last executing test programs: 5.691955893s ago: executing program 4 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0xce3db46858f33da1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x20000000) 5.471181672s ago: executing program 4 (id=2325): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x604, 0x0) 5.244856902s ago: executing program 3 (id=2328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x38}}, 0x0) 4.911109186s ago: executing program 3 (id=2332): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000800), 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2008, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) 4.188019396s ago: executing program 2 (id=2337): socket$inet6(0xa, 0x3, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000009df00)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x5b}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xd82}]}}]}, 0x44}}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x214) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) sendfile(r5, r6, 0x0, 0x3) read(r1, &(0x7f0000000080)=""/241, 0xf1) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000200)={0x5, 0x7, 0xa81, 0x7, 0xc, "8fd21d237e06f7354d90aef967551b295814c8"}) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="cb", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000058c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="a1", 0x1}], 0x1}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x3}, 0xc) r8 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0x810c5701, &(0x7f0000000000)={0x1, 0x8002, 0xfffffffffffffffc}) 3.064063911s ago: executing program 2 (id=2341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001a40)={0x0, 0x0, 0x0, r2, 0x5}) 2.708261723s ago: executing program 0 (id=2342): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b2, &(0x7f0000001340)={{@local}, @any, 0x1a, 0x0, 0x3, 0xb73, 0x3f}) 2.65668688s ago: executing program 3 (id=2343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 2.533902113s ago: executing program 4 (id=2344): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000f8ca4437ea7b"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x7, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "08d5f1c619795be7"}}, 0x48}}, 0x0) 2.415568237s ago: executing program 1 (id=2345): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x3, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) 2.356483864s ago: executing program 3 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000006a00000008000300", @ANYRES32=r2, @ANYBLOB="0a00067e0f000000000000000500d2"], 0x30}}, 0x0) 2.356133338s ago: executing program 2 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0f20000ff01ffffffff080211000000505050505050"], 0x40}}, 0x0) 2.33560824s ago: executing program 0 (id=2348): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040b0b00c800bcffc23c126c9f6e68aae3c4c3f4552e6076674fe1ee91f3aa4de42ac07882c2b8abf0817c1e652283ebb4105eaa243ddae2eb24d0cdc98e41236fa61a0f934d3c75ee5bdd1ba79a1b128900279531323d305e3dad250bcecedeee06"], 0xe) r0 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2, 0x3}) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0xfc, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) unshare(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0}, 0x20) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x4a0}], 0x1, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x88281, 0x0) epoll_create(0xcf1) 2.33082054s ago: executing program 4 (id=2349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000085}, 0x4040) 2.136334547s ago: executing program 1 (id=2350): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xe39, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.1050111s ago: executing program 2 (id=2351): socket$inet6(0xa, 0x3, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000009df00)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x5b}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xd82}]}}]}, 0x44}}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x214) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) sendfile(r5, r6, 0x0, 0x3) read(r1, &(0x7f0000000080)=""/241, 0xf1) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000200)={0x5, 0x7, 0xa81, 0x7, 0xc, "8fd21d237e06f7354d90aef967551b295814c8"}) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="cb", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000058c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="a1", 0x1}], 0x1}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x3}, 0xc) r8 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0x810c5701, &(0x7f0000000000)={0x1, 0x8002, 0xfffffffffffffffc}) 2.060990128s ago: executing program 3 (id=2352): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) readv(r2, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1) 2.059685326s ago: executing program 4 (id=2353): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000800), 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2008, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) 1.77834688s ago: executing program 0 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.490984718s ago: executing program 0 (id=2355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) 1.260298679s ago: executing program 1 (id=2356): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="002ad73736", 0x5}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x401, 0x41}}], 0x20}, 0x4044880) 1.101426595s ago: executing program 3 (id=2357): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000001b3bb000000000000850000001900000095000000000000007e5a9ae777ecc153"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x45f7ac3b4d3e0332, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) pread64(r10, 0x0, 0x0, 0x0) getdents(r9, &(0x7f0000000380)=""/24, 0x18) getdents64(r9, 0xffffffffffffffff, 0x43) 1.028317637s ago: executing program 2 (id=2358): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 869.393789ms ago: executing program 0 (id=2359): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$TIOCVHANGUP(r2, 0x5411, 0x1000000000000) 740.332855ms ago: executing program 2 (id=2360): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 561.13704ms ago: executing program 1 (id=2361): openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x800000000009, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x980915, 0x8}) socket$inet_udplite(0x2, 0x2, 0x88) 327.453388ms ago: executing program 1 (id=2362): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x4, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) close(r0) 94.967542ms ago: executing program 4 (id=2363): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 74.630124ms ago: executing program 1 (id=2364): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040b0b00c800bcffc23c126c9f6e68aae3c4c3f4552e6076674fe1ee91f3aa4de42ac07882c2b8abf0817c1e652283ebb4105eaa243ddae2eb24d0cdc98e41236fa61a0f934d3c75ee5bdd1ba79a1b128900279531323d305e3dad250bcecedeee06"], 0xe) r0 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2, 0x3}) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0xfc, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) unshare(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0}, 0x20) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x4a0}], 0x1, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x88281, 0x0) epoll_create(0xcf1) 0s ago: executing program 0 (id=2365): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000280)={0x6, 0x1, [{0x1, 0x1}]}) kernel console output (not intermixed with test programs): .592814][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.882714][ T5282] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1174.389311][T13829] hsr_slave_0: entered promiscuous mode [ 1174.419076][T13829] hsr_slave_1: entered promiscuous mode [ 1174.458122][T13829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.465711][T13829] Cannot create hsr debugfs directory [ 1174.959527][ T9055] Bluetooth: hci4: command tx timeout [ 1175.317400][ T6964] bridge_slave_1: left allmulticast mode [ 1175.340619][ T6964] bridge_slave_1: left promiscuous mode [ 1175.355526][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.368973][ T6964] bridge_slave_0: left allmulticast mode [ 1175.374783][ T6964] bridge_slave_0: left promiscuous mode [ 1175.382375][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.900199][ T5284] usb 3-1: USB disconnect, device number 11 [ 1175.952308][ T5284] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1176.424165][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 1176.905250][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.956969][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.982411][ T6964] bond0 (unregistering): Released all slaves [ 1177.038919][ T9055] Bluetooth: hci4: command tx timeout [ 1177.301890][T10052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1177.309509][ T9080] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1177.338520][T10052] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1177.359686][T10052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1177.373888][T10052] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1177.409592][T10052] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1177.416972][T10052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1177.521174][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.568191][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.598316][ T9080] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.624183][ T9080] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1177.699904][T14096] UBIFS error (pid: 14096): cannot open "/dev/sr0", error -22 [ 1177.703708][ T9080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.873621][ T9080] usb 3-1: config 0 descriptor?? [ 1177.925411][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.931969][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.487205][ T9080] waltop 0003:172F:0038.0003: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 1178.695633][ T6964] hsr_slave_0: left promiscuous mode [ 1178.728723][ T6964] hsr_slave_1: left promiscuous mode [ 1178.758623][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.800336][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.118844][T10052] Bluetooth: hci4: command tx timeout [ 1179.308553][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.390368][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.518718][T10052] Bluetooth: hci0: command tx timeout [ 1180.538334][ T5284] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 1180.614860][ T6964] team0 (unregistering): Port device team_slave_1 removed [ 1180.911258][ T6964] team0 (unregistering): Port device team_slave_0 removed [ 1181.308259][T10052] Bluetooth: hci4: command tx timeout [ 1181.598265][T10052] Bluetooth: hci0: command tx timeout [ 1181.751233][ T5224] usb 3-1: USB disconnect, device number 12 [ 1183.678828][T10052] Bluetooth: hci0: command tx timeout [ 1185.758360][ T9055] Bluetooth: hci0: command tx timeout [ 1186.721784][T14064] chnl_net:caif_netlink_parms(): no params data found [ 1187.690873][T13829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1188.681994][T13829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1188.887123][T13829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1188.945139][T13829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1189.078621][T14217] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1398'. [ 1189.214400][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.232735][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.248531][T14064] bridge_slave_0: entered allmulticast mode [ 1189.288252][T14064] bridge_slave_0: entered promiscuous mode [ 1189.420843][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.466369][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.490134][T14064] bridge_slave_1: entered allmulticast mode [ 1189.543761][T14064] bridge_slave_1: entered promiscuous mode [ 1190.133843][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.400883][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.769761][T10052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1190.787604][T10052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1190.803966][T10052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1190.835386][T10052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1190.846972][T10052] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1190.855379][T10052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1190.945815][ T6964] bridge_slave_1: left allmulticast mode [ 1190.976383][ T6964] bridge_slave_1: left promiscuous mode [ 1190.987051][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.068676][ T6964] bridge_slave_0: left allmulticast mode [ 1191.082362][ T6964] bridge_slave_0: left promiscuous mode [ 1191.130080][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.241055][ T6964] bridge_slave_1: left allmulticast mode [ 1191.252070][ T6964] bridge_slave_1: left promiscuous mode [ 1191.269885][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.282836][ T6964] bridge_slave_0: left allmulticast mode [ 1191.289747][ T6964] bridge_slave_0: left promiscuous mode [ 1191.312521][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.268816][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.341583][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.549685][ T6964] bond0 (unregistering): Released all slaves [ 1192.605235][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.658697][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.727899][ T6964] bond0 (unregistering): Released all slaves [ 1192.832798][T14064] team0: Port device team_slave_0 added [ 1192.900267][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:1) [ 1192.911164][T14064] team0: Port device team_slave_1 added [ 1192.924870][T14091] chnl_net:caif_netlink_parms(): no params data found [ 1192.968429][ T9055] Bluetooth: hci5: command tx timeout [ 1193.605436][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.633532][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.759998][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.898023][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1193.913118][ T30] audit: type=1400 audit(1725977268.127:1072): avc: denied { getopt } for pid=14251 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1193.989141][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.996093][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.127318][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.423588][T14064] hsr_slave_0: entered promiscuous mode [ 1194.601081][T14064] hsr_slave_1: entered promiscuous mode [ 1194.638115][T14064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.646293][T14064] Cannot create hsr debugfs directory [ 1195.059751][ T9055] Bluetooth: hci5: command tx timeout [ 1195.457062][ T6964] hsr_slave_0: left promiscuous mode [ 1195.468870][ T6964] hsr_slave_1: left promiscuous mode [ 1195.561137][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.570175][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.592191][ T6964] hsr_slave_0: left promiscuous mode [ 1195.605218][ T6964] hsr_slave_1: left promiscuous mode [ 1195.619721][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.634456][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.643951][ T6964] team0 (unregistering): Port device team_slave_1 removed [ 1196.830132][T14285] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1409'. [ 1196.908981][ T6964] team0 (unregistering): Port device team_slave_0 removed [ 1197.135542][ T9055] Bluetooth: hci5: command tx timeout [ 1197.156567][ T30] audit: type=1400 