ T5713] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.851632][ T5705] usb 4-1: USB disconnect, device number 25 [ 278.880314][ T5713] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 278.900145][T11123] netlink: 'syz.6.1729': attribute type 1 has an invalid length. [ 278.969918][ T5713] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 279.025930][ T5713] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 279.098706][ T5713] usb 2-1: config 1 interface 1 has no altsetting 0 [ 279.144626][T11123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.144912][ T5713] usb 2-1: string descriptor 0 read error: -22 [ 279.225499][ T5713] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 279.276144][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.282147][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.362439][T11127] bond1: (slave gretap1): making interface the new active one [ 279.477974][T11127] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 279.876580][T11141] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3978288634 (254610472576 ns) > initial count (109740807360 ns). Using initial count to start timer. [ 280.216266][ T29] audit: type=1400 audit(1786102134.628:812): avc: denied { setopt } for pid=11151 comm="syz.3.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.350848][ T5713] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 280.379586][ T29] audit: type=1400 audit(1786102134.788:813): avc: denied { watch watch_reads } for pid=11153 comm="syz.6.1742" path="/300/file0" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 280.538375][ T5713] usb 2-1: USB disconnect, device number 39 [ 280.645549][ T29] audit: type=1400 audit(1786102135.058:814): avc: denied { read } for pid=11160 comm="syz.6.1745" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.641773][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.711785][ T5727] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 281.734351][ T5713] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 281.895606][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.908379][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 281.934476][ T5727] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 281.952968][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 281.967748][ T5727] usb 6-1: config 0 has no interface number 0 [ 281.990648][ T5727] usb 6-1: config 0 interface 184 has no altsetting 0 [ 282.001288][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 282.030646][ T5727] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 282.055184][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.063533][T11204] netlink: 'syz.8.1764': attribute type 1 has an invalid length. [ 282.071957][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.090986][ T5713] usb 2-1: config 0 descriptor?? [ 282.098478][ T5727] usb 6-1: Product: syz [ 282.107776][ T5727] usb 6-1: Manufacturer: syz [ 282.112931][ T5727] usb 6-1: SerialNumber: syz [ 282.117942][T11188] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 282.146527][ T5727] usb 6-1: config 0 descriptor?? [ 282.261008][T11204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.332885][T11207] bond1: (slave geneve2): making interface the new active one [ 282.347465][T11207] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 282.356674][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 282.356769][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 282.371143][ T5713] usb 2-1: USB disconnect, device number 40 [ 282.542989][ T5705] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 282.662050][T11219] capability: warning: `syz.3.1769' uses deprecated v2 capabilities in a way that may be insecure [ 282.716462][ T5705] usb 7-1: config index 0 descriptor too short (expected 60772, got 100) [ 282.726043][ T5705] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.737774][ T5705] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.757953][ T5705] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.777433][ T5705] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.799008][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.809442][ T5705] usb 7-1: Product: syz [ 282.814150][ T5705] usb 7-1: Manufacturer: syz [ 282.819239][ T5705] usb 7-1: SerialNumber: syz [ 282.821978][ T5713] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 282.834503][ T5597] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 282.837790][ T5705] cdc_ncm 7-1:1.0: skipping garbage [ 282.858921][ T5705] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 282.870970][ T5705] cdc_ncm 7-1:1.0: bind() failure [ 283.014827][ T5597] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 283.031776][ T5713] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.042004][ T5597] usb 2-1: config 4 has no interface number 0 [ 283.050619][ T5713] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.063268][ T5597] usb 2-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 283.082705][ T5713] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.094488][ T5597] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 283.108907][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 283.117320][ T5713] usb 9-1: SerialNumber: syz [ 283.118835][ T5705] usb 7-1: USB disconnect, device number 20 [ 283.123231][ T5597] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.162054][ T5597] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 283.195372][ T5597] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 283.206067][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.214338][ T5597] usb 2-1: Product: syz [ 283.220131][ T5597] usb 2-1: Manufacturer: syz [ 283.225037][ T5597] usb 2-1: SerialNumber: syz [ 283.236197][T11188] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 283.372749][ T5713] usb 9-1: 0:2 : does not exist [ 283.408322][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 283.441672][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 283.466117][ T5713] usb 9-1: USB disconnect, device number 3 [ 283.475945][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 283.514327][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 283.547940][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 283.571952][ T5727] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 283.597062][ T5727] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 283.604447][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.642121][ T5727] usb 6-1: USB disconnect, device number 28 [ 283.676376][ T5597] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 283.721046][ T5597] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 283.738225][ T5597] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 283.747475][ T5597] usb 2-1: media controller created [ 283.755040][ T5597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.837565][T11231] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 283.879900][ T5597] DVB: Unable to find symbol dib7000p_attach() [ 283.890377][T11235] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1829905768 (58556984576 ns) > initial count (3218844672 ns). Using initial count to start timer. [ 283.908192][ T5597] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 283.991779][ T5597] rc_core: IR keymap rc-dib0700-rc5 not found [ 284.006272][ T5597] Registered IR keymap rc-empty [ 284.024543][ T5597] dvb-usb: could not initialize remote control. [ 284.040341][ T5597] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 284.138122][T11238] netlink: 'syz.5.1776': attribute type 39 has an invalid length. [ 284.163891][ T29] audit: type=1400 audit(1786102138.568:815): avc: denied { bind } for pid=11239 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.450905][ T42] usb 2-1: USB disconnect, device number 41 [ 284.554678][ T42] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 285.087873][T11262] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: 0 [ 285.114147][T11262] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 285.147129][T11262] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 285.726004][ T29] audit: type=1400 audit(1786102140.138:816): avc: denied { mounton } for pid=11276 comm="syz.8.1793" path="/48/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.754226][T11277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 285.764747][ T29] audit: type=1400 audit(1786102140.168:817): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.797733][ T29] audit: type=1400 audit(1786102140.178:818): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.824678][ T29] audit: type=1400 audit(1786102140.178:819): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.846932][ T29] audit: type=1400 audit(1786102140.178:820): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.870521][ T29] audit: type=1400 audit(1786102140.178:821): avc: denied { open } for pid=11276 comm="syz.8.1793" path="/48/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.896033][ T29] audit: type=1400 audit(1786102140.178:822): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.926524][ T29] audit: type=1400 audit(1786102140.178:823): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.964644][ T29] audit: type=1400 audit(1786102140.178:824): avc: denied { read } for pid=11276 comm="syz.8.1793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 286.186744][T11279] GUP no longer grows the stack in syz.3.1791 (11279): 200000004000-20000000a000 (200000002000) [ 286.230496][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.3.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.230538][T11279] Tainted: [L]=SOFTLOCKUP [ 286.230549][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.230577][T11279] Call Trace: [ 286.230586][T11279] [ 286.230596][T11279] dump_stack_lvl+0x100/0x190 [ 286.230633][T11279] gup_vma_lookup.cold+0x83/0x96 [ 286.230671][T11279] __get_user_pages+0x241/0x32a0 [ 286.230714][T11279] ? find_held_lock+0x2b/0x80 [ 286.230736][T11279] ? mtree_load+0x311/0xa90 [ 286.230768][T11279] ? __pfx___get_user_pages+0x10/0x10 [ 286.230811][T11279] get_user_pages_remote+0x3d2/0xb10 [ 286.230845][T11279] ? mas_root_expand+0x6e0/0x750 [ 286.230882][T11279] ? __pfx_get_user_pages_remote+0x10/0x10 [ 286.230929][T11279] __access_remote_vm+0x3bb/0x890 [ 286.230966][T11279] ? __pfx___access_remote_vm+0x10/0x10 [ 286.230995][T11279] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 286.231024][T11279] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 286.231055][T11279] proc_pid_cmdline_read+0x552/0x9a0 [ 286.231083][T11279] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 286.231112][T11279] ? rw_verify_area+0xce/0x6d0 [ 