last executing test programs: 6m14.298200105s ago: executing program 32 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 4m10.077086529s ago: executing program 0 (id=2889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x800b3000) 4m9.872359687s ago: executing program 0 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd94}]}, 0x30}}, 0x0) 4m9.704606334s ago: executing program 0 (id=2897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000108, 0x0, 0x149}]}) 4m9.531843472s ago: executing program 0 (id=2903): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 4m9.397746669s ago: executing program 0 (id=2906): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x924) ppoll(&(0x7f0000000280)=[{r0, 0x1021}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 4m9.053615266s ago: executing program 0 (id=2914): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x54, 0xffffffff, 0xa0, 0x0, 0x4], [0x8000, 0x1, 0x86a9, 0x0, 0x0, 0x80102], [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x100}, {0xffffffff, 0x200}, {0xffffffe, 0x10000000, 0x0, 0x1}, {0x5, 0xffffffff}, {0x1}, {0x1000000}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x21, 0x0, 0x0, 0xf8}) 4m8.746752765s ago: executing program 33 (id=2914): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x54, 0xffffffff, 0xa0, 0x0, 0x4], [0x8000, 0x1, 0x86a9, 0x0, 0x0, 0x80102], [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x100}, {0xffffffff, 0x200}, {0xffffffe, 0x10000000, 0x0, 0x1}, {0x5, 0xffffffff}, {0x1}, {0x1000000}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x21, 0x0, 0x0, 0xf8}) 3m20.148916243s ago: executing program 4 (id=3753): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x5, 0x12) 3m20.056675617s ago: executing program 4 (id=3757): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x97, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 3m19.90677459s ago: executing program 4 (id=3762): r0 = eventfd2(0xff, 0x80801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="331a7374cb1ef9c6", 0x8}], 0x1) 3m19.839981674s ago: executing program 4 (id=3764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m19.774654972s ago: executing program 4 (id=3766): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m19.651582852s ago: executing program 4 (id=3770): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x14}}], 0x1, 0x20000000) 3m5.225778793s ago: executing program 34 (id=3770): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x14}}], 0x1, 0x20000000) 2m16.373747348s ago: executing program 2 (id=4794): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0x0, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x3, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x100, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0x1, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x3, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2m16.279662896s ago: executing program 2 (id=4797): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x209, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x101, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x2, "186856f3"}}) io_setup(0x0, 0x0) 2m16.134996437s ago: executing program 2 (id=4802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce, r0}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 2m16.002617924s ago: executing program 2 (id=4807): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 2m15.915501317s ago: executing program 2 (id=4811): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) 2m15.504581915s ago: executing program 2 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x8000) 2m15.390010832s ago: executing program 35 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x8000) 1m33.528249754s ago: executing program 5 (id=5678): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a40)={0x84, &(0x7f0000001580)={0x20, 0xe, 0x4, "915ae35d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m31.719408032s ago: executing program 5 (id=5723): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000) 1m31.440634894s ago: executing program 5 (id=5728): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m31.340605557s ago: executing program 5 (id=5731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) 1m31.172858539s ago: executing program 5 (id=5738): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1m31.049131993s ago: executing program 5 (id=5740): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x8000}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) 1m28.258627077s ago: executing program 8 (id=5793): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m26.539787527s ago: executing program 8 (id=5827): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e21, 0x5, 0x4f24, 0x9, 0x2, 0x20, 0x20, 0x11}, {0x40, 0x3, 0xd, 0x7, 0x10001, 0x2, 0x7c2, 0x4}, {0x9, 0xb97, 0x21b, 0x5}, 0x7fff, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x2, 0x5, 0x8, 0x4, 0x1000}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m26.511733133s ago: executing program 8 (id=5828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x6c, 0x30, 0x5, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x44, 0x0, 0x7, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.486754838s ago: executing program 8 (id=5829): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 1m26.457222742s ago: executing program 8 (id=5830): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 1m26.426850483s ago: executing program 8 (id=5831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r1, 0x0, 0x0, 0x11) 1m16.772426955s ago: executing program 36 (id=5740): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x8000}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) 1m12.119987964s ago: executing program 37 (id=5831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r1, 0x0, 0x0, 0x11) 1.51648999s ago: executing program 6 (id=7230): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xd3b, 0x81, 0x5, 0x3ff, 0x3, "5f656fe690a5fe89"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 1.448133887s ago: executing program 6 (id=7234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)={0x9, 0x0, [{0x9, 0x0, 0x5}, {0x2, 0x0, 0x10000}, {0x100, 0x0, 0x10001}, {0x0, 0x0, 0x7}, {0x1f, 0x0, 0xffffffffffffff00}, {0x4, 0x0, 0x401}, {0xc0a, 0x0, 0x7}, {0x7, 0x0, 0x1}, {0x36, 0x0, 0xf8}, {0x6}, {0x7, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x80000000}, {0x2, 0x0, 0x3}, {0x939, 0x0, 0x5b}, {0x8}, {0x3, 0x0, 0x9}]}) 1.369133737s ago: executing program 1 (id=7235): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20048050}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.366917348s ago: executing program 1 (id=7236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r2, 0x5) 1.287406261s ago: executing program 1 (id=7238): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b000001090224"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 1.220846764s ago: executing program 6 (id=7240): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x2, 0x42}, &(0x7f0000000340), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0}, 0x20) 1.21650776s ago: executing program 3 (id=7241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.172584595s ago: executing program 3 (id=7242): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x81, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 788.673147ms ago: executing program 7 (id=7244): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fanotify_mark(r2, 0x21, 0x101a, r2, 0x0) fanotify_mark(r2, 0x22, 0x4000003b, r2, 0x0) 788.218553ms ago: executing program 6 (id=7253): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 781.908342ms ago: executing program 3 (id=7245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 731.750799ms ago: executing program 6 (id=7246): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e0800074000000000240002"], 0x168}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 700.278898ms ago: executing program 3 (id=7247): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 694.968404ms ago: executing program 7 (id=7248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'rose0\x00'}) 579.750197ms ago: executing program 6 (id=7249): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) 498.332089ms ago: executing program 9 (id=7251): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x980, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) 449.667613ms ago: executing program 7 (id=7252): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 406.889251ms ago: executing program 9 (id=7254): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) socket$kcm(0x1e, 0x4, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x583d, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 324.643541ms ago: executing program 7 (id=7255): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 315.00703ms ago: executing program 9 (id=7256): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x240488c4}, 0x0) 277.732922ms ago: executing program 3 (id=7257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4122, 0x101a}], 0x1, 0x8001, 0x10) 277.505697ms ago: executing program 7 (id=7258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 192.577175ms ago: executing program 9 (id=7259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 189.491978ms ago: executing program 7 (id=7260): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 178.186281ms ago: executing program 9 (id=7261): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 121.728441ms ago: executing program 9 (id=7262): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='Q[') 93.17ms ago: executing program 1 (id=7263): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000002680)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000026c0), 0x2, &(0x7f0000004740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 47.771396ms ago: executing program 3 (id=7264): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x68aa3000) 46.276101ms ago: executing program 1 (id=7265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40040) 0s ago: executing program 1 (id=7266): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r0, 0x4, 0x2400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) kernel console output (not intermixed with test programs): -1/input0 [ 395.061132][ T5931] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 395.145561][T19455] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 395.225789][ T5931] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 395.238228][ T5931] usb 9-1: config 0 has no interface number 0 [ 395.250131][ T5931] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 395.259632][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.275358][ T5931] usb 9-1: Product: syz [ 395.281604][ T974] nintendo 0003:057E:2019.0056: Failed to get joycon info; ret=-71 [ 395.299115][ T5931] usb 9-1: Manufacturer: syz [ 395.303861][ T974] nintendo 0003:057E:2019.0056: Failed to retrieve controller info; ret=-71 [ 395.317529][ T5931] usb 9-1: SerialNumber: syz [ 395.335724][ T974] nintendo 0003:057E:2019.0056: Failed to initialize controller; ret=-71 [ 395.345145][ T5931] usb 9-1: config 0 descriptor?? [ 395.369991][ T974] nintendo 0003:057E:2019.0056: probe - fail = -71 [ 395.379135][ T974] nintendo 0003:057E:2019.0056: probe with driver nintendo failed with error -71 [ 395.393011][ T974] usb 2-1: USB disconnect, device number 66 [ 395.568434][ T5931] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 395.570568][ T30] audit: type=1400 audit(1768055861.328:1037): avc: denied { ioctl } for pid=19480 comm="syz.7.5411" path="socket:[63992]" dev="sockfs" ino=63992 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 395.614669][ T5931] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 395.657586][ T5931] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 395.689544][ T5931] usb 9-1: media controller created [ 395.713669][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.195444][T19522] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 396.785104][ T5931] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 396.806319][ T5931] usb 9-1: USB disconnect, device number 10 [ 397.048570][ T30] audit: type=1400 audit(1768055862.871:1038): avc: denied { setopt } for pid=19534 comm="syz.5.5436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 397.765373][ T30] audit: type=1400 audit(1768055863.627:1039): avc: denied { read } for pid=19586 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 398.130570][ T30] audit: type=1400 audit(1768055864.015:1040): avc: denied { append } for pid=19610 comm="syz.1.5463" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 398.152646][T19612] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 398.170079][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 398.202043][T19612] syzkaller1: ignored: set checksum enabled [ 398.280394][ T974] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 398.468065][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.492933][ T974] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 398.518538][ T974] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 398.527606][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.557725][ T974] usb 6-1: config 0 descriptor?? [ 398.961368][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 398.978040][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 398.994231][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.014020][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.020760][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.038734][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.046398][ T974] lua 0003:1E7D:2C2E.0057: reserved main item tag 0xe [ 399.054241][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.062137][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.086331][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.093639][ T974] lua 0003:1E7D:2C2E.0057: unknown main item tag 0x0 [ 399.101861][ T974] lua 0003:1E7D:2C2E.0057: unbalanced collection at end of report description [ 399.116004][ T974] lua 0003:1E7D:2C2E.0057: parse failed [ 399.121866][ T974] lua 0003:1E7D:2C2E.0057: probe with driver lua failed with error -22 [ 399.155905][ T974] usb 6-1: USB disconnect, device number 50 [ 399.386352][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'. [ 399.705313][T19692] batman_adv: batadv0: Adding interface: vlan0 [ 399.733068][T19692] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.804012][T19692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.834568][T19692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.860991][T19692] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 400.223650][ T5900] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 400.366938][ T11] block nbd0: Possible stuck request ffff888026ee8000: control (read@0,1024B). Runtime 180 seconds [ 400.378002][ T11] block nbd0: Possible stuck request ffff888026ee8200: control (read@1024,1024B). Runtime 180 seconds [ 400.389223][ T11] block nbd0: Possible stuck request ffff888026ee8400: control (read@2048,1024B). Runtime 180 seconds [ 400.401630][ T11] block nbd0: Possible stuck request ffff888026ee8600: control (read@3072,1024B). Runtime 180 seconds [ 400.414357][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.432311][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.442919][ T5900] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 400.456112][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.462329][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5508'. [ 400.474214][ T5900] usb 9-1: config 0 descriptor?? [ 400.501053][ T5900] hub 9-1:0.0: USB hub found [ 400.587363][ T30] audit: type=1400 audit(1768055866.598:1041): avc: denied { map } for pid=19727 comm="syz.1.5511" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 400.674561][T19731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.694365][ T5900] hub 9-1:0.0: 2 ports detected [ 401.084999][ T5900] usb 9-1: USB disconnect, device number 11 [ 401.312986][ T30] audit: type=1400 audit(1768055867.354:1042): avc: denied { watch } for pid=19757 comm="syz.1.5524" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 401.539753][T19769] team_slave_1: mtu greater than device maximum [ 401.547656][T19769] team0: Device team_slave_1 failed to change mtu [ 401.888363][T19802] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5544'. [ 401.934151][T19804] lo: left promiscuous mode [ 401.961657][T19807] kernel read not supported for file /eth0 (pid: 19807 comm: syz.7.5546) [ 401.973785][ T30] audit: type=1800 audit(1768055868.047:1043): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5546" name=6574683004 dev="mqueue" ino=65307 res=0 errno=0 [ 402.155602][T19821] bond0: Device is already in use. [ 402.164009][T19822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5553'. [ 402.566487][ T5811] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 402.653414][ T30] audit: type=1400 audit(1768055868.761:1044): avc: denied { kexec_image_load } for pid=19850 comm="syz.5.5564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 402.710635][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 402.721832][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.733187][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 402.758246][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 402.770808][ T5811] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 402.788419][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.804682][ T5811] usb 2-1: Product: syz [ 402.808887][ T5811] usb 2-1: Manufacturer: syz [ 402.814353][ T5811] usb 2-1: SerialNumber: syz [ 402.822128][ T5811] usb 2-1: config 0 descriptor?? [ 403.060038][ T5811] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 403.301053][ T5811] usb 2-1: USB disconnect, device number 67 [ 403.355597][T19892] input: syz1 as /devices/virtual/input/input75 [ 403.698580][ T5930] kernel write not supported for file [eventfd] (pid: 5930 comm: kworker/0:9) [ 403.939588][T19929] overlayfs: conflicting options: userxattr,redirect_dir=on [ 404.166971][ T30] audit: type=1400 audit(1768055870.346:1045): avc: denied { accept } for pid=19938 comm="syz.8.5605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.226846][ T30] audit: type=1400 audit(1768055870.388:1046): avc: denied { map } for pid=19940 comm="syz.1.5606" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 404.255976][ T30] audit: type=1400 audit(1768055870.388:1047): avc: denied { execute } for pid=19940 comm="syz.1.5606" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 404.348742][T19948] kvm: kvm [19946]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000067) [ 404.931842][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5623'. [ 405.017759][T19984] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5623'. [ 405.198851][T20009] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5634'. [ 405.208797][T20007] Set syz1 is full, maxelem 14 reached [ 405.395658][ T5811] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 405.538679][ T5811] usb 6-1: Using ep0 maxpacket: 16 [ 405.539479][ T5900] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 405.553319][ T5811] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.564518][ T5811] usb 6-1: config 0 interface 0 has no altsetting 0 [ 405.571556][ T5811] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 405.580998][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.592175][ T5811] usb 6-1: config 0 descriptor?? [ 405.690525][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 405.710189][ T5900] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 405.729135][ T5900] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 42, changing to 9 [ 405.740394][ T5900] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 50169, setting to 1024 [ 405.751595][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 405.760578][ T5900] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 405.769835][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.781056][ T5900] usb 2-1: Product: syz [ 405.786572][ T5900] usb 2-1: Manufacturer: syz [ 405.791219][ T5900] usb 2-1: SerialNumber: syz [ 405.799922][ T5900] usb 2-1: config 0 descriptor?? [ 405.990525][ T5811] nzxt-smart2 0003:1E71:2009.0058: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 406.025789][ T5900] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input76 [ 406.216511][ T5900] usb 2-1: USB disconnect, device number 68 [ 406.372942][ T5929] usb 6-1: USB disconnect, device number 51 [ 406.474496][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5657'. [ 406.483934][T20061] netlink: 'syz.8.5657': attribute type 30 has an invalid length. [ 406.498506][ T36] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.507875][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5657'. [ 406.517296][ T36] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.526252][ T36] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.535310][T20061] netlink: 'syz.8.5657': attribute type 30 has an invalid length. [ 406.544265][ T36] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.253191][T20096] overlayfs: workdir and upperdir must be separate subtrees [ 407.261849][T20098] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.5674'. [ 407.585904][ T5900] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 407.628096][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5687'. [ 407.735813][T20138] bond0: entered promiscuous mode [ 407.744216][T20138] bond_slave_0: entered promiscuous mode [ 407.750784][T20138] bond_slave_1: entered promiscuous mode [ 407.759087][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.760897][T20138] batadv0: entered promiscuous mode [ 407.776346][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.779091][T20138] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 407.796734][ T5900] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 407.806105][T20138] bond0: left promiscuous mode [ 407.811055][T20138] bond_slave_0: left promiscuous mode [ 407.813829][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.821007][T20138] bond_slave_1: left promiscuous mode [ 407.831176][T20138] batadv0: left promiscuous mode [ 407.839899][ T5900] usb 6-1: config 0 descriptor?? [ 408.143906][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5698'. [ 408.205227][T20153] xfrm0: Master is either lo or non-ether device [ 408.247228][ T5900] isku 0003:1E7D:319C.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 408.590686][T20176] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 408.601809][T20176] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 408.612595][T20176] overlayfs: failed to set uuid (1135/file0, err=-13); falling back to uuid=null. [ 408.628108][ T5929] usb 6-1: USB disconnect, device number 52 [ 409.743220][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5737'. [ 409.764233][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5737'. [ 409.790951][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5737'. [ 409.802438][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5737'. [ 409.901780][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'. [ 409.911806][T20245] netlink: 'syz.1.5743': attribute type 30 has an invalid length. [ 409.919795][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'. [ 410.144904][T20264] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 410.160588][T20264] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 410.223755][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5753'. [ 410.345316][T20273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5756'. [ 410.654289][T20286] input: syz0 as /devices/virtual/input/input77 [ 411.752738][T20306] SELinux: failed to load policy [ 411.953284][ T30] audit: type=1400 audit(1768055878.524:1048): avc: denied { create } for pid=20321 comm="syz.8.5779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 412.245135][ T30] audit: type=1800 audit(1768055878.839:1049): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5784" name="bus" dev="tmpfs" ino=987 res=0 errno=0 [ 412.269720][ T30] audit: type=1804 audit(1768055878.850:1050): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm=6C2586CE36DB0CCF197CC94F7FCE8F name="/newroot/192/bus" dev="tmpfs" ino=987 res=1 errno=0 [ 412.531008][T20348] bpf: Bad value for 'gid' [ 412.815237][ T5900] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 412.958853][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 412.967853][ T5900] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 412.975978][ T5900] usb 9-1: config 0 has no interface number 0 [ 412.982432][ T5900] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.993564][ T5900] usb 9-1: config 0 interface 85 has no altsetting 0 [ 413.002517][ T5900] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 413.012026][T20362] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.5798'. [ 413.022807][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.031313][ T5900] usb 9-1: Product: syz [ 413.035564][ T5900] usb 9-1: Manufacturer: syz [ 413.040169][ T5900] usb 9-1: SerialNumber: syz [ 413.047276][ T5900] usb 9-1: config 0 descriptor?? [ 413.633867][ T5900] appletouch 9-1:0.85: Geyser mode initialized. [ 413.642988][ T5900] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input78 [ 413.827444][ T5900] usb 9-1: USB disconnect, device number 12 [ 413.844901][ T5900] appletouch 9-1:0.85: input: appletouch disconnected [ 413.884583][T20399] netlink: 'syz.1.5815': attribute type 10 has an invalid length. [ 413.893271][T20399] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5815'. [ 414.246923][T20420] random: crng reseeded on system resumption [ 414.683707][T20444] input: syz0 as /devices/virtual/input/input79 [ 415.172568][ T30] audit: type=1400 audit(1768055881.905:1051): avc: denied { write } for pid=20462 comm="syz.1.5845" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 415.537299][T20466] delete_channel: no stack [ 415.683765][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 415.727480][T20470] __nla_validate_parse: 1 callbacks suppressed [ 415.727494][T20470] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5849'. [ 415.985979][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.997479][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.007877][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.018762][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.027151][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.176458][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5857'. [ 416.189917][T20480] chnl_net:caif_netlink_parms(): no params data found [ 416.296748][T20480] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.304605][T20480] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.313301][T20480] bridge_slave_0: entered allmulticast mode [ 416.321357][T20497] SELinux: failed to load policy [ 416.321772][T20480] bridge_slave_0: entered promiscuous mode [ 416.335576][T20480] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.344365][T20480] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.352130][T20480] bridge_slave_1: entered allmulticast mode [ 416.361962][T20480] bridge_slave_1: entered promiscuous mode [ 416.403314][T20480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.417134][T20480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.458136][T20480] team0: Port device team_slave_0 added [ 416.467193][T20480] team0: Port device team_slave_1 added [ 416.503882][T20480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.511186][T20480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.540997][T20480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.553386][T20480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.563183][T20480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.591360][T20480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.647182][T20480] hsr_slave_0: entered promiscuous mode [ 416.654110][T20480] hsr_slave_1: entered promiscuous mode [ 416.660317][T20480] debugfs: 'hsr0' already exists in 'hsr' [ 416.666212][T20480] Cannot create hsr debugfs directory [ 416.829161][T20480] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.924711][T20480] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.988767][T20480] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.077252][T20480] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 417.088179][T20480] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.213878][T20480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 417.223646][T20480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 417.232699][T20480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 417.242125][T20480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.292957][T20480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.310245][T20480] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.321998][T16449] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.329117][T16449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.342623][T16934] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.349712][T16934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.529794][T20480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.734610][T20480] veth0_vlan: entered promiscuous mode [ 417.750810][T20480] veth1_vlan: entered promiscuous mode [ 417.780199][T20480] veth0_macvtap: entered promiscuous mode [ 417.791381][T20480] veth1_macvtap: entered promiscuous mode [ 417.808647][T20480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.823372][T20480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.836178][T16455] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.846328][T16455] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.865273][T16455] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.874778][T16455] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.944168][T16455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.954467][T16455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.969648][ T5136] Bluetooth: hci1: command tx timeout [ 417.989409][T16442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.997879][T16442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.252345][ T30] audit: type=1400 audit(1768055885.138:1052): avc: denied { mount } for pid=20575 comm="syz.6.5887" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 418.585232][ T30] audit: type=1326 audit(1768055885.485:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.1.