audit(1725977271.397:1073): avc: denied { lock } for pid=14280 comm="syz.2.1409" path="socket:[53293]" dev="sockfs" ino=53293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1197.402838][ T30] audit: type=1326 audit(1725977271.547:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.503007][ T30] audit: type=1326 audit(1725977271.547:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.689584][ T30] audit: type=1326 audit(1725977271.927:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.795030][ T30] audit: type=1326 audit(1725977271.967:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.836956][ T30] audit: type=1326 audit(1725977271.977:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.878217][ T30] audit: type=1326 audit(1725977271.977:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1197.959237][ T30] audit: type=1326 audit(1725977271.977:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1198.047951][ T30] audit: type=1326 audit(1725977271.977:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x7fc00000 [ 1198.121837][ T6964] team0 (unregistering): Port device team_slave_1 removed [ 1198.203021][ T6964] team0 (unregistering): Port device team_slave_0 removed [ 1198.967834][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.994206][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.018384][T14091] bridge_slave_0: entered allmulticast mode [ 1199.120012][T14091] bridge_slave_0: entered promiscuous mode [ 1199.133966][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.144723][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.156040][T14091] bridge_slave_1: entered allmulticast mode [ 1199.166170][T14091] bridge_slave_1: entered promiscuous mode [ 1199.198265][ T9055] Bluetooth: hci5: command tx timeout [ 1200.143216][T14309] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 1200.847723][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.914331][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.277997][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1201.278010][ T30] audit: type=1400 audit(1725977275.517:1092): avc: denied { write } for pid=14313 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1201.304694][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 1201.338847][ T30] audit: type=1400 audit(1725977275.517:1093): avc: denied { nlmsg_write } for pid=14313 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1201.440179][T14091] team0: Port device team_slave_0 added [ 1201.515659][T14091] team0: Port device team_slave_1 added [ 1202.007670][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1416'. [ 1203.153077][T14333] netlink: 'syz.2.1417': attribute type 7 has an invalid length. [ 1203.161951][T14333] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1417'. [ 1203.199756][T14333] netlink: 'syz.2.1417': attribute type 3 has an invalid length. [ 1203.207578][T14333] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1417'. [ 1203.299163][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.909879][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.937171][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.953324][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.978282][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.297449][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.858406][ T5224] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1207.048246][ T5224] usb 4-1: Using ep0 maxpacket: 16 [ 1207.064349][ T5224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.105214][T14233] chnl_net:caif_netlink_parms(): no params data found [ 1207.112606][ T5224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.138718][ T5224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1207.195051][ T5224] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1207.197983][T14091] hsr_slave_0: entered promiscuous mode [ 1207.217270][ T5224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1207.246188][ T5224] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1207.275914][T14091] hsr_slave_1: entered promiscuous mode [ 1207.298225][ T5224] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1207.311662][T14091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.319883][ T5224] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.338484][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1207.347476][T14091] Cannot create hsr debugfs directory [ 1207.367956][ T5224] usb 4-1: SerialNumber: syz [ 1207.417712][ T5224] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1207.538484][ T9080] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1207.738231][ T9080] usb 3-1: Using ep0 maxpacket: 8 [ 1207.760609][ T9080] usb 3-1: config 64 has an invalid interface number: 23 but max is 1 [ 1207.786276][ T9080] usb 3-1: config 64 has an invalid interface number: 83 but max is 1 [ 1207.818473][ T9080] usb 3-1: config 64 has no interface number 0 [ 1207.824663][ T9080] usb 3-1: config 64 has no interface number 1 [ 1207.889751][ T9080] usb 3-1: config 64 interface 23 has no altsetting 0 [ 1207.906447][ T5224] usb 4-1: USB disconnect, device number 10 [ 1207.988913][ T9080] usb 3-1: config 64 interface 83 has no altsetting 0 [ 1208.163296][ T9080] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=3e.66 [ 1208.201151][ T9080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.245204][ T9080] usb 3-1: Product: syz [ 1208.254027][ T9080] usb 3-1: Manufacturer: syz [ 1208.262414][ T9080] usb 3-1: SerialNumber: syz [ 1208.708269][ T9080] usb 3-1: USB disconnect, device number 13 [ 1208.746895][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.795832][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.846205][T14233] bridge_slave_0: entered allmulticast mode [ 1208.866389][T14233] bridge_slave_0: entered promiscuous mode [ 1208.884947][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.892434][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.900786][T14233] bridge_slave_1: entered allmulticast mode [ 1208.909444][T14233] bridge_slave_1: entered promiscuous mode [ 1209.108291][ T5314] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1209.327870][ T5314] usb 4-1: Using ep0 maxpacket: 8 [ 1209.345399][ T5314] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=22.1b [ 1209.359033][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.370862][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.380635][ T5314] usb 4-1: Product: syz [ 1209.384822][ T5314] usb 4-1: Manufacturer: syz [ 1209.403320][T14064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1209.410891][ T5314] usb 4-1: SerialNumber: syz [ 1209.439153][ T5314] usb 4-1: config 0 descriptor?? [ 1209.460602][ T5314] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 1209.477429][T14064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1209.561656][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.759499][T14064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1209.897273][T14064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1210.099836][ T5224] usb 4-1: USB disconnect, device number 11 [ 1210.310255][ T5381] bridge_slave_1: left allmulticast mode [ 1210.316478][ T5381] bridge_slave_1: left promiscuous mode [ 1210.362935][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.414306][ T5381] bridge_slave_0: left allmulticast mode [ 1210.428271][ T5381] bridge_slave_0: left promiscuous mode [ 1210.449056][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.880122][ T5381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.914134][ T5381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.991611][ T5381] bond0 (unregistering): Released all slaves [ 1211.063284][T14233] team0: Port device team_slave_0 added [ 1211.092224][T14233] team0: Port device team_slave_1 added [ 1211.208260][ T5282] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1211.458155][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 1211.478870][ T5282] usb 4-1: config 0 has no interfaces? [ 1211.500834][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1211.535675][ T30] audit: type=1400 audit(1725977285.757:1094): avc: denied { ioctl } for pid=14398 comm="syz.2.1427" path="/178/file0/file0" dev="fuse" ino=0 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1211.548083][ T5282] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1211.560088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.668377][ T5282] usb 4-1: Product: syz [ 1211.672557][ T5282] usb 4-1: Manufacturer: syz [ 1211.704827][ T5282] usb 4-1: SerialNumber: syz [ 1211.845564][ T5282] usb 4-1: config 0 descriptor?? [ 1211.958453][ T5381] hsr_slave_0: left promiscuous mode [ 1212.081134][ T5381] hsr_slave_1: left promiscuous mode [ 1212.166952][ T5282] usb 4-1: USB disconnect, device number 12 [ 1212.202818][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.262725][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.197765][ T5381] team0 (unregistering): Port device team_slave_1 removed [ 1214.231683][ T5381] team0 (unregistering): Port device team_slave_0 removed [ 1214.548916][ T5282] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1214.768357][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 1214.785975][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1214.838091][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1214.867328][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1214.906809][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1214.945847][ T5282] usb 3-1: New USB device found, idVendor=04ca, idProduct=9e6d, bcdDevice= 2.c8 [ 1214.976875][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.987106][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.008171][ T5282] usb 3-1: Product: syz [ 1215.018106][ T5282] usb 3-1: Manufacturer: syz [ 1215.023945][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.041292][ T5282] usb 3-1: SerialNumber: syz [ 1215.086300][ T5282] usb 3-1: config 0 descriptor?? [ 1215.108608][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.148762][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.166619][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.192540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.262629][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.618617][ T5314] usb 3-1: USB disconnect, device number 14 [ 1215.717792][T14091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1215.736506][T14091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1215.752496][T14091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1215.913465][T14233] hsr_slave_0: entered promiscuous mode [ 1215.939932][T14233] hsr_slave_1: entered promiscuous mode [ 1215.951028][T14233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1216.413518][T14233] Cannot create hsr debugfs directory [ 1216.763487][T14091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1217.318320][ T5282] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1217.548110][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 1217.570380][ T5282] usb 3-1: New USB device found, idVendor=0572, idProduct=1329, bcdDevice=56.c1 [ 1217.633708][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.683539][ T5282] usb 3-1: Product: syz [ 1217.724726][T14064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.755217][ T5282] usb 3-1: Manufacturer: syz [ 1217.774950][ T5282] usb 3-1: SerialNumber: syz [ 1217.829278][ T5282] usb 3-1: config 0 descriptor?? [ 1218.070579][T14064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.157555][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.164699][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.213502][T14091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.251694][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.258830][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.427043][ T9] usb 3-1: USB disconnect, device number 15 [ 1222.124062][T14091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.351787][ T5284] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1222.375361][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.382584][ T6941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.445219][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.452356][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.579056][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 1222.586372][ T30] audit: type=1400 audit(1725977296.817:1095): avc: denied { read } for pid=14466 comm="syz.2.1438" path="socket:[54601]" dev="sockfs" ino=54601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1222.620749][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1222.736383][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1222.789078][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1222.838430][ T5284] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1222.864190][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.877416][ T5284] usb 4-1: Product: syz [ 1222.888196][ T5284] usb 4-1: Manufacturer: syz [ 1222.892823][ T5284] usb 4-1: SerialNumber: syz [ 1222.916758][ T5284] usb 4-1: config 0 descriptor?? [ 1222.936462][ T5284] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1223.124237][T14233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1223.214938][T14233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1223.276391][T14091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1223.391632][T14233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1223.434605][T14233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1223.451147][ T5331] usb 4-1: USB disconnect, device number 13 [ 1224.035970][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.114909][T14064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.327706][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.437629][T14494] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1224.442927][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.461918][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.469155][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.576199][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.583458][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.706099][T14064] veth0_vlan: entered promiscuous mode [ 1225.003162][T14064] veth1_vlan: entered promiscuous mode [ 1225.369262][T14091] veth0_vlan: entered promiscuous mode [ 1225.474948][T14091] veth1_vlan: entered promiscuous mode [ 1225.589567][T14064] veth0_macvtap: entered promiscuous mode [ 1225.623177][T14064] veth1_macvtap: entered promiscuous mode [ 1225.806678][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.908135][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.953693][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.031976][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.063172][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.127615][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.198180][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.217857][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.260325][T14064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.273155][ T9080] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1226.306083][T14091] veth0_macvtap: entered promiscuous mode [ 1226.361219][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.401896][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.453320][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.474284][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.508150][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.520844][ T9080] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 1226.548075][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.548250][ T9080] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.594865][ T9080] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1226.612330][ T9080] usb 3-1: config 0 has no interface number 0 [ 1226.660174][ T9080] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1226.663229][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.663276][ T9080] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1226.715136][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.741084][T14064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.744253][ T9080] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.811150][ T9080] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1226.838123][ T9080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 1226.866815][ T9080] usb 3-1: SerialNumber: syz [ 1226.895626][T14091] veth1_macvtap: entered promiscuous mode [ 1226.898448][ T9080] usb 3-1: config 0 descriptor?? [ 1226.923259][ T9080] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1227.002018][T14064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.033914][T14064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.091609][T14064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.172284][T14064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.239140][ T9080] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 1227.283338][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.295029][ T9080] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1227.310478][ T9080] usb 3-1: MIDIStreaming interface descriptor not found [ 1227.423463][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.481623][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.515110][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.550583][ T9080] usb 3-1: USB disconnect, device number 16 [ 1227.567320][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.628224][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.663841][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.695602][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.722391][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.735947][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.760842][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.813535][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.832833][T14526] udevd[14526]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.974006][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.020509][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.049687][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.097289][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.118102][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.149461][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.178113][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.212255][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.222242][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.247258][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.270037][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.413674][T14091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.458179][T14091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.483783][T14091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.498153][T14091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.732316][ T6941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.746015][ T6941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.932135][T14233] veth0_vlan: entered promiscuous mode [ 1228.960585][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.990964][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.042430][T14233] veth1_vlan: entered promiscuous mode [ 1229.060838][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.079685][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.249367][ T6955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.276893][T14233] veth0_macvtap: entered promiscuous mode [ 1229.304707][T14233] veth1_macvtap: entered promiscuous mode [ 1229.311486][ T6955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.407996][T14538] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1043'. [ 1229.456668][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.511857][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.522580][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.550492][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.573662][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.584377][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.645631][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.663631][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.702455][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.754582][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.786263][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.818108][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.850281][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.926557][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.977223][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.033842][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.256143][T14556] tmpfs: Unknown parameter 'u' [ 1230.265548][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.484264][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.495040][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.505109][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.516831][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.529807][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.540512][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.566102][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.966305][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.054481][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.342962][T14233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.371813][T14233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.410196][T14233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.445154][T14233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.455939][T14563] block device autoloading is deprecated and will be removed. [ 1231.934632][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.966560][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.147265][ T6952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.199130][ T6952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.550717][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 1232.664428][T14590] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 1232.753472][T14590] batman_adv: batadv0: Adding interface: veth0_vlan [ 1232.855074][T14590] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.939234][T14590] batman_adv: batadv0: Interface activated: veth0_vlan [ 1234.148554][T14607] netlink: 'syz.1.1467': attribute type 7 has an invalid length. [ 1234.181021][T14607] netlink: 'syz.1.1467': attribute type 6 has an invalid length. [ 1234.459273][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 1234.547735][T14615] usb usb8: usbfs: process 14615 (syz.0.1469) did not claim interface 0 before use [ 1234.868437][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1235.088154][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1235.140191][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.151473][T14632] xt_socket: unknown flags 0x50 [ 1235.176653][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 1235.225952][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.267287][ T9] usb 5-1: config 0 descriptor?? [ 1235.314399][ T9] rndis_host 5-1:0.0: invalid descriptor buffer length [ 1235.351306][ T9] usb 5-1: bad CDC descriptors [ 1235.362795][ T9] cdc_acm 5-1:0.0: invalid descriptor buffer length [ 1235.681325][T14642] netlink: 'syz.0.1480': attribute type 7 has an invalid length. [ 1235.692285][T14642] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1480'. [ 1235.708219][T14642] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 1235.719617][T14642] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1480'. [ 1236.547122][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 1236.571746][ T5314] usb 5-1: USB disconnect, device number 9 [ 1239.375451][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.383629][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.441474][T14678] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 1239.508106][T14678] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1494'. [ 1239.624312][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 1239.919533][T14693] dlm: Unknown command passed to DLM device : 222 [ 1239.919533][T14693] [ 1241.088662][ T5282] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1241.318156][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 1241.496628][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 1241.799513][ T5282] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1241.842677][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1241.850734][ T5284] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1241.867832][T14716] UBIFS error (pid: 14716): cannot open "/dev/sr0", error -22 [ 1241.884948][ T5282] usb 2-1: Product: syz [ 1241.945364][ T5282] usb 2-1: Manufacturer: syz [ 1241.957623][ T5282] usb 2-1: SerialNumber: syz [ 1241.978454][ T5282] usb 2-1: config 0 descriptor?? [ 1241.991866][T14698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1242.049127][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 1242.325443][ T5284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1242.358162][ T5284] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1242.366885][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.428430][ T5284] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1242.437431][ T5284] usb 3-1: config 1 has no interface number 1 [ 1242.483877][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1242.515646][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1514'. [ 1242.528151][ T5284] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1242.561615][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1242.576908][ T1616] usb 2-1: USB disconnect, device number 4 [ 1242.584003][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.628283][ T5284] usb 3-1: Product: syz [ 1242.638429][ T5284] usb 3-1: Manufacturer: syz [ 1242.654877][ T5284] usb 3-1: SerialNumber: syz [ 1243.178577][ T5284] usb 3-1: USB disconnect, device number 17 [ 1244.029619][T14464] udevd[14464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1244.239096][ T30] audit: type=1400 audit(1725978005.478:1096): avc: denied { ioctl } for pid=14741 comm="syz.0.1518" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1244.608704][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1245.289362][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 1245.298940][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1245.453867][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1245.601684][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.747166][ T9] usb 4-1: Product: syz [ 1245.766182][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 1245.860131][ T9] usb 4-1: Manufacturer: syz [ 1245.930510][ T9] usb 4-1: SerialNumber: syz [ 1245.961806][ T9] usb 4-1: config 0 descriptor?? [ 1245.983393][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1246.638639][ T5284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1246.643666][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 1246.650549][ T30] audit: type=1400 audit(1725978236.557:1097): avc: denied { mount } for pid=14766 comm="syz.2.1528" name="/" dev="ocfs2_dlmfs" ino=56363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1246.935853][ T9] gspca_sn9c2028: read1 error -71 [ 1246.948178][ T9] gspca_sn9c2028: read1 error -71 [ 1246.959808][ T9] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1247.005415][ T9] usb 4-1: USB disconnect, device number 14 [ 1247.088188][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 1247.102837][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1247.117961][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1247.177034][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1247.216396][T14777] Cannot find del_set index 1 as target [ 1247.239516][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1247.264081][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1247.302542][ T5284] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ae.89 [ 1247.388150][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.410174][ T5284] usb 5-1: config 0 descriptor?? [ 1247.463009][T14779] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 1247.471869][ T5284] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.488308][T14779] nbd: illegal input index 11862028 [ 1247.557015][T14765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.019388][ T5284] usb 5-1: USB disconnect, device number 10 [ 1250.184759][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 1250.758145][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1250.807705][ T30] audit: type=1400 audit(1725978699.047:1098): avc: denied { getopt } for pid=14819 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1250.953030][ T30] audit: type=1326 audit(1725978699.197:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14804 comm="syz.3.1540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a77def9 code=0x0 [ 1251.170479][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.185946][T14824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.227575][ T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1251.264456][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.277690][ T9] usb 2-1: Product: syz [ 1251.287066][ T9] usb 2-1: Manufacturer: syz [ 1251.325034][ T9] usb 2-1: SerialNumber: syz [ 1251.387210][ T9] usb 2-1: config 0 descriptor?? [ 1251.428496][ T9] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 1251.520565][ T30] audit: type=1400 audit(1725978699.767:1100): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1251.562163][ T9] usb 2-1: No valid video chain found. [ 1251.766155][ T5314] usb 2-1: USB disconnect, device number 5 [ 1251.786230][ T30] audit: type=1326 audit(1725978699.987:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.4.1546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1251.981170][T14836] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1558'. [ 1254.550767][ T30] audit: type=1400 audit(1725978702.687:1102): avc: denied { create } for pid=14857 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1254.674992][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 1255.038909][ T30] audit: type=1400 audit(1725978932.270:1103): avc: denied { getopt } for pid=14857 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1257.343861][ T30] audit: type=1326 audit(1725978934.590:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14885 comm="syz.0.1565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff197b7def9 code=0x0 [ 1257.997211][ T30] audit: type=1400 audit(1725978935.240:1105): avc: denied { ioctl } for pid=14915 comm="syz.2.1575" path="socket:[57748]" dev="sockfs" ino=57748 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1258.418570][ T1616] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1258.633019][ T1616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1258.694723][ T1616] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1258.717151][ T1616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.726346][ T1616] usb 4-1: Product: syz [ 1258.727392][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 1258.735656][ T1616] usb 4-1: Manufacturer: syz [ 1258.773411][ T1616] usb 4-1: SerialNumber: syz [ 1258.809448][ T1616] usb 4-1: config 0 descriptor?? [ 1258.827135][ T1616] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1259.286939][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 1259.618489][ T1616] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1259.712451][ T1616] usb 4-1: USB disconnect, device number 15 [ 1259.820895][T14464] udevd[14464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.658324][ T1616] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1262.848586][ T1616] usb 3-1: Using ep0 maxpacket: 8 [ 1262.875006][ T1616] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=84.cd [ 1262.907730][ T1616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.164118][ T1616] usb 3-1: string descriptor 0 read error: -71 [ 1263.221425][ T1616] usb 3-1: USB disconnect, device number 18 [ 1265.140434][T15078] kAFS: unable to lookup cell '/yz1' [ 1265.563324][T15088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1633'. [ 1266.197291][T15093] UBIFS error (pid: 15093): cannot open "/dev/sr0", error -22 [ 1267.357883][T15116] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1642'. [ 1267.745263][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'. [ 1268.275478][T15132] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 1268.310354][T15132] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1649'. [ 1268.357021][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 1268.593926][T15138] UBIFS error (pid: 15138): cannot open "/dev/sr0", error -22 [ 1268.952574][ T30] audit: type=1400 audit(1725978946.200:1106): avc: denied { ioctl } for pid=15149 comm="syz.4.1657" path="socket:[57206]" dev="sockfs" ino=57206 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1269.399736][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 1269.589291][T15155] netlink: 'syz.3.1659': attribute type 18 has an invalid length. [ 1270.139234][T15165] program syz.3.1663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1270.220495][T15171] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1271.021275][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 1271.232659][T15186] UBIFS error (pid: 15186): cannot open "/dev/sr0", error -22 [ 1271.456745][T15191] ieee802154 phy0 wpan0: encryption failed: -22 [ 1272.140851][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 1272.525845][ T30] audit: type=1400 audit(1725979178.724:1107): avc: denied { ioctl } for pid=15204 comm="syz.1.1680" path="socket:[57298]" dev="sockfs" ino=57298 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1272.711222][T15211] xt_hashlimit: invalid interval [ 1272.959804][T15214] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1685'. [ 1273.041060][T15214] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1273.158540][T15214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1273.590732][ T30] audit: type=1326 audit(1725979408.837:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.4.1683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1273.675119][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 1273.761515][T15228] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1274.852131][T15238] tipc: Started in network mode [ 1274.858800][T15238] tipc: Node identity 4, cluster identity 4711 [ 1274.865710][T15238] tipc: Node number set to 4 [ 1275.558569][T15240] UBIFS error (pid: 15240): cannot open "/dev/sr0", error -22 [ 1276.378560][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1276.545337][ T30] audit: type=1326 audit(1725979411.787:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.4.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1276.709912][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice=7e.38 [ 1276.747247][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=247 [ 1276.774316][ T9] usb 3-1: Product: syz [ 1276.794660][ T9] usb 3-1: Manufacturer: syz [ 1276.831036][ T9] usb 3-1: SerialNumber: syz [ 1276.901106][ T9] usb 3-1: config 0 descriptor?? [ 1276.931850][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 1276.998152][ T9] gspca_stv06xx: st6422 sensor detected [ 1277.068411][T15281] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1277.512572][ T9] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1277.561256][ T9] usb 3-1: USB disconnect, device number 19 [ 1277.776845][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 1277.837281][T15292] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave [ 1277.870616][T15290] UBIFS error (pid: 15290): cannot open "/dev/sr0", error -22 [ 1277.915753][T15292] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0) [ 1278.579409][T15306] UBIFS error (pid: 15306): cannot open "/dev/sr0", error -22 [ 1279.930742][ T9055] Bluetooth: hci5: unexpected event 0x04 length: 14 > 10 [ 1281.504765][T15323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1281.998568][ T9055] Bluetooth: hci5: command tx timeout [ 1282.986067][ T30] audit: type=1326 audit(1725979418.227:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15343 comm="syz.4.1727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1285.518513][T15368] UBIFS error (pid: 15368): cannot open "/dev/sr0", error -22 [ 1286.278056][ T30] audit: type=1400 audit(1725979421.517:1111): avc: denied { ioctl } for pid=15380 comm="syz.0.1737" path="socket:[59627]" dev="sockfs" ino=59627 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1286.888358][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 1287.853158][T15406] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1288.285492][T15413] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 1289.237519][ T30] audit: type=1326 audit(1725979653.411:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.1.1751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833897def9 code=0x0 [ 1289.362912][T15422] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 1289.505955][ T30] audit: type=1400 audit(1725979653.751:1113): avc: denied { getopt } for pid=15424 comm="syz.4.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1290.148160][ T1616] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1291.110556][ T1616] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1291.178149][ T1616] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1291.231191][ T1616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.281170][ T1616] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1291.307135][ T1616] usb 5-1: config 1 has no interface number 0 [ 1291.326595][ T1616] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 1291.368136][ T1616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.417235][ T1616] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1291.754490][ T1616] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1291.790411][ T1616] snd_usb_pod 5-1:1.1: invalid control EP [ 1291.803681][ T1616] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1291.826366][ T1616] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1291.851015][ T1616] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1291.944970][T15466] overlayfs: missing 'lowerdir' [ 1292.195997][T14530] usb 5-1: USB disconnect, device number 11 [ 1292.202146][ T30] audit: type=1326 audit(1725979656.441:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.1762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a77def9 code=0x0 [ 1292.302772][T15472] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1296.128340][ T30] audit: type=1326 audit(1725979660.371:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.2.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x0 [ 1296.378636][T14530] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1296.618119][T14530] usb 1-1: Using ep0 maxpacket: 32 [ 1296.633665][T14530] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1296.678538][T14530] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=fa.e4 [ 1296.701376][T14530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.726049][T14530] usb 1-1: Product: syz [ 1296.737514][T14530] usb 1-1: Manufacturer: syz [ 1296.748242][T14530] usb 1-1: SerialNumber: syz [ 1296.828762][T14530] usb 1-1: config 0 descriptor?? [ 1296.858842][T14530] yurex 1-1:0.0: Could not find endpoints [ 1297.098192][ T30] audit: type=1400 audit(1725979661.341:1116): avc: denied { getopt } for pid=15553 comm="syz.4.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1297.160256][T15556] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 1297.451241][ T9080] usb 1-1: USB disconnect, device number 4 [ 1297.768340][T10052] Bluetooth: hci4: command 0x0406 tx timeout [ 1298.711216][T15595] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1802'. [ 1299.010001][ T30] audit: type=1326 audit(1725979663.261:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15589 comm="syz.4.1803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1299.129438][T15603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'. [ 1299.562485][T15612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1299.867200][T15612] veth3: entered promiscuous mode [ 1299.875785][T15612] veth3: entered allmulticast mode [ 1299.906791][T15619] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1299.931353][T15619] netlink: 133 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1299.978637][T15619] netlink: 133 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1300.012502][T15622] syz.4.1815: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1300.081772][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.4.1815 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 1300.092573][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1300.102644][T15622] Call Trace: [ 1300.105920][T15622] [ 1300.108848][T15622] dump_stack_lvl+0x16c/0x1f0 [ 1300.113538][T15622] warn_alloc+0x24d/0x3a0 [ 1300.117873][T15622] ? __pfx_warn_alloc+0x10/0x10 [ 1300.122722][T15622] ? stack_depot_save_flags+0x28/0x8f0 [ 1300.128203][T15622] ? kasan_save_stack+0x42/0x60 [ 1300.133078][T15622] ? kasan_save_stack+0x33/0x60 [ 1300.137937][T15622] ? kasan_save_track+0x14/0x30 [ 1300.142796][T15622] ? __kasan_kmalloc+0xaa/0xb0 [ 1300.147572][T15622] ? xskq_create+0x52/0x1d0 [ 1300.152083][T15622] ? xsk_setsockopt+0x757/0xa10 [ 1300.156945][T15622] ? __sys_setsockopt+0x1a4/0x270 [ 1300.161984][T15622] ? __x64_sys_setsockopt+0xbd/0x160 [ 1300.167277][T15622] ? do_syscall_64+0xcd/0x250 [ 1300.171972][T15622] __vmalloc_node_range_noprof+0x10a3/0x14e0 [ 1300.177967][T15622] ? xskq_create+0xfb/0x1d0 [ 1300.182483][T15622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1300.188831][T15622] ? xskq_create+0xfb/0x1d0 [ 1300.193353][T15622] vmalloc_user_noprof+0x6b/0x90 [ 1300.198301][T15622] ? xskq_create+0xfb/0x1d0 [ 1300.202803][T15622] xskq_create+0xfb/0x1d0 [ 1300.207136][T15622] xsk_setsockopt+0x757/0xa10 [ 1300.211825][T15622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1300.217034][T15622] ? find_held_lock+0x2d/0x110 [ 1300.221808][T15622] ? selinux_socket_setsockopt+0x6a/0x80 [ 1300.227451][T15622] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1300.233005][T15622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1300.238214][T15622] do_sock_setsockopt+0x222/0x480 [ 1300.243244][T15622] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1300.248805][T15622] ? __fget_light+0x173/0x210 [ 1300.253491][T15622] __sys_setsockopt+0x1a4/0x270 [ 1300.258363][T15622] ? __pfx___sys_setsockopt+0x10/0x10 [ 1300.263747][T15622] ? xfd_validate_state+0x5d/0x180 [ 1300.268880][T15622] __x64_sys_setsockopt+0xbd/0x160 [ 1300.273996][T15622] ? do_syscall_64+0x91/0x250 [ 1300.278681][T15622] ? lockdep_hardirqs_on+0x7c/0x110 [ 1300.283883][T15622] do_syscall_64+0xcd/0x250 [ 1300.288398][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.294315][T15622] RIP: 0033:0x7f7a7f77def9 [ 1300.298736][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.318344][T15622] RSP: 002b:00007f7a80549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1300.326755][T15622] RAX: ffffffffffffffda RBX: 00007f7a7f935f80 RCX: 00007f7a7f77def9 [ 1300.334727][T15622] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 1300.342694][T15622] RBP: 00007f7a7f7f09f6 R08: 0000000000000020 R09: 0000000000000000 [ 1300.350663][T15622] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 1300.358638][T15622] R13: 0000000000000000 R14: 00007f7a7f935f80 R15: 00007fff307c1e88 [ 1300.366635][T15622] [ 1300.400176][T15622] Mem-Info: [ 1300.408119][T15622] active_anon:9302 inactive_anon:2 isolated_anon:0 [ 1300.408119][T15622] active_file:11268 inactive_file:39362 isolated_file:0 [ 1300.408119][T15622] unevictable:768 dirty:288 writeback:0 [ 1300.408119][T15622] slab_reclaimable:8310 slab_unreclaimable:111747 [ 1300.408119][T15622] mapped:26297 shmem:5141 pagetables:881 [ 1300.408119][T15622] sec_pagetables:0 bounce:0 [ 1300.408119][T15622] kernel_misc_reclaimable:0 [ 1300.408119][T15622] free:1323417 free_pcp:1016 free_cma:0 [ 1300.515660][T15622] Node 0 active_anon:36968kB inactive_anon:8kB active_file:45072kB inactive_file:157372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105120kB dirty:1176kB writeback:0kB shmem:19036kB shmem_thp:4096kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10632kB pagetables:3476kB sec_pagetables:0kB all_unreclaimable? no [ 1300.617893][T15622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1300.699662][T15622] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.754053][T15630] Sensor A: ================= START STATUS ================= [ 1300.782602][T15622] lowmem_reserve[]: 0 2467 2468 0 0 [ 1300.798964][T15630] Sensor A: Test Pattern: [ 1300.805779][T15622] Node 0 [ 1300.830263][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.858164][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.894728][T15630] 75% Colorbar [ 1300.911824][T15630] Sensor A: Show Information: All [ 1300.963436][T15630] Sensor A: Vertical Flip: false [ 1300.978597][T15630] Sensor A: Horizontal Flip: true [ 1300.983833][T15633] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1301.009136][T15622] DMA32 free:1336532kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:37152kB inactive_anon:8kB active_file:45072kB inactive_file:156552kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2553820kB mlocked:0kB bounce:0kB free_pcp:3792kB local_pcp:556kB free_cma:0kB [ 1301.010250][T15630] Sensor A: Brightness: 128 [ 1301.091923][T15630] Sensor A: Contrast: 128 [ 1301.113178][T15630] Sensor A: Hue: 0 [ 1301.117055][T15630] Sensor A: Saturation: 128 [ 1301.122070][T15622] lowmem_reserve[]: 0 0 0 0 0 [ 1301.122421][T15622] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1301.217186][T15630] Sensor A: ================== END STATUS ================== [ 1301.217228][T15622] lowmem_reserve[]: 0 0 0 0 0 [ 1301.231528][T15622] Node 1 Normal free:3949656kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1301.268676][T15637] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1301.279380][T15622] lowmem_reserve[]: 0 0 0 0 0 [ 1301.319065][T15637] PKCS7: Only support pkcs7_signedData type [ 1301.334185][T15622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1301.362117][T15622] Node 0 DMA32: 824*4kB (UM) 1611*8kB (UME) 474*16kB (UME) 278*32kB (UME) 341*64kB (UME) 64*128kB (UME) 22*256kB (UME) 16*512kB (UME) 4*1024kB (ME) 5*2048kB (UME) 304*4096kB (UM) = 1336024kB [ 1301.447169][T15622] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1301.463402][T15622] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 15*16kB (UM) 13*32kB (UM) 12*64kB (UM) 7*128kB (UM) 7*256kB (U) 6*512kB (UM) 2*1024kB (U) 4*2048kB (U) 960*4096kB (M) = 3949656kB [ 1301.491096][T15622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.501321][T15622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1301.514393][T15622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.524710][T15622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1301.589381][T15622] 