286.231148][T11279] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 286.231172][T11279] vfs_readv+0x5d8/0x8d0 [ 286.231214][T11279] ? __pfx_vfs_readv+0x10/0x10 [ 286.231247][T11279] ? avc_has_perm+0x135/0x1e0 [ 286.231293][T11279] ? __fget_files+0x21f/0x3d0 [ 286.231325][T11279] ? do_preadv+0x1ac/0x270 [ 286.231356][T11279] do_preadv+0x1ac/0x270 [ 286.231391][T11279] ? __pfx_do_preadv+0x10/0x10 [ 286.231433][T11279] do_syscall_64+0x115/0x870 [ 286.231462][T11279] ? clear_bhb_loop+0x70/0xc0 [ 286.231491][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.231515][T11279] RIP: 0033:0x7f311319e0d9 [ 286.231535][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.231558][T11279] RSP: 002b:00007f3114074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 286.231587][T11279] RAX: ffffffffffffffda RBX: 00007f3113425fa0 RCX: 00007f311319e0d9 [ 286.231602][T11279] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 286.231615][T11279] RBP: 00007f3113235024 R08: 00000000fffffff9 R09: 0000000000000000 [ 286.231630][T11279] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 286.231642][T11279] R13: 00007f3113426038 R14: 00007f3113425fa0 R15: 00007ffd8f2754c8 [ 286.231672][T11279] [ 286.614700][ T5597] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 286.665326][T11289] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 286.774645][ T5597] usb 2-1: Using ep0 maxpacket: 8 [ 286.783089][ T5597] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 286.791501][ T5597] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 286.799727][ T5597] usb 2-1: config 0 has no interface number 0 [ 286.808624][ T5597] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.821466][ T5597] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.838864][ T5713] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 286.889375][ T5597] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 286.901102][ T5597] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 286.910582][ T5597] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 286.919088][ T5597] usb 2-1: Product: syz [ 286.923834][ T5597] usb 2-1: Manufacturer: syz [ 286.977513][ T5597] usb 2-1: config 0 descriptor?? [ 287.062450][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.103968][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.114091][ T5713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.127174][ T5713] usb 6-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 287.136700][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.153171][ T5713] usb 6-1: config 0 descriptor?? [ 287.410850][ T5597] usb 2-1: USB disconnect, device number 42 [ 287.532340][ T5727] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.567441][ T5713] sony 0003:054C:1000.0028: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 287.581069][ T5713] sony 0003:054C:1000.0028: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.5-1/input0 [ 287.592551][ T5713] sony 0003:054C:1000.0028: failed to claim input [ 287.697448][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.706766][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.715129][ T5727] usb 4-1: Product: syz [ 287.726302][ T5727] usb 4-1: Manufacturer: syz [ 287.730911][ T5727] usb 4-1: SerialNumber: syz [ 287.769083][ T5698] usb 6-1: USB disconnect, device number 29 [ 287.884508][ T42] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 288.424285][ T5705] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 288.541200][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 288.953827][ T5727] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 288.978521][ T5727] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 288.991085][ T5727] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 289.070598][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 289.111729][ T5713] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 289.177345][ T42] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.187182][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.196920][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.210013][ T42] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.223040][ T42] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.232074][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.252975][ T5727] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 289.274559][ T5713] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.299738][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.309835][ T5727] usb 4-1: USB disconnect, device number 26 [ 289.329261][ T5727] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 289.340335][ T5713] usb 2-1: Product: syz [ 289.350479][ T5713] usb 2-1: Manufacturer: syz [ 289.360678][ T5713] usb 2-1: SerialNumber: syz [ 289.381313][ T5713] usb 2-1: config 0 descriptor?? [ 289.626498][ T5713] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.714503][ T5705] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 289.722800][ T42] usb 9-1: GET_CAPABILITIES returned 0 [ 289.728293][ T42] usbtmc 9-1:16.0: can't read capabilities [ 289.736435][ T5705] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.746177][ T5705] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.755913][ T5705] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.765811][ T5705] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.780501][ T5705] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.791786][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.028587][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.037727][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.046812][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.083833][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.092953][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.102032][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.111103][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.121534][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 290.122858][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.130407][T11334] netlink: 'syz.3.1813': attribute type 9 has an invalid length. [ 290.139784][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.139835][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.140615][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.140666][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.140710][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.140756][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.140983][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.141029][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.239487][ T42] usb 9-1: USB disconnect, device number 4 [ 290.263204][ T5705] usb 7-1: usb_control_msg returned -32 [ 290.268801][ T5705] usbtmc 7-1:16.0: can't read capabilities [ 290.633376][ T5713] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.674528][ T5713] usb 2-1: USB disconnect, device number 43 [ 290.711965][T11338] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 290.739549][T11338] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 297.153461][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 327.554550][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.029321][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.319501][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 396.326485][ C0] rcu: 1-...!: (1 ticks this GP) idle=8414/1/0x4000000000000000 softirq=68626/68626 fqs=15 [ 396.337725][ C0] rcu: (detected by 0, t=10502 jiffies, g=62705, q=2080 ncpus=2) [ 396.345549][ C0] Sending NMI from CPU 0 to CPUs 1: [ 396.345589][ C1] NMI backtrace for cpu 1 [ 396.345635][ C1] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.345661][ C1] Tainted: [L]=SOFTLOCKUP [ 396.345671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 396.345694][ C1] Workqueue: rcu_gp process_srcu [ 396.345724][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 396.345748][ C1] Code: 06 f3 5e 00 48 89 df 5b e9 1d 6e 64 00 be 03 00 00 00 5b e9 22 5a 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 45 cb 58 12 48 8b 34 24 65 48 8b 15 21 cb 58 [ 396.345766][ C1] RSP: 0018:ffffc90000a08e30 EFLAGS: 00000002 [ 396.345780][ C1] RAX: 0000000000010002 RBX: 0000000000000001 RCX: ffffffff81f5df06 [ 396.345792][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888027702540 [ 396.345804][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 396.345815][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807f102300 [ 396.345826][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8528590 [ 396.345841][ C1] FS: 0000000000000000(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 396.345858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.345871][ C1] CR2: 00007f3113306730 CR3: 0000000152572000 CR4: 00000000003526f0 [ 396.345882][ C1] DR0: 0000000000000000 DR1: 0000000000000009 DR2: 0000000000000000 [ 396.345893][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 396.345905][ C1] Call Trace: [ 396.345912][ C1] [ 396.345919][ C1] trace_hrtimer_start+0x77/0x220 [ 396.345971][ C1] enqueue_hrtimer+0x84/0x2f0 [ 396.345998][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 396.346030][ C1] hrtimer_interrupt+0x3e5/0x940 [ 396.346054][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 396.346084][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 396.346112][ C1] [ 396.346118][ C1] [ 396.346124][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.346145][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 396.346167][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 fa 70 28 f6 48 89 df e8 82 c0 28 f6 e8 bd 2a 55 f6 fb bf 01 00 00 00 12 ce 17 f6 65 8b 05 5b a7 a5 08 85 c0 74 06 5b e9 81 4a 00 00 [ 396.346184][ C1] RSP: 0018:ffffc90004287c38 EFLAGS: 00000202 [ 396.346198][ C1] RAX: 0000000000062037 RBX: ffff8880b853a400 RCX: 0000000000000000 [ 396.346210][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a894d RDI: 0000000000000001 [ 396.346221][ C1] RBP: ffffffff8ede3ff8 R08: 0000000000000001 R09: 0000000000000000 [ 396.346232][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000001800000 [ 396.346244][ C1] R13: 0000000000000000 R14: ffffffff9121c1a4 R15: 0000000000000001 [ 396.346262][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.346282][ C1] process_one_work+0x871/0x1940 [ 396.346308][ C1] ? __pfx_process_one_work+0x10/0x10 [ 396.346332][ C1] ? __pfx_process_srcu+0x10/0x10 [ 396.346357][ C1] worker_thread+0x5ef/0xe50 [ 396.346381][ C1] ? kthread+0x13a/0x450 [ 396.346398][ C1] ? __pfx_worker_thread+0x10/0x10 [ 396.346416][ C1] kthread+0x370/0x450 [ 396.346433][ C1] ? __pfx_kthread+0x10/0x10 [ 396.346451][ C1] ret_from_fork+0x72b/0xd50 [ 