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7fc00000 [ 418.753430][T20611] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5902'. [ 418.922253][ T30] audit: type=1326 audit(1768055885.842:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20623 comm="syz.7.5909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafea58f749 code=0x0 [ 418.969273][T20628] binder: 20627:20628 ioctl c018620c 200000000240 returned -1 [ 419.023670][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5913'. [ 419.027526][ T5942] hid-generic 0005:16C0:05DF.005A: item fetching failed at offset 0/1 [ 419.032854][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5913'. [ 419.051629][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5913'. [ 419.061880][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5913'. [ 419.063294][ T5942] hid-generic 0005:16C0:05DF.005A: probe with driver hid-generic failed with error -22 [ 419.261090][ T5900] kernel write not supported for file /sg0 (pid: 5900 comm: kworker/0:5) [ 419.384836][T20657] SELinux: ebitmap: truncated map [ 419.394422][T20657] SELinux: failed to load policy [ 419.655923][ T30] audit: type=1800 audit(1768055886.619:1055): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5932" name="file1" dev="tmpfs" ino=6342 res=0 errno=0 [ 419.951101][ T5136] Bluetooth: hci1: command tx timeout [ 419.998607][ T30] audit: type=1400 audit(1768055886.976:1056): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 420.092832][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5941'. [ 420.625028][ T30] audit: type=1400 audit(1768055887.627:1057): avc: denied { listen } for pid=20718 comm="syz.7.5954" path=2F33302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 420.735210][ T30] audit: type=1400 audit(1768055887.742:1058): avc: denied { write } for pid=5900 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71810 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.825352][T20729] netlink: 'syz.7.5959': attribute type 12 has an invalid length. [ 421.121198][ T5811] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 421.265244][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 421.276483][ T5811] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 421.285539][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.294736][ T5811] usb 2-1: config 0 descriptor?? [ 421.300198][T20733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 421.700125][ T5811] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 421.899601][ T5811] usb 2-1: USB disconnect, device number 69 [ 421.931005][ T5136] Bluetooth: hci1: command tx timeout [ 422.249105][T20739] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 422.288876][T20741] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5965'. [ 422.298184][T20741] netlink: 'syz.6.5965': attribute type 1 has an invalid length. [ 423.046138][T20784] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5986'. [ 423.912386][ T5136] Bluetooth: hci1: command tx timeout [ 424.210054][ T30] audit: type=1400 audit(1768055891.385:1059): avc: denied { execute } for pid=20826 comm="syz.1.6005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.299815][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.315210][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.324278][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.342851][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.350332][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.651891][T20832] chnl_net:caif_netlink_parms(): no params data found [ 424.783117][T20832] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.792874][T20832] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.808013][T20832] bridge_slave_0: entered allmulticast mode [ 424.815329][T20832] bridge_slave_0: entered promiscuous mode [ 424.837984][T20832] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.853422][T20832] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.861593][T20832] bridge_slave_1: entered allmulticast mode [ 424.871650][T20832] bridge_slave_1: entered promiscuous mode [ 424.910927][T20832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.927583][T20832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.956309][T20832] team0: Port device team_slave_0 added [ 424.963860][T20832] team0: Port device team_slave_1 added [ 424.986536][T20832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.994284][T20832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.023275][T20832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.035797][T20832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.043598][T20832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.071203][T20832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.074045][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 425.098369][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6018'. [ 425.125185][T20832] hsr_slave_0: entered promiscuous mode [ 425.132534][T20832] hsr_slave_1: entered promiscuous mode [ 425.138979][T20832] debugfs: 'hsr0' already exists in 'hsr' [ 425.144984][T20832] Cannot create hsr debugfs directory [ 425.227624][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 425.249978][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 425.264726][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.272713][ T9] usb 2-1: Product: syz [ 425.281906][T20832] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 425.288886][ T9] usb 2-1: Manufacturer: syz [ 425.293759][ T9] usb 2-1: SerialNumber: syz [ 425.300816][T20832] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 425.313594][T20832] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 425.323537][T20832] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 425.349532][T20832] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.356686][T20832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.364069][T20832] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.371176][T20832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.420680][T20832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.437006][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.446775][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.477653][T20832] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.506089][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.513336][T16404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.533321][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 425.535251][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.549535][T16404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.562404][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.582886][T20832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.594116][T20832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.598730][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 425.631819][ T9] usb 2-1: media controller created [ 425.682935][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.822734][T20832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.922520][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 426.011382][ T9] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 426.041939][ T9] usb 2-1: USB disconnect, device number 70 [ 426.117467][T20832] veth0_vlan: entered promiscuous mode [ 426.131645][T20832] veth1_vlan: entered promiscuous mode [ 426.179036][T20832] veth0_macvtap: entered promiscuous mode [ 426.204873][T20832] veth1_macvtap: entered promiscuous mode [ 426.246829][T20832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.270165][T20904] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 426.272407][T20832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.277052][T20904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.293355][T20904] vhci_hcd vhci_hcd.0: Device attached [ 426.306440][T20905] vhci_hcd: connection closed [ 426.306681][T16404] vhci_hcd vhci_hcd.6: stop threads [ 426.317776][T16404] vhci_hcd vhci_hcd.6: release socket [ 426.320591][T16939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.324179][T16404] vhci_hcd vhci_hcd.6: disconnect device [ 426.340618][T16939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.350297][T16939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.350527][ T5136] Bluetooth: hci4: command tx timeout [ 426.366324][T16939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.420666][T16939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.429299][T16939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.449771][T16420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.457963][T16420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.732530][ T5931] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 426.894326][ T5931] usb 10-1: Using ep0 maxpacket: 32 [ 426.900734][ T5931] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 426.912924][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 426.924948][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 426.936185][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 426.947220][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 426.958766][ T5931] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 426.968825][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.977397][ T5931] usb 10-1: Product: syz [ 426.981878][ T5931] usb 10-1: Manufacturer: syz [ 426.986573][ T5931] usb 10-1: SerialNumber: syz [ 426.993175][ T5931] usb 10-1: config 0 descriptor?? [ 427.384557][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.391183][ T5931] input input81: Device does not respond to id packet M [ 427.399025][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.405188][ T5931] input input81: Device does not respond to id packet P [ 427.412480][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.421000][ T5931] input input81: Device does not respond to id packet B [ 427.428506][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.434581][ T5931] input input81: Device does not respond to id packet N [ 427.441859][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.448763][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.455091][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.462452][ T5931] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 427.468739][ T5931] iforce 10-1:0.0: usb_submit_urb failed -90 [ 427.475634][ T5931] iforce 10-1:0.0: usb_submit_urb failed -90 [ 427.483098][ T5931] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input81 [ 427.511638][ T5931] usb 10-1: USB disconnect, device number 2 [ 427.991018][ T30] audit: type=1400 audit(1768055895.364:1060): avc: denied { add_name } for pid=20953 comm="syz.9.6047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.991745][T20954] (syz.9.6047,20954,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 428.040396][ T30] audit: type=1400 audit(1768055895.364:1061): avc: denied { create } for pid=20953 comm="syz.9.6047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 428.087418][ T5869] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 428.095256][ T30] audit: type=1400 audit(1768055895.364:1062): avc: denied { associate } for pid=20953 comm="syz.9.6047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 428.276382][ T5869] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 428.284741][ T5869] usb 2-1: config 0 has no interface number 0 [ 428.291189][ T5869] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.306752][ T5869] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 428.316213][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.324418][ T5869] usb 2-1: Product: syz [ 428.328764][ T5869] usb 2-1: Manufacturer: syz [ 428.333710][ T5136] Bluetooth: hci4: command tx timeout [ 428.340110][ T5869] usb 2-1: SerialNumber: syz [ 428.347571][ T5869] usb 2-1: config 0 descriptor?? [ 428.359806][ T5869] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 428.753714][ T5942] usb 2-1: USB disconnect, device number 71 [ 428.772815][ T5942] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 428.901993][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.915422][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.924567][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.946974][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.955782][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.024252][ T11] block nbd0: Possible stuck request ffff888026ee8000: control (read@0,1024B). Runtime 210 seconds [ 429.035225][ T11] block nbd0: Possible stuck request ffff888026ee8200: control (read@1024,1024B). Runtime 210 seconds [ 429.047960][ T11] block nbd0: Possible stuck request ffff888026ee8400: control (read@2048,1024B). Runtime 210 seconds [ 429.059139][ T11] block nbd0: Possible stuck request ffff888026ee8600: control (read@3072,1024B). Runtime 210 seconds [ 429.213384][T20981] chnl_net:caif_netlink_parms(): no params data found [ 429.378376][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.387858][T20981] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.395613][T20981] bridge_slave_0: entered allmulticast mode [ 429.404825][T20981] bridge_slave_0: entered promiscuous mode [ 429.413630][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.420870][T20981] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.428305][T20981] bridge_slave_1: entered allmulticast mode [ 429.437155][T20981] bridge_slave_1: entered promiscuous mode [ 429.507745][T20981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.534215][T20981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.609788][T20981] team0: Port device team_slave_0 added [ 429.632627][T20981] team0: Port device team_slave_1 added [ 429.694178][ T30] audit: type=1400 audit(1768055897.159:1063): avc: denied { unmount } for pid=20832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 429.734961][T20981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.752767][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.808935][T20981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.822234][T20981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.846005][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.865844][ T30] audit: type=1400 audit(1768055897.338:1064): avc: denied { bind } for pid=21019 comm="syz.7.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 429.893140][T20981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.943595][ T30] audit: type=1400 audit(1768055897.369:1065): avc: denied { write } for pid=21019 comm="syz.7.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 430.005548][T20981] hsr_slave_0: entered promiscuous mode [ 430.028422][T20981] hsr_slave_1: entered promiscuous mode [ 430.034682][T20981] debugfs: 'hsr0' already exists in 'hsr' [ 430.056732][T20981] Cannot create hsr debugfs directory [ 430.322604][ T5136] Bluetooth: hci4: command tx timeout [ 430.388061][ T5942] kernel write not supported for file /uinput (pid: 5942 comm: kworker/1:7) [ 430.418109][ T5869] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 430.466395][ T5931] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 430.561132][ T5869] usb 10-1: Using ep0 maxpacket: 32 [ 430.569381][ T5869] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.581587][ T5869] usb 10-1: config 0 has no interface number 0 [ 430.589914][ T5869] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.601716][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.610256][ T5869] usb 10-1: Product: syz [ 430.614584][ T5869] usb 10-1: Manufacturer: syz [ 430.624357][ T5869] usb 10-1: SerialNumber: syz [ 430.630059][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 430.639354][ T5931] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 430.641814][ T5869] usb 10-1: config 0 descriptor?? [ 430.659138][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.673733][ T5869] smsc95xx v2.0.0 [ 430.679375][ T5869] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 430.690741][ T5869] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 430.691585][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 430.738187][ T5931] pvrusb2: ********** [ 430.748120][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 430.787709][ T5931] pvrusb2: Important functionality might not be entirely working. [ 430.796517][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 430.825591][ T5931] pvrusb2: ********** [ 430.909201][ T5931] usb 10-1: USB disconnect, device number 3 [ 430.924798][ T5136] Bluetooth: hci6: command tx timeout [ 431.044812][T20981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.062491][T20981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.116873][T20981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.136177][T20981] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.147005][ T5942] usb 2-1: USB disconnect, device number 72 [ 431.170842][ T5942] pvrusb2: Device being rendered inoperable [ 431.325054][T20981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.351204][T20981] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.365587][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.372757][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.397662][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.404827][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.945438][T20981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.071720][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.080020][T20981] veth0_vlan: entered promiscuous mode [ 432.117089][T20981] veth1_vlan: entered promiscuous mode [ 432.294699][ T5136] Bluetooth: hci4: command tx timeout [ 432.403145][T20981] veth0_macvtap: entered promiscuous mode [ 432.438864][T20981] veth1_macvtap: entered promiscuous mode [ 