55776 total pagecache pages [ 1301.636785][T15622] 2 pages in swap cache [ 1301.688084][T15622] Free swap = 124420kB [ 1301.692238][T15622] Total swap = 124996kB [ 1301.718352][T15622] 2097051 pages RAM [ 1301.753988][T15622] 0 pages HighMem/MovableOnly [ 1301.779171][T15622] 427258 pages reserved [ 1301.798392][T15622] 0 pages cma reserved [ 1302.498593][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 1302.628331][T15649] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1824'. [ 1302.745495][ T30] audit: type=1400 audit(1725979895.975:1118): avc: denied { nlmsg_write } for pid=15652 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1302.896374][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 1303.297871][T15670] program syz.4.1836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1303.326723][ T30] audit: type=1400 audit(1725979896.565:1119): avc: denied { getopt } for pid=15666 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1303.498526][T15677] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1303.526576][T15677] PKCS7: Only support pkcs7_signedData type [ 1303.710156][ T30] audit: type=1400 audit(1725979896.955:1120): avc: denied { connect } for pid=15681 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1305.085806][T15693] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 1305.153015][T15693] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.1845'. [ 1305.468145][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 1306.232463][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1306.276844][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1306.592163][T15720] netlink: set zone limit has 8 unknown bytes [ 1306.722716][T15715] "syz.0.1850" (15715) uses obsolete ecb(arc4) skcipher [ 1306.928422][ T5314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1307.232596][ T5314] usb 5-1: Using ep0 maxpacket: 16 [ 1307.278620][ T5314] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1307.338182][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.368480][ T5314] usb 5-1: Product: syz [ 1307.396982][ T5314] usb 5-1: Manufacturer: syz [ 1307.427364][ T5314] usb 5-1: SerialNumber: syz [ 1307.502208][ T5314] usb 5-1: config 0 descriptor?? [ 1307.788367][ T5314] usb 5-1: Invalid number of CPorts: 0 [ 1307.793895][ T5314] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 1307.969161][T15752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.029031][ T30] audit: type=1400 audit(1725980130.207:1121): avc: denied { create } for pid=15752 comm="syz.0.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1308.117651][ T30] audit: type=1400 audit(1725980130.217:1122): avc: denied { write } for pid=15752 comm="syz.0.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1308.203194][ T9080] usb 5-1: USB disconnect, device number 12 [ 1308.628341][ T5314] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1308.982294][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1309.010666][ T5314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1309.080662][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1309.129516][ T5314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1309.158492][ T5314] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1309.211941][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.261142][ T5314] usb 4-1: config 0 descriptor?? [ 1309.458220][ T5224] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1309.515663][ T5314] hdpvr 4-1:0.0: firmware version 0x5b dated Ì7vi0ì [ 1309.515663][ T5314] †Ã“‘êpY3¡€ÁLR›­º“ˆ<‡<è¬ü$ù4ãü [ 1309.551102][ T5314] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1309.609303][T15786] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1309.659840][ T5224] usb 1-1: Using ep0 maxpacket: 16 [ 1309.676902][ T5224] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1309.698209][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.755339][ T5224] usb 1-1: config 0 descriptor?? [ 1309.805984][ T5224] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1310.004890][ T5314] hdpvr 4-1:0.0: Could not setup controls [ 1310.040272][ T5314] hdpvr 4-1:0.0: registering videodev failed [ 1310.113549][ T5314] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1310.148376][ T9080] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1310.188706][ T5314] usb 4-1: USB disconnect, device number 16 [ 1310.390919][ T9080] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1310.422961][ T9080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.460264][ T5224] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1310.468886][ T9080] usb 2-1: Product: syz [ 1310.473084][ T9080] usb 2-1: Manufacturer: syz [ 1310.477700][ T9080] usb 2-1: SerialNumber: syz [ 1310.496473][ T5224] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1310.553685][ T5224] usb 1-1: USB disconnect, device number 5 [ 1310.561224][ T9080] usb 2-1: config 0 descriptor?? [ 1310.612377][ T9080] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1310.730082][ T30] audit: type=1326 audit(1725980132.977:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.4.1887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1310.753027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.844516][T15806] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 1310.952064][ T5224] usb 2-1: USB disconnect, device number 6 [ 1311.450111][T15814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.535641][T15817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5140 sclass=netlink_route_socket pid=15817 comm=syz.0.1890 [ 1311.806670][T15817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.247056][T15832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 1313.321495][T15856] netlink: 'syz.4.1903': attribute type 3 has an invalid length. [ 1314.963746][T15883] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1314.974675][T15883] PKCS7: Only support pkcs7_signedData type [ 1315.456211][ T30] audit: type=1400 audit(1725980137.697:1124): avc: denied { write } for pid=15894 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1316.028613][T14530] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1316.258147][T14530] usb 5-1: Using ep0 maxpacket: 32 [ 1316.285562][T14530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.366293][T14530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.386265][T14530] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1316.396453][T14530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.409680][T14530] usb 5-1: config 0 descriptor?? [ 1316.531488][T15923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5140 sclass=netlink_route_socket pid=15923 comm=syz.1.1931 [ 1316.701954][T15923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.962600][T14530] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 1317.021261][T14530] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 1317.188446][T14530] usb 5-1: USB disconnect, device number 13 [ 1318.271564][T15950] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1318.334629][T15950] PKCS7: Only support pkcs7_signedData type [ 1318.347921][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 1318.605292][T15959] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1319.571501][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1319.770660][T15979] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 1319.868433][T15985] netlink: 'syz.1.1953': attribute type 9 has an invalid length. [ 1319.898176][T15985] netlink: 134712 bytes leftover after parsing attributes in process `syz.1.1953'. [ 1320.346898][T15999] netpci0: renamed from team0 (while UP) [ 1320.424429][T15999] netpci0: Cannot enslave team device to itself [ 1320.467117][T15999] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 1320.473087][T15998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5140 sclass=netlink_route_socket pid=15998 comm=syz.2.1957 [ 1320.621490][T16005] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1320.651151][T16005] PKCS7: Only support pkcs7_signedData type [ 1320.799495][T15998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.612411][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 1322.768289][ T5331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1322.988115][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 1323.000163][ T5331] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 1323.008661][ T5331] usb 4-1: config 0 has no interface number 0 [ 1323.024945][ T5331] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1323.079832][ T5331] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1323.139713][ T5331] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1323.181595][ T5331] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1323.228100][ T5331] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1323.265282][ T5331] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1323.303891][ T5331] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1323.313540][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.347707][ T5331] usb 4-1: Product: syz [ 1323.358237][ T5331] usb 4-1: Manufacturer: syz [ 1323.388128][ T5331] usb 4-1: SerialNumber: syz [ 1323.407283][ T5331] usb 4-1: config 0 descriptor?? [ 1323.448722][T16026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1323.456235][T16026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1323.639994][ T30] audit: type=1326 audit(1725980145.877:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.0.1972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff197b7def9 code=0x0 [ 1323.668367][T16051] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1323.700544][T16051] netlink: 'syz.2.1980': attribute type 2 has an invalid length. [ 1323.723969][T16051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1323.749140][ T5331] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 1323.948588][ T5331] etas_es58x 4-1:0.219: could not parse product info: '놹' [ 1324.096914][T16064] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1982'. [ 1324.205470][ T9080] usb 4-1: USB disconnect, device number 17 [ 1324.287352][ T9080] etas_es58x 4-1:0.219: Disconnecting syz syz [ 1325.250566][T16083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5140 sclass=netlink_route_socket pid=16083 comm=syz.1.1985 [ 1325.493683][T16083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.665967][ T5331] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1326.878224][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1326.903520][ T5331] usb 1-1: Using ep0 maxpacket: 8 [ 1326.930502][ T5331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.952362][ T5331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.018190][ T5331] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1327.078192][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.147286][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.245187][ T5331] usb 1-1: config 0 descriptor?? [ 1327.252468][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1327.295330][ T9] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1327.323431][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.380415][ T9] usb 5-1: config 0 descriptor?? [ 1327.811300][ T5331] saitek 0003:06A3:0621.0005: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 1328.082785][ T9] Bluetooth: Can't get version to change to load ram patch err [ 1328.126098][ T9] Bluetooth: Loading sysconfig file failed [ 1328.142745][ T9] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1328.182929][ T9] usb 5-1: USB disconnect, device number 14 [ 1328.430896][ T5282] usb 1-1: USB disconnect, device number 6 [ 1328.478576][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.691571][T16147] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1330.118149][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1330.238188][ T5282] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1330.338058][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1330.370768][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1330.420477][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1330.463374][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1330.497484][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.522027][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1330.543477][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.587491][ T5282] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1330.639088][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1330.650441][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.684984][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.706695][ T5282] usb 4-1: config 0 descriptor?? [ 1330.725786][ T9] usb 1-1: Product: syz [ 1330.743071][ T9] usb 1-1: Manufacturer: syz [ 1330.762112][ T9] usb 1-1: SerialNumber: syz [ 1330.812739][ T9] usb 1-1: config 0 descriptor?? [ 1330.862775][T16171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1331.034196][ T30] audit: type=1400 audit(1725980153.277:1126): avc: denied { bind } for pid=16188 comm="syz.2.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1331.325308][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 1331.477811][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1331.542828][ T5282] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1331.798991][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 1331.823802][ T5282] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1331.883692][ C0] powermate: config urb returned -71 [ 1331.889518][ C0] powermate: config urb returned -71 [ 1331.895000][ C0] powermate: config urb returned -71 [ 1331.901366][ C0] powermate: config urb returned -71 [ 1331.913303][ T5282] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 1331.963809][ C0] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 1331.995570][ T9] usb 1-1: USB disconnect, device number 7 [ 1332.001428][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1332.049016][ T5282] usb 4-1: USB disconnect, device number 18 [ 1332.738285][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1332.913870][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1332.941030][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1332.984142][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.019981][T14530] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1333.049306][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.106625][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1333.158981][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.185439][ T9] usb 2-1: config 0 descriptor?? [ 1333.241171][T14530] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1333.305657][T14530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.349723][ T5331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1333.359003][T14530] usb 4-1: config 0 descriptor?? [ 1333.558246][ T5331] usb 1-1: Using ep0 maxpacket: 16 [ 1333.590770][ T5331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.612210][ T5224] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1333.646501][ T5331] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1333.690646][ T5331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.713341][ T9] itetech 0003:06CB:73F4.0007: hidraw0: USB HID v0.00 Device [HID 06cb:73f4] on usb-dummy_hcd.1-1/input0 [ 1333.731047][ T5331] usb 1-1: Product: syz [ 1333.738152][ T5331] usb 1-1: Manufacturer: syz [ 1333.742828][ T5331] usb 1-1: SerialNumber: syz [ 1333.768418][ T30] audit: type=1400 audit(1725980156.007:1127): avc: denied { write } for pid=16225 comm="syz.2.2036" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1333.812168][ T5331] usb 1-1: config 0 descriptor?? [ 1333.834120][ T30] audit: type=1400 audit(1725980156.057:1128): avc: denied { open } for pid=16225 comm="syz.2.2036" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1333.864006][ T5224] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1333.898256][T14530] hackrf 4-1:0.0: Board ID: 00 [ 1333.903291][T14530] hackrf 4-1:0.0: Firmware version: [ 1333.928211][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.954524][T14530] hackrf 4-1:0.0: Registered as swradio16 [ 1334.000208][T14530] hackrf 4-1:0.0: Registered as swradio17 [ 1334.018039][ T5224] usb 5-1: config 0 descriptor?? [ 1334.023448][T14530] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1334.132646][T14530] usb 4-1: USB disconnect, device number 19 [ 1334.330978][ T5314] usb 2-1: USB disconnect, device number 7 [ 1334.392808][ T5224] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 1334.528553][ T5331] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1334.537759][ T5331] usb 1-1: No valid video chain found. [ 1334.590788][ T5224] [drm:udl_init] *ERROR* Selecting channel failed [ 1334.693936][ T5224] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1334.708073][ T5224] [drm] Initialized udl on minor 2 [ 1334.729941][ T5224] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1334.776503][ T5224] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1334.789389][ T9080] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1334.811007][ T9080] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1334.824927][ T5224] usb 5-1: USB disconnect, device number 15 [ 1334.995153][ T9080] usb 1-1: USB disconnect, device number 8 [ 1336.578479][ T30] audit: type=1400 audit(1725980158.817:1129): avc: denied { listen } for pid=16253 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1336.672728][ T30] audit: type=1400 audit(1725980158.817:1130): avc: denied { connect } for pid=16253 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1336.832211][ T5224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1337.007649][ T30] audit: type=1326 audit(1725980159.247:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16257 comm="syz.4.2048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1337.038198][ T5224] usb 2-1: Using ep0 maxpacket: 16 [ 1337.057359][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.078856][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.093174][ T5224] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 1337.107276][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.155718][ T5224] usb 2-1: config 0 descriptor?? [ 1337.279298][ T9080] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1337.480115][ T9080] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1337.535089][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.600084][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.804838][ T5224] ortek 0003:05A4:1700.0008: unknown main item tag 0x0 [ 1337.828109][ T9080] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1338.617851][ T5224] ortek 0003:05A4:1700.0008: unknown main item tag 0x0 [ 1338.633857][ T9080] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1338.653497][ T5224] ortek 0003:05A4:1700.0008: unknown main item tag 0x0 [ 1338.745748][ T5224] ortek 0003:05A4:1700.0008: unknown main item tag 0x0 [ 1338.755191][ T9080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.772489][ T5224] ortek 0003:05A4:1700.0008: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.1-1/input0 [ 1338.788681][ T9080] usb 3-1: config 0 descriptor?? [ 1338.815230][ T5224] usb 2-1: USB disconnect, device number 8 [ 1338.920931][T16280] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2053'. [ 1339.204653][T16282] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2055'. [ 1339.216344][T16282] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2055'. [ 1339.375920][ T9080] wacom 0003:056A:0331.0009: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 1339.590334][ T9080] usb 3-1: USB disconnect, device number 20 [ 1339.713153][ T30] audit: type=1326 audit(1725980161.937:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.4.2054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1339.874338][T16293] UBIFS error (pid: 16293): cannot open "/dev/sr0", error -22 [ 1340.058190][T14530] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1340.361480][T14530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.388112][T14530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.416360][T14530] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1340.435655][T14530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.469487][T14530] usb 4-1: config 0 descriptor?? [ 1340.741708][ T30] audit: type=1400 audit(1725980162.987:1133): avc: denied { read } for pid=16305 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1341.096908][ T30] audit: type=1326 audit(1725980163.337:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16304 comm="syz.2.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x0 [ 1341.105912][T14530] wacom 0003:056A:0016.000A: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1342.082191][T14530] wacom 0003:056A:0016.000A: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0 [ 1342.268827][T14530] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.000A/input/input27 [ 1342.471294][T14530] usb 4-1: USB disconnect, device number 20 [ 1342.618115][ T5284] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1342.774363][T16329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2071'. [ 1342.839628][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 1342.873993][ T5284] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1342.908695][ T5284] usb 5-1: config 0 has no interface number 0 [ 1342.928255][ T5284] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1342.937880][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.963519][ T5284] usb 5-1: config 0 descriptor?? [ 1342.970054][T16331] Invalid ELF header type: 0 != 1 [ 1342.986599][ T30] audit: type=1400 audit(1725980165.217:1135): avc: denied { module_load } for pid=16330 comm="syz.2.2072" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1343.130348][ T5284] viperboard 5-1:0.143: version 0.00 found at bus 005 address 016 [ 1343.238577][ T5284] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1343.272423][ T5284] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1343.349944][ T5284] usb 5-1: USB disconnect, device number 16 [ 1343.418144][ T9080] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1343.642414][ T9080] usb 4-1: Using ep0 maxpacket: 16 [ 1343.664356][ T9080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.700214][ T9080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.728099][ T9080] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.748418][ T9080] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1343.775377][ T9080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.819679][ T9080] usb 4-1: config 0 descriptor?? [ 1344.028293][T16353] program syz.0.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.118814][T16355] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1344.299565][ C1] sd 0:0:1:0: [sda] tag#2289 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1344.310193][ C1] sd 0:0:1:0: [sda] tag#2289 CDB: Read(6) 08 00 00 00 00 00 [ 1344.419151][ T9080] ryos 0003:1E7D:31CE.000B: ignoring exceeding usage max [ 1344.462578][T16358] syz.1.2083[16358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1344.462827][T16358] syz.1.2083[16358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1345.105258][ T9080] ryos 0003:1E7D:31CE.000B: ignoring exceeding usage max [ 1345.200324][ T9080] ryos 0003:1E7D:31CE.000B: usage index exceeded [ 1345.272751][ T9080] ryos 0003:1E7D:31CE.000B: item 0 0 2 2 parsing failed [ 1345.294737][ T9080] ryos 0003:1E7D:31CE.000B: parse failed [ 1345.299878][T16362] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 1345.306424][ T9080] ryos 0003:1E7D:31CE.000B: probe with driver ryos failed with error -22 [ 1345.348537][ T9080] usb 4-1: USB disconnect, device number 21 [ 1345.348615][T16362] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 1345.793713][ T30] audit: type=1326 audit(1725980168.037:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.1.2086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833897def9 code=0x0 [ 1346.125206][T16384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1346.298188][T16386] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2094'. [ 1346.653877][T16397] syz.4.2098[16397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1346.654067][T16397] syz.4.2098[16397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.348104][ T5282] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1348.472758][T16428] /dev/nullb0: Can't open blockdev [ 1348.609653][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 1348.634827][ T5282] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1348.666634][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.698217][T16435] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2114'. [ 1348.708328][ T5282] usb 4-1: Product: syz [ 1348.712521][ T5282] usb 4-1: Manufacturer: syz [ 1348.717128][ T5282] usb 4-1: SerialNumber: syz [ 1348.767743][ T5282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1348.774214][ T5282] r8152-cfgselector 4-1: config 0 descriptor?? [ 1348.778087][T16435] openvswitch: netlink: Key type 133 is out of range max 32 [ 1348.897292][ T30] audit: type=1326 audit(1725980171.137:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.4.2111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1349.096926][ T5282] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1349.586707][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 1349.705327][T16443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5140 sclass=netlink_route_socket pid=16443 comm=syz.2.2117 [ 1349.979464][T16443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1350.711668][T16465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'. [ 1350.784234][T16468] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 1350.926566][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2129'. [ 1350.955391][T16473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2129'. [ 1351.428688][ T30] audit: type=1326 audit(1725980402.668:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16470 comm="syz.1.2128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833897def9 code=0x0 [ 1351.876198][T16491] openvswitch: netlink: Port 13710720 exceeds max allowable 65535 [ 1352.122546][T16499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2139'. [ 1352.148315][ T30] audit: type=1326 audit(1725980403.388:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16479 comm="syz.0.2132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff197b7def9 code=0x0 [ 1352.624831][ T30] audit: type=1326 audit(1725980403.868:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16496 comm="syz.3.2138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a77def9 code=0x0 [ 1352.700963][T16505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.322212][T16519] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1354.338293][T16519] PKCS7: Only support pkcs7_signedData type [ 1354.999016][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 1355.593401][T16536] ufs: Invalid option: "/proc/capi/capi20ncci" or missing value [ 1355.624920][T16536] ufs: wrong mount options [ 1355.678608][ T9080] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1355.918546][ T9080] usb 3-1: Using ep0 maxpacket: 16 [ 1355.943154][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.995429][ T9080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.020363][ T9080] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1356.031673][ T9080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.052536][ T9080] usb 3-1: config 0 descriptor?? [ 1357.555162][ T9080] waltop 0003:172F:0037.000C: item fetching failed at offset 4/6 [ 1357.599921][ T9080] waltop 0003:172F:0037.000C: probe with driver waltop failed with error -22 [ 1357.726390][ T9080] usb 3-1: USB disconnect, device number 21 [ 1358.009489][ T30] audit: type=1326 audit(1725980638.260:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.1.2154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833897def9 code=0x0 [ 1358.108106][ T30] audit: type=1326 audit(1725980638.350:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.4.2155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1358.622468][ T9080] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1358.840086][ T9080] usb 1-1: Using ep0 maxpacket: 16 [ 1358.871446][ T9080] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1358.949170][ T9080] usb 1-1: config 0 has no interface number 0 [ 1358.975137][ T9080] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.031623][ T9080] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.068803][ T9080] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1359.165676][ T9080] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1359.197766][ T9080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.268893][ T9080] usb 1-1: config 0 descriptor?? [ 1359.478177][T14530] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1359.709633][T14530] usb 3-1: Using ep0 maxpacket: 8 [ 1359.746252][T14530] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1359.790287][ T9080] holtek_mouse 0003:04D9:A072.000D: unknown main item tag 0x0 [ 1359.806746][T14530] usb 3-1: config 0 has no interface number 0 [ 1359.855715][T14530] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1359.860417][ T9080] holtek_mouse 0003:04D9:A072.000D: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.0-1/input1 [ 1359.898146][T14530] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1360.089602][T14530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.874520][ T9080] usb 1-1: USB disconnect, device number 9 [ 1360.899157][T14530] usb 3-1: config 0 descriptor?? [ 1360.951106][T14530] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1361.828517][ T5282] usb 3-1: USB disconnect, device number 22 [ 1361.872789][ T5282] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1361.940989][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 1362.253011][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.259508][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.478459][ T5282] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1362.686877][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.726475][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.756908][ T5282] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1362.818523][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.861634][ T5282] usb 2-1: config 0 descriptor?? [ 1362.899486][ T30] audit: type=1400 audit(1725980872.137:1143): avc: denied { name_connect } for pid=16614 comm="syz.3.2179" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1363.387015][ T5282] chicony 0003:04F2:1123.000E: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.1-1/input0 [ 1363.460660][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1363.478852][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1363.667509][ T30] audit: type=1400 audit(1725980872.907:1144): avc: denied { shutdown } for pid=16632 comm="syz.3.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.712312][T16634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2186'. [ 1363.808343][ T5282] usb 2-1: USB disconnect, device number 9 [ 1364.146841][ T30] audit: type=1326 audit(1725980873.387:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16636 comm="syz.2.2188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x0 [ 1364.204297][T16647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.211848][T16647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.358338][T14530] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1364.391097][ T30] audit: type=1326 audit(1725980873.637:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16644 comm="syz.4.