last executing test programs: 45.613622498s ago: executing program 4 (id=1219): r0 = creat(&(0x7f0000002640)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x6) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "ad7687cdb47be89e", "80a36f1fcdabbf2d1cd6dd223b2b15f9", "b0d1c785", "3f6cd16f809ac18d"}, 0x28) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)={0x2e, 0x0, '\x00', [@pad1]}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x1, [@broadcast]}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0xef48, 0x101, 0x3f, 0x98aa}, 0x14) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000280)={'security\x00'}, &(0x7f00000003c0)=0x24) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x80801, 0xff) dup3(r6, r5, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "055038480a2d2cd7", "ea2c90cb7ac5d40787d8cbd36cf1fae7", "4d8ebad2", "a2e12e246e59717c"}, 0x28) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000005c0)='ip6_vti0\x00') mq_open(&(0x7f00000008c0)='ip\xcf\x93#\xfa\x15\x9d', 0x40, 0x22, &(0x7f0000000900)={0x0, 0x1a0, 0x3, 0xef}) 44.641263312s ago: executing program 4 (id=1223): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000500530001000000140004"], 0x60}}, 0x0) 44.317313097s ago: executing program 4 (id=1228): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000000000000630138de0000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 43.629387044s ago: executing program 4 (id=1230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="403dd4"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 43.499753625s ago: executing program 3 (id=1233): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18a}) unshare(0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x39}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x4, "5c1d34", 0x80, 0x7}, {@none, 0x4, 0x8, "b3762d", 0x6, 0x5}, {@any, 0x7f, 0x6, "e9c935", 0x5, 0xd8}, {@any, 0x8, 0x75, "d5bce1", 0x17b, 0x3}]}}}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x2, 0x0, @local}, 0x1c) socket(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000500)='v7\x00', 0x0) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000017c0)=0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40082104, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) preadv(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) 39.414336235s ago: executing program 3 (id=1241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$RNDGETENTCNT(r0, 0x8946, &(0x7f0000000000)) 39.414116007s ago: executing program 4 (id=1242): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="0b03060003001000020047c8aa96a13bb1001911000088ca1a00772bfc0d166321f30f7d26e3", 0x26, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 39.117664372s ago: executing program 4 (id=1244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_script(r0, &(0x7f0000001440)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {}, {0x20, ')\x9e!'}], 0xa, "c66969522d9812f7"}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80008"], 0x51) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x17) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r2], 0x1ac) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@none, 0x3, 0x8, 0x1, "7efac9", 0xfbe1, 0x2}, {@none, 0x5, 0x3, 0x9, "75824d", 0x6, 0x4}, {@none, 0x5, 0x6, 0x9, "e6c5ff", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x5, 0x5, "a7540c", 0xf, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x7, 0x40, "e15999", 0x8f77, 0x9}, {@none, 0x5, 0x3, 0x6, "0d69ef", 0x8, 0x7}]}}}, 0x5e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001400), 0x1, 0x22, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x4) 39.030995673s ago: executing program 3 (id=1245): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) 37.891962614s ago: executing program 3 (id=1247): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003400), 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f000001c440)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0xfffffffd, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 37.389649777s ago: executing program 3 (id=1251): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 36.93743301s ago: executing program 3 (id=1256): sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000769, &(0x7f0000000200)={0x2, 0x24e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 16.648207425s ago: executing program 0 (id=1293): r0 = socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() r4 = syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0xffffffa1, &(0x7f0000000480)={&(0x7f0000000400)=""/51, 0x33, 0x0, &(0x7f0000000740)=""/138, 0x8a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x300) 15.436350837s ago: executing program 0 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_STATE={0x5}]}}}]}, 0x4c}}, 0x0) 14.988077715s ago: executing program 0 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 14.685081296s ago: executing program 0 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.61921012s ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 12.439029118s ago: executing program 0 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={r1, r9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 9.855168606s ago: executing program 1 (id=1309): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) memfd_secret(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000540), 0xfff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='dax\x00', &(0x7f0000000080), 0xfffffffffffffdcd) 9.62959718s ago: executing program 2 (id=1310): syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xec, 0x68, 0xd4, 0x20, 0x93a, 0x50f, 0x56a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x90, 0x64}}]}}]}}, 0x0) 8.909273935s ago: executing program 1 (id=1311): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xa, 0x0, &(0x7f00000006c0)="f6f4e98ed78ad62ceef1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x24000044, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0x10132) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x4144, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3414040da0b8a81d8e20000000109021200"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 7.868416058s ago: executing program 2 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000)) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 6.887940823s ago: executing program 2 (id=1314): r0 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x8e2ea000) r1 = socket(0x200000100000011, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "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"}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f00000002c0)=0x8) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x4, 0x0, 0x1, 0x10, 0x101]}, &(0x7f0000000000)=0x54) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_eeprom}) ioctl$sock_proto_private(r0, 0x8b0b, &(0x7f0000000080)) 5.386154946s ago: executing program 1 (id=1315): r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 5.385879701s ago: executing program 2 (id=1316): socket$netlink(0x10, 0x3, 0x4) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x14) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.275957894s ago: executing program 1 (id=1317): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000200)=0x641, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080)=0x4, 0x4) 2.936805062s ago: executing program 2 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.93150746s ago: executing program 1 (id=1319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0xde}, @mss={0x2, 0x7}, @mss={0x2, 0x1}], 0xd) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10) r4 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}) listen(r7, 0x0) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.427563363s ago: executing program 2 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{}]}, 0x2c, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x8936, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000010000003dd00000000000000cf00000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000306030000000000020000000000000005000100", @ANYRES32], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 1 (id=1322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1, 0x497}}, './file0\x00'}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6(0xa, 0x2, 0x4601dd03) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): (1723025782.497:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.1.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0 [ 336.339877][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.462289][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.665132][ T7680] hsr_slave_0: entered promiscuous mode [ 336.720496][ T7680] hsr_slave_1: entered promiscuous mode [ 337.366080][ T29] audit: type=1400 audit(1723025783.577:480): avc: denied { ioctl } for pid=7889 comm="syz.0.714" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 337.467445][ T7899] block nbd1: shutting down sockets [ 337.527045][ T29] audit: type=1326 audit(1723025783.747:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0 [ 338.121211][ T7910] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 338.156613][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 338.381503][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=4d.67 [ 338.408120][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.454998][ T9] usb 5-1: Product: syz [ 338.480981][ T9] usb 5-1: Manufacturer: syz [ 338.508973][ T9] usb 5-1: SerialNumber: syz [ 338.559142][ T9] usb 5-1: config 0 descriptor?? [ 338.588134][ T9] ati_remote2 5-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 338.704694][ T29] audit: type=1400 audit(1723025784.907:482): avc: denied { setopt } for pid=7914 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.760538][ T7918] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 338.851847][ T9] usb 5-1: USB disconnect, device number 11 [ 338.955861][ T7918] team0: Port device netdevsim0 added [ 339.029437][ T29] audit: type=1400 audit(1723025785.247:483): avc: denied { append } for pid=7924 comm="syz.0.723" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.288624][ T7926] nvme_fabrics: missing parameter 'transport=%s' [ 339.296958][ T7926] nvme_fabrics: missing parameter 'nqn=%s' [ 339.319076][ T7680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.380533][ T7680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.419487][ T7680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.459577][ T7680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.516321][ T5282] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 339.748172][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.861838][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.900862][ T5282] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 339.919166][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.971021][ T5282] usb 2-1: config 0 descriptor?? [ 340.363102][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.585588][ T7680] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.636290][ T29] audit: type=1400 audit(1723025786.817:484): avc: denied { mount } for pid=7933 comm="syz.2.726" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 340.711829][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.719047][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.734435][ T7934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.787561][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.794819][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.927791][ T7680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.076299][ T5270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 341.139971][ T29] audit: type=1400 audit(1723025787.357:485): avc: denied { unmount } for pid=6607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 341.312545][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 341.341893][ T5270] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 341.411829][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.465472][ T5270] usb 5-1: Product: syz [ 341.470487][ T5282] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input15 [ 341.508034][ T5270] usb 5-1: Manufacturer: syz [ 341.512672][ T5270] usb 5-1: SerialNumber: syz [ 341.582444][ T5270] usb 5-1: config 0 descriptor?? [ 342.285110][ T5282] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input16 [ 342.389443][ T5282] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 342.436200][ T5282] usb 2-1: USB disconnect, device number 18 [ 342.624278][ T5270] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 342.648450][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.674173][ T5270] asix 5-1:0.0: probe with driver asix failed with error -71 [ 342.734135][ T5270] usb 5-1: USB disconnect, device number 12 [ 342.816083][ T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 342.918085][ T7680] veth0_vlan: entered promiscuous mode [ 343.009423][ T7680] veth1_vlan: entered promiscuous mode [ 343.030670][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 343.063146][ T51] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 343.102437][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.170207][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.214123][ T7680] veth0_macvtap: entered promiscuous mode [ 343.224103][ T51] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 343.230140][ T7975] netlink: 208 bytes leftover after parsing attributes in process `syz.1.732'. [ 343.254940][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.303981][ T7680] veth1_macvtap: entered promiscuous mode [ 343.339262][ T51] usb 1-1: config 0 descriptor?? [ 343.465576][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.524967][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.564789][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.637747][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.681714][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.752546][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.794335][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.840432][ T51] logitech 0003:046D:C29C.0010: unknown main item tag 0x0 [ 343.847687][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.876074][ T5280] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 