432.503956][T20981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.549119][T20981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.588703][T16409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.624403][T16409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.659825][T16409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.680346][T16409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.906116][ T5136] Bluetooth: hci6: command tx timeout [ 432.934760][T16452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.949590][T16452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.016158][T16404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.025613][T16404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.361271][T21165] tipc: Started in network mode [ 433.366286][T21165] tipc: Node identity ac141412, cluster identity 4711 [ 433.373737][T21165] tipc: New replicast peer: 255.255.255.255 [ 433.385891][T21165] tipc: Enabled bearer , priority 7 [ 433.727514][T21190] netlink: 'syz.9.6122': attribute type 4 has an invalid length. [ 433.735957][T21190] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6122'. [ 434.447384][ T5930] tipc: Node number set to 2886997010 [ 434.529491][T21228] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6133'. [ 434.552402][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6133'. [ 434.885512][ T5828] Bluetooth: hci6: command tx timeout [ 434.908607][T21254] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6143'. [ 434.933581][T21254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6143'. [ 435.009412][ T5931] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 435.161961][ T5931] usb 10-1: Using ep0 maxpacket: 32 [ 435.177493][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.218454][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.236318][ T5931] usb 10-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 435.275803][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.297496][ T5931] usb 10-1: config 0 descriptor?? [ 435.702199][ T5931] hid_parser_main: 13 callbacks suppressed [ 435.702222][ T5931] lenovo 0003:17EF:6067.005C: unknown main item tag 0x0 [ 435.737084][ T5931] lenovo 0003:17EF:6067.005C: hidraw0: USB HID vff.ff Device [HID 17ef:6067] on usb-dummy_hcd.9-1/input0 [ 435.923556][ T5931] usb 10-1: USB disconnect, device number 4 [ 436.339692][T21324] netlink: 1424 bytes leftover after parsing attributes in process `syz.3.6160'. [ 436.665359][T21348] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6168'. [ 436.866743][ T5828] Bluetooth: hci6: command tx timeout [ 437.217242][T21376] input: syz0 as /devices/virtual/input/input82 [ 437.909619][T21415] netlink: 'syz.7.6186': attribute type 23 has an invalid length. [ 438.105848][T21406] SELinux: failed to load policy [ 439.060237][ T30] audit: type=1400 audit(1768055906.975:1066): avc: denied { mount } for pid=21473 comm="syz.3.6207" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 439.149673][ T30] audit: type=1400 audit(1768055906.975:1067): avc: denied { search } for pid=21473 comm="syz.3.6207" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 439.247990][ T30] audit: type=1400 audit(1768055906.975:1068): avc: denied { search } for pid=21473 comm="syz.3.6207" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 439.305443][ T30] audit: type=1400 audit(1768055906.986:1069): avc: denied { search } for pid=21473 comm="syz.3.6207" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 439.373580][T21490] overlayfs: workdir and upperdir must be separate subtrees [ 439.375269][ T30] audit: type=1400 audit(1768055907.280:1070): avc: denied { getopt } for pid=21486 comm="syz.1.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 440.155757][T21521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6222'. [ 440.229043][T21521] netlink: 'syz.6.6222': attribute type 7 has an invalid length. [ 440.263867][T21521] netlink: 'syz.6.6222': attribute type 8 has an invalid length. [ 440.286285][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6222'. [ 440.361102][ T30] audit: type=1400 audit(1768055908.350:1071): avc: denied { mount } for pid=21530 comm="syz.3.6225" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 440.400731][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6224'. [ 440.409750][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6224'. [ 440.419378][ T30] audit: type=1400 audit(1768055908.382:1072): avc: denied { remount } for pid=21530 comm="syz.3.6225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 440.467307][T21528] bond1: option xmit_hash_policy: invalid value (6) [ 440.491364][ T30] audit: type=1400 audit(1768055908.476:1073): avc: denied { unmount } for pid=20981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 440.531485][T21528] bond1 (unregistering): Released all slaves [ 440.804689][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6236'. [ 440.862667][T21559] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[21559] [ 440.904870][ T30] audit: type=1800 audit(1768055908.917:1074): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.6240" name="file1" dev="tmpfs" ino=269 res=0 errno=0 [ 441.346906][T21567] SELinux: failed to load policy [ 441.729067][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6261'. [ 441.761174][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6261'. [ 442.107913][T21635] netlink: zone id is out of range [ 442.121562][T21635] netlink: zone id is out of range [ 442.127975][T21635] netlink: zone id is out of range [ 442.133482][T21635] netlink: zone id is out of range [ 442.141989][T21635] netlink: zone id is out of range [ 442.148588][T21635] netlink: zone id is out of range [ 442.153312][ T5900] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 442.155222][T21635] netlink: zone id is out of range [ 442.166833][T21635] netlink: zone id is out of range [ 442.172633][T21635] netlink: zone id is out of range [ 442.177869][T21635] netlink: zone id is out of range [ 442.307156][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.320805][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.332576][ T5900] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 442.357033][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.373880][ T5900] usb 10-1: config 0 descriptor?? [ 442.777862][ T5900] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 442.787056][ T5900] cp2112 0003:10C4:EA90.005D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 442.925804][ T5931] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 442.969424][ T5900] cp2112 0003:10C4:EA90.005D: error requesting version [ 442.979215][ T5900] cp2112 0003:10C4:EA90.005D: probe with driver cp2112 failed with error -71 [ 442.994914][ T5900] usb 10-1: USB disconnect, device number 5 [ 443.096541][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 443.105592][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.117335][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.127331][ T5931] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 443.137978][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.151375][ T5931] usb 2-1: config 0 descriptor?? [ 443.552381][ T5931] lenovo 0003:17EF:6067.005E: unknown main item tag 0x0 [ 443.561975][ T5931] lenovo 0003:17EF:6067.005E: hidraw0: USB HID vff.ff Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0 [ 443.677192][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 443.758319][ T5930] usb 2-1: USB disconnect, device number 73 [ 443.840333][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.851556][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.866637][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.876045][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.884467][ T5900] usb 4-1: Product: syz [ 443.888905][ T5900] usb 4-1: Manufacturer: syz [ 443.893515][ T5900] usb 4-1: SerialNumber: syz [ 444.067368][ T5930] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 444.229365][ T5930] usb 10-1: Using ep0 maxpacket: 8 [ 444.236989][ T5930] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 444.248380][ T5930] usb 10-1: config 0 has no interface number 0 [ 444.277094][ T5930] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.295018][ T5930] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 444.308078][ T5930] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 444.320200][ T5930] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.336726][ T5930] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 444.347704][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.367239][ T5930] usb 10-1: config 0 descriptor?? [ 444.378314][ T5930] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 444.598885][T21713] netlink: 'syz.1.6310': attribute type 1 has an invalid length. [ 444.616715][ T5930] usb 10-1: USB disconnect, device number 6 [ 444.630819][ T5930] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 444.862002][ T5900] cdc_ncm 4-1:1.0: bind() failure [ 444.876144][ T5900] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 444.902379][ T5900] usb 4-1: USB disconnect, device number 9 [ 445.614938][T21765] syzkaller1: entered promiscuous mode [ 445.631986][T21765] syzkaller1: entered allmulticast mode [ 445.728509][T21771] netlink: 'syz.3.6336': attribute type 4 has an invalid length. [ 445.750376][T21771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6336'. [ 446.090521][ T5930] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 446.255685][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 446.271233][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.304756][ T5930] usb 2-1: config 0 descriptor?? [ 446.317319][ T5930] cp210x 2-1:0.0: cp210x converter detected [ 446.733355][ T5930] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 446.760809][ T5930] usb 2-1: cp210x converter now attached to ttyUSB0 [ 446.954138][ T5811] usb 2-1: USB disconnect, device number 74 [ 446.974849][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 447.025408][ T5811] cp210x 2-1:0.0: device disconnected [ 447.540667][T21854] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.6373'. [ 447.551604][T21854] net_ratelimit: 44 callbacks suppressed [ 447.551621][T21854] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.677806][ T5930] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 447.843579][ T5930] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 447.864731][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.879586][ T5930] usb 10-1: config 0 descriptor?? [ 448.509850][T21887] netlink: 14560 bytes leftover after parsing attributes in process `syz.7.6387'. [ 448.771726][ T30] audit: type=1400 audit(1768055917.180:1075): avc: denied { getopt } for pid=21894 comm="syz.1.6391" lport=56694 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 448.849931][ T5930] usb 10-1: Cannot set autoneg [ 448.865940][ T5930] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 448.911873][ T5930] usb 10-1: USB disconnect, device number 7 [ 449.122031][T21904] IPv6: sit1: Disabled Multicast RS [ 449.130931][T21904] sit1: entered allmulticast mode [ 449.426369][T21920] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 449.745081][ T5869] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 449.919434][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 449.944394][ T5869] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 449.963861][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.982923][ T5869] usb 4-1: config 0 descriptor?? [ 449.989057][T21925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.106422][ T5900] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 450.118431][T21955] geneve2: entered promiscuous mode [ 450.123838][T21955] geneve2: entered allmulticast mode [ 450.277921][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 450.285363][ T5900] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.301011][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.312951][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.323241][ T5900] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.336820][ T5900] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.346075][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.404037][ T5869] elan 0003:04F3:0755.005F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 450.584360][ T5900] usb 2-1: GET_CAPABILITIES returned 0 [ 450.594009][ T5900] usbtmc 2-1:16.0: can't read capabilities [ 450.622680][ T5811] usb 4-1: USB disconnect, device number 10 [ 450.663810][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6427'. [ 450.802571][ T5811] usb 2-1: USB disconnect, device number 75 [ 450.832885][ T30] audit: type=1326 audit(1768055919.342:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 450.894053][ T30] audit: type=1326 audit(1768055919.342:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 450.970765][ T30] audit: type=1326 audit(1768055919.374:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.025442][ T30] audit: type=1326 audit(1768055919.374:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.078451][ T30] audit: type=1326 audit(1768055919.374:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f170518df90 code=0x7ffc0000 [ 451.124600][ T30] audit: type=1326 audit(1768055919.374:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.191778][ T30] audit: type=1326 audit(1768055919.374:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.224712][ T30] audit: type=1326 audit(1768055919.374:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.268316][ T30] audit: type=1326 audit(1768055919.374:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.9.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170518f749 code=0x7ffc0000 [ 451.577825][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 451.586993][ T2337] pvrusb2: Failure uploading firmware1 [ 451.593883][ T5931] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 451.602976][ T2337] pvrusb2: Device initialization was not successful. [ 451.609686][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 451.620098][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 451.629599][T10338] pvrusb2: Device being rendered inoperable [ 451.764201][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 451.771425][ T5931] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 451.779901][ T5931] usb 2-1: config 0 has no interface number 0 [ 451.786235][ T5931] usb 2-1: config 0 interface 151 has no altsetting 0 [ 451.795217][ T5931] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 451.804815][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.812830][ T5931] usb 2-1: Product: syz [ 451.816974][ T5931] usb 2-1: Manufacturer: syz [ 451.821731][ T5931] usb 2-1: SerialNumber: syz [ 451.827633][ T5931] usb 2-1: config 0 descriptor?? [ 451.835572][ T5931] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 451.916179][T10338] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 452.068561][T10338] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 452.080858][T10338] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 452.095624][T10338] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 452.118036][T10338] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 452.143329][T10338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.153022][T10338] usb 7-1: Product: syz [ 452.165176][T10338] usb 7-1: Manufacturer: syz [ 452.169809][T10338] usb 7-1: SerialNumber: syz [ 452.179660][T10338] usb 7-1: config 0 descriptor?? [ 452.199971][T22005] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 452.207792][T22005] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 452.221581][T10338] usb 7-1: ucan: probing device on interface #0 [ 452.412286][ T5931] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 452.419751][ T5931] sq905c 2-1:0.151: probe with driver sq905c failed with error -71 [ 452.431678][ T5931] usb 2-1: USB disconnect, device number 76 [ 452.512776][T22025] loop2: detected capacity change from 0 to 7 [ 452.520308][T22025] Dev loop2: unable to read RDB block 7 [ 452.527820][T22025] loop2: AHDI p2 p3 [ 452.531858][T22025] loop2: partition table partially beyond EOD, truncated [ 452.539146][T22025] loop2: p3 start 335544320 is beyond EOD, truncated [ 452.791020][T22044] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 