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1364.692230][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 1364.708168][T16654] Bluetooth: MGMT ver 1.23 [ 1365.179832][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 1365.688162][ T5314] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1365.889639][ T9080] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1365.912746][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.944150][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.968593][ T5314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1366.003457][ T5314] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1366.018148][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.058894][ T5314] usb 5-1: config 0 descriptor?? [ 1366.101025][ T9080] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.173619][T16693] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1366.180934][T16693] PKCS7: Only support pkcs7_signedData type [ 1366.195131][ T30] audit: type=1326 audit(1725980875.437:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16680 comm="syz.0.2207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff197b7def9 code=0x0 [ 1366.196197][ T9080] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1366.263712][ T9080] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.338345][ T9080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.362884][T16676] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1366.400060][ T9080] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.531233][ T30] audit: type=1400 audit(1725980875.777:1148): avc: denied { search } for pid=16695 comm="syz.1.2213" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1366.583712][ T5314] cherry 0003:046A:0027.000F: unknown main item tag 0x0 [ 1366.613038][ T5314] cherry 0003:046A:0027.000F: unknown main item tag 0x0 [ 1366.655636][ T5314] cherry 0003:046A:0027.000F: unknown main item tag 0x0 [ 1366.674554][ T30] audit: type=1400 audit(1725980875.857:1149): avc: denied { write } for pid=16695 comm="syz.1.2213" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1366.686951][ T5314] cherry 0003:046A:0027.000F: unknown main item tag 0x0 [ 1366.783512][ T30] audit: type=1400 audit(1725980875.867:1150): avc: denied { add_name } for pid=16695 comm="syz.1.2213" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1366.837936][ T5314] cherry 0003:046A:0027.000F: unknown main item tag 0x0 [ 1366.938130][ T30] audit: type=1400 audit(1725980875.877:1151): avc: denied { create } for pid=16695 comm="syz.1.2213" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 1366.971245][ T5314] cherry 0003:046A:0027.000F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 1367.038055][ T30] audit: type=1400 audit(1725980876.147:1152): avc: denied { unmount } for pid=14091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1367.073404][ T5314] usb 5-1: USB disconnect, device number 17 [ 1367.077437][T16698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1367.188428][ T5224] usb 3-1: USB disconnect, device number 23 [ 1368.587382][ T30] audit: type=1400 audit(1725980877.827:1153): avc: denied { setopt } for pid=16730 comm="syz.3.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1368.732348][ T5331] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1368.982000][ T5331] usb 3-1: Using ep0 maxpacket: 8 [ 1369.023399][ T5331] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1369.078088][ T5331] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1369.111354][ T5331] usb 3-1: config 0 has no interface number 0 [ 1369.117501][ T5331] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1369.145237][ T5331] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1369.184811][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.224789][ T5331] usb 3-1: config 0 descriptor?? [ 1369.537275][T16750] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2235'. [ 1370.128996][ T5282] usb 3-1: USB disconnect, device number 24 [ 1370.673879][T16767] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 1371.105893][T16785] binder: 16782:16785 ioctl 400c620e 200003c0 returned -22 [ 1371.508187][ T5314] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1371.673747][ T30] audit: type=1400 audit(1725981109.915:1154): avc: denied { getopt } for pid=16798 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1371.742340][ T5314] usb 4-1: Using ep0 maxpacket: 32 [ 1371.750344][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1371.789249][ T5314] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1371.818407][T16802] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 1371.826217][T16802] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1371.831412][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.874195][ T5314] usb 4-1: Product: syz [ 1371.892644][T16802] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 1371.924922][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1371.931455][ T5314] usb 4-1: Manufacturer: syz [ 1371.976197][ T5314] usb 4-1: SerialNumber: syz [ 1372.050123][ T5314] usb 4-1: config 0 descriptor?? [ 1372.238391][ T9055] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1372.248816][ T9055] Bluetooth: hci5: Injecting HCI hardware error event [ 1372.259767][ T5235] Bluetooth: hci5: hardware error 0x00 [ 1372.274157][ T30] audit: type=1326 audit(1725981110.515:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.2.2257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608617def9 code=0x0 [ 1372.434264][ T5314] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1372.460736][ T5314] usb 4-1: USB disconnect, device number 23 [ 1372.531897][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 1372.542132][T16815] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2262'. [ 1372.607699][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2261'. [ 1372.632387][T16817] netlink: 'syz.1.2261': attribute type 25 has an invalid length. [ 1373.212657][ T30] audit: type=1326 audit(1725981111.455:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16820 comm="syz.4.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1373.618139][ T5331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1373.868137][ T5331] usb 1-1: Using ep0 maxpacket: 16 [ 1373.891160][ T5331] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1374.010426][ T5331] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1374.059559][ T5331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.100057][ T5331] usb 1-1: Product: syz [ 1374.128013][ T5331] usb 1-1: Manufacturer: syz [ 1374.138089][ T5331] usb 1-1: SerialNumber: syz [ 1374.173275][ T5331] usb 1-1: config 0 descriptor?? [ 1374.195215][ T5331] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1374.258593][ T5331] usb 1-1: Detected FT232R [ 1374.491488][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 1374.534481][ T5331] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1374.644503][ T5235] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1374.804347][ T5331] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1374.994267][ T5314] usb 1-1: USB disconnect, device number 10 [ 1375.093135][ T5314] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1375.139165][ T5314] ftdi_sio 1-1:0.0: device disconnected [ 1375.604242][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 1376.061292][ T30] audit: type=1326 audit(1725981114.285:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.4.2286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7f77def9 code=0x0 [ 1376.330131][T16899] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 1376.356217][T16900] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1376.375561][T16899] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1376.382888][T16900] PKCS7: Only support pkcs7_signedData type [ 1376.428162][T16899] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 1376.437199][T16899] netlink: 'syz.3.2291': attribute type 2 has an invalid length. [ 1376.459233][T16902] nbd: nbd2 already in use [ 1376.632470][T16907] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2296'. [ 1376.666853][T16907] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1376.816793][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 1376.876572][T16914] bridge0: port 3(vlan2) entered blocking state [ 1376.939714][T16914] bridge0: port 3(vlan2) entered disabled state [ 1376.998242][ T5314] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1377.016725][T16914] vlan2: entered allmulticast mode [ 1377.052147][T16914] vlan2: left allmulticast mode [ 1377.202100][ T5314] usb 3-1: Using ep0 maxpacket: 16 [ 1377.223221][T16917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.236593][ T5314] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 1377.259367][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.307213][ T5314] usb 3-1: Product: syz [ 1377.316344][ T5314] usb 3-1: Manufacturer: syz [ 1377.329043][ T5314] usb 3-1: SerialNumber: syz [ 1377.362750][ T5314] usb 3-1: config 0 descriptor?? [ 1377.387345][ T5314] gspca_main: conex-2.14.0 probing 0572:0041 [ 1377.562606][T16927] tunl0: entered promiscuous mode [ 1377.608707][T16927] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 1377.645790][T16927] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2304'. [ 1377.838713][ T5331] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1377.839229][ T5314] usb 3-1: USB disconnect, device number 25 [ 1378.378071][ T5331] usb 4-1: Using ep0 maxpacket: 16 [ 1378.895381][ T5331] usb 4-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1378.993205][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.019789][ T5331] usb 4-1: config 0 descriptor?? [ 1379.049326][ T5331] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1379.236865][T16937] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2306'. [ 1379.330519][T16941] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 1379.374905][T16941] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.2307'. [ 1379.418426][T16941] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 1379.568186][ T9080] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1379.789510][ T9080] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1379.819634][ T9080] usb 3-1: config 0 has no interface number 0 [ 1379.856763][ T9080] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1379.902893][ T5331] usb 4-1: USB disconnect, device number 24 [ 1379.914206][ T9080] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1379.959604][ T9080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.032436][ T9080] usb 3-1: Product: syz [ 1380.054689][ T9080] usb 3-1: Manufacturer: syz [ 1380.093930][ T9080] usb 3-1: SerialNumber: syz [ 1380.355255][ T9080] usb 3-1: config 0 descriptor?? [ 1380.536207][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 1380.688958][T16940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1380.697477][ T9080] usb-storage 3-1:0.20: USB Mass Storage device detected [ 1380.740629][ T9080] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1381.055082][ T9080] scsi host1: usb-storage 3-1:0.20 [ 1381.197578][T16960] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1381.266988][ T9080] usb 3-1: USB disconnect, device number 26 [ 1383.006341][ T30] audit: type=1400 audit(1725981121.245:1158): avc: denied { ioctl } for pid=16979 comm="syz.2.2318" path="socket:[64054]" dev="sockfs" ino=64054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1383.559669][T16993] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1383.612024][T16993] PKCS7: Only support pkcs7_signedData type [ 1384.073495][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 1384.418324][ T30] audit: type=1400 audit(1725981122.665:1159): avc: denied { setopt } for pid=17011 comm="syz.2.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1384.439993][ T5282] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1384.521737][ T30] audit: type=1400 audit(1725981122.665:1160): avc: denied { setopt } for pid=17009 comm="syz.1.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1384.678352][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 1384.686957][ T5282] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1384.715365][ T5282] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1384.754490][ T5282] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1384.773785][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1384.808102][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1384.889672][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1384.965222][ T5282] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1384.988881][ T30] audit: type=1326 audit(1725981123.225:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17014 comm="syz.1.2333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833897def9 code=0x0 [ 1385.039783][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.093244][ T5282] usb 5-1: config 0 descriptor?? [ 1385.399220][ T5282] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1385.962242][ T30] audit: type=1400 audit(1725981124.205:1162): avc: denied { read write } for pid=17003 comm="syz.4.2325" name="lp0" dev="devtmpfs" ino=2698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1385.986061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.055898][ T9080] usb 5-1: USB disconnect, device number 18 [ 1386.068297][ T30] audit: type=1400 audit(1725981124.205:1163): avc: denied { open } for pid=17003 comm="syz.4.2325" path="/dev/usb/lp0" dev="devtmpfs" ino=2698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1386.164320][ T9080] usblp0: removed [ 1386.387816][T17045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.426141][T17070] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2348'. [ 1388.296415][ T30] audit: type=1400 audit(1725981126.535:1164): avc: denied { name_bind } for pid=17089 comm="syz.1.2356" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1388.318268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.549760][T17096] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 1388.906129][ T30] audit: type=1326 audit(1725981127.145:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a77def9 code=0x0 [ 1389.411074][ T30] audit: type=1400 audit(1725981127.655:1166): avc: denied { append } for pid=17108 comm="syz.4.2363" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1389.458819][T17111] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2364'. [ 1389.488438][T17109] [ 1389.490790][T17109] ===================================================== [ 1389.497726][T17109] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1389.505178][T17109] 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 Not tainted [ 1389.512270][T17109] ----------------------------------------------------- [ 1389.519183][T17109] syz.4.2363/17109 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1389.526884][T17109] ffff8880250782b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x138/0x4f0 [ 1389.535575][T17109] [ 1389.535575][T17109] and this task is already holding: [ 1389.542918][T17109] ffff88802aaf4230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 1389.552573][T17109] which would create a new lock dependency: [ 1389.558458][T17109] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 1389.566394][T17109] [ 1389.566394][T17109] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1389.575830][T17109] (&dev->event_lock#2){..-.