343.886829][ T51] logitech 0003:046D:C29C.0010: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 343.898328][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.935801][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.952755][ T29] audit: type=1400 audit(1723025790.147:486): avc: denied { ioctl } for pid=7977 comm="syz.2.733" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 343.998920][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.034149][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.064563][ T51] logitech 0003:046D:C29C.0010: no inputs found [ 344.095500][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.117775][ T51] usb 1-1: USB disconnect, device number 25 [ 344.153940][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.182970][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.241023][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.257024][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.303032][ T5280] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.305586][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.335972][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.387780][ T5280] usb 5-1: config 0 descriptor?? [ 344.394507][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.423280][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.447521][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.467888][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.501352][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.512906][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.528290][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.552693][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.565974][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.585134][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.626531][ T7979] syzkaller0: entered allmulticast mode [ 344.651015][ T7993] team_slave_1: mtu less than device minimum [ 344.717850][ T7680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.728869][ T7680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.738944][ T7680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.750185][ T7680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.955444][ T5280] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 345.057490][ T6261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.106903][ T5280] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 345.185250][ T6261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.327253][ T5280] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 345.421447][ T5280] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 345.554878][ T5280] usb 5-1: USB disconnect, device number 13 [ 345.858363][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.885426][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.108180][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 346.271840][ T8010] syzkaller0: entered promiscuous mode [ 346.303440][ T8010] syzkaller0: entered allmulticast mode [ 346.314436][ T29] audit: type=1326 audit(1723025792.527:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.1.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0 [ 346.376503][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 346.435639][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 346.482932][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 346.525743][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 346.555348][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.590822][ T9] usb 1-1: config 0 descriptor?? [ 346.747036][ T5282] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 346.966089][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 346.993638][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.038641][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 347.071403][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 347.091323][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 347.113101][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 347.145993][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 347.159306][ T8041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.742'. [ 347.178899][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.211165][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.228904][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.244873][ T8041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.742'. [ 347.256847][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.276488][ T4608] Bluetooth: hci0: unexpected event 0x09 length: 4 > 3 [ 347.303596][ T5282] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 347.326098][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.334257][ T5282] usb 3-1: Product: syz [ 347.340199][ T5282] usb 3-1: Manufacturer: syz [ 347.344954][ T5282] usb 3-1: SerialNumber: syz [ 347.365683][ T5282] usb 3-1: config 0 descriptor?? [ 347.373596][ T8026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 347.393495][ T4608] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 347.417771][ T8026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 347.442085][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 347.468033][ T9] hid (null): bogus close delimiter [ 347.477053][ T4608] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 347.528509][ T9] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 347.560283][ T9] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 347.611242][ T9] hid-generic 0003:0158:0100.0012: bogus close delimiter [ 347.646118][ T9] hid-generic 0003:0158:0100.0012: item 0 0 2 10 parsing failed [ 347.663221][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.665025][ T9] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 347.698113][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.759367][ T5282] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 347.787277][ T5282] cxacru 3-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 347.839094][ T5282] cxacru 3-1:0.0: probe with driver cxacru failed with error -22 [ 348.866415][ T5282] usb 3-1: USB disconnect, device number 15 [ 348.901178][ T29] audit: type=1400 audit(1723025794.427:488): avc: denied { read } for pid=8053 comm="syz.3.745" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.043363][ T29] audit: type=1400 audit(1723025794.427:489): avc: denied { open } for pid=8053 comm="syz.3.745" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.081859][ T8] usb 1-1: USB disconnect, device number 26 [ 349.155192][ T29] audit: type=1400 audit(1723025794.467:490): avc: denied { ioctl } for pid=8053 comm="syz.3.745" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.396358][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 349.631634][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 349.661667][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.703512][ T9] usb 4-1: Product: syz [ 349.714041][ T9] usb 4-1: Manufacturer: syz [ 349.726395][ T5280] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 349.736638][ T9] usb 4-1: SerialNumber: syz [ 349.761770][ T9] usb 4-1: config 0 descriptor?? [ 349.791616][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 349.949006][ T5280] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 349.994606][ T5280] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 350.061583][ T5280] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 350.104840][ T5280] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 350.329996][ T53] usb 4-1: USB disconnect, device number 23 [ 350.352214][ T5280] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 350.732422][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 352.216521][ T5280] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 352.253437][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.269276][ T5280] usb 3-1: Product: syz [ 352.273470][ T5280] usb 3-1: Manufacturer: syz [ 352.280239][ T5280] usb 3-1: SerialNumber: syz [ 352.297336][ T5280] usb 3-1: ucan: probing device on interface #0 [ 352.341439][ T5280] usb 3-1: ucan: invalid endpoint configuration [ 352.366081][ T5280] usb 3-1: ucan: probe failed; try to update the device firmware [ 352.474072][ T29] audit: type=1400 audit(1723025798.667:491): avc: denied { execute } for pid=8083 comm="syz.1.751" dev="hugetlbfs" ino=20548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 352.527054][ T53] usb 3-1: USB disconnect, device number 16 [ 352.613492][ T29] audit: type=1400 audit(1723025798.697:492): avc: denied { execute_no_trans } for pid=8083 comm="syz.1.751" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=20548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 356.726184][ T5282] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 356.806555][ T5280] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 356.928333][ T5282] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.963052][ T5282] usb 5-1: config 0 has no interface number 0 [ 357.012754][ T5282] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 357.027728][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 357.032067][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.070264][ T5280] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 357.076025][ T5282] usb 5-1: Product: syz [ 357.097053][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.131370][ T5282] usb 5-1: Manufacturer: syz [ 357.134147][ T5280] usb 3-1: Product: syz [ 357.150648][ T5280] usb 3-1: Manufacturer: syz [ 357.154911][ T5282] usb 5-1: SerialNumber: syz [ 357.162451][ T5280] usb 3-1: SerialNumber: syz [ 357.182833][ T5282] usb 5-1: config 0 descriptor?? [ 357.223754][ T5282] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces [ 357.238533][ T5280] r8152-cfgselector 3-1: Unknown version 0x0000 [ 357.265624][ T5280] r8152-cfgselector 3-1: config 0 descriptor?? [ 357.279540][ T5282] cx231xx 5-1:0.1: Not found matching IAD interface [ 357.321623][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.332334][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.355069][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.406451][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.414360][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.422200][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.540011][ T53] usb 5-1: USB disconnect, device number 14 [ 358.780838][ T29] audit: type=1400 audit(1723025804.997:493): avc: denied { read } for pid=8153 comm="syz.4.769" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 358.814828][ T29] audit: type=1400 audit(1723025805.017:494): avc: denied { open } for pid=8153 comm="syz.4.769" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 358.873962][ T29] audit: type=1400 audit(1723025805.057:495): avc: denied { ioctl } for pid=8153 comm="syz.4.769" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 358.898893][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.516421][ T4608] Bluetooth: hci6: command tx timeout [ 360.629575][ T5282] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 360.835587][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.856665][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 360.865863][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.874224][ T5282] usb 4-1: Product: syz [ 360.882624][ T5282] usb 4-1: Manufacturer: syz [ 360.887382][ T5282] usb 4-1: SerialNumber: syz [ 360.896471][ T5282] usb 4-1: config 0 descriptor?? [ 360.910610][ T5282] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 360.917688][ T5282] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 361.147460][ T5282] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 361.606134][ T4608] Bluetooth: hci6: command tx timeout [ 362.083965][ T51] usb 4-1: USB disconnect, device number 24 [ 362.193172][ T6285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.198481][ T8181] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.333239][ T5282] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 362.387832][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 362.459856][ T6285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.561948][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 362.597693][ T5282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.654160][ T5282] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 362.678514][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.716042][ T5282] usb 3-1: Product: syz [ 362.720248][ T5282] usb 3-1: Manufacturer: syz [ 362.724821][ T6285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.755118][ T5282] usb 3-1: SerialNumber: syz [ 362.774106][ T5282] usb 3-1: config 0 descriptor?? [ 362.789800][ T5282] usb 3-1: bad CDC descriptors [ 362.796535][ T5282] usb 3-1: unsupported MDLM descriptors [ 362.997632][ T29] audit: type=1400 audit(1723025809.197:496): avc: denied { create } for pid=8193 comm="syz.3.784" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.093907][ T6285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.101546][ T4608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 363.126533][ T29] audit: type=1400 audit(1723025809.247:497): avc: denied { unlink } for pid=7680 comm="syz-executor" name="file5" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.225862][ T29] audit: type=1400 audit(1723025809.317:498): avc: denied { write } for pid=8202 comm="syz.3.787" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 363.363430][ T5280] usb 3-1: USB disconnect, device number 18 [ 363.513529][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 363.566044][ T5282] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 363.666240][ T4608] Bluetooth: hci6: command tx timeout [ 363.758468][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 363.788448][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.805369][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.820676][ T5282] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 363.830237][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.843544][ T5282] usb 2-1: config 0 descriptor?? [ 363.966494][ T6285] bridge_slave_1: left allmulticast mode [ 364.011315][ T6285] bridge_slave_1: left promiscuous mode [ 364.059457][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.114232][ T6285] bridge_slave_0: left allmulticast mode [ 364.142341][ T6285] bridge_slave_0: left promiscuous mode [ 