452.818048][T10338] ucan 7-1:0.0 can0: registered device [ 452.900960][T22050] netlink: 'syz.7.6460': attribute type 1 has an invalid length. [ 452.917209][ T5931] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 452.964732][T22050] bond1: entered promiscuous mode [ 452.975093][T22050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.002726][T22054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.012531][T10338] ucan 7-1:0.0 can0: firmware string: – [ 453.020062][T22054] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 453.038540][T22054] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 453.081062][T22054] bond1: (slave wireguard0): making interface the new active one [ 453.093602][ T5931] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 453.105022][T22054] wireguard0: entered promiscuous mode [ 453.115428][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.122027][T22054] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 453.126890][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.126919][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 453.127866][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.172041][ T5931] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 453.182047][ T5931] usb 4-1: Manufacturer: syz [ 453.215479][ T5931] usb 4-1: config 0 descriptor?? [ 453.221883][ T5900] usb 7-1: USB disconnect, device number 28 [ 453.615015][ T5931] appleir 0003:05AC:8243.0060: unknown main item tag 0x0 [ 453.651275][ T5931] appleir 0003:05AC:8243.0060: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 453.678398][T22069] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.6468'. [ 453.750601][ T5931] IPVS: starting estimator thread 0... [ 453.797663][T16414] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.850666][T22075] IPVS: using max 43 ests per chain, 103200 per kthread [ 453.923614][T10338] usb 4-1: USB disconnect, device number 11 [ 453.969833][T16414] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.007416][T22086] syzkaller1: entered promiscuous mode [ 454.015392][T22086] syzkaller1: entered allmulticast mode [ 454.017690][T22090] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6477'. [ 454.058035][T22090] netlink: 'syz.9.6477': attribute type 2 has an invalid length. [ 454.067900][T22090] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6477'. [ 454.070219][T16414] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.150065][T16414] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.369632][T16414] bridge_slave_1: left promiscuous mode [ 454.378454][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.394292][T16414] bridge_slave_0: left allmulticast mode [ 454.401419][T16414] bridge_slave_0: left promiscuous mode [ 454.431257][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.767029][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6496'. [ 454.845623][T16414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.855658][T16414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.867557][T16414] bond0 (unregistering): Released all slaves [ 454.998898][T16414] bond1 (unregistering): Released all slaves [ 455.013434][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 455.013452][ T30] audit: type=1400 audit(1768055923.731:1109): avc: denied { relabelfrom } for pid=22113 comm="syz.1.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 455.063681][ T30] audit: type=1400 audit(1768055923.731:1110): avc: denied { relabelto } for pid=22113 comm="syz.1.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 455.131946][T16414] tipc: Disabling bearer [ 455.152845][T16414] tipc: Disabling bearer [ 455.161430][T16414] tipc: Left network mode [ 455.440727][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 455.508910][T16414] hsr_slave_0: left promiscuous mode [ 455.527011][T16414] hsr_slave_1: left promiscuous mode [ 455.533019][T16414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.550119][T16414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.561909][T16414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.571912][T22159] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6507'. [ 455.596640][T16414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.618102][ T9] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 455.629966][T16414] dummy0: left allmulticast mode [ 455.640045][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 455.640184][T16414] veth1_macvtap: left allmulticast mode [ 455.662953][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 455.674681][T16414] veth1_macvtap: left promiscuous mode [ 455.686729][T16414] veth0_macvtap: left promiscuous mode [ 455.692509][ T5900] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 455.693246][T16414] veth1_vlan: left promiscuous mode [ 455.702054][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.705596][T16414] veth0_vlan: left promiscuous mode [ 455.725546][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 455.743715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 455.761781][ T9] usb 4-1: Product: syz [ 455.777017][ T9] usb 4-1: Manufacturer: syz [ 455.789835][ T9] usb 4-1: SerialNumber: syz [ 455.799126][ T9] usb 4-1: config 0 descriptor?? [ 455.804922][T22143] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 455.816131][ T9] usb 4-1: selecting invalid altsetting 0 [ 455.888447][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 455.895206][ T5900] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 455.916185][ T5900] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.936273][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.960675][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.981014][ T5900] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.996607][ T5900] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.021559][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.105988][T22143] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 456.247402][ T5900] usb 2-1: usb_control_msg returned -32 [ 456.263121][ T5900] usbtmc 2-1:16.0: can't read capabilities [ 456.291406][ T5900] usb 2-1: USB disconnect, device number 77 [ 456.574935][T16414] team0 (unregistering): Port device team_slave_1 removed [ 456.631912][T16414] team0 (unregistering): Port device team_slave_0 removed [ 457.195715][ T5828] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 457.571444][T22183] ªªªªªª: renamed from wg2 [ 457.689330][ T11] block nbd0: Possible stuck request ffff888026ee8000: control (read@0,1024B). Runtime 240 seconds [ 457.701805][ T11] block nbd0: Possible stuck request ffff888026ee8200: control (read@1024,1024B). Runtime 240 seconds [ 457.712941][ T11] block nbd0: Possible stuck request ffff888026ee8400: control (read@2048,1024B). Runtime 240 seconds [ 457.725068][ T11] block nbd0: Possible stuck request ffff888026ee8600: control (read@3072,1024B). Runtime 240 seconds [ 458.132472][ T5811] usb 4-1: USB disconnect, device number 12 [ 458.461375][T16414] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.496181][T16414] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.706616][T22230] loop7: detected capacity change from 0 to 1 [ 458.720712][T16414] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.740697][T16414] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.766113][T22230] Dev loop7: unable to read RDB block 1 [ 458.782791][T22230] loop7: unable to read partition table [ 458.798073][T22230] loop7: partition table beyond EOD, truncated [ 458.821319][T22230] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 458.932674][T16414] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.945119][T16414] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.019957][ T30] audit: type=1400 audit(1768055927.941:1111): avc: denied { read } for pid=22242 comm="syz.9.6545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.052804][ T5828] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 459.103204][T16414] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.157294][T16414] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.202897][ T5931] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 459.376180][T16414] bridge_slave_1: left allmulticast mode [ 459.403996][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 459.413616][ T5931] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 459.415131][T16414] bridge_slave_1: left promiscuous mode [ 459.433915][ T5931] usb 4-1: config 0 has no interface number 0 [ 459.440551][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.455050][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.460015][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 459.502122][T16414] bridge_slave_0: left allmulticast mode [ 459.508076][ T5931] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.508110][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.508151][ T5931] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 459.508174][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.547717][ T5931] usb 4-1: config 0 descriptor?? [ 459.579999][ T5931] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.634301][T16414] bridge_slave_0: left promiscuous mode [ 459.651505][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.179745][T16414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.191884][T16414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.202204][T16414] bond0 (unregistering): Released all slaves [ 460.224145][T22267] team_slave_0: entered promiscuous mode [ 460.230743][T22267] team_slave_1: entered promiscuous mode [ 460.244863][T22267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.318533][ T5811] usb 4-1: USB disconnect, device number 13 [ 460.326434][T22268] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 460.332639][ T5811] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 460.786608][T16414] hsr_slave_0: left promiscuous mode [ 460.808486][T16414] hsr_slave_1: left promiscuous mode [ 460.835858][T16414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.861717][T16414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.913045][T16414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.957129][T16414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.004866][T16414] batman_adv: batadv0: Removing interface: vlan0 [ 461.084296][T16414] veth1_macvtap: left promiscuous mode [ 461.112448][T16414] veth0_macvtap: left promiscuous mode [ 461.134471][T16414] veth1_vlan: left promiscuous mode [ 461.156082][T16414] veth0_vlan: left promiscuous mode [ 461.254434][T22317] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.6575'. [ 462.040035][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6586'. [ 462.406626][T16414] team0 (unregistering): Port device team_slave_1 removed [ 462.425625][ T30] audit: type=1326 audit(1768055931.521:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.450801][ T30] audit: type=1326 audit(1768055931.531:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.477832][ T30] audit: type=1326 audit(1768055931.563:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05f418f783 code=0x7ffc0000 [ 462.503011][ T30] audit: type=1326 audit(1768055931.563:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05f418f783 code=0x7ffc0000 [ 462.526670][ T30] audit: type=1326 audit(1768055931.563:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.528021][T16414] team0 (unregistering): Port device team_slave_0 removed [ 462.551992][ T30] audit: type=1326 audit(1768055931.563:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.592466][ T30] audit: type=1326 audit(1768055931.584:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.616334][ T30] audit: type=1326 audit(1768055931.584:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.640152][ T30] audit: type=1326 audit(1768055931.584:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.664099][ T30] audit: type=1326 audit(1768055931.584:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.1.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 462.932717][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 462.943688][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 462.953137][ T5828] Bluetooth: hci3: hardware error 0x00 [ 463.126298][T22362] team_slave_1: entered allmulticast mode [ 463.138024][T22361] team_slave_1: left allmulticast mode [ 463.230710][T22367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.238034][T22367] IPv6: NLM_F_CREATE should be set when creating new route [ 464.996492][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 465.189510][T22438] tipc: Enabling of bearer rejected, failed to enable media [ 465.305024][T22448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input83 [ 465.975601][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6651'. [ 466.433297][T22504] Invalid source name [ 466.437327][T22504] UBIFS error (pid: 22504): cannot open "./file0", error -22 [ 466.445865][T22508] input input84: cannot allocate more than FF_MAX_EFFECTS effects [ 466.505664][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6663'. [ 466.533667][ T5931] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 466.635227][ T5900] kernel write not supported for file /ppp (pid: 5900 comm: kworker/0:5) [ 466.680319][ T5931] usb 10-1: Using ep0 maxpacket: 16 [ 466.691985][ T5931] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 466.709085][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.717268][ T5931] usb 10-1: Product: syz [ 466.722340][ T5931] usb 10-1: Manufacturer: syz [ 466.729407][ T5931] usb 10-1: SerialNumber: syz [ 467.125360][ T5931] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.330783][ T5931] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 467.520863][T22500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.532109][T22500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.541800][ T5900] usb 10-1: USB disconnect, device number 8 [ 467.925945][T22564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6687'. [ 467.941205][T22564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6687'. [ 468.068048][T22574] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6692'. [ 468.274688][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 468.274705][ T30] audit: type=1400 audit(1768055937.652:1155): avc: denied { mounton } for pid=22589 comm="syz.6.6700" path="/712/file0" dev="configfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.356801][ T30] audit: type=1400 audit(1768055937.662:1156): avc: denied { read } for pid=22589 comm="syz.6.6700" name="/" dev="configfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.442846][ T30] audit: type=1400 audit(1768055937.662:1157): avc: denied { read } for pid=22589 comm="syz.6.6700" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.477931][ T30] audit: type=1400 audit(1768055937.662:1158): avc: denied { open } for pid=22589 comm="syz.6.6700" path="/712/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.528431][ T30] audit: type=1400 audit(1768055937.662:1159): avc: denied { read } for pid=22589 comm="syz.6.6700" name="/" dev="configfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.671895][ T30] audit: type=1400 audit(1768055937.662:1160): avc: denied { read } for pid=22589 comm="syz.6.6700" name="/" dev="configfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 468.739960][ T30] audit: type=1400 audit(1768055937.715:1161): avc: denied { unmount } for pid=12515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 468.952985][T22626] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6714'. [ 469.063781][T22633] gfs2: not a GFS2 filesystem [ 469.432916][ T5931] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 469.490079][ T5900] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 469.577823][ T5931] usb 4-1: config 4 has an invalid interface number: 3 but max is 0 [ 469.586897][ T5931] usb 4-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 469.597505][ T5931] usb 4-1: config 4 has no interface number 0 [ 469.604225][ T5931] usb 4-1: config 4 interface 3 has no altsetting 0 [ 469.610945][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c [ 