last executing test programs: 14.671737002s ago: executing program 1 (id=464): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$xdp(0x2c, 0x3, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x3c98b6962144dd79, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047454, &(0x7f00000019c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 14.59963776s ago: executing program 1 (id=465): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xc, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000050) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd3}, 0x94) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={'sha384\x00'}}) 12.076923014s ago: executing program 4 (id=471): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x8, 0x34565348, 0x0, 0x0, 0xfffffffe, 0x9, 0xfeedcafe, 0xe7, 0x8}}) 12.007653762s ago: executing program 4 (id=472): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='acl\x00', 0x0, 0xffffffffffffff9c) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 10.658088735s ago: executing program 4 (id=477): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x88) epoll_create1(0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 9.034595394s ago: executing program 4 (id=478): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x3, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0x8, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.732595894s ago: executing program 0 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 8.629915035s ago: executing program 1 (id=483): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x91}, 0x18) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 8.056168841s ago: executing program 0 (id=485): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x104c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x0, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x6, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x2, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad99, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6609, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1020, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0x90000000, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x0, 0x4, 0x0, 0x9]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xc, 0x80, 0x40, 0x7, 0x1, 0x7ed, 0x9, 0x9, 0x34b, 0x5, 0x7ff, 0x400, 0x7a8d, 0x4, 0x74e8b26a, 0x81, 0x2, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7, 0xf, 0x5279, 0x10000, 0x7, 0x4, 0x9, 0x1, 0x25, 0x81f, 0xf, 0x9, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0xe, 0xd37, 0x7, 0x800, 0x4, 0x10, 0x2, 0x2, 0xffffffff, 0x8001, 0x6, 0x3, 0xee99, 0x474, 0x10000, 0x9, 0x9, 0x8cce, 0x100, 0x2, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff8, 0x8, 0x2, 0x400, 0x7, 0x1, 0xac, 0x3, 0x9, 0xfffffffc, 0x80, 0x10, 0x7fff, 0x7, 0x4, 0x2, 0x101, 0x78b, 0x7ff, 0x8, 0x78000000, 0x101, 0xc, 0x5, 0x3, 0xf534, 0x4, 0x2, 0x4000, 0x14ac, 0x64ebc947, 0x10001, 0xacd, 0x6, 0x6, 0xfffffffd, 0x0, 0x4, 0x2c, 0x0, 0x5, 0x7, 0x13a6, 0xb9, 0x1, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x0, 0x80000000, 0xf73, 0x10001, 0x5, 0x10001, 0x9, 0x7, 0x8fcf, 0x63165378, 0x9, 0x8, 0x6, 0x6, 0x3, 0xf33, 0x3, 0x328, 0x498, 0x6, 0x9, 0xffff41fd, 0x2, 0x8, 0x4, 0x6, 0x6, 0x4, 0x7, 0x200, 0x0, 0x1, 0xff, 0x9, 0x5, 0xfffffff8, 0x7, 0x5, 0x6, 0x4, 0x0, 0x9, 0x1, 0x6, 0x3, 0x14f4, 0x8, 0x6, 0x9, 0x954, 0xc, 0x7fffffff, 0xffffffff, 0x480000, 0x8, 0x7, 0x8, 0x4401, 0x6, 0xe6, 0x4, 0x9, 0x0, 0xffffffff, 0xe9, 0x32, 0xf1, 0x800, 0x20080, 0x9, 0x1, 0x976, 0x0, 0x7, 0x8, 0x9, 0xffffc69c, 0xbb2, 0x4, 0x3, 0x9, 0x7fff, 0x16, 0xd, 0x3, 0x6, 0x1, 0x1ff, 0x80000001, 0x7, 0xb, 0x3c0b, 0xffffffff, 0x4, 0x3caa, 0x100, 0x2, 0x1, 0xfffffff9, 0x4, 0xd6c7, 0xffffe53f, 0x99, 0x0, 0x3, 0x7, 0xf, 0x7701, 0x7, 0x7, 0xfff, 0x280, 0x2, 0xc12, 0x7, 0x9, 0x1, 0x3, 0x3, 0x40000000, 0xff, 0x4, 0x3ff, 0x8, 0xe2e4, 0xf, 0x5, 0x200, 0x9, 0x0, 0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x401, 0x9, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0x100, 0xffffffff, 0x407, 0x8, 0xb8, 0x0, 0x80000000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xffffff6a, 0xd09, 0x4, 0x3, 0x2, 0x6a, 0x6, 0x1, 0x9, 0x1, 0xfffffff8, 0x4, 0xde39, 0x2, 0x7f, 0x4837, 0x0, 0x92, 0x1, 0x8000000, 0x5, 0x9, 0x5, 0x9, 0x3, 0xffff, 0x81, 0x4, 0xc, 0x80, 0x3, 0xdac, 0x8, 0x7ff, 0x5, 0x634, 0x10001, 0x9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x9, 0x400, 0x1, 0x86b0, 0x9, 0x4, 0x2, 0x6, 0x3, 0x101, 0xff, 0xc, 0x9, 0xfff, 0x2, 0x7, 0x4f0, 0x9, 0x80000001, 0x4, 0x0, 0x0, 0x4, 0xcab5, 0xed, 0x6, 0x7f, 0x40, 0x6, 0x9, 0x2, 0xb4, 0x7, 0x4, 0x7ff, 0xb2, 0x0, 0x5, 0x1, 0x7, 0xebe, 0x9, 0x2, 0x9, 0x0, 0x7, 0x6a, 0x680, 0x34a, 0x200, 0x4, 0x4d, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7fff, 0xf, 0xfe, 0x3, 0x9, 0x3, 0x6, 0x4, 0x800, 0xd9, 0xe, 0x1, 0xde2, 0x5, 0x1, 0x5d, 0xf17, 0x5, 0x6, 0x7, 0x9, 0x9, 0x2, 0x59, 0x1010, 0xd, 0x100, 0x680acdce, 0x9, 0x8, 0x2, 0x0, 0x7, 0xa41d, 0xb3, 0x40, 0x7, 0xffffff4a, 0x6, 0x0, 0x8, 0x6, 0x8, 0xa4, 0xd, 0x101, 0xfff, 0x78, 0x7, 0xb, 0x80000000, 0x8, 0x7f, 0xa, 0x7, 0x7, 0x8, 0x8b, 0x4, 0x1, 0x558, 0xc6f2, 0x7, 0x8, 0x3, 0x639, 0x6, 0x400, 0x10000, 0x9, 0xa05, 0x2, 0x4d58, 0x4, 0x6, 0x1, 0x9, 0x8, 0x5, 0x8000, 0xfffffff7, 0x3ff, 0x2, 0xb, 0x3, 0x9, 0x4a, 0x9, 0x7fff, 0x8, 0x1000, 0x6, 0x3, 0x9, 0x7c25, 0x6, 0x68, 0x9a0, 0x9, 0xfffffffe, 0x800a, 0xa60, 0x10001, 0xd76c, 0x9, 0x1, 0x6, 0xffff, 0x6e7, 0xad2, 0x1000, 0x40, 0x7, 0x65301570, 0x4, 0x7ff, 0xb676, 0x5, 0xe, 0x8, 0x3, 0x6340, 0x5, 0xa0f7, 0x6, 0x0, 0x1, 0x4, 0x8000, 0x40, 0x2, 0xefa2, 0x0, 0xf2c, 0xb, 0x8, 0x100, 0x8f3776d, 0x8]}]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) 6.741810495s ago: executing program 1 (id=488): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 6.660063504s ago: executing program 1 (id=489): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x0, 0x31435750, 0x2, @stepwise={0x100, 0x3, 0x41, 0xffffffff, 0x80000004, 0x3fe}}) 6.508323362s ago: executing program 1 (id=491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) 6.483820315s ago: executing program 2 (id=492): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) 6.288712194s ago: executing program 2 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) 4.724962778s ago: executing program 0 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x10) r2 = socket(0x22, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x101) pipe(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 3.536697569s ago: executing program 3 (id=498): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x5}}, 0x10) 3.5362085s ago: executing program 4 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.86213639s ago: executing program 0 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0x30, 0x3000, 0x3, 0xa9, 0x3, 0x3, 0x7, 0x7, 0x0, 0x2b, 0xfd}, {0x4000, 0x3, 0x3, 0x20, 0x2, 0x7, 0x7f, 0x6, 0x3, 0x0, 0x3, 0x6}, {0x3000, 0xd000, 0x3, 0x5, 0x1, 0x1, 0x0, 0x9, 0x1, 0xa7, 0x1, 0x81}, {0x80a0000, 0xdddd0000, 0x0, 0xe7, 0x5, 0x2, 0x1, 0xf8, 0x8, 0x7, 0x6, 0x7}, {0xdddd0000, 0x2000, 0x8, 0x47, 0x5, 0x6, 0xa, 0x7f, 0x1, 0x0, 0x4, 0x3}, {0x80a0000, 0x4, 0x3, 0x80, 0xb1, 0x8, 0x1, 0x57, 0x80, 0xd, 0x1, 0x9}, {0xffff1000, 0xeeee8000, 0xc, 0x1, 0x0, 0x5, 0x1, 0x3, 0x1, 0x5, 0x3, 0x4}, {0x2, 0xffff1000, 0x0, 0x4, 0x5, 0x7, 0x1, 0x37, 0x2, 0x8, 0xf2, 0xa}, {0xeeef0000, 0x5}, {0xeeee0000, 0x4}, 0x80040031, 0x0, 0x80a0000, 0x2004, 0x5, 0x0, 0x3000, [0x8000000000000000, 0x6, 0x15e, 0x3]}) 1.748374411s ago: executing program 2 (id=506): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 945.860767ms ago: executing program 2 (id=507): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) 944.95158ms ago: executing program 0 (id=508): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 383.877013ms ago: executing program 3 (id=509): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x2000000000000036) 379.437028ms ago: executing program 2 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}}, 0x0) 184.684233ms ago: executing program 2 (id=511): flock(0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 0s ago: executing program 3 (id=512): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="ced34633", 0x4) kernel console output (not intermixed with test programs): [ 96.015209][ T6313] batadv_slave_0: entered promiscuous mode [ 96.091379][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.151241][ T5938] usb 4-1: device descriptor read/64, error -71 [ 96.262146][ T5938] usb usb4-port1: attempt power cycle [ 96.267578][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 96.304476][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.312845][ T24] usb 1-1: config 0 has no interface number 0 [ 96.408900][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 96.420151][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.431445][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.439461][ T24] usb 1-1: Product: syz [ 96.443952][ T24] usb 1-1: Manufacturer: syz [ 96.448540][ T24] usb 1-1: SerialNumber: syz [ 96.457564][ T24] usb 1-1: config 0 descriptor?? [ 96.966867][ T24] smsc75xx v1.0.0 [ 96.971111][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.011674][ T5938] usb 4-1: device descriptor read/8, error -71 [ 97.269569][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 97.282018][ T5938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.334631][ T5938] usb 4-1: device descriptor read/8, error -71 [ 97.481743][ T5938] usb usb4-port1: unable to enumerate USB device [ 97.522935][ T6326] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 98.256342][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 98.296755][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 98.311553][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 98.311568][ T30] audit: type=1400 audit(2000000008.960:257): avc: denied { read } for pid=6307 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.321068][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 98.337736][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.402510][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 98.516121][ T6337] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.544263][ T6337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.592106][ T30] audit: type=1400 audit(2000000009.160:258): avc: denied { mount } for pid=6335 comm="syz.4.95" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.619493][ T6337] evm: overlay not supported [ 98.643836][ T9] usb 1-1: USB disconnect, device number 5 [ 98.726161][ T30] audit: type=1400 audit(2000000009.160:259): avc: denied { mounton } for pid=6335 comm="syz.4.95" path="/27/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.798038][ T30] audit: type=1400 audit(2000000009.420:260): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.811206][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.011126][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 99.029980][ T5913] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 99.090636][ T5913] usb 2-1: config 4 has no interface number 0 [ 99.113073][ T5913] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 99.153171][ T5913] usb 2-1: config 4 interface 9 has no altsetting 0 [ 99.161554][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.167314][ T5913] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 99.180166][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.218111][ T5913] usb 2-1: Product: syz [ 99.241124][ T5913] usb 2-1: Manufacturer: syz [ 99.255910][ T5913] usb 2-1: SerialNumber: syz [ 99.267352][ T6339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.299814][ T5913] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.377101][ T24] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 99.420735][ T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 99.451064][ T30] audit: type=1400 audit(2000000010.090:261): avc: denied { create } for pid=6358 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 99.481146][ T24] usb 5-1: config 8 has no interface number 0 [ 99.487255][ T24] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.538485][ T24] usb 5-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 99.565888][ T24] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 99.739314][ T5912] usb 2-1: USB disconnect, device number 2 [ 99.787627][ T30] audit: type=1400 audit(2000000010.340:262): avc: denied { create } for pid=6358 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.821727][ T3469] usb 2-1: Failed to submit usb control message: -71 [ 99.828576][ T3469] usb 2-1: unable to send the bmi data to the device: -71 [ 100.569784][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.581177][ T3469] usb 2-1: unable to get target info from device [ 100.753311][ T978] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.763573][ T24] usb 5-1: NFC: intf ffff88802234a000 id ffffffff8f569700 [ 100.794369][ T3469] usb 2-1: could not get target info (-71) [ 100.800358][ T3469] usb 2-1: could not probe fw (-71) [ 100.835708][ T6367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.103'. [ 100.943541][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 100.960194][ T978] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 193, changing to 7 [ 100.992333][ T978] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid maxpacket 18038, setting to 1024 [ 101.011831][ T978] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.043541][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.050298][ T978] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 101.059679][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.106248][ T978] usb 4-1: config 0 descriptor?? [ 101.142250][ T6371] loop9: detected capacity change from 0 to 7 [ 101.151019][ T6371] buffer_io_error: 9 callbacks suppressed [ 101.159590][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.167825][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.294794][ T30] audit: type=1400 audit(2000000011.880:263): avc: denied { name_connect } for pid=6368 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 101.624901][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.632865][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.641145][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.649295][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.657385][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.665217][ T6371] ldm_validate_partition_table(): Disk read failed. [ 101.671843][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.679724][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.687586][ T6371] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.695475][ T6371] Dev loop9: unable to read RDB block 0 [ 101.701163][ T6371] loop9: unable to read partition table [ 101.706861][ T6371] loop9: partition table beyond EOD, truncated [ 101.713031][ T6371] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 101.713031][ T6371] ) failed (rc=-5) [ 101.733480][ T30] audit: type=1400 audit(2000000011.890:264): avc: denied { write } for pid=6368 comm="syz.0.104" lport=52540 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.916150][ T24] usb 5-1: USB disconnect, device number 2 [ 101.930257][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.938178][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.980231][ T6384] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.107'. [ 102.006035][ T30] audit: type=1400 audit(2000000012.650:265): avc: denied { read write } for pid=6373 comm="syz.2.105" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.041924][ T30] audit: type=1400 audit(2000000012.650:266): avc: denied { open } for pid=6373 comm="syz.2.105" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.115633][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.140432][ T978] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 102.140722][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.157081][ T978] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 102.174165][ T978] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 102.190357][ T978] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 102.201845][ T978] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 102.224182][ T978] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 102.240086][ T978] hid-thrustmaster 0003:044F:B65D.0003: Unexpected non-int endpoint [ 102.241755][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.430942][ T6392] netlink: 'syz.3.101': attribute type 16 has an invalid length. [ 102.439964][ T6392] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.101'. [ 102.871470][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 102.879194][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.891969][ T975] usb 2-1: config 4 interface 0 has no altsetting 0 [ 102.906573][ T975] usb 2-1: string descriptor 0 read error: -22 [ 102.913261][ T975] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 102.924680][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.943869][ T975] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 102.976400][ T975] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.030900][ T975] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 103.080506][ T6393] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 103.092264][ T6384] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 103.099562][ T975] usb 2-1: media controller created [ 103.099705][ T2955] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.209288][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.530489][ T975] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.562290][ T66] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.590502][ T66] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.599966][ T975] usb 2-1: USB disconnect, device number 3 [ 103.629682][ T66] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.777051][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 103.777066][ T30] audit: type=1400 audit(2000000014.420:268): avc: denied { execmod } for pid=6410 comm="syz.0.112" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 103.974604][ T30] audit: type=1400 audit(2000000014.420:269): avc: denied { execute } for pid=6410 comm="syz.0.112" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 104.034539][ T6418] bpf: Bad value for 'mode' [ 104.581869][ T5855] Bluetooth: hci0: command 0x0401 tx timeout [ 104.819063][ T30] audit: type=1400 audit(2000000015.450:270): avc: denied { connect } for pid=6426 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.885641][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 104.890259][ T9] usb 4-1: USB disconnect, device number 9 [ 104.901289][ T978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.987079][ T6429] syz.4.118 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.098032][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 105.107000][ T978] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 105.130247][ T978] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 105.143282][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.152013][ T978] usb 1-1: Product: syz [ 105.156178][ T978] usb 1-1: Manufacturer: syz [ 105.160762][ T978] usb 1-1: SerialNumber: syz [ 105.189448][ T978] usb 1-1: config 0 descriptor?? [ 105.204662][ T978] usb 1-1: bad CDC descriptors [ 105.209866][ T30] audit: type=1400 audit(2000000015.850:271): avc: denied { create } for pid=6437 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.214519][ T978] usb 1-1: unsupported MDLM descriptors [ 105.242845][ T30] audit: type=1400 audit(2000000015.880:272): avc: denied { ioctl } for pid=6437 comm="syz.4.122" path="socket:[10546]" dev="sockfs" ino=10546 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.361168][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 105.368817][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.521202][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 105.577614][ T9] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 105.637269][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 105.673605][ T9] usb 4-1: config 8 has no interface number 0 [ 105.684519][ T975] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.702646][ T975] usb 3-1: config 0 has no interface number 0 [ 105.724754][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.785314][ T9] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 105.803265][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 105.841157][ T975] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.869344][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.878120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.892473][ T975] usb 3-1: Product: syz [ 105.969035][ T975] usb 3-1: Manufacturer: syz [ 105.978069][ T9] usb 4-1: NFC: intf ffff88802a882000 id ffffffff8f569700 [ 105.987239][ T975] usb 3-1: SerialNumber: syz [ 106.000789][ T975] usb 3-1: config 0 descriptor?? [ 106.019735][ T975] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.381428][ T975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.419111][ T975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.521767][ T6455] loop9: detected capacity change from 0 to 7 [ 106.537732][ T6455] buffer_io_error: 14 callbacks suppressed [ 106.537805][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.552637][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.563289][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.572168][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.581192][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.590127][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.598912][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.608021][ T6455] ldm_validate_partition_table(): Disk read failed. [ 106.615240][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.624193][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.633951][ T6455] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.643150][ T6455] Dev loop9: unable to read RDB block 0 [ 106.651667][ T6455] loop9: unable to read partition table [ 106.660052][ T6455] loop9: partition table beyond EOD, truncated [ 106.666421][ T6455] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.666421][ T6455] ) failed (rc=-5) [ 106.837153][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 106.868947][ T975] usb 4-1: USB disconnect, device number 10 [ 106.916155][ T6450] Can't find a SQUASHFS superblock on nullb0 [ 107.037826][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 107.046932][ T5913] usb 3-1: USB disconnect, device number 4 [ 107.059198][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 107.064421][ T30] audit: type=1400 audit(2000000017.710:273): avc: denied { create } for pid=6460 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.112267][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 107.133254][ T5913] quatech2 3-1:0.51: device disconnected [ 107.192991][ T6464] bridge_slave_0: left allmulticast mode [ 107.198667][ T6464] bridge_slave_0: left promiscuous mode [ 107.207650][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.255614][ T24] usb 1-1: USB disconnect, device number 6 [ 107.275156][ T30] audit: type=1400 audit(2000000017.910:274): avc: denied { write } for pid=6460 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 107.311958][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.127'. [ 107.334891][ T6464] bridge_slave_1: left allmulticast mode [ 107.343585][ T6464] bridge_slave_1: left promiscuous mode [ 107.357045][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.380017][ T6464] bond0: (slave bond_slave_0): Releasing backup interface [ 107.398930][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6466 comm=syz.4.127 [ 107.415330][ T6464] bond0: (slave bond_slave_1): Releasing backup interface [ 107.421694][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6466 comm=syz.4.127 [ 107.443429][ T6464] team0: Port device team_slave_0 removed [ 107.452786][ T6464] team0: Port device team_slave_1 removed [ 107.459029][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.467269][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.485001][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.993818][ T30] audit: type=1400 audit(2000000018.630:275): avc: denied { read } for pid=6483 comm="syz.4.131" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.043306][ T30] audit: type=1400 audit(2000000018.640:276): avc: denied { bind } for pid=6483 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.063430][ T30] audit: type=1400 audit(2000000018.640:277): avc: denied { node_bind } for pid=6483 comm="syz.4.131" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 108.911493][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.093308][ T975] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 109.102629][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.135338][ T975] usb 4-1: Product: syz [ 109.145441][ T975] usb 4-1: Manufacturer: syz [ 109.167993][ T975] usb 4-1: SerialNumber: syz [ 109.196456][ T975] usb 4-1: config 0 descriptor?? [ 109.214595][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 109.214608][ T30] audit: type=1400 audit(2000000019.860:282): avc: denied { bind } for pid=6501 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.274158][ T30] audit: type=1400 audit(2000000019.860:283): avc: denied { listen } for pid=6501 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.314046][ T30] audit: type=1400 audit(2000000019.950:284): avc: denied { write } for pid=6505 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.321150][ T6506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.357567][ T6506] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.431253][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.511135][ T30] audit: type=1400 audit(2000000020.140:285): avc: denied { execute } for pid=6496 comm="syz.3.134" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.548568][ T30] audit: type=1400 audit(2000000020.190:287): avc: denied { ioctl } for pid=6500 comm="syz.4.137" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.574368][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.592700][ T30] audit: type=1400 audit(2000000020.190:288): avc: denied { watch } for pid=6496 comm="syz.3.134" path="/18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.633308][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 109.640916][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.649335][ T24] usb 5-1: config 0 has no interface number 0 [ 109.666985][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.677695][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.687918][ T24] usb 5-1: Product: syz [ 109.703303][ T24] usb 5-1: Manufacturer: syz [ 109.721141][ T24] usb 5-1: SerialNumber: syz [ 109.751211][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 109.758131][ T30] audit: type=1400 audit(2000000020.180:286): avc: denied { read } for pid=6508 comm="syz.1.139" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.778304][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 109.805465][ T24] usb 5-1: config 0 descriptor?? [ 109.815094][ T43] usb 1-1: can't read configurations, error -61 [ 109.815510][ T6514] loop7: detected capacity change from 0 to 7 [ 109.829204][ T30] audit: type=1400 audit(2000000020.190:289): avc: denied { open } for pid=6508 comm="syz.1.139" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.871392][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 109.889998][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.905290][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.914783][ T30] audit: type=1400 audit(2000000020.200:290): avc: denied { read write } for pid=6508 comm="syz.1.139" name="swradio2" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.940206][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.951482][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.989294][ T30] audit: type=1400 audit(2000000020.200:291): avc: denied { open } for pid=6508 comm="syz.1.139" path="/dev/swradio2" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.014963][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.026064][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.036682][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.041363][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.048957][ T6514] ldm_validate_partition_table(): Disk read failed. [ 110.065105][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.074591][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 