364.173552][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.341577][ T5282] elecom 0003:056E:00E6.0013: item fetching failed at offset 2/5 [ 364.355231][ T5282] elecom 0003:056E:00E6.0013: probe with driver elecom failed with error -22 [ 364.685742][ T5270] usb 2-1: USB disconnect, device number 19 [ 365.028199][ T29] audit: type=1400 audit(1723025811.207:499): avc: denied { map } for pid=8234 comm="syz.2.798" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.746732][ T5239] Bluetooth: hci6: command tx timeout [ 365.829352][ T5239] Bluetooth: hci5: command 0x0406 tx timeout [ 366.857536][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.918046][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.935572][ T6285] bond0 (unregistering): Released all slaves [ 367.079080][ T8225] netlink: 'syz.3.795': attribute type 12 has an invalid length. [ 367.192769][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 367.215293][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 367.392508][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.435373][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.463128][ T8133] bridge_slave_0: entered allmulticast mode [ 367.491519][ T8133] bridge_slave_0: entered promiscuous mode [ 367.562252][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.587538][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.595703][ T8133] bridge_slave_1: entered allmulticast mode [ 367.617164][ T8133] bridge_slave_1: entered promiscuous mode [ 368.007526][ T53] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 368.076568][ T51] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 368.244811][ T6285] hsr_slave_0: left promiscuous mode [ 368.292023][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.378272][ T6285] hsr_slave_1: left promiscuous mode [ 368.463338][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.491968][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.560823][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.752056][ T53] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 368.796744][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.817329][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.824775][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.877657][ T53] usb 2-1: config 0 descriptor?? [ 369.019543][ T6285] veth1_macvtap: left promiscuous mode [ 369.046189][ T6285] veth0_macvtap: left promiscuous mode [ 369.053571][ T6285] veth1_vlan: left promiscuous mode [ 369.095774][ T6285] veth0_vlan: left promiscuous mode [ 369.101488][ T8274] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.106090][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 369.346491][ T53] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 5/7 [ 369.408837][ T53] cp2112 0003:10C4:EA90.0014: parse failed [ 369.451520][ T53] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -22 [ 369.582678][ T53] usb 2-1: USB disconnect, device number 20 [ 369.592869][ T51] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 369.601070][ T51] usb 5-1: config 0 has no interface number 0 [ 369.607361][ T51] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.624347][ T51] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.665327][ T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 369.678876][ T51] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 369.687172][ T51] usb 5-1: Manufacturer: syz [ 369.742473][ T51] usb 5-1: config 0 descriptor?? [ 370.333087][ T4608] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 370.398536][ T5280] usb 5-1: USB disconnect, device number 15 [ 370.544266][ T4608] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 372.350093][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 372.409855][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 372.907550][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.969949][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.092754][ T8133] team0: Port device team_slave_0 added [ 373.153240][ T8133] team0: Port device team_slave_1 added [ 373.235658][ T8314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.243374][ T8314] IPv6: NLM_F_CREATE should be set when creating new route [ 373.304780][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.322032][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.426544][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.570935][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.587076][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.653642][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.806723][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 373.866847][ T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 373.917676][ T8133] hsr_slave_0: entered promiscuous mode [ 373.964635][ T8133] hsr_slave_1: entered promiscuous mode [ 374.007335][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.017216][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 374.032620][ T8133] Cannot create hsr debugfs directory [ 374.044343][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.072122][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 374.096148][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 374.104094][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 374.126262][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 374.153971][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.166049][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 374.199169][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 374.199538][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.253072][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.297297][ T51] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 374.322290][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.340703][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 374.373502][ T51] usb 2-1: config 0 descriptor?? [ 374.395211][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.421862][ T8] usb 3-1: Product: syz [ 374.437986][ T8] usb 3-1: Manufacturer: syz [ 374.442624][ T8] usb 3-1: SerialNumber: syz [ 374.487688][ T8] usb 3-1: config 0 descriptor?? [ 374.493883][ T8319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 374.876649][ T8] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 374.902854][ T8] hdpvr 3-1:0.0: device init failed [ 374.912328][ T51] uclogic 0003:28BD:0042.0016: interface is invalid, ignoring [ 374.916033][ T8] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 375.507846][ T8] usb 3-1: USB disconnect, device number 19 [ 375.720587][ T1565] usb 2-1: USB disconnect, device number 21 [ 375.982866][ T29] audit: type=1400 audit(1723025822.187:500): avc: denied { listen } for pid=8356 comm="syz.3.827" lport=58347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.004524][ T8358] netlink: 'syz.4.828': attribute type 10 has an invalid length. [ 376.056667][ T29] audit: type=1400 audit(1723025822.237:501): avc: denied { accept } for pid=8356 comm="syz.3.827" lport=58347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.138095][ T8358] team0: Port device netdevsim0 added [ 376.150957][ T8363] netlink: 'syz.4.828': attribute type 10 has an invalid length. [ 376.203303][ T8363] team0: Port device netdevsim0 removed [ 376.223026][ T8363] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.455553][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.569867][ T8133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.610521][ T8385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.625592][ T8133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.656327][ T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 377.698944][ T8133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.741484][ T8133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.899385][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.913615][ T4608] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 377.936070][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.010932][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.123692][ T51] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.166821][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.277159][ T51] usb 2-1: config 0 descriptor?? [ 378.413451][ T29] audit: type=1400 audit(1723025824.627:502): avc: denied { write } for pid=8387 comm="syz.3.835" name="usbmon4" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 378.434295][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.436717][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.607844][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.676385][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.683681][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.757833][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.765282][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.810202][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.824744][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.832148][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.854107][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.864750][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.911084][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.944834][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.987285][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 378.994733][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 379.051671][ T8133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.076264][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 379.100494][ T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 379.125741][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.132191][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.208081][ T51] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 379.232048][ T51] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 379.309460][ T51] usb 2-1: USB disconnect, device number 22 [ 380.417133][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 380.440615][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.472521][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.525717][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.598452][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.863812][ T8444] input: syz1 as /devices/virtual/input/input18 [ 380.965227][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.276604][ T8133] veth0_vlan: entered promiscuous mode [ 381.308221][ T8457] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 381.328031][ T8133] veth1_vlan: entered promiscuous mode [ 381.353859][ T8457] netlink: 'syz.1.848': attribute type 2 has an invalid length. [ 381.523610][ T29] audit: type=1326 audit(1723025827.737:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000 [ 381.559324][ T8133] veth0_macvtap: entered promiscuous mode [ 381.584339][ T8133] veth1_macvtap: entered promiscuous mode [ 381.607513][ T29] audit: type=1326 audit(1723025827.817:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000 [ 381.665495][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.702212][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.735749][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.760101][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.808057][ T29] audit: type=1326 audit(1723025834.007:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000 [ 387.854913][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.947308][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.026393][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.070528][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.129333][ T29] audit: type=1400 audit(1723025834.347:506): avc: denied { write } for pid=8477 comm="syz.2.853" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 388.129734][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.232272][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.335474][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.420596][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.459963][ T29] audit: type=1400 audit(1723025834.667:507): avc: denied { map } for pid=8482 comm="syz.3.854" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 388.503908][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.531780][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 388.535955][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.618700][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.669064][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.711703][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.738490][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.774299][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.809816][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.828549][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.861580][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.975065][ T8133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.014948][ T8133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.054894][ T8133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.073925][ T8133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.367206][ T29] audit: type=1400 audit(1723025835.577:508): avc: denied { bind } for pid=8508 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.434592][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.465206][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.735995][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.796329][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.951190][ T29] audit: type=1400 audit(1723025836.077:509): avc: denied { write } for pid=8511 comm="syz.3.862" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 392.357502][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 392.588771][ T8] usb 2-1: config 0 has no interfaces? [ 392.612178][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.648039][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.664871][ T51] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.683347][ T8] usb 2-1: Product: syz [ 392.702605][ T8] usb 2-1: Manufacturer: syz [ 392.725637][ T8] usb 2-1: SerialNumber: syz [ 392.754311][ T8] usb 2-1: config 0 descriptor?? [ 392.886078][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 