469.620885][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.653825][ T5900] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 469.663986][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.674816][ T5900] usb 2-1: config 0 descriptor?? [ 469.684457][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 469.833354][ T5931] apple-mfi-fastcharge 4-1: string descriptor 0 read error: -71 [ 469.842071][ T5931] usb-storage 4-1:4.3: USB Mass Storage device detected [ 469.852600][ T5931] usb-storage 4-1:4.3: Quirks match for vid 05ac pid 1204: 90 [ 469.877652][ T5900] gp8psk: usb in 128 operation failed. [ 469.916658][ T5931] apple-mfi-fastcharge 4-1: USB disconnect, device number 14 [ 470.032045][T22664] loop7: detected capacity change from 0 to 7 [ 470.040859][ C1] blk_print_req_error: 6 callbacks suppressed [ 470.040871][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.056624][ C1] buffer_io_error: 6 callbacks suppressed [ 470.056640][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.070383][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.080020][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.088114][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.089036][ T5900] gp8psk: usb in 146 operation failed. [ 470.097759][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.100370][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.105544][ T5900] gp8psk: failed to get FW version [ 470.111255][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.122351][ T5900] gp8psk: FPGA Version = 161 [ 470.127485][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.147885][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.158150][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.167790][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.175766][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.185395][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.193275][T22664] ldm_validate_partition_table(): Disk read failed. [ 470.201099][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.210716][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.218760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.228402][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.236394][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.246072][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.254215][T22664] Dev loop7: unable to read RDB block 0 [ 470.260424][T22664] loop7: unable to read partition table [ 470.266572][T22664] loop7: partition table beyond EOD, truncated [ 470.272892][T22664] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 470.313454][ T5900] gp8psk: usb in 138 operation failed. [ 470.326504][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 470.338906][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 470.354646][ T5900] usb 2-1: USB disconnect, device number 78 [ 470.604687][ T5811] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 470.758581][ T5811] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.768201][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.777698][ T5811] usb 4-1: config 0 descriptor?? [ 470.783940][ T5811] cp210x 4-1:0.0: cp210x converter detected [ 471.171341][ T5811] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 471.378443][ T5811] usb 4-1: cp210x converter now attached to ttyUSB0 [ 471.454948][T22690] block nbd9: shutting down sockets [ 471.576021][ T5930] usb 4-1: USB disconnect, device number 15 [ 471.585462][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.594719][ T5930] cp210x 4-1:0.0: device disconnected [ 472.318390][T22734] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6764'. [ 472.398815][T22740] netlink: 'syz.1.6767': attribute type 12 has an invalid length. [ 472.407384][T22740] netlink: 'syz.1.6767': attribute type 29 has an invalid length. [ 472.415386][T22740] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6767'. [ 472.426861][T22740] netlink: 'syz.1.6767': attribute type 1 has an invalid length. [ 472.434983][T22740] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6767'. [ 473.961833][ T5931] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 474.148043][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.168071][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.187397][ T5931] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 474.196748][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.225019][ T5931] usb 4-1: config 0 descriptor?? [ 474.343601][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6798'. [ 474.814736][ T5937] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 474.970803][ T5937] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.988262][ T5937] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.999604][ T5937] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.009353][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.018216][ T5937] usb 10-1: Product: syz [ 475.027282][ T5937] usb 10-1: Manufacturer: syz [ 475.032088][ T5937] usb 10-1: SerialNumber: syz [ 475.038325][ T5931] hid-led 0003:27B8:01ED.0061: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 475.068914][ T5931] hid-led 0003:27B8:01ED.0061: ThingM blink(1) initialized [ 475.190073][ T30] audit: type=1400 audit(1768055944.917:1162): avc: denied { ioctl } for pid=22843 comm="syz.7.6814" path="socket:[80867]" dev="sockfs" ino=80867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.224824][ T5931] usb 4-1: USB disconnect, device number 16 [ 475.446987][ T5937] usb 10-1: cannot find UAC_HEADER [ 475.478546][ T5937] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 475.498861][T22860] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6820'. [ 475.611635][T22867] netlink: 'syz.1.6823': attribute type 21 has an invalid length. [ 475.619630][T22867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6823'. [ 475.628777][T22867] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6823'. [ 475.643515][T22867] netlink: 'syz.1.6823': attribute type 21 has an invalid length. [ 475.651605][T22867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6823'. [ 475.659320][ T5930] usb 10-1: USB disconnect, device number 9 [ 475.662415][T22867] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6823'. [ 476.014852][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 476.167280][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 476.175592][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.188468][ T5930] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 476.198429][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.208994][ T5930] usb 4-1: config 0 descriptor?? [ 476.447711][T22886] syzkaller1: entered promiscuous mode [ 476.453667][T22886] syzkaller1: entered allmulticast mode [ 476.538861][ T30] audit: type=1326 audit(1768055946.323:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.539191][ T5987] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 476.574109][ T30] audit: type=1326 audit(1768055946.323:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.600385][ T30] audit: type=1326 audit(1768055946.365:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.626556][ T30] audit: type=1326 audit(1768055946.365:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.654638][ T5930] mcp2221 0003:04D8:00DD.0062: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 476.665600][ T30] audit: type=1326 audit(1768055946.365:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.689835][ T30] audit: type=1326 audit(1768055946.365:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.714302][ T30] audit: type=1326 audit(1768055946.365:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.739277][ T30] audit: type=1326 audit(1768055946.365:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.762762][ T5987] usb 10-1: Using ep0 maxpacket: 32 [ 476.768756][ T30] audit: type=1326 audit(1768055946.365:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22887 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f418f749 code=0x7ffc0000 [ 476.794209][ T5987] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 476.806521][ T5987] usb 10-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 476.816156][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.824265][ T5987] usb 10-1: Product: syz [ 476.828893][ T5987] usb 10-1: Manufacturer: syz [ 476.834333][ T5987] usb 10-1: SerialNumber: syz [ 476.845232][ T5987] usb 10-1: config 0 descriptor?? [ 476.850950][T22884] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 476.870528][ T5987] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.074579][T22884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.085568][ T5987] usb 4-1: USB disconnect, device number 17 [ 477.094287][T22884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.106148][ T5937] usb 10-1: USB disconnect, device number 10 [ 478.099997][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6852'. [ 478.121001][T22938] netlink: 'syz.6.6852': attribute type 5 has an invalid length. [ 478.434369][ T5869] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 478.515024][T22953] sch_tbf: burst 480 is lower than device lo mtu (1550) ! [ 478.617494][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.646107][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 478.679989][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 478.716759][ T5869] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 478.734913][ T5869] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.755685][ T5869] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.770959][ T5869] usb 7-1: Manufacturer: syz [ 478.786751][ T5869] usb 7-1: config 0 descriptor?? [ 478.873952][T22971] loop2: detected capacity change from 0 to 7 [ 478.904356][T22971] Dev loop2: unable to read RDB block 7 [ 478.909982][T22971] loop2: AHDI p1 p2 p3 p4 [ 478.926664][T22971] loop2: partition table partially beyond EOD, truncated [ 478.926751][T22971] loop2: p1 start 1601398130 is beyond EOD, truncated [ 478.926770][T22971] loop2: p2 start 1702059890 is beyond EOD, truncated [ 478.926787][T22971] loop2: p3 start 16777215 is beyond EOD, truncated [ 479.031966][T22976] 9p: Bad value for 'rfdno' [ 479.122727][ T5869] rc_core: IR keymap rc-hauppauge not found [ 479.132257][ T5869] Registered IR keymap rc-empty [ 479.138109][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.170852][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.216209][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 479.238185][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input85 [ 479.277742][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.310804][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.356560][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.398235][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.416741][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.445290][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.472982][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.504129][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.549385][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.588731][ T5869] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 479.601271][T23009] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6884'. [ 479.635834][ T5869] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 479.653129][ T5869] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 479.685084][ T5869] usb 7-1: USB disconnect, device number 29 [ 479.784771][T23011] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6885'. [ 479.929856][ T5987] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 480.093334][ T5987] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 480.120612][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.139909][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.158580][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 480.177658][ T5987] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 480.215836][ T5987] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 480.234335][ T5987] usb 2-1: Manufacturer: syz [ 480.242534][ T5987] usb 2-1: config 0 descriptor?? [ 480.290004][ T30] kauditd_printk_skb: 416 callbacks suppressed [ 480.290020][ T30] audit: type=1326 audit(1768056206.268:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23037 comm="syz.3.6897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effafd8f749 code=0x0 [ 480.379292][ T5869] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 480.534021][ T5869] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.544028][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.552255][ T5869] usb 10-1: Product: syz [ 480.556517][ T5869] usb 10-1: Manufacturer: syz [ 480.561239][ T5869] usb 10-1: SerialNumber: syz [ 480.643405][ T5987] appleir 0003:05AC:8243.0063: unknown main item tag 0x0 [ 480.655085][ T5987] appleir 0003:05AC:8243.0063: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 481.138966][ T5811] hid-generic 0005:0002:5508.0064: hidraw1: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 481.536490][ T5869] cdc_ncm 10-1:1.0: failed to get mac address [ 481.548409][ T5869] cdc_ncm 10-1:1.0: bind() failure [ 481.559120][ T5869] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 481.567613][ T5869] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 481.576607][ T5869] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 481.587727][ T5869] usb 10-1: USB disconnect, device number 11 [ 481.768106][ T5987] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 481.913811][ T5987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 481.923876][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 481.935758][ T5987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 481.947549][ T5987] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 481.956731][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.964963][ T5987] usb 4-1: Product: syz [ 481.969233][ T5987] usb 4-1: Manufacturer: syz [ 481.973816][ T5987] usb 4-1: SerialNumber: syz [ 481.980437][ T5987] usb 4-1: config 0 descriptor?? [ 481.987063][T23068] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 481.994707][T23068] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 482.003534][ T5987] usb 4-1: ucan: probing device on interface #0 [ 482.371547][T23080] input: syz1 as /devices/virtual/input/input86 [ 482.664965][ T5811] usb 2-1: USB disconnect, device number 79 [ 482.690383][ T5987] ucan 4-1:0.0 can0: registered device [ 482.734721][T23095] netlink: 400 bytes leftover after parsing attributes in process `syz.7.6922'. [ 482.792689][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6924'. [ 482.813270][ T5987] ucan 4-1:0.0 can0: firmware string: – [ 483.059446][ T5811] usb 4-1: USB disconnect, device number 18 [ 483.077313][T23116] netlink: 'syz.7.6931': attribute type 1 has an invalid length. [ 483.159553][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6918'. [ 483.504833][T23138] netlink: 'syz.1.6942': attribute type 32 has an invalid length. [ 483.525085][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6942'. [ 484.883519][ T5987] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 484.931186][ T5811] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 485.036844][ T5987] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 485.045670][ T5987] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 485.056154][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.064693][ T5987] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.073746][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.082768][ T5987] usb 2-1: Product: syz [ 485.087147][ T5987] usb 2-1: Manufacturer: syz [ 485.091758][ T5987] usb 2-1: SerialNumber: syz [ 485.098472][ T5987] usb 2-1: config 0 descriptor?? [ 485.106282][ T5811] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 485.117451][ T5987] hub 2-1:0.0: bad descriptor, ignoring hub [ 485.125154][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 485.134891][ T5987] hub 2-1:0.0: probe with driver hub failed with error -5 [ 485.144571][ T5811] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.155562][ T5987] usb 2-1: selecting invalid altsetting 0 [ 485.162482][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.178806][ T5811] usb 10-1: Product: syz [ 485.183106][ T5811] usb 10-1: Manufacturer: syz [ 485.187792][ T5811] usb 10-1: SerialNumber: syz [ 485.199285][ T5811] usb 10-1: config 0 descriptor?? [ 485.210541][ T5811] usb 10-1: selecting invalid altsetting 0 [ 485.264669][ T5937] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 485.428626][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 485.437941][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.449432][ T5937] usb 7-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 485.459662][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.469949][ T5937] usb 7-1: config 0 descriptor?? [ 485.478516][ T5811] usb 10-1: USB disconnect, device number 12 [ 485.830513][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6984'. [ 485.862982][ T5937] saitek 0003:0738:1705.0065: unknown main item tag 0x0 [ 485.870233][ T5937] saitek 0003:0738:1705.0065: unknown main item tag 0x0 [ 485.877423][ T5937] saitek 0003:0738:1705.0065: unknown main item tag 0x0 [ 485.885283][ T5937] saitek 0003:0738:1705.0065: unknown main item tag 0x0 [ 485.894055][ T5937] saitek 0003:0738:1705.0065: unknown main item tag 0x0 [ 485.903375][ T5937] saitek 0003:0738:1705.0065: hidraw0: USB HID v0.05 Device [HID 0738:1705] on usb-dummy_hcd.6-1/input0 [ 485.967185][T23253] nvme_fabrics: missing parameter 'transport=%s' [ 485.974493][T23253] nvme_fabrics: missing parameter 'nqn=%s' [ 485.997654][T23187] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 486.055079][ T5867] usb 7-1: USB disconnect, device number 30 [ 486.331791][ T11] block nbd0: Possible stuck request ffff888026ee8000: control (read@0,1024B). Runtime 270 seconds [ 486.342609][ T11] block nbd0: Possible stuck request ffff888026ee8200: control (read@1024,1024B). Runtime 270 seconds [ 486.354080][ T11] block nbd0: Possible stuck request ffff888026ee8400: control (read@2048,1024B). Runtime 270 seconds [ 486.364216][T23187] usb 2-1: failed to restore interface 0 altsetting 251 (error=-71) [ 486.365094][ T11] block nbd0: Possible stuck request ffff888026ee8600: control (read@3072,1024B). Runtime 270 seconds [ 486.394690][ T5930] usb 2-1: USB disconnect, device number 80 [ 486.425432][T23270] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6992'. [ 486.721517][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 486.729971][T23286] o2cb: This node has not been configured. [ 486.736273][T23286] o2cb: Cluster check failed. Fix errors before retrying. [ 486.743573][T23286] (syz.6.7000,23286,1):user_dlm_register:674 ERROR: status = -22 [ 486.752681][T23286] (syz.6.7000,23286,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 486.795542][T23288] syzkaller1: entered promiscuous mode [ 486.801981][T23288] syzkaller1: entered allmulticast mode [ 486.893097][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 486.900006][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.922846][T23290] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7002'. [ 486.931847][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 486.931875][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.933754][ T5867] usb 4-1: config 0 descriptor?? [ 486.946638][T23290] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7002'. [ 487.056107][ T30] audit: type=1326 audit(1768056213.375:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.6.7005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3253f8f749 code=0x0 [ 487.097255][T23298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7006'. [ 487.207438][ T5930] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 487.295974][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7011'. [ 487.357894][ T5867] mcp2221 0003:04D8:00DD.0066: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 487.399151][ T5930] usb 10-1: Using ep0 maxpacket: 16 [ 487.407005][ T5930] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.418524][ T5930] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.428879][ T5930] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 487.440493][T23315] 9pnet: p9_errstr2errno: server reported unknown error [ 487.440794][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.593811][ T5937] usb 4-1: USB disconnect, device number 19 [ 487.860218][ T5930] mcp2221 0003:04D8:00DD.0067: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 488.081213][ T5930] usb 10-1: USB disconnect, device number 13 [ 488.983354][T23392] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7049'. [ 489.017593][ T5987] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 489.179104][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 489.196430][ T5987] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 489.218461][ T5987] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.240429][ T5987] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.250551][ T5987] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 489.260304][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.270724][ T5987] usb 4-1: config 0 descriptor?? [ 489.690254][ T5987] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0068/input/input87 [ 489.723033][ T5987] uclogic 0003:28BD:0933.0068: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 489.898360][T23442] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7068'. [ 490.048054][ T5811] usb 4-1: USB disconnect, device number 20 [ 490.489635][T23453] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7072'. [ 490.592295][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.601391][ T5869] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 491.698229][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7096'. [ 491.781058][ T5869] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 491.801442][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.829180][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.852976][T23511] erspan0: entered promiscuous mode [ 491.869524][ T5869] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 491.874584][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7099'. [ 491.895318][ T5869] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 491.904524][ T5869] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 491.912605][ T5869] usb 7-1: Manufacturer: syz [ 491.925990][ T5869] usb 7-1: config 0 descriptor?? [ 492.335865][ T5869] appleir 0003:05AC:8243.0069: unknown main item tag 0x0 [ 492.365624][ T5869] appleir 0003:05AC:8243.0069: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 492.592841][ T5869] usb 7-1: USB disconnect, device number 31 [ 492.761987][T23513] team0 (unregistering): Port device team_slave_0 removed [ 492.772548][T23513] team0 (unregistering): Port device team_slave_1 removed [ 492.962308][T23537] tap0: tun_chr_ioctl cmd 1074025675 [ 492.977632][T23537] tap0: persist enabled [ 492.983400][T23537] tap0: tun_chr_ioctl cmd 1074025675 [ 492.998880][T23537] tap0: persist enabled [ 493.227878][T23545] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 493.234427][T23545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.242889][T23545] vhci_hcd vhci_hcd.0: Device attached [ 493.251503][T23545] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 493.258030][T23545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.266570][T23545] vhci_hcd vhci_hcd.0: Device attached [ 493.275714][T23545] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 493.282237][T23545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.307345][T23545] vhci_hcd vhci_hcd.0: Device attached [ 493.319755][T23545] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 493.326394][T23545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.346862][T23545] vhci_hcd vhci_hcd.0: Device attached [ 493.359065][T23547] vhci_hcd: connection closed [ 493.359137][T23554] vhci_hcd: connection closed [ 493.359486][T23552] vhci_hcd: connection closed [ 493.368943][ T36] vhci_hcd vhci_hcd.6: stop threads [ 493.369963][T23550] vhci_hcd: connection closed [ 493.384158][ T36] vhci_hcd vhci_hcd.6: release socket [ 493.420177][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 493.433583][ T36] vhci_hcd vhci_hcd.6: stop threads [ 493.446833][ T36] vhci_hcd vhci_hcd.6: release socket [ 493.452446][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 493.466470][ T5867] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 493.474022][ T5867] usb 45-1: enqueue for inactive port 0 [ 493.482114][ T36] vhci_hcd vhci_hcd.6: stop threads [ 493.507253][ T36] vhci_hcd vhci_hcd.6: release socket [ 493.516627][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 493.527113][ T36] vhci_hcd vhci_hcd.6: stop threads [ 493.532354][ T36] vhci_hcd vhci_hcd.6: release socket [ 493.538260][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 493.591137][ T5867] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 493.953660][T23587] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7130'. [ 494.113538][ T5869] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 494.155433][T23591] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7132'. [ 494.280492][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.296542][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.306765][ T5869] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 494.317844][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.352009][ T5869] usb 10-1: config 0 descriptor?? [ 494.763542][ T5869] isku 0003:1E7D:319C.006A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 494.953330][T23620] all (unregistering): Released all slaves [ 494.985219][T23622] IPVS: Error connecting to the multicast addr [ 495.109161][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7149'. [ 495.181304][ T5869] usb 10-1: USB disconnect, device number 14 [ 495.269071][T23637] IPVS: Scheduler module ip_vs_sip not found [ 495.286408][T23637] IPVS: length: 141 != 8 [ 495.360815][ T30] audit: type=1326 audit(1768056222.088:1590): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23643 comm="syz.3.7155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effafd8f749 code=0x0 [ 495.647570][ T5869] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 495.812480][ T5869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 495.825819][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.847894][ T5869] usb 2-1: Product: syz [ 495.852124][ T5869] usb 2-1: Manufacturer: syz [ 495.861569][ T5869] usb 2-1: SerialNumber: syz [ 495.871611][ T5869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 495.890312][ T5930] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 496.195621][T23646] random: crng reseeded on system resumption [ 496.213288][ T5811] usb 2-1: USB disconnect, device number 81 [ 496.571008][ T5987] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 496.739682][ T5987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 496.760283][ T5987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 496.796399][ T5987] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 496.813593][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.822183][ T5987] usb 4-1: Product: syz [ 496.826381][ T5987] usb 4-1: Manufacturer: syz [ 496.833228][ T5987] usb 4-1: SerialNumber: syz [ 496.840729][ T5987] usb 4-1: config 0 descriptor?? [ 496.871935][T23694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.905126][T23694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.913975][ T5930] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 496.921021][ T5930] ath9k_htc: Failed to initialize the device [ 496.947208][ T5811] usb 2-1: ath9k_htc: USB layer deinitialized [ 497.084214][T23716] kvm: user requested TSC rate below hardware speed [ 497.135933][T23694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.162119][T23694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.522674][ T5931] hid-generic 0005:0002:5508.006B: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 497.543083][ T5869] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 497.596548][ T5987] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 497.695358][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 497.706926][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.723969][ T5869] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 497.733036][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.764138][ T5869] usb 2-1: config 0 descriptor?? [ 497.987461][ T5987] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 498.008117][ T5987] usb 4-1: USB disconnect, device number 21 [ 498.188201][ T5869] mcp2221 0003:04D8:00DD.006C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 498.355795][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7212'. [ 498.415001][ T5869] usb 2-1: USB disconnect, device number 82 [ 498.581041][ T5931] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 498.735881][ T5931] usb 10-1: Using ep0 maxpacket: 16 [ 498.757859][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.785748][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.800474][T23786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7216'. [ 498.809636][ T5931] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.826545][ T5931] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.836367][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.847207][ T5931] usb 10-1: config 0 descriptor?? [ 498.879611][T23785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.251552][ T5931] HID 045e:07da: Invalid code 65791 type 1 [ 499.280461][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.006D/input/input88 [ 499.330544][ T5931] microsoft 0003:045E:07DA.006D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 499.402540][ T30] audit: type=1400 audit(1768056226.340:1591): avc: denied { mounton } for pid=23816 comm="syz.1.7233" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 499.571139][ T5930] usb 10-1: USB disconnect, device number 15 [ 499.655799][ T30] audit: type=1400 audit(1768056226.592:1592): avc: denied { mounton } for pid=23833 comm="syz.7.7239" path="/247/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 499.683346][T23835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 499.857399][ T5869] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 500.001731][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.012331][ T5869] usb 2-1: config 0 has no interfaces? [ 500.018598][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 500.027884][ T5869] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 500.035986][ T5869] usb 2-1: Manufacturer: syz [ 500.042019][ T5869] usb 2-1: config 0 descriptor?? [ 500.272889][ T5931] usb 2-1: USB disconnect, device number 83 [ 500.336491][T23864] TCP: TCP_TX_DELAY enabled [ 500.850865][T23891] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 500.889401][ T30] audit: type=1400 audit(1768056227.894:1593): avc: denied { append } for pid=23893 comm="syz.1.7266" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.918240][T23894] [ 500.920587][T23894] ===================================================== [ 500.927515][T23894] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 500.934968][T23894] syzkaller #0 Tainted: G L [ 500.940945][T23894] ----------------------------------------------------- [ 500.947867][T23894] syz.1.7266/23894 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 500.955585][T23894] ffff8880580058a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 500.964387][T23894] [ 500.964387][T23894] and this task is already holding: [ 500.971752][T23894] ffff88802c3f8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 500.981518][T23894] which would create a new lock dependency: [ 500.987412][T23894] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 500.995354][T23894] [ 500.995354][T23894] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 501.004804][T23894] (&dev->event_lock#2){..-.