110.077714][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 110.095855][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.105540][ T6514] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.119712][ T6514] Dev loop7: unable to read RDB block 0 [ 110.126062][ T6514] loop7: unable to read partition table [ 110.147271][ T6514] loop7: partition table beyond EOD, truncated [ 110.163585][ T6514] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 110.221204][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 110.228399][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.239809][ T43] usb 1-1: can't read configurations, error -61 [ 110.316187][ T43] usb usb1-port1: attempt power cycle [ 110.489571][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 110.492737][ T9] usb 5-1: USB disconnect, device number 3 [ 110.504688][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 110.520962][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 110.534421][ T9] quatech2 5-1:0.51: device disconnected [ 110.641218][ T975] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.671179][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.693006][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 110.699826][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.707459][ T43] usb 1-1: can't read configurations, error -61 [ 110.791147][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 110.798831][ T975] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 110.807059][ T975] usb 2-1: config 0 has no interface number 0 [ 110.813575][ T975] usb 2-1: config 0 interface 98 altsetting 0 endpoint 0xC has invalid maxpacket 608, setting to 64 [ 110.824520][ T975] usb 2-1: config 0 interface 98 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 110.838292][ T975] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=64.d5 [ 110.847558][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.851704][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.855595][ T975] usb 2-1: Product: syz [ 110.873974][ T975] usb 2-1: Manufacturer: syz [ 110.878718][ T975] usb 2-1: SerialNumber: syz [ 110.886234][ T975] usb 2-1: config 0 descriptor?? [ 110.905625][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 110.908895][ T975] appletouch 2-1:0.98: Could not find int-in endpoint [ 110.915701][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.920215][ T975] appletouch 2-1:0.98: probe with driver appletouch failed with error -5 [ 110.936286][ T43] usb 1-1: can't read configurations, error -61 [ 110.938796][ T975] usbhid 2-1:0.98: couldn't find an input interrupt endpoint [ 110.958830][ T43] usb usb1-port1: unable to enumerate USB device [ 111.171100][ T975] usb 2-1: USB disconnect, device number 4 [ 111.837839][ T24] usb 4-1: USB disconnect, device number 11 [ 111.847449][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.870557][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.893035][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.905924][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.914574][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.924303][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.071479][ T5938] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.221179][ T5938] usb 5-1: device descriptor read/64, error -71 [ 112.341491][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.364095][ T6548] overlayfs: metacopy with no lower data found - abort lookup (/file7) [ 112.497182][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 112.521187][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 112.530708][ T24] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 112.540003][ T24] usb 4-1: config 0 has no interface number 0 [ 112.553607][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 112.570449][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.579034][ T24] usb 4-1: Product: syz [ 112.585025][ T24] usb 4-1: Manufacturer: syz [ 112.589810][ T24] usb 4-1: SerialNumber: syz [ 112.615143][ T24] usb 4-1: config 0 descriptor?? [ 112.622216][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 112.639893][ T24] net1080 4-1:0.147: probe with driver net1080 failed with error -22 [ 112.763282][ T6556] bond1: entered allmulticast mode [ 112.788054][ T5913] usb 1-1: Invalid ep0 maxpacket: 9 [ 112.798361][ T6556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.802619][ T6565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6565 comm=syz.1.152 [ 112.848195][ T978] usb 4-1: USB disconnect, device number 12 [ 112.857799][ T6556] bridge0: port 3(bond1) entered blocking state [ 112.920599][ T6556] bridge0: port 3(bond1) entered disabled state [ 112.928107][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.956675][ T6556] bond1: entered promiscuous mode [ 113.091160][ T5913] usb 1-1: Invalid ep0 maxpacket: 9 [ 113.097813][ T5913] usb usb1-port1: attempt power cycle [ 113.109688][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 113.272015][ T6572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.282918][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 113.289472][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.297764][ T6571] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.299993][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 113.309864][ T6572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.350291][ T6573] vhci_hcd: connection closed [ 113.353405][ T66] vhci_hcd: stop threads [ 113.381612][ T66] vhci_hcd: release socket [ 113.412870][ T66] vhci_hcd: disconnect device [ 113.451139][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 113.465743][ T6579] autofs: Unknown parameter '@' [ 113.471123][ T24] vhci_hcd: vhci_device speed not set [ 113.488643][ T5913] usb 1-1: Invalid ep0 maxpacket: 9 [ 113.631153][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 113.720357][ T5913] usb 1-1: Invalid ep0 maxpacket: 9 [ 114.201162][ T5913] usb usb1-port1: unable to enumerate USB device [ 114.231584][ T6589] overlayfs: failed to resolve './file0': -2 [ 114.276953][ T6594] overlayfs: failed to resolve './file1': -2 [ 114.944873][ T6609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.164'. [ 115.888585][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 116.631169][ T978] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.811164][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 116.840809][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.850187][ T978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 116.884730][ T978] usb 5-1: can't read configurations, error -61 [ 117.082386][ T978] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.200207][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 117.215682][ T6644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6644 comm=syz.2.173 [ 117.609724][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 117.609745][ T30] audit: type=1400 audit(2000000028.250:303): avc: denied { bind } for pid=6645 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.641622][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 117.653492][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.665885][ T978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.676444][ T978] usb 5-1: can't read configurations, error -61 [ 117.693897][ T978] usb usb5-port1: attempt power cycle [ 117.742035][ T6655] loop2: detected capacity change from 0 to 7 [ 117.752040][ T5860] Dev loop2: unable to read RDB block 7 [ 117.757663][ T5860] loop2: unable to read partition table [ 117.765123][ T5860] loop2: partition table beyond EOD, truncated [ 117.773968][ T6655] Dev loop2: unable to read RDB block 7 [ 117.779874][ T6655] loop2: unable to read partition table [ 117.794851][ T6655] loop2: partition table beyond EOD, truncated [ 117.861880][ T6655] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 117.880091][ T5224] Dev loop2: unable to read RDB block 7 [ 117.887250][ T5224] loop2: unable to read partition table [ 117.896514][ T5224] loop2: partition table beyond EOD, truncated [ 118.191255][ T978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.221965][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 118.242744][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.268459][ T978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 118.284616][ T978] usb 5-1: can't read configurations, error -61 [ 118.378187][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 118.473996][ T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.536395][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 118.545405][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.561294][ T978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 118.569037][ T978] usb 5-1: can't read configurations, error -61 [ 118.575549][ T6672] batman_adv: batadv0: Removing interface: team0 [ 118.586976][ T978] usb usb5-port1: unable to enumerate USB device [ 118.633787][ T30] audit: type=1400 audit(2000000029.240:304): avc: denied { create } for pid=6666 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.847026][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 118.965413][ T30] audit: type=1400 audit(2000000029.610:305): avc: denied { append } for pid=6669 comm="syz.3.181" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.994397][ T6676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6676 comm=syz.2.182 [ 119.019161][ T978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 119.042147][ T6672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6672 comm=syz.2.182 [ 119.191351][ T978] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.618537][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'. [ 119.648820][ T30] audit: type=1400 audit(2000000030.290:306): avc: denied { create } for pid=6682 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.776640][ T978] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.817219][ T978] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.821249][ T30] audit: type=1400 audit(2000000030.400:307): avc: denied { mounton } for pid=6682 comm="syz.4.184" path="/44/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 119.870927][ T30] audit: type=1400 audit(2000000030.420:308): avc: denied { create } for pid=6682 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.954073][ T978] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.998260][ T6693] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 120.026599][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.067258][ T6693] macsec1: entered promiscuous mode [ 120.092304][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.133086][ T978] usb 1-1: invalid MIDI out EP 0 [ 120.148882][ T6693] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 120.318300][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 120.327649][ T6673] delete_channel: no stack [ 120.357937][ T978] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 120.394625][ T978] usb 1-1: USB disconnect, device number 15 [ 120.523504][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 120.540243][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 120.549596][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.571150][ T9] usb 4-1: Product: syz [ 120.586306][ T9] usb 4-1: Manufacturer: syz [ 120.598459][ T9] usb 4-1: SerialNumber: syz [ 121.005987][ T9] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 121.030576][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 121.083719][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 121.130240][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 121.210415][ T9] usb 4-1: USB disconnect, device number 13 [ 121.374208][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 121.504427][ T30] audit: type=1400 audit(2000000032.110:309): avc: denied { mount } for pid=6703 comm="syz.1.189" name="/" dev="rpc_pipefs" ino=11050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.819451][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 121.846915][ T9] visor 4-1:1.0: device disconnected [ 122.205375][ T6716] capability: warning: `syz.2.191' uses 32-bit capabilities (legacy support in use) [ 122.233245][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 122.244642][ T30] audit: type=1400 audit(2000000032.890:310): avc: denied { name_bind } for pid=6711 comm="syz.1.193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.876280][ T30] audit: type=1400 audit(2000000033.450:311): avc: denied { setopt } for pid=6720 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.030139][ T6726] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 123.099718][ T6735] omfs: Invalid superblock (0) [ 123.491110][ T30] audit: type=1400 audit(2000000034.120:312): avc: denied { connect } for pid=6740 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.670047][ T30] audit: type=1400 audit(2000000034.170:313): avc: denied { shutdown } for pid=6740 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.795170][ T30] audit: type=1400 audit(2000000034.430:314): avc: denied { read write } for pid=6746 comm="syz.1.199" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.890828][ T30] audit: type=1400 audit(2000000034.430:315): avc: denied { open } for pid=6746 comm="syz.1.199" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.954114][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.961429][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.241137][ T30] audit: type=1400 audit(2000000034.430:316): avc: denied { append } for pid=6746 comm="syz.1.199" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.264609][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.382393][ T30] audit: type=1400 audit(2000000034.580:317): avc: denied { create } for pid=6745 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.402921][ T30] audit: type=1400 audit(2000000034.580:318): avc: denied { connect } for pid=6745 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.423793][ T30] audit: type=1400 audit(2000000034.950:319): avc: denied { write } for pid=6754 comm="syz.3.202" path="socket:[11257]" dev="sockfs" ino=11257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 