396.346477][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 396.346502][ C1] ? __switch_to+0x800/0x10f0 [ 396.346521][ C1] ? __pfx_kthread+0x10/0x10 [ 396.346539][ C1] ret_from_fork_asm+0x1a/0x30 [ 396.346573][ C1] [ 396.347586][ C0] rcu: rcu_preempt kthread starved for 10472 jiffies! g62705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 396.698675][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 396.708635][ C0] rcu: RCU grace-period kthread stack dump: [ 396.714508][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 396.728022][ C0] Call Trace: [ 396.731292][ C0] [ 396.734217][ C0] __schedule+0x125c/0x6730 [ 396.738743][ C0] ? __pfx___schedule+0x10/0x10 [ 396.743591][ C0] ? find_held_lock+0x2b/0x80 [ 396.748265][ C0] ? schedule+0x225/0x2c0 [ 396.752597][ C0] schedule+0xdd/0x2c0 [ 396.756666][ C0] schedule_timeout+0x127/0x280 [ 396.761511][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 396.766877][ C0] ? __pfx_process_timeout+0x10/0x10 [ 396.772162][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.777969][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 396.783430][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 396.788194][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 396.793478][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 396.798417][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 396.803611][ C0] ? rcu_is_watching+0x12/0xc0 [ 396.808381][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.814192][ C0] rcu_gp_kthread+0x179/0x230 [ 396.818866][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.824062][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.829872][ C0] ? __kthread_parkme+0x18c/0x230 [ 396.834903][ C0] ? kthread+0x13a/0x450 [ 396.839138][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.844332][ C0] kthread+0x370/0x450 [ 396.848395][ C0] ? __pfx_kthread+0x10/0x10 [ 396.852981][ C0] ret_from_fork+0x72b/0xd50 [ 396.857576][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 396.862689][ C0] ? __switch_to+0x800/0x10f0 [ 396.867360][ C0] ? __pfx_kthread+0x10/0x10 [ 396.871948][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.876737][ C0] [ 396.879746][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 396.886063][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.896908][ C0] Tainted: [L]=SOFTLOCKUP [ 396.901220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 396.911265][ C0] Workqueue: events_unbound toggle_allocation_gate [ 396.917767][ C0] RIP: 0010:write_comp_data+0x40/0x90 [ 396.923132][ C0] Code: 58 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48 [ 396.942735][ C0] RSP: 0018:ffffc90000127850 EFLAGS: 00000246 [ 396.948797][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fdc952 [ 396.956762][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88801eac8000 [ 396.964724][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 396.972686][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 396.980647][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 396.988610][ C0] FS: 0000000000000000(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 396.997533][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.004113][ C0] CR2: 0000200000f67030 CR3: 000000000e994000 CR4: 00000000003526f0 [ 397.012077][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.020038][ C0] DR3: 000000000000a110 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 397.027997][ C0] Call Trace: [ 397.031266][ C0] [ 397.034186][ C0] smp_call_function_many_cond+0x5b2/0x1870 [ 397.040088][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.045132][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 397.051457][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 397.056840][ C0] ? __pfx___text_poke+0x10/0x10 [ 397.061772][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.066805][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 397.071918][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 397.077813][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 397.083530][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 397.089430][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 397.095672][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 397.101911][ C0] ? find_held_lock+0x2b/0x80 [ 397.106590][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 397.112565][ C0] jump_label_update+0x37a/0x550 [ 397.117505][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 397.123400][ C0] static_key_enable+0x1a/0x20 [ 397.128164][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 397.133448][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 397.139343][ C0] ? rcu_is_watching+0x12/0xc0 [ 397.144113][ C0] process_one_work+0xa23/0x1940 [ 397.149061][ C0] ? __pfx_process_one_work+0x10/0x10 [ 397.154436][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 397.160330][ C0] worker_thread+0x5ef/0xe50 [ 397.164927][ C0] ? kthread+0x13a/0x450 [ 397.169164][ C0] ? __pfx_worker_thread+0x10/0x10 [ 397.174269][ C0] kthread+0x370/0x450 [ 397.178335][ C0] ? __pfx_kthread+0x10/0x10 [ 397.182919][ C0] ret_from_fork+0x72b/0xd50 [ 397.187514][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 397.192636][ C0] ? __switch_to+0x800/0x10f0 [ 397.197308][ C0] ? __pfx_kthread+0x10/0x10 [ 397.201895][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.206679][ C0]