392.927756][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.962641][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.003214][ T51] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 393.022875][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.027867][ T5281] usb 2-1: USB disconnect, device number 23 [ 393.050761][ T51] usb 4-1: config 0 descriptor?? [ 393.259575][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 393.354874][ T8555] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.869'. [ 393.494459][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 393.524912][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 393.540931][ T51] mcp2200 0003:04D8:00DF.0018: item fetching failed at offset 0/2 [ 393.558183][ T51] mcp2200 0003:04D8:00DF.0018: can't parse reports [ 393.572369][ T51] mcp2200 0003:04D8:00DF.0018: probe with driver mcp2200 failed with error -22 [ 393.575939][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 393.768934][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 393.781525][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 393.795503][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.876340][ T29] audit: type=1400 audit(1723025840.077:510): avc: denied { read } for pid=8565 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 393.896367][ T51] usb 4-1: USB disconnect, device number 25 [ 394.623478][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 394.651355][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 394.661918][ T8] usb 5-1: Product: syz [ 394.666143][ T8] usb 5-1: Manufacturer: syz [ 394.670754][ T8] usb 5-1: SerialNumber: syz [ 394.724182][ T8] usb 5-1: config 0 descriptor?? [ 394.736718][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 394.758033][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 395.120560][ T8576] binder: BINDER_SET_CONTEXT_MGR already set [ 395.127497][ T8576] binder: 8570:8576 ioctl 4018620d 20000040 returned -16 [ 396.324528][ T8584] syzkaller1: entered promiscuous mode [ 396.331590][ T8584] syzkaller1: entered allmulticast mode [ 396.446036][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 396.469592][ T8589] netlink: 'syz.0.877': attribute type 15 has an invalid length. [ 396.512080][ T8589] netlink: 'syz.0.877': attribute type 7 has an invalid length. [ 396.917911][ T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 396.956314][ T5282] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 397.118250][ T51] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 397.132957][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.146676][ T51] usb 3-1: config 0 descriptor?? [ 397.156386][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 397.168105][ T51] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 398.189978][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.255481][ T5270] usb 5-1: USB disconnect, device number 16 [ 398.266055][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.292826][ T5270] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 398.329117][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 398.376253][ T5282] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 398.385388][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.397014][ T51] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 398.435026][ T5282] usb 4-1: config 0 descriptor?? [ 398.521211][ T5280] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 399.048433][ T29] audit: type=1326 audit(1723025844.947:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 399.461442][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 399.491047][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.519710][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.545283][ T29] audit: type=1326 audit(1723025844.947:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 399.569417][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 399.620027][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 399.656123][ T29] audit: type=1326 audit(1723025844.957:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 399.679355][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.686750][ T5280] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 399.704776][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 399.722206][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0019/input/input19 [ 399.728845][ T5280] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 399.760739][ T29] audit: type=1326 audit(1723025844.957:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 399.802988][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.824886][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0019/input/input20 [ 399.825346][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 399.890172][ T29] audit: type=1326 audit(1723025844.957:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 399.913404][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.969631][ T5282] kye 0003:0458:5011.0019: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 400.006194][ T5280] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 400.061122][ T5282] usb 4-1: USB disconnect, device number 26 [ 400.069130][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.077503][ T29] audit: type=1326 audit(1723025844.957:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 400.132737][ T5280] usb 2-1: Product: syz [ 400.153421][ T5280] usb 2-1: Manufacturer: syz [ 400.170536][ T5280] usb 2-1: SerialNumber: syz [ 400.195612][ T29] audit: type=1326 audit(1723025844.957:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 400.265313][ T5280] usb 2-1: config 0 descriptor?? [ 400.309101][ T8604] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 400.365630][ T29] audit: type=1326 audit(1723025844.957:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 400.411070][ T29] audit: type=1326 audit(1723025844.967:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000 [ 400.466586][ T51] gspca_cpia1: usb_control_msg 02, error -110 [ 400.494296][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 400.522419][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 400.542200][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 400.583068][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 400.598315][ T51] cpia1 3-1:0.0: unexpected systemstate: 00 [ 400.636379][ T1565] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 400.687061][ T5280] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 400.718763][ T5280] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 400.744953][ T5280] cxacru 2-1:0.0: probe with driver cxacru failed with error -22 [ 400.814791][ T5280] usb 2-1: USB disconnect, device number 24 [ 400.856062][ T1565] usb 5-1: Using ep0 maxpacket: 16 [ 400.892156][ T1565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.953255][ T1565] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 401.004571][ T1565] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.033706][ T1565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.049542][ T1565] usb 5-1: SerialNumber: syz [ 401.050185][ T5281] usb 3-1: USB disconnect, device number 20 [ 401.166655][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 401.408115][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.457894][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.489765][ T51] usb 5-1: USB disconnect, device number 17 [ 401.523754][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.537018][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.557388][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.584675][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.614930][ T8] usb 4-1: Product: syz [ 401.630997][ T8] usb 4-1: Manufacturer: syz [ 401.659402][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 401.664650][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 401.740245][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 401.756888][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 401.876871][ T8] usb 4-1: USB disconnect, device number 27 [ 401.976413][ T5282] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 402.167969][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.204152][ T5282] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 402.215856][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.239071][ T5282] usb 2-1: config 0 descriptor?? [ 402.251907][ T5282] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 402.259542][ T5282] usb 2-1: No valid video chain found. [ 402.446699][ T1565] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 402.519206][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 402.527179][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 402.560331][ T5282] usb 2-1: USB disconnect, device number 25 [ 402.646089][ T1565] usb 1-1: Using ep0 maxpacket: 8 [ 402.663690][ T1565] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 402.683676][ T1565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.693652][ T1565] usb 1-1: Product: syz [ 402.701972][ T1565] usb 1-1: Manufacturer: syz [ 402.710260][ T1565] usb 1-1: SerialNumber: syz [ 402.738067][ T1565] usb 1-1: config 0 descriptor?? [ 402.749748][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 402.760098][ T1565] usb 1-1: invalid MIDI EP [ 402.765001][ T1565] usb 1-1: snd-bcd2000: error during probing [ 402.771073][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=e6.7e [ 402.788581][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.792584][ T1565] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 402.798204][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.819451][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.844127][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.863660][ T9] usb 5-1: Product: syz [ 402.878089][ T9] usb 5-1: Manufacturer: syz [ 402.888864][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.916097][ T9] usb 5-1: SerialNumber: syz [ 402.932303][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.957698][ T9] usb 5-1: config 0 descriptor?? [ 402.972956][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.984018][ T9] usb 5-1: bad CDC descriptors [ 403.024076][ T8] usb 4-1: Product: syz [ 403.031953][ T8] usb 4-1: Manufacturer: syz [ 403.058049][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 403.063557][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 403.076190][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 403.082537][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 403.245675][ T1565] usb 1-1: USB disconnect, device number 27 [ 403.282521][ T5282] usb 5-1: USB disconnect, device number 18 [ 403.297093][ C1] cdc_wdm 4-1:1.0: unknown notification 66 received: index 4709 len 13010 [ 403.305859][ C1] cdc_wdm 4-1:1.0: unknown notification 166 received: index 48734 len 57114 [ 403.552416][ T51] usb 4-1: USB disconnect, device number 28 [ 405.310870][ T29] audit: type=1400 audit(1723025851.517:520): avc: denied { sqpoll } for pid=8658 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 406.142144][ T29] audit: type=1400 audit(1723025852.357:521): avc: denied { ioctl } for pid=8668 comm="syz.4.904" path="socket:[22924]" dev="sockfs" ino=22924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 406.688503][ T29] audit: type=1400 audit(1723025852.897:522): avc: denied { create } for pid=8679 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 407.975959][ T29] audit: type=1400 audit(1723025852.907:523): avc: denied { read } for pid=8679 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.336629][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 409.315949][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 409.357064][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.390554][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.409711][ T8] usb 3-1: Product: syz [ 409.421847][ T8] usb 3-1: Manufacturer: syz [ 409.432158][ T8] usb 3-1: SerialNumber: syz [ 409.489151][ T8] usb 3-1: config 0 descriptor?? [ 409.722502][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.678180][ T29] audit: type=1400 audit(1723025856.897:524): avc: denied { ioctl } for pid=8718 comm="syz.4.919" path="socket:[22216]" dev="sockfs" ino=22216 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 410.863821][ T29] audit: type=1326 audit(1723025857.077:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.4.