}-{3:3} [ 501.004843][T23894] [ 501.004843][T23894] ... which became SOFTIRQ-irq-safe at: [ 501.017729][T23894] lock_acquire+0x179/0x330 [ 501.022331][T23894] _raw_spin_lock_irqsave+0x3a/0x60 [ 501.027619][T23894] input_inject_event+0x9f/0x3b0 [ 501.032634][T23894] led_set_brightness+0x217/0x290 [ 501.037731][T23894] led_trigger_event+0xda/0x270 [ 501.042906][T23894] kbd_bh+0x247/0x330 [ 501.046954][T23894] tasklet_action_common+0x254/0x3f0 [ 501.052305][T23894] handle_softirqs+0x219/0x950 [ 501.057134][T23894] __irq_exit_rcu+0x109/0x170 [ 501.061876][T23894] irq_exit_rcu+0x9/0x30 [ 501.066184][T23894] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 501.071968][T23894] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.078006][T23894] _raw_spin_unlock_irqrestore+0x31/0x80 [ 501.083704][T23894] setledstate+0x119/0x150 [ 501.088184][T23894] vt_do_kdskled+0x87/0x3a0 [ 501.092760][T23894] vt_ioctl+0xb5d/0x30a0 [ 501.097177][T23894] tty_ioctl+0x661/0x1650 [ 501.101582][T23894] __x64_sys_ioctl+0x18e/0x210 [ 501.106415][T23894] do_syscall_64+0xcd/0xf80 [ 501.110996][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.116972][T23894] [ 501.116972][T23894] to a SOFTIRQ-irq-unsafe lock: [ 501.123973][T23894] (tasklist_lock){.+.+}-{3:3} [ 501.124005][T23894] [ 501.124005][T23894] ... which became SOFTIRQ-irq-unsafe at: [ 501.136620][T23894] ... [ 501.136629][T23894] lock_acquire+0x179/0x330 [ 501.143765][T23894] _raw_read_lock+0x5f/0x70 [ 501.148342][T23894] __do_wait+0x105/0x890 [ 501.152649][T23894] do_wait+0x21d/0x570 [ 501.156793][T23894] kernel_wait+0x9f/0x160 [ 501.161190][T23894] call_usermodehelper_exec_work+0xf1/0x170 [ 501.167154][T23894] process_one_work+0x9ba/0x1b20 [ 501.172161][T23894] worker_thread+0x6c8/0xf10 [ 501.176839][T23894] kthread+0x3c5/0x780 [ 501.180978][T23894] ret_from_fork+0x983/0xb10 [ 501.185640][T23894] ret_from_fork_asm+0x1a/0x30 [ 501.190480][T23894] [ 501.190480][T23894] other info that might help us debug this: [ 501.190480][T23894] [ 501.200689][T23894] Chain exists of: [ 501.200689][T23894] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 501.200689][T23894] [ 501.213630][T23894] Possible interrupt unsafe locking scenario: [ 501.213630][T23894] [ 501.221924][T23894] CPU0 CPU1 [ 501.227265][T23894] ---- ---- [ 501.232608][T23894] lock(tasklist_lock); [ 501.236831][T23894] local_irq_disable(); [ 501.243559][T23894] lock(&dev->event_lock#2); [ 501.250736][T23894] lock(&new->fa_lock); [ 501.257475][T23894] [ 501.260907][T23894] lock(&dev->event_lock#2); [ 501.265742][T23894] [ 501.265742][T23894] *** DEADLOCK *** [ 501.265742][T23894] [ 501.273859][T23894] 6 locks held by syz.1.7266/23894: [ 501.279035][T23894] #0: ffff88802c3fe118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 501.288164][T23894] #1: ffff88802c3f8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 501.298241][T23894] #2: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 501.307912][T23894] #3: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 501.317547][T23894] #4: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x32/0xa30 [ 501.327615][T23894] #5: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 501.336642][T23894] [ 501.336642][T23894] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 501.347025][T23894] -> (&dev->event_lock#2){..-.}-{3:3} { [ 501.352566][T23894] IN-SOFTIRQ-W at: [ 501.356522][T23894] lock_acquire+0x179/0x330 [ 501.362665][T23894] _raw_spin_lock_irqsave+0x3a/0x60 [ 501.369503][T23894] input_inject_event+0x9f/0x3b0 [ 501.376087][T23894] led_set_brightness+0x217/0x290 [ 501.382739][T23894] led_trigger_event+0xda/0x270 [ 501.389222][T23894] kbd_bh+0x247/0x330 [ 501.394924][T23894] tasklet_action_common+0x254/0x3f0 [ 501.401849][T23894] handle_softirqs+0x219/0x950 [ 501.408259][T23894] __irq_exit_rcu+0x109/0x170 [ 501.414571][T23894] irq_exit_rcu+0x9/0x30 [ 501.420450][T23894] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 501.427717][T23894] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.435324][T23894] _raw_spin_unlock_irqrestore+0x31/0x80 [ 501.442592][T23894] setledstate+0x119/0x150 [ 501.448641][T23894] vt_do_kdskled+0x87/0x3a0 [ 501.454776][T23894] vt_ioctl+0xb5d/0x30a0 [ 501.460654][T23894] tty_ioctl+0x661/0x1650 [ 501.466613][T23894] __x64_sys_ioctl+0x18e/0x210 [ 501.473008][T23894] do_syscall_64+0xcd/0xf80 [ 501.479154][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.486678][T23894] INITIAL USE at: [ 501.490553][T23894] lock_acquire+0x179/0x330 [ 501.496601][T23894] _raw_spin_lock_irqsave+0x3a/0x60 [ 501.503350][T23894] input_inject_event+0x9f/0x3b0 [ 501.509832][T23894] led_set_brightness+0x217/0x290 [ 501.516398][T23894] kbd_led_trigger_activate+0xcb/0x110 [ 501.523402][T23894] led_trigger_set+0x59a/0xc50 [ 501.529710][T23894] led_trigger_set_default+0x1e0/0x2e0 [ 501.536716][T23894] led_classdev_register_ext+0x71d/0xa30 [ 501.543890][T23894] input_leds_connect+0x552/0x8e0 [ 501.550464][T23894] input_attach_handler.isra.0+0x176/0x250 [ 501.557814][T23894] input_register_device+0xab9/0x11b0 [ 501.564728][T23894] atkbd_connect+0x5f8/0xa60 [ 501.570866][T23894] serio_driver_probe+0x7f/0xd0 [ 501.577258][T23894] really_probe+0x241/0xb20 [ 501.583311][T23894] __driver_probe_device+0x1de/0x470 [ 501.590228][T23894] driver_probe_device+0x4c/0x1b0 [ 501.596798][T23894] __driver_attach+0x283/0x5e0 [ 501.603105][T23894] bus_for_each_dev+0x13e/0x1d0 [ 501.609506][T23894] serio_handle_event+0x281/0xb30 [ 501.616073][T23894] process_one_work+0x9ba/0x1b20 [ 501.622573][T23894] worker_thread+0x6c8/0xf10 [ 501.628710][T23894] kthread+0x3c5/0x780 [ 501.634332][T23894] ret_from_fork+0x983/0xb10 [ 501.640475][T23894] ret_from_fork_asm+0x1a/0x30 [ 501.647140][T23894] } [ 501.649620][T23894] ... key at: [] __key.7+0x0/0x40 [ 501.656731][T23894] [ 501.656731][T23894] the dependencies between the lock to be acquired [ 501.656742][T23894] and SOFTIRQ-irq-unsafe lock: [ 501.670234][T23894] -> (tasklist_lock){.+.+}-{3:3} { [ 501.675526][T23894] HARDIRQ-ON-R at: [ 501.679659][T23894] lock_acquire+0x179/0x330 [ 501.686149][T23894] _raw_read_lock+0x5f/0x70 [ 501.692648][T23894] __do_wait+0x105/0x890 [ 501.698880][T23894] do_wait+0x21d/0x570 [ 501.704927][T23894] kernel_wait+0x9f/0x160 [ 501.711336][T23894] call_usermodehelper_exec_work+0xf1/0x170 [ 501.719222][T23894] process_one_work+0x9ba/0x1b20 [ 501.726167][T23894] worker_thread+0x6c8/0xf10 [ 501.732741][T23894] kthread+0x3c5/0x780 [ 501.738794][T23894] ret_from_fork+0x983/0xb10 [ 501.745373][T23894] ret_from_fork_asm+0x1a/0x30 [ 501.752125][T23894] SOFTIRQ-ON-R at: [ 501.756260][T23894] lock_acquire+0x179/0x330 [ 501.762742][T23894] _raw_read_lock+0x5f/0x70 [ 501.769238][T23894] __do_wait+0x105/0x890 [ 501.775470][T23894] do_wait+0x21d/0x570 [ 501.781518][T23894] kernel_wait+0x9f/0x160 [ 501.787831][T23894] call_usermodehelper_exec_work+0xf1/0x170 [ 501.795707][T23894] process_one_work+0x9ba/0x1b20 [ 501.802626][T23894] worker_thread+0x6c8/0xf10 [ 501.809201][T23894] kthread+0x3c5/0x780 [ 501.815259][T23894] ret_from_fork+0x983/0xb10 [ 501.821844][T23894] ret_from_fork_asm+0x1a/0x30 [ 501.828602][T23894] INITIAL USE at: [ 501.832662][T23894] lock_acquire+0x179/0x330 [ 501.839064][T23894] _raw_write_lock_irq+0x36/0x50 [ 501.845912][T23894] copy_process+0x4668/0x7430 [ 501.852510][T23894] kernel_clone+0xfc/0x910 [ 501.858832][T23894] user_mode_thread+0xc8/0x110 [ 501.865505][T23894] rest_init+0x23/0x2b0 [ 501.871568][T23894] start_kernel+0x3ef/0x4d0 [ 501.877971][T23894] x86_64_start_reservations+0x18/0x30 [ 501.885345][T23894] x86_64_start_kernel+0x130/0x190 [ 501.892351][T23894] common_startup_64+0x13e/0x148 [ 501.899192][T23894] INITIAL READ USE at: [ 501.903673][T23894] lock_acquire+0x179/0x330 [ 501.910515][T23894] _raw_read_lock+0x5f/0x70 [ 501.917362][T23894] __do_wait+0x105/0x890 [ 501.923949][T23894] do_wait+0x21d/0x570 [ 501.930356][T23894] kernel_wait+0x9f/0x160 [ 501.937015][T23894] call_usermodehelper_exec_work+0xf1/0x170 [ 501.945245][T23894] process_one_work+0x9ba/0x1b20 [ 501.952689][T23894] worker_thread+0x6c8/0xf10 [ 501.959611][T23894] kthread+0x3c5/0x780 [ 501.966009][T23894] ret_from_fork+0x983/0xb10 [ 501.973017][T23894] ret_from_fork_asm+0x1a/0x30 [ 501.980212][T23894] } [ 501.982869][T23894] ... key at: [] tasklist_lock+0x18/0x40 [ 501.990774][T23894] ... acquired at: [ 501.994822][T23894] _raw_read_lock+0x5f/0x70 [ 501.999489][T23894] send_sigurg+0xed/0xc80 [ 502.003989][T23894] sk_send_sigurg+0x76/0x360 [ 502.008735][T23894] unix_stream_sendmsg+0xfa3/0x1320 [ 502.014082][T23894] ____sys_sendmsg+0xa5d/0xc30 [ 502.019004][T23894] ___sys_sendmsg+0x134/0x1d0 [ 502.023834][T23894] __sys_sendmsg+0x16d/0x220 [ 502.028576][T23894] do_syscall_64+0xcd/0xf80 [ 502.033243][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.039287][T23894] [ 502.041593][T23894] -> (&f_owner->lock){....}-{3:3} { [ 502.046888][T23894] INITIAL USE at: [ 502.050931][T23894] lock_acquire+0x179/0x330 [ 502.057161][T23894] _raw_write_lock_irq+0x36/0x50 [ 502.063822][T23894] __f_setown+0x61/0x3c0 [ 502.069779][T23894] generic_setlease+0xed4/0x1280 [ 502.076525][T23894] kernel_setlease+0x106/0x140 [ 502.083018][T23894] vfs_setlease+0x1e8/0x280 [ 502.089244][T23894] do_fcntl_add_lease+0x3c4/0x550 [ 502.095995][T23894] fcntl_setlease+0xfc/0x180 [ 502.102307][T23894] do_fcntl+0x153b/0x1660 [ 502.108355][T23894] __x64_sys_fcntl+0x163/0x200 [ 502.114833][T23894] do_syscall_64+0xcd/0xf80 [ 502.121144][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.128752][T23894] INITIAL READ USE at: [ 502.133233][T23894] lock_acquire+0x179/0x330 [ 502.139888][T23894] _raw_read_lock_irqsave+0x74/0x90 [ 502.147238][T23894] send_sigurg+0x5f/0xc80 [ 502.153716][T23894] sk_send_sigurg+0x76/0x360 [ 502.160553][T23894] unix_stream_sendmsg+0xfa3/0x1320 [ 502.167911][T23894] ____sys_sendmsg+0xa5d/0xc30 [ 502.174839][T23894] ___sys_sendmsg+0x134/0x1d0 [ 502.181681][T23894] __sys_sendmmsg+0x200/0x420 [ 502.188523][T23894] __x64_sys_sendmmsg+0x9c/0x100 [ 502.195624][T23894] do_syscall_64+0xcd/0xf80 [ 502.202297][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.210354][T23894] } [ 502.212928][T23894] ... key at: [] __key.1+0x0/0x40 [ 502.220126][T23894] ... acquired at: [ 502.223995][T23894] _raw_read_lock_irqsave+0x74/0x90 [ 502.229353][T23894] send_sigio+0x31/0x3e0 [ 502.233752][T23894] kill_fasync+0x214/0x510 [ 502.238322][T23894] sock_wake_async+0x132/0x160 [ 502.243241][T23894] unix_release_sock+0xb97/0x1460 [ 502.248426][T23894] unix_release+0x91/0xf0 [ 502.252916][T23894] __sock_release+0xb3/0x270 [ 502.257660][T23894] sock_close+0x1c/0x30 [ 502.261974][T23894] __fput+0x402/0xb70 [ 502.266109][T23894] task_work_run+0x150/0x240 [ 502.270856][T23894] exit_to_user_mode_loop+0xfb/0x540 [ 502.276306][T23894] do_syscall_64+0x4ee/0xf80 [ 502.281055][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.287104][T23894] [ 502.289404][T23894] -> (&new->fa_lock){....}-{3:3} { [ 502.294511][T23894] INITIAL USE at: [ 502.298383][T23894] lock_acquire+0x179/0x330 [ 502.304430][T23894] _raw_write_lock_irq+0x36/0x50 [ 502.310919][T23894] fasync_remove_entry+0xb2/0x1e0 [ 502.317487][T23894] fasync_helper+0xaf/0xd0 [ 502.323536][T23894] lease_modify+0x232/0x500 [ 502.329588][T23894] locks_remove_file+0x29e/0x5c0 [ 502.336074][T23894] __fput+0x351/0xb70 [ 502.341594][T23894] task_work_run+0x150/0x240 [ 502.347732][T23894] exit_to_user_mode_loop+0xfb/0x540 [ 502.354572][T23894] do_syscall_64+0x4ee/0xf80 [ 502.360800][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.368234][T23894] INITIAL READ USE at: [ 502.372720][T23894] lock_acquire+0x179/0x330 [ 502.379206][T23894] _raw_read_lock_irqsave+0x74/0x90 [ 502.386383][T23894] kill_fasync+0x138/0x510 [ 502.392775][T23894] sock_wake_async+0x132/0x160 [ 502.399518][T23894] unix_release_sock+0xb97/0x1460 [ 502.406530][T23894] unix_release+0x91/0xf0 [ 502.412843][T23894] __sock_release+0xb3/0x270 [ 502.419412][T23894] sock_close+0x1c/0x30 [ 502.425543][T23894] __fput+0x402/0xb70 [ 502.431500][T23894] task_work_run+0x150/0x240 [ 502.438068][T23894] exit_to_user_mode_loop+0xfb/0x540 [ 502.445335][T23894] do_syscall_64+0x4ee/0xf80 [ 502.451907][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.459775][T23894] } [ 502.462249][T23894] ... key at: [] __key.0+0x0/0x40 [ 502.469345][T23894] ... acquired at: [ 502.473122][T23894] lock_acquire+0x179/0x330 [ 502.477781][T23894] _raw_read_lock_irqsave+0x74/0x90 [ 502.483139][T23894] kill_fasync+0x138/0x510 [ 502.487707][T23894] mousedev_notify_readers+0x6d8/0xa30 [ 502.493320][T23894] mousedev_event+0x84e/0x1490 [ 502.498236][T23894] input_handle_events_default+0x119/0x1b0 [ 502.504204][T23894] input_pass_values+0x74e/0x880 [ 502.509295][T23894] input_handle_event+0xf00/0x14d0 [ 502.514563][T23894] input_inject_event+0x1e8/0x3b0 [ 502.519740][T23894] evdev_write+0x457/0x750 [ 502.524321][T23894] vfs_write+0x2a0/0x11d0 [ 502.528808][T23894] ksys_write+0x1f8/0x250 [ 502.533293][T23894] do_syscall_64+0xcd/0xf80 [ 502.537952][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.544004][T23894] [ 502.546304][T23894] [ 502.546304][T23894] stack backtrace: [ 502.552171][T23894] CPU: 0 UID: 0 PID: 23894 Comm: syz.1.7266 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.552194][T23894] Tainted: [L]=SOFTLOCKUP [ 502.552199][T23894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.552209][T23894] Call Trace: [ 502.552214][T23894] [ 502.552220][T23894] dump_stack_lvl+0x116/0x1f0 [ 502.552241][T23894] check_irq_usage+0x8e6/0xbc0 [ 502.552263][T23894] ? check_path.constprop.0+0x24/0x50 [ 502.552280][T23894] ? __lock_acquire+0x167f/0x2890 [ 502.552296][T23894] __lock_acquire+0x167f/0x2890 [ 502.552317][T23894] lock_acquire+0x179/0x330 [ 502.552334][T23894] ? kill_fasync+0x138/0x510 [ 502.552352][T23894] _raw_read_lock_irqsave+0x74/0x90 [ 502.552371][T23894] ? kill_fasync+0x138/0x510 [ 502.552386][T23894] kill_fasync+0x138/0x510 [ 502.552402][T23894] mousedev_notify_readers+0x6d8/0xa30 [ 502.552420][T23894] mousedev_event+0x84e/0x1490 [ 502.552434][T23894] ? __pfx_mousedev_event+0x10/0x10 [ 502.552448][T23894] ? lock_acquire+0x179/0x330 [ 502.552466][T23894] input_handle_events_default+0x119/0x1b0 [ 502.552490][T23894] input_pass_values+0x74e/0x880 [ 502.552507][T23894] input_handle_event+0xf00/0x14d0 [ 502.552523][T23894] ? _copy_from_user+0x59/0xd0 [ 502.552548][T23894] input_inject_event+0x1e8/0x3b0 [ 502.552566][T23894] evdev_write+0x457/0x750 [ 502.552584][T23894] ? __pfx_evdev_write+0x10/0x10 [ 502.552602][T23894] ? bpf_lsm_file_permission+0x9/0x10 [ 502.552618][T23894] ? security_file_permission+0x71/0x210 [ 502.552640][T23894] ? rw_verify_area+0xcf/0x6c0 [ 502.552657][T23894] ? __pfx_evdev_write+0x10/0x10 [ 502.552673][T23894] vfs_write+0x2a0/0x11d0 [ 502.552693][T23894] ? __pfx_vfs_write+0x10/0x10 [ 502.552711][T23894] ? find_held_lock+0x2b/0x80 [ 502.552734][T23894] ? __fget_files+0x204/0x3c0 [ 502.552756][T23894] ? __fget_files+0x20e/0x3c0 [ 502.552779][T23894] ksys_write+0x1f8/0x250 [ 502.552797][T23894] ? __pfx_ksys_write+0x10/0x10 [ 502.552818][T23894] do_syscall_64+0xcd/0xf80 [ 502.552838][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.552853][T23894] RIP: 0033:0x7f05f418f749 [ 502.552865][T23894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.552881][T23894] RSP: 002b:00007f05f4f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.552895][T23894] RAX: ffffffffffffffda RBX: 00007f05f43e5fa0 RCX: 00007f05f418f749 [ 502.552905][T23894] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 502.552915][T23894] RBP: 00007f05f4213f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.552924][T23894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.552933][T23894] R13: 00007f05f43e6038 R14: 00007f05f43e5fa0 R15: 00007ffd5f98a208 [ 502.552948][T23894] [ 502.886763][ T5869] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 503.029827][ T5869] usb 10-1: Using ep0 maxpacket: 16 [ 503.036315][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.047437][ T5869] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 503.056814][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.065558][ T5869] usb 10-1: config 0 descriptor?? [ 503.458955][ T5869] mcp2221 0003:04D8:00DD.006E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 503.854335][ T5987] usb 10-1: USB disconnect, device number 16