124.446815][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.469849][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.490479][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.787886][ T3580] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.797643][ T3580] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.820161][ T3580] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.830377][ T3580] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.845662][ T6761] syzkaller1: entered promiscuous mode [ 124.851834][ T6761] syzkaller1: entered allmulticast mode [ 125.546767][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 125.693961][ T6781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6781 comm=syz.0.208 [ 125.770820][ T6781] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 125.840021][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 125.863600][ T6781] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 126.249064][ T30] audit: type=1400 audit(2000000036.890:320): avc: denied { map } for pid=6784 comm="syz.1.209" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.335857][ T43] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.362417][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.394572][ T43] usb 4-1: config 0 has no interface number 0 [ 126.410973][ T43] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 126.454527][ T43] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.476855][ T43] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 126.483064][ T975] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 126.555870][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.590116][ T43] usb 4-1: Product: syz [ 126.597728][ T43] usb 4-1: Manufacturer: syz [ 126.607907][ T43] usb 4-1: SerialNumber: syz [ 126.620985][ T43] usb 4-1: config 0 descriptor?? [ 126.683205][ T975] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 126.694306][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.706872][ T975] usb 1-1: config 0 descriptor?? [ 126.740761][ T6792] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.754659][ T975] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 126.950144][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.973938][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.997438][ T975] gspca_sn9c2028: read1 error -32 [ 127.200762][ T975] gspca_sn9c2028: read1 error -71 [ 127.241912][ T975] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 127.354556][ T975] usb 1-1: USB disconnect, device number 17 [ 127.471946][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.714415][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 127.734673][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.780655][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.835181][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.876268][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.973233][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.995782][ T24] usb 3-1: invalid MIDI out EP 0 [ 128.209117][ T6800] delete_channel: no stack [ 128.282846][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 128.303434][ T24] usb 3-1: USB disconnect, device number 5 [ 128.579741][ T24] usb 4-1: USB disconnect, device number 14 [ 128.677411][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 128.677425][ T30] audit: type=1400 audit(2000000039.320:365): avc: denied { shutdown } for pid=6819 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.851355][ T30] audit: type=1400 audit(2000000039.350:366): avc: denied { read } for pid=6817 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.521226][ T978] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.855573][ T978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 130.942224][ T6853] FAULT_INJECTION: forcing a failure. [ 130.942224][ T6853] name failslab, interval 1, probability 0, space 0, times 1 [ 130.954916][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.4.225 Not tainted syzkaller #0 PREEMPT(full) [ 130.954939][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.954949][ T6853] Call Trace: [ 130.954955][ T6853] [ 130.954962][ T6853] dump_stack_lvl+0x16c/0x1f0 [ 130.954987][ T6853] should_fail_ex+0x512/0x640 [ 130.955010][ T6853] should_failslab+0xc2/0x120 [ 130.955032][ T6853] __kmalloc_cache_noprof+0x6a/0x3e0 [ 130.955059][ T6853] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.955078][ T6853] ? rtnl_newlink+0x11b/0x2000 [ 130.955102][ T6853] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.955120][ T6853] rtnl_newlink+0x11b/0x2000 [ 130.955138][ T6853] ? __schedule+0x11a3/0x5de0 [ 130.955162][ T6853] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.955184][ T6853] ? __lock_acquire+0xb97/0x1ce0 [ 130.955215][ T6853] ? avc_has_perm_noaudit+0x149/0x3b0 [ 130.955242][ T6853] ? find_held_lock+0x2b/0x80 [ 130.955266][ T6853] ? rcu_is_watching+0x12/0xc0 [ 130.955287][ T6853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.955303][ T6853] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.955321][ T6853] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.955339][ T6853] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 130.955365][ T6853] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.955386][ T6853] rtnetlink_rcv_msg+0x95b/0xe90 [ 130.955409][ T6853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.955428][ T6853] ? __lock_acquire+0xb97/0x1ce0 [ 130.955457][ T6853] ? irqentry_exit+0x3b/0x90 [ 130.955481][ T6853] netlink_rcv_skb+0x155/0x420 [ 130.955503][ T6853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.955526][ T6853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.955544][ T6853] ? rcu_is_watching+0x12/0xc0 [ 130.955582][ T6853] netlink_unicast+0x5aa/0x870 [ 130.955605][ T6853] ? __pfx_netlink_unicast+0x10/0x10 [ 130.955626][ T6853] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 130.955654][ T6853] netlink_sendmsg+0x8d1/0xdd0 [ 130.955679][ T6853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.955709][ T6853] ____sys_sendmsg+0xa95/0xc70 [ 130.955734][ T6853] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.955752][ T6853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.955787][ T6853] ___sys_sendmsg+0x134/0x1d0 [ 130.955808][ T6853] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.955864][ T6853] __sys_sendmsg+0x16d/0x220 [ 130.955884][ T6853] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.955901][ T6853] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 130.955938][ T6853] do_syscall_64+0xcd/0x4c0 [ 130.955960][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.955977][ T6853] RIP: 0033:0x7f1b4ff8ebe9 [ 130.955991][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.956007][ T6853] RSP: 002b:00007f1b50e1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.956024][ T6853] RAX: ffffffffffffffda RBX: 00007f1b501c6180 RCX: 00007f1b4ff8ebe9 [ 130.956036][ T6853] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000009 [ 130.956046][ T6853] RBP: 00007f1b50e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.956056][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.956066][ T6853] R13: 00007f1b501c6218 R14: 00007f1b501c6180 R15: 00007ffd2e8fa878 [ 130.956091][ T6853] [ 130.957393][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 131.106363][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.336432][ T978] usb 3-1: config 0 descriptor?? [ 131.392938][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 131.399693][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.413431][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.423570][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.470480][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.483682][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.522852][ T9] usb 4-1: config 0 descriptor?? [ 131.553074][ T978] ath6kl: mismatched byte count 491039402 vs. expected 12 [ 131.605526][ T975] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 131.651616][ T978] ath6kl: Failed to init ath6kl core: -22 [ 131.668711][ T978] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 131.755170][ T5913] usb 3-1: USB disconnect, device number 6 [ 131.773337][ T975] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 131.783650][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.880457][ T975] usb 1-1: config 0 descriptor?? [ 131.894651][ T975] usb 1-1: selecting invalid altsetting 1 [ 131.937591][ T975] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 131.971112][ T5912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.979687][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 131.992792][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 132.012097][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 132.036630][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input7 [ 132.155124][ T5912] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 132.166123][ T9] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 132.187235][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.209019][ T5912] usb 5-1: config 0 has no interface number 0 [ 132.229503][ T9] usb 4-1: USB disconnect, device number 15 [ 132.236921][ T5912] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 132.252857][ T5912] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.259824][ T6867] fido_id[6867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.272784][ T5912] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 132.305556][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.317942][ T5912] usb 5-1: Product: syz [ 132.325415][ T5912] usb 5-1: Manufacturer: syz [ 132.352971][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.355148][ T5912] usb 5-1: SerialNumber: syz [ 132.359597][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.379188][ T5912] usb 5-1: config 0 descriptor?? [ 132.386831][ T43] usb 1-1: USB disconnect, device number 18 [ 132.470107][ T6874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 132.487525][ T6874] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 132.495320][ T6874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.231'. [ 133.139398][ T6894] macvlan1: entered promiscuous mode [ 133.150532][ T6894] ipvlan0: entered promiscuous mode [ 133.160548][ T6894] ipvlan0: left promiscuous mode [ 133.525438][ T6894] macvlan1: left promiscuous mode [ 134.152860][ T30] audit: type=1326 audit(2000000044.630:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.416902][ T30] audit: type=1326 audit(2000000044.630:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.449738][ T30] audit: type=1326 audit(2000000044.630:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.476256][ T30] audit: type=1326 audit(2000000044.630:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.501498][ T5912] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 134.509176][ T30] audit: type=1326 audit(2000000044.630:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.509219][ T30] audit: type=1326 audit(2000000044.630:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.509257][ T30] audit: type=1326 audit(2000000044.640:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.509292][ T30] audit: type=1326 audit(2000000044.640:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.657005][ T30] audit: type=1326 audit(2000000044.640:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.687391][ T30] audit: type=1326 audit(2000000044.640:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 134.929585][ T43] usb 5-1: USB disconnect, device number 10 [ 134.986020][ T6923] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 134.991418][ T5912] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 135.011344][ T5912] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 135.021773][ T5912] usb 4-1: config 8 has no interface number 0 [ 135.035222][ T5912] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.048517][ T5912] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 135.061835][ T5912] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 135.070868][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.090432][ T6923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.093549][ T5912] usb 4-1: NFC: intf ffff8880348ea000 id ffffffff8f569700 [ 135.592372][ T6940] loop9: detected capacity change from 0 to 7 [ 135.623929][ T6940] buffer_io_error: 24 callbacks suppressed [ 135.623964][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.649842][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.661264][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.669824][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.679586][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.689480][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.698314][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.708393][ T6940] ldm_validate_partition_table(): Disk read failed. [ 135.715751][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.724177][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.733538][ T6940] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.745406][ T6940] Dev loop9: unable to read RDB block 0 [ 135.753223][ T6940] loop9: unable to read partition table [ 135.761065][ T6940] loop9: partition table beyond EOD, truncated [ 135.767383][ T6940] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.767383][ T6940] ) failed (rc=-5) [ 136.406094][ T5913] usb 4-1: USB disconnect, device number 16 [ 136.821873][ T6949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.793328][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.160477][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.202822][ T43] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 139.212067][ T43] usb 5-1: config 0 has no interface number 0 [ 139.234183][ T43] usb 5-1: too many endpoints for config 0 interface 219 altsetting 254: 62, using maximum allowed: 30 [ 139.247495][ T43] usb 5-1: config 0 interface 219 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 139.261739][ T43] usb 5-1: config 0 interface 219 has no altsetting 0 [ 139.271982][ T43] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 139.281263][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.289497][ T43] usb 5-1: Product: syz [ 139.293907][ T43] usb 5-1: Manufacturer: syz [ 139.298547][ T43] usb 5-1: SerialNumber: syz [ 139.306986][ T43] usb 5-1: config 0 descriptor?? [ 139.347199][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.360832][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.394912][ T24] usb 2-1: Product: syz [ 139.406256][ T24] usb 2-1: Manufacturer: syz [ 139.466668][ T24] usb 2-1: SerialNumber: syz [ 139.488004][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.505603][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 139.505617][ T30] audit: type=1400 audit(2000000050.150:394): avc: denied { firmware_load } for pid=978 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 139.526129][ T978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.573963][ T43] usb 5-1: USB disconnect, device number 11 [ 139.591366][ T5912] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.753093][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 139.760234][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.775688][ T5912] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.784623][ T24] usb 2-1: USB disconnect, device number 5 [ 139.795806][ T5912] usb 4-1: config 1 has no interface number 1 [ 139.816971][ T5912] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.849749][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.858937][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.886263][ T5912] usb 4-1: Product: syz [ 139.894919][ T5912] usb 4-1: Manufacturer: syz [ 139.915428][ T5912] usb 4-1: SerialNumber: syz [ 140.000417][ T6990] ceph: No mds server is up or the cluster is laggy [ 140.618842][ T978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 140.655507][ T978] ath9k_htc: Failed to initialize the device [ 141.163932][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 141.437763][ T30] audit: type=1326 audit(2000000052.050:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.641853][ T30] audit: type=1326 audit(2000000052.050:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.697298][ T7010] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.266'. [ 141.737977][ T30] audit: type=1326 audit(2000000052.050:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.779835][ T30] audit: type=1326 audit(2000000052.050:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.803813][ T30] audit: type=1326 audit(2000000052.050:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.819957][ T7010] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 141.827098][ T30] audit: type=1326 audit(2000000052.050:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.860317][ T30] audit: type=1326 audit(2000000052.050:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.885258][ T5912] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 141.893721][ T5912] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 141.917762][ T5912] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 141.925246][ T30] audit: type=1326 audit(2000000052.050:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 141.948488][ T5938] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 141.962282][ T7010] SELinux: failed to load policy [ 142.128735][ T5938] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 142.150018][ T5938] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 142.177403][ T5938] usb 5-1: config 8 has no interface number 0 [ 142.190841][ T5938] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.211960][ T30] audit: type=1326 audit(2000000052.050:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb2b4d8ebe9 code=0x7ffc0000 [ 142.235224][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.256171][ T5938] usb 5-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 142.290543][ T5938] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 142.309111][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.339051][ T5938] usb 5-1: NFC: intf ffff88802a33f000 id ffffffff8f569700 [ 142.496585][ T5912] usb 4-1: USB disconnect, device number 17 [ 142.497540][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 142.541377][ T7033] ceph: No mds server is up or the cluster is laggy [ 142.582800][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 142.614330][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.800710][ T7014] loop9: detected capacity change from 0 to 7 [ 142.814824][ T7014] buffer_io_error: 9 callbacks suppressed [ 142.814860][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.830237][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.839851][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.849168][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.852047][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 142.864597][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.874291][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.883577][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.892167][ T7014] ldm_validate_partition_table(): Disk read failed. [ 142.899356][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.908380][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.918072][ T7014] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.927560][ T7014] Dev loop9: unable to read RDB block 0 [ 142.935453][ T7014] loop9: unable to read partition table [ 142.943336][ T7014] loop9: partition table beyond EOD, truncated [ 142.949581][ T7014] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.949581][ T7014] ) failed (rc=-5) [ 143.112072][ T5912] usb 5-1: USB disconnect, device number 12 [ 143.139089][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 143.514204][ T24] libceph: connect (1)[c::]:6789 error -22 [ 143.560614][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 143.640572][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'. [ 143.777943][ T7052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7052 comm=syz.2.274 [ 143.803624][ T7049] ceph: No mds server is up or the cluster is laggy [ 143.822209][ T24] libceph: connect (1)[c::]:6789 error -22 [ 143.838508][ T7064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7064 comm=syz.2.274 [ 144.446137][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 144.785411][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 144.785426][ T30] audit: type=1400 audit(2000000055.420:435): avc: denied { mount } for pid=7075 comm="syz.3.283" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 144.826797][ T7078] loop2: detected capacity change from 0 to 7 [ 144.886733][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.928823][ T7078] Dev loop2: unable to read RDB block 7 [ 144.938193][ T7078] loop2: unable to read partition table [ 144.984650][ T7078] loop2: partition table beyond EOD, truncated [ 145.010537][ T7078] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 145.091132][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 145.101913][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 145.111240][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.123320][ T24] usb 3-1: Product: syz [ 145.132861][ T24] usb 3-1: Manufacturer: syz [ 145.149568][ T24] usb 3-1: SerialNumber: syz [ 145.186037][ T24] usb 3-1: config 0 descriptor?? [ 145.192609][ T30] audit: type=1400 audit(2000000055.820:436): avc: denied { getopt } for pid=7080 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.239337][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 145.273845][ T24] usb 3-1: Detected FT4233HP [ 145.335063][ T30] audit: type=1400 audit(2000000055.830:437): avc: denied { listen } for pid=7080 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.439516][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.459251][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.471409][ T7088] netlink: 48 bytes leftover after parsing attributes in process `syz.4.286'. [ 145.518500][ T30] audit: type=1400 audit(2000000056.120:438): avc: denied { nlmsg_read } for pid=7084 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.542041][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.563694][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.595309][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.606067][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.616871][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.627134][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.710528][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.719687][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.759434][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 145.768407][ T30] audit: type=1400 audit(2000000056.410:439): avc: denied { write } for pid=7070 comm="syz.2.280" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.772301][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 145.921260][ T7099] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 146.279942][ T30] audit: type=1400 audit(2000000056.410:440): avc: denied { open } for pid=7070 comm="syz.2.280" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.439815][ T24] usb 3-1: USB disconnect, device number 7 [ 146.590946][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 146.621789][ T24] ftdi_sio 3-1:0.0: device disconnected [ 146.653892][ T7104] bridge_slave_0: left allmulticast mode [ 146.661631][ T7104] bridge_slave_0: left promiscuous mode [ 147.308605][ T7110] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[7110] [ 147.517972][ T7114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7114 comm=syz.2.292 [ 147.524879][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.619756][ T30] audit: type=1400 audit(2000000058.250:441): avc: denied { accept } for pid=7112 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.815190][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 147.927917][ T7104] bridge_slave_1: left allmulticast mode [ 147.933872][ T7104] bridge_slave_1: left promiscuous mode [ 147.939463][ T7129] loop2: detected capacity change from 0 to 7 [ 147.939577][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.956159][ T7129] Dev loop2: unable to read RDB block 7 [ 147.963521][ T7129] loop2: unable to read partition table [ 147.970592][ T7129] loop2: partition table beyond EOD, truncated [ 147.977296][ T7129] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 147.991139][ T7104] bond0: (slave bond_slave_0): Releasing backup interface [ 148.485596][ T7104] bond0: (slave bond_slave_1): Releasing backup interface [ 148.517949][ T7104] team0: Port device team_slave_0 removed [ 148.535687][ T7104] team0: Port device team_slave_1 removed [ 148.543147][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.550533][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.559443][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.567181][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.183023][ T30] audit: type=1400 audit(2000000059.810:442): avc: denied { create } for pid=7143 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.440568][ T30] audit: type=1400 audit(2000000060.080:443): avc: denied { write } for pid=7144 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.718323][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.734449][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.124917][ T30] audit: type=1400 audit(2000000060.620:444): avc: denied { connect } for pid=7136 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.300425][ T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 150.309631][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.337946][ T43] usb 2-1: Product: syz [ 150.348361][ T30] audit: type=1400 audit(2000000060.620:445): avc: denied { bind } for pid=7136 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.360896][ T43] usb 2-1: Manufacturer: syz [ 150.401112][ T43] usb 2-1: SerialNumber: syz [ 150.445718][ T30] audit: type=1400 audit(2000000060.630:446): avc: denied { write } for pid=7136 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.447574][ T43] usb 2-1: config 0 descriptor?? [ 150.510644][ T30] audit: type=1400 audit(2000000060.650:447): avc: denied { shutdown } for pid=7136 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.792693][ T9] usb 2-1: USB disconnect, device number 6 [ 151.019229][ T30] audit: type=1400 audit(2000000061.660:448): avc: denied { bind } for pid=7166 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.201852][ T7173] loop2: detected capacity change from 0 to 7 [ 151.230154][ T7173] Dev loop2: unable to read RDB block 7 [ 151.242145][ T7173] loop2: unable to read partition table [ 151.248076][ T7173] loop2: partition table beyond EOD, truncated [ 151.261596][ T7173] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 151.301636][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.406145][ T7171] tipc: Failed to remove unknown binding: 66,1,1/0:2910709895/2910709897 [ 151.415375][ T7171] tipc: Failed to remove unknown binding: 66,1,1/0:2910709895/2910709897 [ 151.568604][ T7181] bridge_slave_0: left allmulticast mode [ 151.577440][ T7181] bridge_slave_0: left promiscuous mode [ 151.583502][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.598854][ T7181] bridge_slave_1: left allmulticast mode [ 151.605228][ T7181] bridge_slave_1: left promiscuous mode [ 151.613766][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.628858][ T7181] bond0: (slave bond_slave_0): Releasing backup interface [ 151.645015][ T7181] bond0: (slave bond_slave_1): Releasing backup interface [ 151.675193][ T7181] team0: Port device team_slave_0 removed [ 151.692488][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 151.694249][ T7181] team0: Port device team_slave_1 removed [ 151.703273][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 151.933550][ T7185] loop6: detected capacity change from 0 to 2560 [ 151.944189][ T7185] buffer_io_error: 9 callbacks suppressed [ 151.949944][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.958561][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.966985][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.975558][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.983994][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.992647][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.001124][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.009486][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.017703][ T7185] ldm_validate_partition_table(): Disk