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x0 [ 411.442791][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 411.783300][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 411.805610][ T8] usb 3-1: USB disconnect, device number 21 [ 411.818450][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 411.832297][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.927858][ T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 411.951335][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.169036][ T9] usb 1-1: Product: syz [ 412.179394][ T9] usb 1-1: Manufacturer: syz [ 412.267584][ T9] usb 1-1: SerialNumber: syz [ 412.452544][ T9] usb 1-1: config 0 descriptor?? [ 412.510749][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 412.812199][ T29] audit: type=1400 audit(1723025859.017:526): avc: denied { setopt } for pid=8747 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 413.041929][ T8] usb 1-1: USB disconnect, device number 28 [ 413.114247][ T8745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8745 comm=syz.4.927 [ 413.154192][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.927'. [ 413.476593][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 413.600870][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.608959][ T8760] UDF-fs: Scanning with blocksize 512 failed [ 413.619153][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.626827][ T8760] UDF-fs: Scanning with blocksize 1024 failed [ 413.641484][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.649176][ T8760] UDF-fs: Scanning with blocksize 2048 failed [ 413.656851][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.665745][ T8760] UDF-fs: Scanning with blocksize 4096 failed [ 414.329799][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 414.374914][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 414.405971][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.415766][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.450263][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.494148][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.537351][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.563493][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.817028][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 414.841752][ T8] usbtmc 3-1:16.0: can't read capabilities [ 415.050367][ T1565] usb 3-1: USB disconnect, device number 22 [ 415.376201][ T5278] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 415.675994][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 415.695084][ T5278] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.709588][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 415.732502][ T5278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.741784][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 415.754811][ T5278] usb 2-1: SerialNumber: syz [ 416.063070][ T8787] sctp: [Deprecated]: syz.4.942 (pid 8787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.063070][ T8787] Use struct sctp_sack_info instead [ 417.198722][ T1565] usb 2-1: USB disconnect, device number 26 [ 417.608813][ T8813] netlink: 'syz.3.949': attribute type 11 has an invalid length. [ 418.150441][ T8826] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 418.216739][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 418.486627][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 418.522190][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.556323][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.597991][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024 [ 418.640372][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 418.669288][ T5280] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 418.677331][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.707642][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.719589][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.755810][ T8833] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 418.915961][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 418.935088][ T5280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.946402][ T5280] usb 3-1: config 0 has no interface number 0 [ 418.953590][ T5280] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.968061][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 418.973534][ T9] usbtmc 2-1:16.0: can't read capabilities [ 418.983502][ T5280] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.984068][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 419.002293][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.030424][ T5280] usb 3-1: config 0 descriptor?? [ 419.048521][ T5280] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 419.068898][ T8835] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 419.159896][ T8833] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 419.191189][ T1565] usb 2-1: USB disconnect, device number 27 [ 419.217008][ T8833] bond1 (unregistering): Released all slaves [ 419.328549][ T5278] usb 3-1: USB disconnect, device number 23 [ 419.351550][ T5278] iowarrior 3-1:0.1: I/O-Warror #1 now disconnected [ 419.623573][ T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 419.846811][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 419.873285][ T51] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.984028][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.088695][ T51] usb 5-1: Product: syz [ 420.136704][ T51] usb 5-1: Manufacturer: syz [ 420.200773][ T51] usb 5-1: SerialNumber: syz [ 420.516587][ T51] usb 5-1: config 0 descriptor?? [ 420.787210][ T51] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.906674][ T5270] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 421.124632][ T5270] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 421.168990][ T5270] usb 4-1: config 0 has no interface number 0 [ 421.200497][ T5270] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.239208][ T5270] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.263639][ T5270] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 421.274935][ T5270] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 421.283832][ T5270] usb 4-1: Manufacturer: syz [ 421.297414][ T5270] usb 4-1: config 0 descriptor?? [ 421.833859][ T8855] netlink: 576 bytes leftover after parsing attributes in process `syz.1.964'. [ 421.845585][ T1565] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 421.861945][ T8846] QAT: Device 0 not found [ 421.878680][ T1565] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 422.218677][ T51] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 422.263173][ T51] usb 5-1: USB disconnect, device number 19 [ 422.356002][ T5280] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 422.586538][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 422.605222][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.648879][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 422.698717][ T5280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.725432][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 422.742779][ T5280] usb 3-1: SerialNumber: syz [ 422.786170][ T4608] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 422.799847][ T4608] Bluetooth: hci6: Injecting HCI hardware error event [ 422.808643][ T4608] Bluetooth: hci6: hardware error 0x00 [ 424.033731][ T5239] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 424.140801][ T5270] usbhid 4-1:0.18: can't add hid device: -71 [ 424.170339][ T5270] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 424.265496][ T5270] usb 4-1: USB disconnect, device number 29 [ 424.439572][ T5280] usb 3-1: USB disconnect, device number 24 [ 424.644843][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 424.732967][ T8891] 8021q: adding VLAN 0 to HW filter on device team1 [ 424.814607][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 424.946726][ T4608] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 425.860025][ T5280] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 426.136790][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 426.437708][ T5280] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.697814][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.721843][ T5280] usb 4-1: Product: syz [ 426.727546][ T5280] usb 4-1: Manufacturer: syz [ 426.732171][ T5280] usb 4-1: SerialNumber: syz [ 426.774383][ T5278] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 426.790390][ T5280] r8152-cfgselector 4-1: Unknown version 0x0000 [ 426.815954][ T5280] r8152-cfgselector 4-1: config 0 descriptor?? [ 426.992307][ T5278] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 427.019928][ T5278] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 427.045986][ T5278] usb 2-1: config 1 has no interface number 1 [ 427.072465][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 427.149376][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.544896][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.557820][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.571026][ T5278] usb 2-1: Product: syz [ 427.581212][ T5278] usb 2-1: Manufacturer: syz [ 427.648803][ T5278] usb 2-1: SerialNumber: syz [ 427.852117][ T5280] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 427.930168][ T5278] usb 2-1: 2:1 : unsupported format bits 0x40 [ 428.066117][ T5278] usb 2-1: USB disconnect, device number 28 [ 428.414105][ T8475] udevd[8475]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.446164][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 431.638339][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.677982][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 431.721863][ T9] usb 3-1: config 1 has no interface number 0 [ 431.735946][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.767839][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.805960][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.823379][ T9] usb 3-1: Product: syz [ 431.845302][ T9] usb 3-1: Manufacturer: syz [ 431.851957][ T9] usb 3-1: SerialNumber: syz [ 431.868748][ T5278] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 431.882300][ T9] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 431.911169][ T9] cdc_ncm 3-1:1.1: bind() failure [ 431.946362][ T1565] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 431.986573][ T4608] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 431.999629][ T4608] Bluetooth: hci5: Injecting HCI hardware error event [ 432.009141][ T5239] Bluetooth: hci5: hardware error 0x00 [ 432.082745][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 432.093839][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.146377][ T51] usb 3-1: USB disconnect, device number 25 [ 432.155945][ T1565] usb 1-1: Using ep0 maxpacket: 16 [ 432.162972][ T5278] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 432.210905][ T1565] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 432.253487][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.264974][ T1565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.280587][ T5278] usb 4-1: Product: syz [ 432.284837][ T5278] usb 4-1: Manufacturer: syz [ 432.290261][ T1565] usb 1-1: Product: syz [ 432.294452][ T1565] usb 1-1: Manufacturer: syz [ 432.299590][ T5278] usb 4-1: SerialNumber: syz [ 432.317422][ T1565] usb 1-1: SerialNumber: syz [ 432.410875][ T5278] usb 4-1: config 0 descriptor?? [ 432.449893][ T1565] r8152-cfgselector 1-1: Unknown version 0x0000 [ 432.534647][ T1565] r8152-cfgselector 1-1: config 0 descriptor?? [ 432.545435][ T5278] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 432.581150][ T5278] usb 4-1: selecting invalid altsetting 1 [ 433.599791][ T9] r8152-cfgselector 1-1: USB disconnect, device number 29 [ 433.668612][ T8] usb 4-1: USB disconnect, device number 31 [ 433.678452][ T9001] netlink: 'syz.2.1009': attribute type 3 has an invalid length. [ 433.731895][ T9001] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 433.766274][ T9001] netlink: 'syz.2.1009': attribute type 7 has an invalid length. [ 433.792685][ T9001] netlink: 'syz.2.1009': attribute type 8 has an invalid length. [ 433.818275][ T9001] netlink: 'syz.2.1009': attribute type 7 has an invalid length. [ 433.839682][ T9001] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.1009'. [ 434.049483][ T29] audit: type=1400 audit(1723025880.267:527): avc: denied { accept } for pid=9003 comm="iou-wrk-9006" lport=44467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.066800][ T5239] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 434.091759][ T9005] syzkaller1: entered promiscuous mode [ 434.118207][ T9005] syzkaller1: entered allmulticast mode [ 434.164667][ T29] audit: type=1400 audit(1723025880.377:528): avc: denied { create } for pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 434.249069][ T29] audit: type=1400 audit(1723025880.447:529): avc: denied { write } for pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 434.302997][ T29] audit: type=1400 audit(1723025880.447:530): avc: denied { nlmsg_read } for pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 436.266340][ T5278] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 436.476095][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 436.538197][ T5278] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.546669][ T5278] usb 3-1: config 179 has no interface number 0 [ 436.553357][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.564731][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 436.584038][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.626353][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 436.640915][ T5278] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.676192][ T5278] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.696241][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.765759][ T9037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.440675][ T1565] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 437.738906][ T1565] usb 3-1: USB disconnect, device number 26 [ 437.738974][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 437.739033][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 437.828975][ T1565] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.960791][ T9053] netlink: 'syz.4.1024': attribute type 21 has an invalid length. [ 438.006472][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1024'. [ 438.046425][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1025'. [ 439.186527][ T5280] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 439.526684][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 439.541077][ T5280] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 439.576112][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.591135][ T5280] usb 5-1: Product: syz [ 439.595327][ T5280] usb 5-1: Manufacturer: syz [ 439.608012][ T5280] usb 5-1: SerialNumber: syz [ 439.630338][ T5280] r8152-cfgselector 5-1: Unknown version 0x0000 [ 439.661325][ T5280] r8152-cfgselector 5-1: config 0 descriptor?? [ 440.581037][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.590214][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.695115][ T9] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 441.026298][ T5239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 441.036775][ T5239] Bluetooth: hci1: Injecting HCI hardware error event [ 442.380498][ T5239] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 442.558016][ T9107] netlink: 'syz.1.1041': attribute type 13 has an invalid length. [ 442.586089][ T9107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1041'. [ 442.626178][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 442.658074][ T9107] syz_tun: refused to change device tx_queue_len [ 442.664410][ T9107] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 442.901852][ T4608] Bluetooth: hci1: hardware error 0x00 [ 443.102363][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 443.115324][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 445.026146][ T4608] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 445.690829][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 445.811947][ T29] audit: type=1400 audit(1723025892.027:531): avc: denied { bind } for pid=9121 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 445.936583][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 445.994196][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.044971][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.563584][ T9] usb 2-1: Product: syz [ 447.588755][ T9] usb 2-1: Manufacturer: syz [ 447.589791][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'. [ 447.593413][ T9] usb 2-1: SerialNumber: syz [ 447.628482][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 447.634785][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 448.027384][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 448.171490][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 448.354753][ T9] r8152-cfgselector 2-1: USB disconnect, device number 29 [ 448.464101][ T9159] netlink: 'syz.3.1061': attribute type 1 has an invalid length. [ 451.900499][ T9199] bridge_slave_1: left allmulticast mode [ 451.925927][ T9199] bridge_slave_1: left promiscuous mode [ 451.973748][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.032012][ T9199] netlink: 'syz.2.1073': attribute type 2 has an invalid length. [ 452.045032][ T9199] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 452.615376][ T29] audit: type=1400 audit(1723025898.827:532): avc: denied { mount } for pid=9204 comm="syz.4.1076" name="/" dev="hugetlbfs" ino=24259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 454.235194][ T29] audit: type=1400 audit(1723025900.447:533): avc: denied { mounton } for pid=9213 comm="syz.0.1077" path="/proc/124/cgroup" dev="proc" ino=25015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 454.683886][ T29] audit: type=1400 audit(1723025900.897:534): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 454.745973][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 454.948291][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 454.991805][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 455.050387][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=dd.c4 [ 455.059869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.084880][ T9] usb 2-1: Product: syz [ 455.089546][ T9] usb 2-1: Manufacturer: syz [ 455.094148][ T9] usb 2-1: SerialNumber: syz [ 455.157139][ T9] usb 2-1: config 0 descriptor?? [ 455.341942][ T1565] usb 2-1: USB disconnect, device number 30 [ 457.623074][ T9247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.369044][ T29] audit: type=1400 audit(1723025904.547:535): avc: denied { write } for pid=9257 comm="syz.3.1090" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 462.430558][ T29] audit: type=1400 audit(1723025908.647:536): avc: denied { mount } for pid=9297 comm="syz.0.1100" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 462.515779][ T29] audit: type=1400 audit(1723025908.687:537): avc: denied { remount } for pid=9297 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 462.585487][ T29] audit: type=1400 audit(1723025908.797:538): avc: denied { unmount } for pid=8133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 462.802441][ T29] audit: type=1400 audit(1723025909.017:539): avc: denied { setopt } for pid=9307 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.931270][ T5280] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 465.830757][ T5280] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.854729][ T5280] usb 4-1: config 0 has no interface number 0 [ 465.867946][ T5280] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 465.879782][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.903356][ T5280] usb 4-1: config 0 descriptor?? [ 465.918441][ T5280] usb 4-1: selecting invalid altsetting 1 [ 465.935569][ T5280] dvb_ttusb_budget: ttusb_init_controller: error [ 465.961538][ T5280] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 466.100666][ T5280] DVB: Unable to find symbol cx22700_attach() [ 466.247077][ T5280] DVB: Unable to find symbol tda10046_attach() [ 466.263608][ T5280] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 466.315249][ T5280] usb 4-1: USB disconnect, device number 32 [ 467.019562][ T29] audit: type=1400 audit(1723025913.237:540): avc: denied { create } for pid=9343 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 467.049457][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 467.104330][ T29] audit: type=1400 audit(1723025913.267:541): avc: denied { write } for pid=9343 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.229852][ T9351] fuseblk: Bad value for 'rootmode' [ 468.255332][ T29] audit: type=1400 audit(1723025914.467:542): avc: denied { nlmsg_write } for pid=9348 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 468.479400][ T5309] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 468.566429][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'. [ 468.716917][ T5309] usb 5-1: Using ep0 maxpacket: 32 [ 468.763143][ T5309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 468.784561][ T5309] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.794826][ T5309] usb 5-1: config 0 has no interface number 0 [ 468.807008][ T5309] usb 5-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd [ 468.816941][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.826246][ T5309] usb 5-1: Product: syz [ 468.852390][ T5309] usb 5-1: Manufacturer: syz [ 468.902291][ T5309] usb 5-1: SerialNumber: syz [ 468.943943][ T5309] usb 5-1: config 0 descriptor?? [ 469.184199][ T5309] qmi_wwan 5-1:0.1: probe with driver qmi_wwan failed with error -22 [ 469.264417][ T5309] usb 5-1: USB disconnect, device number 21 [ 469.638570][ T9381] netlink: 'syz.3.1128': attribute type 9 has an invalid length. [ 473.836785][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 475.777965][ T9454] syz.4.1149[9454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.778158][ T9454] syz.4.1149[9454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.351429][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.378334][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.502685][ T9493] tipc: Resetting bearer [ 479.515504][ T9493] tipc: Resetting bearer [ 479.885360][ T29] audit: type=1400 audit(1723025925.477:543): avc: denied { write } for pid=9490 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 480.013298][ T8] tipc: Resetting bearer [ 483.278173][ T29] audit: type=1326 audit(1723025929.487:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b3bd779f9 code=0x0 [ 483.756075][ T51] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 484.045995][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.296284][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 484.330910][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.466181][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.523158][ T51] usb 4-1: Product: syz [ 484.529726][ T51] usb 4-1: Manufacturer: syz [ 484.539857][ T51] usb 4-1: SerialNumber: syz [ 484.670589][ T9540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9540 comm=syz.0.1176 [ 484.694487][ T29] audit: type=1400 audit(1723025930.907:545): avc: denied { read } for pid=9537 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 484.789249][ T9529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.797875][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 485.158689][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.179887][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.192564][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 486.105941][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 486.159774][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 486.223910][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.268483][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.328756][ T9529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 486.429982][ T29] audit: type=1400 audit(1723025932.517:546): avc: denied { write } for pid=9557 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.901812][ T8] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 488.329858][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.353365][ T8] usb 3-1: Product: syz [ 488.371235][ T29] audit: type=1400 audit(1723025933.677:547): avc: denied { accept } for pid=9554 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 488.391957][ T8] usb 3-1: Manufacturer: syz [ 488.617054][ T8] usb 3-1: SerialNumber: syz [ 488.710630][ T8] usb 3-1: config 0 descriptor?? [ 488.812325][ T8] usb 3-1: can't set config #0, error -71 [ 488.938424][ T51] cdc_ncm 4-1:1.0: failed to get mac address [ 488.949937][ T51] cdc_ncm 4-1:1.0: bind() failure [ 488.968834][ T51] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 488.986019][ T8] usb 3-1: USB disconnect, device number 27 [ 489.031822][ T51] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 489.088721][ T51] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 489.156382][ T51] usb 4-1: USB disconnect, device number 33 [ 489.406121][ T1565] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 489.636181][ T1565] usb 1-1: Using ep0 maxpacket: 8 [ 489.659538][ T1565] usb 1-1: config 3 has an invalid interface number: 9 but max is 0 [ 489.667931][ T1565] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 489.732697][ T1565] usb 1-1: config 3 has no interface number 0 [ 489.749886][ T1565] usb 1-1: config 3 interface 9 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 16 [ 489.818127][ T1565] usb 1-1: config 3 interface 9 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 489.829552][ T1565] usb 1-1: config 3 interface 9 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 489.841068][ T1565] usb 1-1: config 3 interface 9 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.886581][ T1565] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 489.928786][ T1565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.996580][ T9576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.269961][ T1565] usb 1-1: USB disconnect, device number 30 [ 490.446405][ T9595] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 490.496523][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 490.664952][ T9597] ucma_write: process 781 (syz.1.1193) changed security contexts after opening file descriptor, this is not allowed. [ 493.376391][ T5278] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 493.606059][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 493.624719][ T5278] usb 3-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 493.634906][ T5278] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 493.646668][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.663421][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.679532][ T5278] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 493.699492][ T5278] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 493.724018][ T5278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.735949][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 493.752152][ T5278] usb 3-1: SerialNumber: syz [ 493.809964][ T5278] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 493.838340][ T5278] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 494.110259][ T9] usb 3-1: USB disconnect, device number 28 [ 495.113262][ T29] audit: type=1400 audit(1723025941.327:548): avc: denied { connect } for pid=9638 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 495.662643][ T9649] tap0: tun_chr_ioctl cmd 1074025675 [ 495.668195][ T9649] tap0: persist enabled [ 495.674862][ T9649] tap0: tun_chr_ioctl cmd 1074025675 [ 495.680828][ T9649] tap0: persist disabled [ 496.263171][ T5280] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 496.479013][ T5280] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.523399][ T5280] usb 3-1: config 1 has no interface number 1 [ 496.552066][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.614001][ T5280] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 496.732072][ T5280] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.958000][ T5280] usb 3-1: string descriptor 0 read error: -22 [ 497.075209][ T5280] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.141678][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.295637][ T5280] usb 3-1: low speed audio streaming not supported [ 497.617191][ T9] usb 3-1: USB disconnect, device number 29 [ 498.001296][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 498.018815][ T9667] netlink: 'syz.0.1215': attribute type 11 has an invalid length. [ 498.033666][ T9667] netlink: 'syz.0.1215': attribute type 12 has an invalid length. [ 499.504042][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'. [ 499.658001][ T29] audit: type=1400 audit(1723025945.877:549): avc: denied { ioctl } for pid=9687 comm="syz.3.1222" path="socket:[26770]" dev="sockfs" ino=26770 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 499.798295][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'. [ 501.046206][ T5280] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 501.096341][ T29] audit: type=1326 audit(1723025947.307:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.3.1233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18cab779f9 code=0x0 [ 501.246464][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 501.267594][ T5280] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 501.299117][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.343134][ T5280] usb 5-1: config 0 descriptor?? [ 501.994032][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.000929][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.749692][ T29] audit: type=1400 audit(1723025950.967:551): avc: denied { write } for pid=9737 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 504.785771][ T5280] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 504.837534][ T5280] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 504.956472][ T5280] asix 5-1:0.0: probe with driver asix failed with error -71 [ 505.017457][ T29] audit: type=1326 audit(1723025951.227:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3bd779f9 code=0x0 [ 505.046563][ T5280] usb 5-1: USB disconnect, device number 22 [ 506.394882][ T4608] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4 [ 506.524918][ T9761] tipc: Failed to remove unknown binding: 66,1,1/0:1281618444/1281618446 [ 506.609280][ T9769] tipc: Failed to remove unknown binding: 66,1,1/0:1281618444/1281618446 [ 507.234420][ T29] audit: type=1400 audit(1723025953.447:553): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 507.254590][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.394565][ T9791] netlink: 'syz.2.1254': attribute type 3 has an invalid length. [ 507.426238][ T9791] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1254'. [ 508.136456][ T5278] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 508.361088][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 508.391599][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.483893][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.566015][ T5278] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.651786][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.836875][ T5278] usb 2-1: config 0 descriptor?? [ 513.977486][ T5278] usb 2-1: can't set config #0, error -71 [ 514.047850][ T5278] usb 2-1: USB disconnect, device number 31 [ 515.351462][ T29] audit: type=1400 audit(1723025961.567:554): avc: denied { attach_queue } for pid=9821 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 515.980982][ T5309] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 516.186703][ T5309] usb 3-1: Using ep0 maxpacket: 32 [ 516.232234][ T5309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.353210][ T5309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 516.518485][ T5309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.538200][ T5309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.579849][ T5309] usb 3-1: Product: syz [ 516.610275][ T5309] usb 3-1: Manufacturer: syz [ 516.625177][ T5309] usb 3-1: SerialNumber: syz [ 516.801893][ T9836] ubi0: attaching mtd0 [ 516.821762][ T9836] ubi0: scanning is finished [ 516.826541][ T9836] ubi0: empty MTD device detected [ 517.604737][ T9836] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 517.747024][ T9839] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1271'. [ 518.154674][ T29] audit: type=1400 audit(1723025964.367:555): avc: denied { mounton } for pid=9843 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 518.267729][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.279386][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.287533][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.309172][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.339104][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 518.349179][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.577480][ T9846] netlink: 'syz.0.1274': attribute type 21 has an invalid length. [ 518.596638][ T5309] cdc_ncm 3-1:1.0: bind() failure [ 518.608988][ T5309] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 518.628166][ T4608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 518.639493][ T4608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 518.647428][ T4608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 518.661660][ T4608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 518.667586][ T9846] netlink: 'syz.0.1274': attribute type 6 has an invalid length. [ 518.683098][ T4608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 518.690837][ T4608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 518.700541][ T5309] usb 3-1: USB disconnect, device number 30 [ 518.738702][ T6257] bridge_slave_1: left allmulticast mode [ 518.816544][ T6257] bridge_slave_1: left promiscuous mode [ 518.823303][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.969347][ T6257] bridge_slave_0: left allmulticast mode [ 518.975064][ T6257] bridge_slave_0: left promiscuous mode [ 519.032103][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.457515][ T29] audit: type=1400 audit(1723025965.677:556): avc: denied { bind } for pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.498409][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.575916][ T29] audit: type=1400 audit(1723025965.787:557): avc: denied { connect } for pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.690691][ T29] audit: type=1400 audit(1723025965.837:558): avc: denied { shutdown } for pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.731654][ T29] audit: type=1400 audit(1723025965.907:559): avc: denied { ioctl } for pid=9854 comm="syz.2.1277" path="socket:[26517]" dev="sockfs" ino=26517 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.838886][ T29] audit: type=1326 audit(1723025966.037:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x7fc00000 [ 519.929673][ T29] audit: type=1326 audit(1723025966.147:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd405b779f9 code=0x7fc00000 [ 520.470050][ T5239] Bluetooth: hci2: command tx timeout [ 520.505243][ T29] audit: type=1326 audit(1723025966.717:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x7fc00000 [ 520.792020][ T5239] Bluetooth: hci7: command tx timeout [ 521.021406][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.092175][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.113947][ T6257] bond0 (unregistering): Released all slaves [ 521.553830][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.115799][ T9875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 522.319418][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 522.334145][ T9885] netlink: 'syz.2.1283': attribute type 15 has an invalid length. [ 522.404706][ T29] audit: type=1400 audit(1723025968.617:563): avc: denied { read } for pid=9866 comm="syz.1.1279" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.437040][ T29] audit: type=1400 audit(1723025968.647:564): avc: denied { open } for pid=9866 comm="syz.1.1279" path="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.478803][ T6257] hsr_slave_0: left promiscuous mode [ 522.484726][ T6257] hsr_slave_1: left promiscuous mode [ 522.494164][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.503690][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.522331][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.532513][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.555957][ T5239] Bluetooth: hci2: command tx timeout [ 522.588788][ T6257] veth1_macvtap: left promiscuous mode [ 522.602114][ T6257] veth0_macvtap: left promiscuous mode [ 522.609309][ T6257] veth1_vlan: left promiscuous mode [ 522.614803][ T6257] veth0_vlan: left promiscuous mode [ 522.866763][ T5239] Bluetooth: hci7: command tx timeout [ 524.146964][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 524.338036][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 524.627849][ T5239] Bluetooth: hci2: command tx timeout [ 524.945963][ T5239] Bluetooth: hci7: command tx timeout [ 525.520409][ T9909] team_slave_1: mtu less than device minimum [ 526.016224][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 526.089868][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 526.226296][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 526.236265][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 526.257830][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 526.375206][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 526.429000][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 526.486679][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 526.552733][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 526.566038][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 526.576173][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.585996][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.595769][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 526.620573][ T8] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 526.629970][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.651909][ T8] usb 2-1: Product: syz [ 526.662446][ T8] usb 2-1: Manufacturer: syz [ 526.672492][ T8] usb 2-1: SerialNumber: syz [ 526.693352][ T8] usb 2-1: config 0 descriptor?? [ 526.699026][ T9920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 526.706854][ T5239] Bluetooth: hci2: command tx timeout [ 526.924597][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.932523][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.937016][ T8] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 526.967629][ T9847] bridge_slave_0: entered allmulticast mode [ 526.970052][ T8] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 526.981279][ T9847] bridge_slave_0: entered promiscuous mode [ 526.984430][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.012927][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.016362][ T8] cxacru 2-1:0.0: probe with driver cxacru failed with error -22 [ 527.030884][ T5239] Bluetooth: hci7: command tx timeout [ 527.063913][ T9847] bridge_slave_1: entered allmulticast mode [ 527.063952][ T8] usb 2-1: USB disconnect, device number 32 [ 527.127196][ T9847] bridge_slave_1: entered promiscuous mode [ 527.488853][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.526783][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.541082][ T9843] bridge_slave_0: entered allmulticast mode [ 527.562921][ T9843] bridge_slave_0: entered promiscuous mode [ 527.619479][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.722429][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.766348][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.795630][ T9843] bridge_slave_1: entered allmulticast mode [ 527.829431][ T9843] bridge_slave_1: entered promiscuous mode [ 528.009625][ T6257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.102679][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.240730][ T9945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 528.303708][ T6257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.366498][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 528.419858][ T9847] team0: Port device team_slave_0 added [ 528.467368][ T9847] team0: Port device team_slave_1 added [ 528.495727][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.558232][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 528.587694][ T6257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.624293][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 528.656030][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.711831][ T8] usb 2-1: config 0 descriptor?? [ 528.740865][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 528.780245][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.929008][ T6257] bond0: (slave netdevsim0): Releasing backup interface [ 528.952751][ T6257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.997868][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.004923][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.035671][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.072413][ T29] audit: type=1400 audit(1723025975.287:565): avc: denied { setopt } for pid=9952 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 529.134908][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.144827][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.153259][ T9955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.183667][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.206051][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.294823][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.453362][ T9843] team0: Port device team_slave_0 added [ 529.509810][ T9847] hsr_slave_0: entered promiscuous mode [ 529.537994][ T9847] hsr_slave_1: entered promiscuous mode [ 529.557946][ T9847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.570873][ T9847] Cannot create hsr debugfs directory [ 529.608607][ T9843] team0: Port device team_slave_1 added [ 529.697957][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.711861][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.770591][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.961947][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.025310][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.084310][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.350413][ T6257] bridge_slave_1: left allmulticast mode [ 530.367731][ T6257] bridge_slave_1: left promiscuous mode [ 530.381954][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.406410][ T8] gspca_sonixj: i2c_w8 err -71 [ 530.411755][ T6257] bridge_slave_0: left allmulticast mode [ 530.424291][ T6257] bridge_slave_0: left promiscuous mode [ 530.430404][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.456271][ T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 530.525303][ T8] usb 2-1: USB disconnect, device number 33 [ 531.690399][ T29] audit: type=1800 audit(1723025977.887:566): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1302" name="/" dev="fuse" ino=1 res=0 errno=0 [ 532.175597][ T9974] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 533.131545][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.151647][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.175044][ T6257] bond0 (unregistering): Released all slaves [ 533.468513][ T9843] hsr_slave_0: entered promiscuous mode [ 533.535673][ T9843] hsr_slave_1: entered promiscuous mode [ 533.554374][ T9843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.583818][ T9843] Cannot create hsr debugfs directory [ 534.118102][T10000] Can't find ip_set type bidmap:ip [ 534.360442][ T6257] tipc: Disabling bearer [ 534.401982][ T6257] tipc: Left network mode [ 534.976038][ T51] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 535.075441][ T9847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.166040][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 535.189626][ T51] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 535.200527][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.213618][ T51] usb 3-1: Product: syz [ 535.218228][ T51] usb 3-1: Manufacturer: syz [ 535.235277][ T51] usb 3-1: SerialNumber: syz [ 535.261784][ T51] usb 3-1: config 0 descriptor?? [ 535.299515][ T51] gspca_main: mars-2.14.0 probing 093a:050f [ 535.344355][ T6257] veth1_macvtap: left promiscuous mode [ 535.355994][ T6257] veth0_macvtap: left promiscuous mode [ 535.361923][ T6257] veth1_vlan: left promiscuous mode [ 535.384191][ T6257] veth0_vlan: left promiscuous mode [ 535.836479][ T53] usb 3-1: USB disconnect, device number 31 [ 536.316204][ T51] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 537.293544][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.361294][ T51] usb 2-1: config 0 has no interfaces? [ 537.368243][ T51] usb 2-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 537.377605][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.388694][ T51] usb 2-1: config 0 descriptor?? [ 