read failed. [ 152.027197][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.035665][ T7185] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.044895][ T7185] Dev loop6: unable to read RDB block 0 [ 152.053340][ T7185] loop6: unable to read partition table [ 152.060197][ T7185] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 152.235271][ T5938] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.251698][ T30] audit: type=1400 audit(2000000062.570:449): avc: denied { append } for pid=7168 comm="syz.3.307" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.275251][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.344216][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.357695][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7186 comm=syz.0.311 [ 152.389670][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.406148][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 152.413766][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.0.311 [ 152.429133][ T5938] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.439384][ T5938] usb 3-1: config 179 has no interface number 0 [ 152.450265][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.463400][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.478513][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.489887][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.501440][ T5938] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.514912][ T5938] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.524500][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.545800][ T7179] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.895465][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.904788][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.312737][ T5913] usb 3-1: USB disconnect, device number 8 [ 153.312735][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.312865][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.395012][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 153.404187][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 153.633320][ T30] audit: type=1800 audit(2000000064.250:450): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.315" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 154.202942][ T30] audit: type=1326 audit(2000000064.830:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ff8ebe9 code=0x7ffc0000 [ 154.226156][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.269829][ T7211] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 154.292884][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.351670][ T30] audit: type=1326 audit(2000000064.830:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ff8ebe9 code=0x7ffc0000 [ 154.374889][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.391777][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 154.399354][ T43] usb 4-1: can't read configurations, error -71 [ 154.516182][ T7215] befs: (nbd3): No write support. Marking filesystem read-only [ 154.527274][ T7215] block nbd3: Attempted send on invalid socket [ 154.533655][ T7215] blk_print_req_error: 5 callbacks suppressed [ 154.533675][ T7215] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.550510][ T7215] befs: (nbd3): unable to read superblock [ 154.785395][ T7220] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 155.550227][ T9] libceph: connect (1)[c::]:6789 error -101 [ 156.133366][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 156.138660][ T7231] ceph: No mds server is up or the cluster is laggy [ 157.156292][ T30] audit: type=1400 audit(2000000067.800:453): avc: denied { read } for pid=7253 comm="syz.1.327" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.191836][ T30] audit: type=1400 audit(2000000067.800:454): avc: denied { open } for pid=7253 comm="syz.1.327" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.893857][ T30] audit: type=1400 audit(2000000067.800:455): avc: denied { ioctl } for pid=7253 comm="syz.1.327" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.969637][ T30] audit: type=1400 audit(2000000068.600:456): avc: denied { ioctl } for pid=7260 comm="syz.4.329" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 158.725477][ T30] audit: type=1326 audit(2000000068.950:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 158.759532][ T30] audit: type=1326 audit(2000000068.950:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 158.881083][ T30] audit: type=1326 audit(2000000068.950:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 158.970584][ T30] audit: type=1326 audit(2000000068.960:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 159.013554][ T30] audit: type=1326 audit(2000000068.960:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 159.054371][ T7274] syzkaller1: entered promiscuous mode [ 159.077085][ T7274] syzkaller1: entered allmulticast mode [ 159.101108][ T30] audit: type=1326 audit(2000000068.960:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb0c0d8ebe9 code=0x7ffc0000 [ 159.831117][ T43] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 160.012430][ T43] usb 3-1: device descriptor read/64, error -71 [ 160.012676][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 160.090718][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.167378][ T7307] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 160.181245][ T5964] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.379477][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 160.381775][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.406521][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.428109][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.431242][ T43] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 160.458111][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.466605][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 160.512926][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.541145][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 160.544340][ T9] usb 4-1: config 0 descriptor?? [ 160.553525][ T5964] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 160.562266][ T5964] usb 5-1: config 0 has no interface number 0 [ 160.570328][ T5964] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=64.d5 [ 160.580295][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.588829][ T43] usb 3-1: device descriptor read/64, error -71 [ 160.596213][ T5964] usb 5-1: Product: syz [ 160.600349][ T5964] usb 5-1: Manufacturer: syz [ 160.606050][ T5964] usb 5-1: SerialNumber: syz [ 160.669358][ T5964] usb 5-1: config 0 descriptor?? [ 160.676416][ T5964] appletouch 5-1:0.98: Could not find int-in endpoint [ 160.685299][ T5964] appletouch 5-1:0.98: probe with driver appletouch failed with error -5 [ 160.694236][ T5964] usbhid 5-1:0.98: couldn't find an input interrupt endpoint [ 160.702168][ T43] usb usb3-port1: attempt power cycle [ 160.895249][ T5964] usb 5-1: USB disconnect, device number 14 [ 161.131297][ T43] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 161.452225][ T43] usb 3-1: device descriptor read/8, error -71 [ 162.111871][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.367681][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 162.381996][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.594006][ T7318] bridge0: port 1(team0) entered blocking state [ 162.600695][ T7318] bridge0: port 1(team0) entered disabled state [ 162.607688][ T7318] team0: entered allmulticast mode [ 162.939558][ T9] usb 4-1: USB disconnect, device number 20 [ 164.234320][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 164.247963][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 164.265061][ T7327] ceph: No mds server is up or the cluster is laggy [ 164.272281][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 164.287308][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 164.370424][ T7333] ceph: No mds server is up or the cluster is laggy [ 164.377794][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 164.384034][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 164.540210][ T7341] ======================================================= [ 164.540210][ T7341] WARNING: The mand mount option has been deprecated and [ 164.540210][ T7341] and is ignored by this kernel. Remove the mand [ 164.540210][ T7341] option from the mount to silence this warning. [ 164.540210][ T7341] ======================================================= [ 164.629558][ T7342] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 164.638543][ T7342] cramfs: wrong magic [ 164.710905][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 164.725043][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 164.725055][ T30] audit: type=1400 audit(2000000075.270:477): avc: denied { append } for pid=7340 comm="syz.3.349" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.769411][ T43] libceph: connect (1)[c::]:6789 error -101 [ 164.771233][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 164.846658][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 165.433424][ T30] audit: type=1400 audit(2000000075.270:478): avc: denied { ioctl } for pid=7340 comm="syz.3.349" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.448684][ T30] audit: type=1400 audit(2000000077.090:479): avc: denied { accept } for pid=7363 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.111133][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 167.378093][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 167.397445][ T9] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 167.416198][ T9] usb 3-1: config 0 has no interface number 0 [ 167.446236][ T9] usb 3-1: config 0 interface 153 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 167.600043][ T5912] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 167.636923][ T9] usb 3-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=c1.31 [ 167.646752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.654795][ T9] usb 3-1: Product: syz [ 167.659531][ T9] usb 3-1: Manufacturer: syz [ 167.664176][ T9] usb 3-1: SerialNumber: syz [ 167.670769][ T9] usb 3-1: config 0 descriptor?? [ 167.811169][ T30] audit: type=1400 audit(2000000078.380:480): avc: denied { create } for pid=7381 comm="syz.1.361" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.137639][ T9] HFC-S_USB 3-1:0.153: probe with driver HFC-S_USB failed with error -5 [ 168.159965][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 168.172557][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.215719][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 168.237861][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 168.256890][ T5912] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 168.266539][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.274985][ T5912] usb 1-1: Product: syz [ 168.279267][ T5912] usb 1-1: Manufacturer: syz [ 168.284158][ T5912] usb 1-1: SerialNumber: syz [ 168.293557][ T5912] usb 1-1: config 0 descriptor?? [ 168.300108][ T7376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.341571][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 168.354388][ T43] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 168.386881][ T30] audit: type=1400 audit(2000000079.030:481): avc: denied { unlink } for pid=5852 comm="syz-executor" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.427204][ T7376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.435974][ T7393] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 168.443941][ T975] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 168.445958][ T43] usb 5-1: config 0 has no interface number 0 [ 168.458625][ T43] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 168.471434][ T5912] usb 1-1: ucan: probing device on interface #0 [ 168.483193][ T43] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 168.492552][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.504630][ T43] usb 5-1: Product: syz [ 168.509388][ T43] usb 5-1: Manufacturer: syz [ 168.514241][ T43] usb 5-1: SerialNumber: syz [ 168.518822][ T7393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.536373][ T43] usb 5-1: config 0 descriptor?? [ 168.565953][ T7396] bond2: (slave veth3): Enslaving as an active interface with a down link [ 168.615654][ T975] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 168.688362][ T975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.693641][ T7396] bond2: (slave dummy0): making interface the new active one [ 168.710406][ T975] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.728907][ T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.738566][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.834815][ T7396] dummy0: entered promiscuous mode [ 168.841914][ T7396] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 169.228127][ T43] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input9 [ 169.359210][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.379202][ T975] usb 4-1: invalid MIDI out EP 0 [ 169.440005][ T7386] delete_channel: no stack [ 169.495534][ T5913] usb 3-1: USB disconnect, device number 13 [ 169.548511][ T5912] usb 1-1: ucan: could not read protocol version, ret=-110 [ 169.562455][ T7403] udevd[7403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.565193][ T5912] usb 1-1: ucan: probe failed; try to update the device firmware [ 169.607326][ T975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 169.728942][ T975] usb 4-1: USB disconnect, device number 21 [ 169.736012][ T30] audit: type=1400 audit(2000000080.360:482): avc: denied { block_suspend } for pid=7401 comm="syz.1.364" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.757204][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.270508][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.301435][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.339709][ T5912] usb 5-1: USB disconnect, device number 15 [ 170.415567][ T5964] usb 1-1: USB disconnect, device number 19 [ 170.560713][ T7409] binder: 7401:7409 ioctl 400c620e 200000000240 returned -22 [ 170.771451][ T30] audit: type=1400 audit(2000000081.410:483): avc: denied { write } for pid=7401 comm="syz.1.364" path="socket:[14535]" dev="sockfs" ino=14535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.794739][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.845176][ T30] audit: type=1400 audit(2000000081.450:484): avc: denied { getopt } for pid=7419 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.457442][ T5912] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.577277][ T7442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.374'. [ 171.588699][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 171.621278][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 171.639954][ T5912] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 171.650763][ T5912] usb 3-1: config 0 has no interface number 0 [ 171.670591][ T5912] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.706276][ T5912] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 171.734303][ T5912] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 171.747129][ T5912] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 171.788455][ T5912] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.805713][ T5912] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 171.814921][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.823007][ T5912] usb 3-1: Product: syz [ 171.827267][ T5912] usb 3-1: Manufacturer: syz [ 171.868766][ T5912] usb 3-1: SerialNumber: syz [ 172.351110][ T5912] usb 3-1: config 0 descriptor?? [ 172.401425][ T975] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 172.590905][ T5912] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=᳹봾ڬ interface=186 now attached to iowarrior0 [ 172.631159][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 172.640700][ T975] usb 1-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 172.642726][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.379'. [ 172.650690][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.667368][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.716750][ T975] usb 1-1: config 0 descriptor?? [ 172.768954][ T5912] usb 3-1: USB disconnect, device number 14 [ 172.941155][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 172.947518][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.958636][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.967846][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.523467][ T43] usb 2-1: config 0 descriptor?? [ 173.715107][ T975] usbhid 1-1:0.0: can't add hid device: -71 [ 173.724865][ T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 173.749069][ T975] usb 1-1: USB disconnect, device number 20 [ 173.749657][ T43] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 174.015511][ T5912] usb 2-1: USB disconnect, device number 7 [ 174.021486][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 174.335703][ T7480] macvlan1: entered promiscuous mode [ 174.347812][ T7480] ipvlan0: entered promiscuous mode [ 174.358687][ T7480] ipvlan0: left promiscuous mode [ 174.685002][ T30] audit: type=1326 audit(2000000085.290:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 174.926808][ T30] audit: type=1326 audit(2000000085.290:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 174.950633][ T7480] macvlan1: left promiscuous mode [ 175.001155][ T30] audit: type=1326 audit(2000000085.290:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.027482][ T30] audit: type=1326 audit(2000000085.290:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.137512][ T30] audit: type=1326 audit(2000000085.290:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.167169][ T30] audit: type=1326 audit(2000000085.290:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.193803][ T30] audit: type=1326 audit(2000000085.290:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.196670][ T7489] syz.0.387 uses obsolete (PF_INET,SOCK_PACKET) [ 175.225006][ T7483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7483 comm=syz.2.386 [ 175.238643][ T7483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7483 comm=syz.2.386 [ 175.368171][ T30] audit: type=1326 audit(2000000085.290:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.392340][ T30] audit: type=1326 audit(2000000085.290:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.415794][ T30] audit: type=1326 audit(2000000085.290:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.878591][ T30] audit: type=1326 audit(2000000085.290:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279418ebe9 code=0x7ffc0000 [ 175.957172][ T7496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.391'. [ 175.972012][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 176.026535][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 176.072847][ T7501] netlink: 165 bytes leftover after parsing attributes in process `syz.0.390'. [ 176.208891][ T7504] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 176.220791][ T7504] comedi comedi3: Buffer allocation failed [ 176.452067][ T5912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 176.554764][ T7514] netlink: 5 bytes leftover after parsing attributes in process `syz.3.395'. [ 176.564820][ T7514] 0XD: renamed from macvtap0 (while UP) [ 176.576093][ T7514] 0XD: entered allmulticast mode [ 176.589590][ T7514] veth0_macvtap: entered allmulticast mode [ 176.726936][ T5912] usb 3-1: device descriptor read/64, error -71 [ 176.769522][ T7514] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 177.025509][ T5912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.181216][ T5912] usb 3-1: device descriptor read/64, error -71 [ 177.301770][ T5912] usb usb3-port1: attempt power cycle [ 178.111183][ T5912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.171941][ T5912] usb 3-1: device descriptor read/8, error -71 [ 178.661133][ T5912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.693684][ T5912] usb 3-1: device descriptor read/8, error -71 [ 178.710641][ T7537] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 178.722145][ T7537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.401'. [ 178.736434][ T7537] batman_adv: batadv0: Adding interface: virt_wifi0 [ 178.743355][ T7537] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.782500][ T7537] batman_adv: batadv0: Interface activated: virt_wifi0 [ 179.070575][ T7543] 9pnet_fd: Insufficient options for proto=fd [ 179.076354][ T5912] usb usb3-port1: unable to enumerate USB device [ 179.374239][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 179.528784][ T7558] macvlan1: entered promiscuous mode [ 179.539238][ T7558] ipvlan0: entered promiscuous mode [ 179.549769][ T7558] ipvlan0: left promiscuous mode [ 179.882453][ T7558] macvlan1: left promiscuous mode [ 181.335078][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.345325][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.581286][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 181.811918][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.821556][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.844708][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.033522][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.062200][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.154095][ T9] usb 4-1: config 0 descriptor?? [ 182.373429][ T9] usb 4-1: string descriptor 0 read error: -71 [ 182.400553][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 182.429728][ T9] usb 4-1: USB disconnect, device number 22 [ 183.799936][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 183.799948][ T30] audit: type=1400 audit(2000000094.440:505): avc: denied { read } for pid=7627 comm="syz.0.428" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.846674][ T30] audit: type=1400 audit(2000000094.440:506): avc: denied { open } for pid=7627 comm="syz.0.428" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.871232][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.879655][ T30] audit: type=1400 audit(2000000094.440:507): avc: denied { ioctl } for pid=7627 comm="syz.0.428" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.905645][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.060881][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 184.181101][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 184.302990][ T7640] hsr_slave_1 (unregistering): left promiscuous mode [ 184.354660][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 184.368333][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.390898][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 184.413866][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.432347][ T9] usb 2-1: Product: syz [ 184.438922][ T9] usb 2-1: Manufacturer: syz [ 184.444813][ T9] usb 2-1: SerialNumber: syz [ 184.454141][ T9] usb 2-1: config 0 descriptor?? [ 184.462612][ T9] usb 2-1: bad CDC descriptors [ 184.468228][ T9] usb 2-1: unsupported MDLM descriptors [ 184.556011][ T30] audit: type=1400 audit(2000000095.200:508): avc: denied { getopt } for pid=7648 comm="syz.2.435" lport=45538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.652586][ T49] dummy0: left promiscuous mode [ 184.666888][ T5964] usb 2-1: USB disconnect, device number 8 [ 184.711178][ T5938] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 184.895918][ T5938] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 184.912666][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.927082][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.939479][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.952614][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.966636][ T5938] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.979793][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.990405][ T7657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'. [ 185.001512][ T5938] usb 4-1: config 0 descriptor?? [ 185.008362][ T7651] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 185.427658][ T5938] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 185.459814][ T5938] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.551488][ T5964] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.694342][ T9] usb 4-1: USB disconnect, device number 23 [ 185.706925][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 185.708633][ T5862] Bluetooth: hci0: command 0x0401 tx timeout [ 185.713627][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 185.719604][ T5175] Bluetooth: hci3: command 0x0406 tx timeout [ 185.725294][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 185.761116][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 185.762491][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.777844][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.789705][ T5964] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 185.799000][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.809000][ T5964] usb 2-1: config 0 descriptor?? [ 186.105696][ T30] audit: type=1400 audit(2000000096.750:509): avc: denied { write } for pid=7671 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.223295][ T5964] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 186.238165][ T5964] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 186.246417][ T5964] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 186.280838][ T5964] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 186.289394][ T5964] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 186.319964][ T5964] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 186.425737][ T5964] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 186.453677][ T5964] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 186.471227][ T5964] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 186.518081][ T5964] usb 2-1: USB disconnect, device number 9 [ 186.905463][ T7690] netlink: 136 bytes leftover after parsing attributes in process `syz.2.451'. [ 186.928576][ T7690] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 186.948177][ T7692] netlink: 14 bytes leftover after parsing attributes in process `syz.3.453'. [ 187.067182][ T7698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.028724][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 188.316576][ T30] audit: type=1400 audit(2000000098.960:510): avc: denied { connect } for pid=7706 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.015810][ T30] audit: type=1400 audit(2000000099.660:511): avc: denied { create } for pid=7711 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.098826][ T7692] bond0 (unregistering): Released all slaves [ 189.202088][ T30] audit: type=1400 audit(2000000099.660:512): avc: denied { connect } for pid=7711 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.274271][ T30] audit: type=1400 audit(2000000099.900:513): avc: denied { read write } for pid=7723 comm="syz.2.463" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.389223][ T30] audit: type=1400 audit(2000000099.910:514): avc: denied { open } for pid=7723 comm="syz.2.463" path="/90/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.439650][ T30] audit: type=1400 audit(2000000100.000:515): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.791104][ T5938] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.960795][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 191.984486][ T7749] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.996174][ T7749] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.521423][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 192.711736][ T5938] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 192.800567][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.840069][ T30] audit: type=1400 audit(2000000103.480:516): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.841094][ T5938] usb 3-1: Product: syz [ 192.922480][ T5938] usb 3-1: Manufacturer: syz [ 192.944089][ T5938] usb 3-1: SerialNumber: syz [ 192.964733][ T30] audit: type=1400 audit(2000000103.610:517): avc: denied { call } for pid=7755 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 192.968628][ T5938] usb 3-1: config 0 descriptor?? [ 193.051652][ T7740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.058937][ T7740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.197753][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591787][ T30] audit: type=1400 audit(2000000103.950:518): avc: denied { bind } for pid=7757 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.623193][ T30] audit: type=1400 audit(2000000104.040:519): avc: denied { write } for pid=7757 comm="syz.4.477" path="socket:[15847]" dev="sockfs" ino=15847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.722702][ T5938] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 194.756473][ T5938] usb 3-1: USB disconnect, device number 19 [ 194.789734][ T7756] syz.0.476 (7756): drop_caches: 2 [ 194.938730][ T7773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.482'. [ 194.951271][ T975] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 195.100449][ T7775] block nbd2: Attempted send on invalid socket [ 195.106798][ T7775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 195.117465][ T7775] efs: cannot read volume header [ 195.546877][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.578469][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.606434][ T975] usb 5-1: Product: syz [ 195.623246][ T975] usb 5-1: Manufacturer: syz [ 195.740149][ T30] audit: type=1400 audit(2000000106.380:520): avc: denied { read write } for pid=7785 comm="syz.3.486" name="mouse0" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 195.741336][ T975] usb 5-1: SerialNumber: syz [ 196.263271][ T30] audit: type=1400 audit(2000000106.420:521): avc: denied { open } for pid=7785 comm="syz.3.486" path="/dev/input/mouse0" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 196.269348][ T7783] trusted_key: syz.0.485 sent an empty control message without MSG_MORE. [ 196.293540][ T30] audit: type=1400 audit(2000000106.490:522): avc: denied { bind } for pid=7777 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.293584][ T30] audit: type=1400 audit(2000000106.870:523): avc: denied { ioctl } for pid=7781 comm="syz.0.485" path="socket:[15873]" dev="sockfs" ino=15873 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.993167][ T5913] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 198.772620][ T975] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 198.829365][ T975] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 198.924314][ T30] audit: type=1400 audit(2000000109.560:524): avc: denied { ioctl } for pid=7814 comm="syz.3.496" path="socket:[15913]" dev="sockfs" ino=15913 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.993673][ T975] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 199.042023][ T975] usb 5-1: USB disconnect, device number 16 [ 199.066752][ T975] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 199.118435][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.147111][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 199.601680][ T30] audit: type=1400 audit(2000000109.780:525): avc: denied { search } for pid=5519 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.622898][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.628125][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.853294][ T30] audit: type=1400 audit(2000000109.780:526): avc: denied { search } for pid=5519 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.874844][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.061111][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.101663][ T5913] usb 3-1: config 0 descriptor?? [ 200.109859][ T7809] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 200.124489][ T30] audit: type=1400 audit(2000000109.780:527): avc: denied { search } for pid=5519 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.239319][ T30] audit: type=1400 audit(2000000109.780:528): avc: denied { read } for pid=5519 comm="dhcpcd" name="n101" dev="tmpfs" ino=4278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.248253][ T5913] hub 3-1:0.0: USB hub found [ 200.903135][ T5913] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 200.917082][ T30] audit: type=1400 audit(2000000109.780:529): avc: denied { open } for pid=5519 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=4278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.940117][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.946800][ T30] audit: type=1400 audit(2000000109.780:530): avc: denied { getattr } for pid=5519 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=4278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.962135][ T7833] syz_tun: entered allmulticast mode [ 200.976848][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 200.989134][ T30] audit: type=1400 audit(2000000110.380:531): avc: denied { read } for pid=7817 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 201.014390][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.035117][ T30] audit: type=1400 audit(2000000111.050:532): avc: denied { read open } for pid=7829 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.060497][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.069890][ T7831] syz_tun: left allmulticast mode [ 201.110434][ T5913] usb 3-1: USB disconnect, device number 20 [ 201.212929][ T30] audit: type=1400 audit(2000000111.050:533): avc: denied { getattr } for pid=7829 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.238150][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.494892][ T7841] Zero length message leads to an empty skb [ 201.813017][ T975] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.855935][ T30] audit: type=1400 audit(2000000112.500:534): avc: denied { add_name } for pid=7824 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.070667][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 202.109016][ T975] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 202.161989][ T7861] IPVS: Error joining to the multicast group [ 202.213360][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.664108][ T975] usb 5-1: Product: syz [ 202.668394][ T975] usb 5-1: Manufacturer: syz [ 202.684746][ T975] usb 5-1: SerialNumber: syz [ 202.695784][ T975] usb 5-1: config 0 descriptor?? [ 202.754317][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 202.881351][ T7866] block device autoloading is deprecated and will be removed. [ 203.133711][ T975] gspca_se401: Frame size: 0x2 bayer [ 203.200689][ T975] gspca_se401: Frame size: 0x127 bayer [ 203.212759][ T975] gspca_se401: Frame size: 256x0 bayer [ 203.332637][ T975] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 203.601197][ T7878] ------------[ cut here ]------------ [ 203.606742][ T7878] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 203.631096][ T7878] WARNING: CPU: 0 PID: 7878 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x62b/0x1200 [ 203.643459][ T7878] Modules linked in: [ 203.647437][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.2.511 Not tainted syzkaller #0 PREEMPT(full) [ 203.656782][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.666957][ T7878] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 203.673400][ T7878] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 96 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 203.693137][ T7878] RSP: 0018:ffffc90003adf2f8 EFLAGS: 00010286 [ 203.699227][ T7878] RAX: 0000000000000000 RBX: fffffffefffff630 RCX: ffffc9000e0e7000 [ 203.707375][ T7878] RDX: 0000000000080000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 203.715498][ T7878] RBP: ffffc90003adf3f0 R08: 0000000000000001 R09: 0000000000000000 [ 203.723580][ T7878] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802ad68000 [ 203.731649][ T7878] R13: ffff8880315411bc R14: ffff8880315411b4 R15: ffff888031541168 [ 203.741367][ T7878] FS: 00007f2794fe36c0(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 203.750414][ T7878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.757107][ T7878] CR2: 0000200000004000 CR3: 0000000079930000 CR4: 00000000003526f0 [ 203.765255][ T7878] Call Trace: [ 203.768577][ T7878] [ 203.771702][ T7878] reg_set_min_max+0x1dc/0x2c0 [ 203.776497][ T7878] check_cond_jmp_op+0x19b0/0x72d0 [ 203.781754][ T7878] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 203.787236][ T7878] do_check_common+0xa13e/0xb410 [ 203.792374][ T7878] ? __pfx_do_check_common+0x10/0x10 [ 203.797701][ T7878] ? lockdep_hardirqs_on+0x51/0x110 [ 203.803081][ T7878] ? kfree+0x2b4/0x4d0 [ 203.807192][ T7878] ? bpf_check+0x7c34/0xc670 [ 203.811888][ T7878] bpf_check+0x869f/0xc670 [ 203.816391][ T7878] ? __pfx_bpf_check+0x10/0x10 [ 203.821237][ T7878] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 203.827235][ T7878] ? rcu_is_watching+0x12/0xc0 [ 203.832117][ T7878] ? irqentry_exit+0x3b/0x90 [ 203.838114][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.843467][ T7878] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 203.849554][ T7878] bpf_prog_load+0xe41/0x2490 [ 203.854339][ T7878] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.859480][ T7878] ? avc_has_perm+0x144/0x1f0 [ 203.864413][ T7878] ? selinux_bpf+0xde/0x130 [ 203.868986][ T7878] ? bpf_lsm_bpf+0x9/0x10 [ 203.873508][ T7878] __sys_bpf+0x4a3f/0x4de0 [ 203.877953][ T7878] ? __pfx___sys_bpf+0x10/0x10 [ 203.882768][ T7878] ? rcu_is_watching+0x12/0xc0 [ 203.887560][ T7878] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 203.893521][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.898750][ T7878] ? do_futex+0x122/0x350 [ 203.903140][ T7878] ? __pfx_do_futex+0x10/0x10 [ 203.907852][ T7878] ? xfd_validate_state+0x61/0x180 [ 203.913107][ T7878] __x64_sys_bpf+0x78/0xc0 [ 203.917543][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.922860][ T7878] do_syscall_64+0xcd/0x4c0 [ 203.927387][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.933362][ T7878] RIP: 0033:0x7f279418ebe9 [ 203.937784][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.959575][ T7878] RSP: 002b:00007f2794fe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.968128][ T7878] RAX: ffffffffffffffda RBX: 00007f27943c6090 RCX: 00007f279418ebe9 [ 203.976170][ T7878] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 203.984201][ T7878] RBP: 00007f2794211e19 R08: 0000000000000000 R09: 0000000000000000 [ 203.992278][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.000258][ T7878] R13: 00007f27943c6128 R14: 00007f27943c6090 R15: 00007ffe669dd6e8 [ 204.008342][ T7878] [ 204.011521][ T7878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.018789][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.2.511 Not tainted syzkaller #0 PREEMPT(full) [ 204.027955][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.037982][ T7878] Call Trace: [ 204.041241][ T7878] [ 204.044160][ T7878] dump_stack_lvl+0x3d/0x1f0 [ 204.048737][ T7878] vpanic+0x6e8/0x7a0 [ 204.052710][ T7878] ? __pfx_vpanic+0x10/0x10 [ 204.057218][ T7878] ? reg_bounds_sanity_check+0x62b/0x1200 [ 204.062933][ T7878] panic+0xca/0xd0 [ 204.066650][ T7878] ? __pfx_panic+0x10/0x10 [ 204.071061][ T7878] check_panic_on_warn+0xab/0xb0 [ 204.076007][ T7878] __warn+0xf6/0x3c0 [ 204.079887][ T7878] ? reg_bounds_sanity_check+0x62b/0x1200 [ 204.085582][ T7878] report_bug+0x3c3/0x580 [ 204.089883][ T7878] ? reg_bounds_sanity_check+0x62b/0x1200 [ 204.095588][ T7878] handle_bug+0x184/0x210 [ 204.099909][ T7878] exc_invalid_op+0x17/0x50 [ 204.104391][ T7878] asm_exc_invalid_op+0x1a/0x20 [ 204.109214][ T7878] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 204.115512][ T7878] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 96 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 204.135090][ T7878] RSP: 0018:ffffc90003adf2f8 EFLAGS: 00010286 [ 204.141127][ T7878] RAX: 0000000000000000 RBX: fffffffefffff630 RCX: ffffc9000e0e7000 [ 204.149072][ T7878] RDX: 0000000000080000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 204.157016][ T7878] RBP: ffffc90003adf3f0 R08: 0000000000000001 R09: 0000000000000000 [ 204.164957][ T7878] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802ad68000 [ 204.172910][ T7878] R13: ffff8880315411bc R14: ffff8880315411b4 R15: ffff888031541168 [ 204.180860][ T7878] ? __warn_printk+0x1a5/0x350 [ 204.185604][ T7878] ? reg_bounds_sanity_check+0x62a/0x1200 [ 204.191307][ T7878] reg_set_min_max+0x1dc/0x2c0 [ 204.196050][ T7878] check_cond_jmp_op+0x19b0/0x72d0 [ 204.201149][ T7878] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 204.206583][ T7878] do_check_common+0xa13e/0xb410 [ 204.211506][ T7878] ? __pfx_do_check_common+0x10/0x10 [ 204.216773][ T7878] ? lockdep_hardirqs_on+0x51/0x110 [ 204.221954][ T7878] ? kfree+0x2b4/0x4d0 [ 204.226002][ T7878] ? bpf_check+0x7c34/0xc670 [ 204.230562][ T7878] bpf_check+0x869f/0xc670 [ 204.234960][ T7878] ? __pfx_bpf_check+0x10/0x10 [ 204.239694][ T7878] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 204.245646][ T7878] ? rcu_is_watching+0x12/0xc0 [ 204.250385][ T7878] ? irqentry_exit+0x3b/0x90 [ 204.254946][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.260132][ T7878] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 204.266174][ T7878] bpf_prog_load+0xe41/0x2490 [ 204.270828][ T7878] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.275927][ T7878] ? avc_has_perm+0x144/0x1f0 [ 204.280582][ T7878] ? selinux_bpf+0xde/0x130 [ 204.285068][ T7878] ? bpf_lsm_bpf+0x9/0x10 [ 204.289372][ T7878] __sys_bpf+0x4a3f/0x4de0 [ 204.293774][ T7878] ? __pfx___sys_bpf+0x10/0x10 [ 204.298510][ T7878] ? rcu_is_watching+0x12/0xc0 [ 204.303259][ T7878] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 204.309043][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.314214][ T7878] ? do_futex+0x122/0x350 [ 204.318520][ T7878] ? __pfx_do_futex+0x10/0x10 [ 204.323616][ T7878] ? xfd_validate_state+0x61/0x180 [ 204.328707][ T7878] __x64_sys_bpf+0x78/0xc0 [ 204.333103][ T7878] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.338274][ T7878] do_syscall_64+0xcd/0x4c0 [ 204.342752][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.348620][ T7878] RIP: 0033:0x7f279418ebe9 [ 204.353020][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.372601][ T7878] RSP: 002b:00007f2794fe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.380984][ T7878] RAX: ffffffffffffffda RBX: 00007f27943c6090 RCX: 00007f279418ebe9 [ 204.388934][ T7878] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 204.396874][ T7878] RBP: 00007f2794211e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.404817][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.412769][ T7878] R13: 00007f27943c6128 R14: 00007f27943c6090 R15: 00007ffe669dd6e8 [ 204.420720][ T7878] [ 204.423909][ T7878] Kernel Offset: disabled [ 204.428213][ T7878] Rebooting in 86400 seconds..