537.449124][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 537.710758][ T29] audit: type=1400 audit(1723025983.927:567): avc: denied { read } for pid=10039 comm="syz.2.1314" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 537.767445][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 537.783632][ T29] audit: type=1400 audit(1723025983.927:568): avc: denied { open } for pid=10039 comm="syz.2.1314" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 537.810061][ T29] audit: type=1400 audit(1723025983.967:569): avc: denied { ioctl } for pid=10039 comm="syz.2.1314" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 538.428399][ T9847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.662351][ T9847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.761985][ T9847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.860327][ T5309] usb 2-1: USB disconnect, device number 34 [ 539.094835][ T6257] IPVS: stop unused estimator thread 0... [ 539.115677][ T29] audit: type=1400 audit(1723025985.327:570): avc: denied { execmem } for pid=10047 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 540.074331][ T9847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 540.150536][ T9847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 540.221636][ T9847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 540.253592][ T9847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.855130][ T9843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.883935][ T9843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.903601][ T9843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.924030][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.934327][ T9843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 540.999680][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.043531][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.050766][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.071523][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.078734][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.242062][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.503091][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.583821][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.591073][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.632898][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.640200][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.078088][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.502494][ T9847] veth0_vlan: entered promiscuous mode [ 542.595459][ T9847] veth1_vlan: entered promiscuous mode [ 542.804595][ T9847] veth0_macvtap: entered promiscuous mode [ 542.845739][ T9847] veth1_macvtap: entered promiscuous mode [ 542.980358][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.023203][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.087440][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.126689][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.170930][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.201765][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.226078][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.235209][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 543.243363][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 543.251080][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 543.258763][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 543.275164][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.286786][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.297683][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.314160][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.324217][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.334796][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.350616][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.381699][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.400049][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.414834][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.435941][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.445778][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.486191][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.512525][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.536121][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.562921][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.582359][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.654068][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.734874][ T9847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.755604][ T9847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.784677][ T9847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.845104][ T9847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.111451][ T29] audit: type=1400 audit(1723025990.307:571): avc: denied { rename } for pid=10104 comm="syz.2.1321" name="file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 544.623852][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.665758][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 649.672753][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6273/1:b..l [ 649.681365][ C1] rcu: (detected by 1, t=10502 jiffies, g=48577, q=278 ncpus=2) [ 649.689093][ C1] task:kworker/u8:23 state:R running task stack:23616 pid:6273 tgid:6273 ppid:2 flags:0x00004000 [ 649.702376][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 649.710246][ C1] Call Trace: [ 649.713532][ C1] [ 649.716474][ C1] __schedule+0xe37/0x5490 [ 649.720918][ C1] ? __pfx_mark_lock+0x10/0x10 [ 649.725709][ C1] ? __pfx_mark_lock+0x10/0x10 [ 649.730494][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 649.735459][ C1] ? __pfx___schedule+0x10/0x10 [ 649.740327][ C1] ? hlock_class+0x4e/0x130 [ 649.744862][ C1] ? mark_held_locks+0x9f/0xe0 [ 649.749651][ C1] preempt_schedule_irq+0x51/0x90 [ 649.754704][ C1] irqentry_exit+0x36/0x90 [ 649.759143][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.765156][ C1] RIP: 0010:lock_acquire+0x160/0x560 [ 649.770464][ C1] Code: 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b 92 dc 0a 00 00 85 d2 0f 85 d6 00 00 00 9c 8f 44 24 08 <48> 8b 6c 24 08 fa 48 c7 c7 c0 c7 4c 8b e8 3e 76 a9 09 48 89 e8 45 [ 649.790175][ C1] RSP: 0018:ffffc9000330fa70 EFLAGS: 00000246 [ 649.796257][ C1] RAX: 0000000000000007 RBX: 1ffff92000661f50 RCX: 0000000000000000 [ 649.804240][ C1] RDX: 0000000000000000 RSI: ffffffff8bb08480 RDI: ffff88802b2246dc [ 649.812223][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20259d3 [ 649.820203][ C1] R10: ffffffff9012ce9f R11: 0000000000000000 R12: 0000000000000000 [ 649.828188][ C1] R13: 0000000000000000 R14: ffffffff8ddb5ca0 R15: 0000000000000000 [ 649.836190][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 649.841244][ C1] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 649.847345][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.852394][ C1] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 649.858323][ C1] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 649.864423][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 649.870780][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 649.875827][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 649.882889][ C1] process_one_work+0x9c5/0x1b40 [ 649.887864][ C1] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 649.894309][ C1] ? __pfx_process_one_work+0x10/0x10 [ 649.899713][ C1] ? assign_work+0x1a0/0x250 [ 649.904325][ C1] worker_thread+0x6c8/0xf20 [ 649.908942][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.914076][ C1] kthread+0x2c1/0x3a0 [ 649.918155][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.923368][ C1] ? __pfx_kthread+0x10/0x10 [ 649.927968][ C1] ret_from_fork+0x45/0x80 [ 649.932411][ C1] ? __pfx_kthread+0x10/0x10 [ 649.937011][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.941805][ C1] [ 649.944838][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g48577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 649.956061][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 649.966042][ C1] rcu: RCU grace-period kthread stack dump: [ 649.971944][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 649.983841][ C1] Call Trace: [ 649.987126][ C1] [ 649.990065][ C1] __schedule+0xe37/0x5490 [ 649.994505][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 649.999754][ C1] ? __pfx___schedule+0x10/0x10 [ 650.004621][ C1] ? schedule+0x298/0x350 [ 650.008964][ C1] ? __pfx_lock_release+0x10/0x10 [ 650.014008][ C1] ? __pfx___mod_timer+0x10/0x10 [ 650.018966][ C1] ? lock_acquire+0x1b1/0x560 [ 650.023661][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 650.029150][ C1] schedule+0xe7/0x350 [ 650.033234][ C1] schedule_timeout+0x136/0x2a0 [ 650.038118][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 650.043520][ C1] ? __pfx_process_timeout+0x10/0x10 [ 650.048819][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 650.054639][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 650.060122][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 650.064901][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 650.070205][ C1] ? rcu_gp_init+0xc82/0x1630 [ 650.074896][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 650.080117][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 650.085945][ C1] rcu_gp_kthread+0x271/0x380 [ 650.090654][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 650.095904][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.101129][ C1] ? __kthread_parkme+0x148/0x220 [ 650.106183][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 650.111402][ C1] kthread+0x2c1/0x3a0 [ 650.115489][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.120706][ C1] ? __pfx_kthread+0x10/0x10 [ 650.125311][ C1] ret_from_fork+0x45/0x80 [ 650.129757][ C1] ? __pfx_kthread+0x10/0x10 [ 650.134366][ C1] ret_from_fork_asm+0x1a/0x30 [ 650.139160][ C1] [ 650.142188][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 650.148529][ C1] CPU: 1 UID: 0 PID: 6283 Comm: kworker/u8:27 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 650.159485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 650.169552][ C1] Workqueue: events_unbound toggle_allocation_gate [ 650.176082][ C1] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420 [ 650.182787][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 4b 39 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 [ 650.202407][ C1] RSP: 0018:ffffc900040f7908 EFLAGS: 00000293 [ 650.208487][ C1] RAX: 0000000000000000 RBX: ffff8880b9246940 RCX: ffffffff817e443b [ 650.216467][ C1] RDX: ffff8880263b8000 RSI: ffffffff817e4415 RDI: 0000000000000005 [ 650.224449][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 650.232430][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1017248d29 [ 650.240411][ C1] R13: 0000000000000001 R14: ffff8880b9246948 R15: ffff8880b933ffc0 [ 650.248393][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 650.257338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.263936][ C1] CR2: 00007f85ecf7f270 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 650.271917][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.279928][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.287909][ C1] Call Trace: [ 650.291198][ C1] [ 650.294048][ C1] ? show_regs+0x8c/0xa0 [ 650.298320][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 650.304672][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 650.309899][ C1] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 650.315381][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 650.321036][ C1] ? __asan_memcpy+0x3c/0x60 [ 650.325641][ C1] ? __asan_memcpy+0x3c/0x60 [ 650.330262][ C1] ? update_process_times+0x175/0x220 [ 650.335659][ C1] ? __pfx_update_process_times+0x10/0x10 [ 650.341408][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 650.346914][ C1] ? update_wall_time+0x1c/0x40 [ 650.351794][ C1] ? tick_nohz_handler+0x376/0x530 [ 650.356940][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 650.362433][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 650.367842][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 650.373599][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 650.379693][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 650.384833][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 650.391004][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 650.396836][ C1] [ 650.399774][ C1] [ 650.402712][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 650.408896][ C1] ? smp_call_function_many_cond+0x50b/0x1420 [ 650.414989][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 650.421080][ C1] ? smp_call_function_many_cond+0x4e7/0x1420 [ 650.427183][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 650.433280][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 650.439636][ C1] ? __pfx___text_poke+0x10/0x10 [ 650.444597][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 650.449648][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 650.454787][ C1] text_poke_bp_batch+0x22b/0x760 [ 650.459833][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 650.466014][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 650.471581][ C1] ? __jump_label_patch+0x1db/0x400 [ 650.476809][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 650.483075][ C1] text_poke_finish+0x30/0x40 [ 650.487771][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 650.493777][ C1] jump_label_update+0x1d7/0x400 [ 650.498734][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 650.504652][ C1] static_key_enable+0x1a/0x20 [ 650.509435][ C1] toggle_allocation_gate+0xf8/0x250 [ 650.514745][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 650.520665][ C1] process_one_work+0x9c5/0x1b40 [ 650.525626][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 650.531294][ C1] ? __pfx_process_one_work+0x10/0x10 [ 650.536707][ C1] ? assign_work+0x1a0/0x250 [ 650.541328][ C1] worker_thread+0x6c8/0xf20 [ 650.545953][ C1] ? __pfx_worker_thread+0x10/0x10 [ 650.551088][ C1] kthread+0x2c1/0x3a0 [ 650.555174][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.560396][ C1] ? __pfx_kthread+0x10/0x10 [ 650.565003][ C1] ret_from_fork+0x45/0x80 [ 650.569448][ C1] ? __pfx_kthread+0x10/0x10 [ 650.574061][ C1] ret_from_fork_asm+0x1a/0x30 [ 650.578857][ C1]