}-{2:2} [ 1389.575862][T17109] [ 1389.575862][T17109] ... which became SOFTIRQ-irq-safe at: [ 1389.588734][T17109] lock_acquire+0x1b1/0x560 [ 1389.593330][T17109] _raw_spin_lock_irqsave+0x3a/0x60 [ 1389.598613][T17109] input_inject_event+0xa4/0x370 [ 1389.603637][T17109] led_set_brightness+0x211/0x290 [ 1389.608749][T17109] led_trigger_event+0xda/0x270 [ 1389.613679][T17109] kbd_bh+0x21b/0x300 [ 1389.617752][T17109] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 1389.624170][T17109] handle_softirqs+0x216/0x8f0 [ 1389.629015][T17109] irq_exit_rcu+0xbb/0x120 [ 1389.633517][T17109] common_interrupt+0xb0/0xd0 [ 1389.638278][T17109] asm_common_interrupt+0x26/0x40 [ 1389.643384][T17109] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1389.649104][T17109] do_con_write+0x3e8e/0x7bb0 [ 1389.653866][T17109] con_write+0x23/0xb0 [ 1389.658022][T17109] n_tty_write+0x423/0x1150 [ 1389.662629][T17109] file_tty_write.constprop.0+0x518/0x9b0 [ 1389.668433][T17109] vfs_write+0x6b6/0x1140 [ 1389.672844][T17109] ksys_write+0x12f/0x260 [ 1389.677255][T17109] do_syscall_64+0xcd/0x250 [ 1389.681845][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.687817][T17109] [ 1389.687817][T17109] to a SOFTIRQ-irq-unsafe lock: [ 1389.694821][T17109] (tasklist_lock){.+.+}-{2:2} [ 1389.694847][T17109] [ 1389.694847][T17109] ... which became SOFTIRQ-irq-unsafe at: [ 1389.707456][T17109] ... [ 1389.707462][T17109] lock_acquire+0x1b1/0x560 [ 1389.714619][T17109] _raw_read_lock+0x5f/0x70 [ 1389.719207][T17109] __do_wait+0x105/0x890 [ 1389.723536][T17109] do_wait+0x219/0x570 [ 1389.727688][T17109] kernel_wait+0xa0/0x160 [ 1389.732103][T17109] call_usermodehelper_exec_work+0xf1/0x170 [ 1389.738093][T17109] process_one_work+0x9c5/0x1b40 [ 1389.743128][T17109] worker_thread+0x6c8/0xed0 [ 1389.747806][T17109] kthread+0x2c1/0x3a0 [ 1389.751955][T17109] ret_from_fork+0x45/0x80 [ 1389.756460][T17109] ret_from_fork_asm+0x1a/0x30 [ 1389.761315][T17109] [ 1389.761315][T17109] other info that might help us debug this: [ 1389.761315][T17109] [ 1389.771528][T17109] Chain exists of: [ 1389.771528][T17109] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1389.771528][T17109] [ 1389.784477][T17109] Possible interrupt unsafe locking scenario: [ 1389.784477][T17109] [ 1389.792779][T17109] CPU0 CPU1 [ 1389.798134][T17109] ---- ---- [ 1389.803490][T17109] lock(tasklist_lock); [ 1389.807726][T17109] local_irq_disable(); [ 1389.814467][T17109] lock(&dev->event_lock#2); [ 1389.821660][T17109] lock(&new->fa_lock); [ 1389.828412][T17109] [ 1389.831854][T17109] lock(&dev->event_lock#2); [ 1389.836702][T17109] [ 1389.836702][T17109] *** DEADLOCK *** [ 1389.836702][T17109] [ 1389.844833][T17109] 6 locks held by syz.4.2363/17109: [ 1389.850023][T17109] #0: ffff88802aaf6110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x1ff/0x750 [ 1389.859165][T17109] #1: ffff88802aaf4230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 1389.869268][T17109] #2: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xca/0x370 [ 1389.878931][T17109] #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8b/0x8e0 [ 1389.888507][T17109] #4: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x3d/0xa30 [ 1389.898608][T17109] #5: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x6d/0x4f0 [ 1389.907663][T17109] [ 1389.907663][T17109] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1389.918054][T17109] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1389.923614][T17109] IN-SOFTIRQ-W at: [ 1389.927583][T17109] lock_acquire+0x1b1/0x560 [ 1389.933736][T17109] _raw_spin_lock_irqsave+0x3a/0x60 [ 1389.940582][T17109] input_inject_event+0xa4/0x370 [ 1389.947162][T17109] led_set_brightness+0x211/0x290 [ 1389.953837][T17109] led_trigger_event+0xda/0x270 [ 1389.960333][T17109] kbd_bh+0x21b/0x300 [ 1389.965962][T17109] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 1389.973940][T17109] handle_softirqs+0x216/0x8f0 [ 1389.980352][T17109] irq_exit_rcu+0xbb/0x120 [ 1389.986412][T17109] common_interrupt+0xb0/0xd0 [ 1389.992733][T17109] asm_common_interrupt+0x26/0x40 [ 1389.999403][T17109] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1390.006684][T17109] do_con_write+0x3e8e/0x7bb0 [ 1390.013011][T17109] con_write+0x23/0xb0 [ 1390.018722][T17109] n_tty_write+0x423/0x1150 [ 1390.024873][T17109] file_tty_write.constprop.0+0x518/0x9b0 [ 1390.032237][T17109] vfs_write+0x6b6/0x1140 [ 1390.038212][T17109] ksys_write+0x12f/0x260 [ 1390.044187][T17109] do_syscall_64+0xcd/0x250 [ 1390.050342][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.057896][T17109] INITIAL USE at: [ 1390.061787][T17109] lock_acquire+0x1b1/0x560 [ 1390.067861][T17109] _raw_spin_lock_irqsave+0x3a/0x60 [ 1390.074628][T17109] input_inject_event+0xa4/0x370 [ 1390.081127][T17109] led_set_brightness+0x211/0x290 [ 1390.087732][T17109] kbd_led_trigger_activate+0xcb/0x110 [ 1390.094774][T17109] led_trigger_set+0x59a/0xc60 [ 1390.101102][T17109] led_trigger_set_default+0x1bd/0x2a0 [ 1390.108132][T17109] led_classdev_register_ext+0x78c/0x9e0 [ 1390.115321][T17109] input_leds_connect+0x54a/0x8e0 [ 1390.121915][T17109] input_attach_handler.isra.0+0x181/0x260 [ 1390.129279][T17109] input_register_device+0xa8e/0x1140 [ 1390.136209][T17109] atkbd_connect+0x5e2/0xa20 [ 1390.142362][T17109] serio_driver_probe+0x74/0xa0 [ 1390.148781][T17109] really_probe+0x23e/0xa90 [ 1390.154849][T17109] __driver_probe_device+0x1de/0x440 [ 1390.161705][T17109] driver_probe_device+0x4c/0x1b0 [ 1390.168296][T17109] __driver_attach+0x283/0x580 [ 1390.174622][T17109] bus_for_each_dev+0x13c/0x1d0 [ 1390.181033][T17109] serio_handle_event+0x2bb/0xa90 [ 1390.187626][T17109] process_one_work+0x9c5/0x1b40 [ 1390.194132][T17109] worker_thread+0x6c8/0xed0 [ 1390.200289][T17109] kthread+0x2c1/0x3a0 [ 1390.205916][T17109] ret_from_fork+0x45/0x80 [ 1390.211898][T17109] ret_from_fork_asm+0x1a/0x30 [ 1390.218227][T17109] } [ 1390.220713][T17109] ... key at: [] __key.7+0x0/0x40 [ 1390.227825][T17109] [ 1390.227825][T17109] the dependencies between the lock to be acquired [ 1390.227833][T17109] and SOFTIRQ-irq-unsafe lock: [ 1390.241373][T17109] -> (tasklist_lock){.+.+}-{2:2} { [ 1390.246670][T17109] HARDIRQ-ON-R at: [ 1390.250814][T17109] lock_acquire+0x1b1/0x560 [ 1390.257317][T17109] _raw_read_lock+0x5f/0x70 [ 1390.263815][T17109] __do_wait+0x105/0x890 [ 1390.270058][T17109] do_wait+0x219/0x570 [ 1390.276143][T17109] kernel_wait+0xa0/0x160 [ 1390.282481][T17109] call_usermodehelper_exec_work+0xf1/0x170 [ 1390.290366][T17109] process_one_work+0x9c5/0x1b40 [ 1390.297312][T17109] worker_thread+0x6c8/0xed0 [ 1390.303921][T17109] kthread+0x2c1/0x3a0 [ 1390.310011][T17109] ret_from_fork+0x45/0x80 [ 1390.316441][T17109] ret_from_fork_asm+0x1a/0x30 [ 1390.323217][T17109] SOFTIRQ-ON-R at: [ 1390.327375][T17109] lock_acquire+0x1b1/0x560 [ 1390.333878][T17109] _raw_read_lock+0x5f/0x70 [ 1390.340384][T17109] __do_wait+0x105/0x890 [ 1390.346647][T17109] do_wait+0x219/0x570 [ 1390.352724][T17109] kernel_wait+0xa0/0x160 [ 1390.359049][T17109] call_usermodehelper_exec_work+0xf1/0x170 [ 1390.366934][T17109] process_one_work+0x9c5/0x1b40 [ 1390.373873][T17109] worker_thread+0x6c8/0xed0 [ 1390.380464][T17109] kthread+0x2c1/0x3a0 [ 1390.386525][T17109] ret_from_fork+0x45/0x80 [ 1390.392940][T17109] ret_from_fork_asm+0x1a/0x30 [ 1390.399709][T17109] INITIAL USE at: [ 1390.403765][T17109] lock_acquire+0x1b1/0x560 [ 1390.410180][T17109] _raw_write_lock_irq+0x36/0x50 [ 1390.417026][T17109] copy_process+0x4420/0x8de0 [ 1390.423608][T17109] kernel_clone+0xfd/0x960 [ 1390.429931][T17109] user_mode_thread+0xb4/0xf0 [ 1390.436530][T17109] rest_init+0x23/0x2b0 [ 1390.442605][T17109] start_kernel+0x3df/0x4c0 [ 1390.449040][T17109] x86_64_start_reservations+0x18/0x30 [ 1390.456430][T17109] x86_64_start_kernel+0xb2/0xc0 [ 1390.463282][T17109] common_startup_64+0x13e/0x148 [ 1390.470128][T17109] INITIAL READ USE at: [ 1390.474628][T17109] lock_acquire+0x1b1/0x560 [ 1390.481490][T17109] _raw_read_lock+0x5f/0x70 [ 1390.488374][T17109] __do_wait+0x105/0x890 [ 1390.494962][T17109] do_wait+0x219/0x570 [ 1390.501379][T17109] kernel_wait+0xa0/0x160 [ 1390.508056][T17109] call_usermodehelper_exec_work+0xf1/0x170 [ 1390.516289][T17109] process_one_work+0x9c5/0x1b40 [ 1390.523572][T17109] worker_thread+0x6c8/0xed0 [ 1390.530507][T17109] kthread+0x2c1/0x3a0 [ 1390.536914][T17109] ret_from_fork+0x45/0x80 [ 1390.543678][T17109] ret_from_fork_asm+0x1a/0x30 [ 1390.550787][T17109] } [ 1390.553447][T17109] ... key at: [] tasklist_lock+0x18/0x40 [ 1390.561346][T17109] ... acquired at: [ 1390.565319][T17109] _raw_read_lock+0x5f/0x70 [ 1390.569994][T17109] send_sigio+0xb4/0x3c0 [ 1390.574412][T17109] kill_fasync+0x1f6/0x4f0 [ 1390.579000][T17109] sock_wake_async+0x132/0x160 [ 1390.583932][T17109] sock_def_error_report+0x352/0x400 [ 1390.589393][T17109] sk_error_report+0x3e/0x2a0 [ 1390.594251][T17109] tcp_disconnect+0x1410/0x1e00 [ 1390.599276][T17109] inet_shutdown+0x26c/0x440 [ 1390.604044][T17109] __sys_shutdown+0xff/0x1c0 [ 1390.608810][T17109] __x64_sys_shutdown+0x53/0x80 [ 1390.613833][T17109] do_syscall_64+0xcd/0x250 [ 1390.618514][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.624574][T17109] [ 1390.626885][T17109] -> (&f->f_owner.lock){....}-{2:2} { [ 1390.632355][T17109] INITIAL USE at: [ 1390.636324][T17109] lock_acquire+0x1b1/0x560 [ 1390.642567][T17109] _raw_write_lock_irq+0x36/0x50 [ 1390.649241][T17109] f_modown+0x2a/0x380 [ 1390.655046][T17109] f_setown+0xd4/0x2a0 [ 1390.660848][T17109] do_fcntl+0x11f7/0x1380 [ 1390.666911][T17109] __x64_sys_fcntl+0x174/0x200 [ 1390.673410][T17109] do_syscall_64+0xcd/0x250 [ 1390.679657][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.687292][T17109] INITIAL READ USE at: [ 1390.691699][T17109] lock_acquire+0x1b1/0x560 [ 1390.698376][T17109] _raw_read_lock_irqsave+0x74/0x90 [ 1390.705755][T17109] send_sigio+0x28/0x3c0 [ 1390.712168][T17109] kill_fasync+0x1f6/0x4f0 [ 1390.718758][T17109] sock_wake_async+0x132/0x160 [ 1390.725686][T17109] mptcp_close_wake_up+0x2eb/0x600 [ 1390.732970][T17109] __mptcp_close_ssk+0xd5c/0x14d0 [ 1390.740164][T17109] mptcp_destroy_common+0x1bc/0x6c0 [ 1390.747545][T17109] mptcp_disconnect+0x260/0x850 [ 1390.754560][T17109] inet_shutdown+0x26c/0x440 [ 1390.761359][T17109] __sys_shutdown+0xff/0x1c0 [ 1390.768123][T17109] __x64_sys_shutdown+0x53/0x80 [ 1390.775145][T17109] do_syscall_64+0xcd/0x250 [ 1390.781837][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.789909][T17109] } [ 1390.792482][T17109] ... key at: [] __key.2+0x0/0x40 [ 1390.799682][T17109] ... acquired at: [ 1390.803557][T17109] _raw_read_lock_irqsave+0x74/0x90 [ 1390.808928][T17109] send_sigio+0x28/0x3c0 [ 1390.813345][T17109] kill_fasync+0x1f6/0x4f0 [ 1390.817936][T17109] sock_wake_async+0x132/0x160 [ 1390.822873][T17109] mptcp_close_wake_up+0x2eb/0x600 [ 1390.828158][T17109] __mptcp_close_ssk+0xd5c/0x14d0 [ 1390.833352][T17109] mptcp_destroy_common+0x1bc/0x6c0 [ 1390.838716][T17109] mptcp_disconnect+0x260/0x850 [ 1390.843734][T17109] inet_shutdown+0x26c/0x440 [ 1390.848502][T17109] __sys_shutdown+0xff/0x1c0 [ 1390.853267][T17109] __x64_sys_shutdown+0x53/0x80 [ 1390.858291][T17109] do_syscall_64+0xcd/0x250 [ 1390.862968][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.869028][T17109] [ 1390.871354][T17109] -> (&new->fa_lock){....}-{2:2} { [ 1390.876485][T17109] INITIAL USE at: [ 1390.880369][T17109] lock_acquire+0x1b1/0x560 [ 1390.886446][T17109] _raw_write_lock_irq+0x36/0x50 [ 1390.892967][T17109] fasync_remove_entry+0xb9/0x1f0 [ 1390.899557][T17109] fasync_helper+0xaf/0xd0 [ 1390.905538][T17109] sock_fasync+0x98/0x140 [ 1390.911454][T17109] __fput+0x94a/0xbb0 [ 1390.917000][T17109] task_work_run+0x14e/0x250 [ 1390.923153][T17109] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1390.930355][T17109] do_syscall_64+0xda/0x250 [ 1390.936420][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.943869][T17109] INITIAL READ USE at: [ 1390.948191][T17109] lock_acquire+0x1b1/0x560 [ 1390.954694][T17109] _raw_read_lock_irqsave+0x74/0x90 [ 1390.961888][T17109] kill_fasync+0x138/0x4f0 [ 1390.968305][T17109] sock_wake_async+0x132/0x160 [ 1390.975059][T17109] mptcp_close_wake_up+0x2eb/0x600 [ 1390.982171][T17109] __mptcp_close_ssk+0xd5c/0x14d0 [ 1390.989193][T17109] mptcp_destroy_common+0x1bc/0x6c0 [ 1390.996408][T17109] mptcp_disconnect+0x260/0x850 [ 1391.003253][T17109] inet_shutdown+0x26c/0x440 [ 1391.009862][T17109] __sys_shutdown+0xff/0x1c0 [ 1391.016462][T17109] __x64_sys_shutdown+0x53/0x80 [ 1391.023320][T17109] do_syscall_64+0xcd/0x250 [ 1391.029824][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.037722][T17109] } [ 1391.040209][T17109] ... key at: [] __key.0+0x0/0x40 [ 1391.047319][T17109] ... acquired at: [ 1391.051143][T17109] lock_acquire+0x1b1/0x560 [ 1391.055824][T17109] _raw_read_lock_irqsave+0x74/0x90 [ 1391.061206][T17109] kill_fasync+0x138/0x4f0 [ 1391.065796][T17109] mousedev_notify_readers+0x6d9/0xa30 [ 1391.071437][T17109] mousedev_event+0x84e/0x1490 [ 1391.076377][T17109] input_handler_events_default+0x116/0x1b0 [ 1391.082446][T17109] input_pass_values+0x777/0x8e0 [ 1391.087576][T17109] input_handle_event+0xf0b/0x14d0 [ 1391.092863][T17109] input_inject_event+0x1bb/0x370 [ 1391.098066][T17109] evdev_write+0x450/0x750 [ 1391.102666][T17109] vfs_write+0x29a/0x1140 [ 1391.107165][T17109] ksys_write+0x1f8/0x260 [ 1391.111671][T17109] do_syscall_64+0xcd/0x250 [ 1391.116366][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.122437][T17109] [ 1391.124756][T17109] [ 1391.124756][T17109] stack backtrace: [ 1391.130635][T17109] CPU: 1 UID: 0 PID: 17109 Comm: syz.4.2363 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 1391.141402][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1391.151451][T17109] Call Trace: [ 1391.154736][T17109] [ 1391.157667][T17109] dump_stack_lvl+0x116/0x1f0 [ 1391.162359][T17109] check_irq_usage+0xe3c/0x1490 [ 1391.167222][T17109] ? __orc_find+0x104/0x130 [ 1391.171724][T17109] ? stack_access_ok+0xf9/0x270 [ 1391.176574][T17109] ? __module_address+0x55/0x3c0 [ 1391.181574][T17109] ? __pfx_check_irq_usage+0x10/0x10 [ 1391.186867][T17109] ? hlock_conflict+0x58/0x200 [ 1391.191645][T17109] ? __bfs+0x2fa/0x670 [ 1391.195729][T17109] ? __pfx_hlock_conflict+0x10/0x10 [ 1391.200936][T17109] ? arch_stack_walk+0x118/0x170 [ 1391.205886][T17109] ? lockdep_lock+0xc6/0x200 [ 1391.210480][T17109] ? __pfx_lockdep_lock+0x10/0x10 [ 1391.215506][T17109] ? __lock_acquire+0x2503/0x3cb0 [ 1391.220537][T17109] __lock_acquire+0x2503/0x3cb0 [ 1391.225399][T17109] ? __pfx___lock_acquire+0x10/0x10 [ 1391.230597][T17109] ? __pfx___lock_acquire+0x10/0x10 [ 1391.235800][T17109] lock_acquire+0x1b1/0x560 [ 1391.240315][T17109] ? kill_fasync+0x138/0x4f0 [ 1391.244909][T17109] ? __pfx_lock_acquire+0x10/0x10 [ 1391.249935][T17109] ? __pfx_lock_acquire+0x10/0x10 [ 1391.254975][T17109] ? mousedev_notify_readers+0x3f2/0xa30 [ 1391.260613][T17109] ? __pfx_lock_release+0x10/0x10 [ 1391.265685][T17109] _raw_read_lock_irqsave+0x74/0x90 [ 1391.270900][T17109] ? kill_fasync+0x138/0x4f0 [ 1391.275504][T17109] kill_fasync+0x138/0x4f0 [ 1391.279932][T17109] mousedev_notify_readers+0x6d9/0xa30 [ 1391.285447][T17109] mousedev_event+0x84e/0x1490 [ 1391.290219][T17109] ? __pfx_mousedev_event+0x10/0x10 [ 1391.295426][T17109] input_handler_events_default+0x116/0x1b0 [ 1391.301327][T17109] input_pass_values+0x777/0x8e0 [ 1391.306267][T17109] input_handle_event+0xf0b/0x14d0 [ 1391.311381][T17109] input_inject_event+0x1bb/0x370 [ 1391.316413][T17109] evdev_write+0x450/0x750 [ 1391.320830][T17109] ? __pfx_evdev_write+0x10/0x10 [ 1391.325770][T17109] ? bpf_lsm_file_permission+0x9/0x10 [ 1391.331148][T17109] ? security_file_permission+0x98/0xc0 [ 1391.336728][T17109] ? __pfx_evdev_write+0x10/0x10 [ 1391.341662][T17109] vfs_write+0x29a/0x1140 [ 1391.346004][T17109] ? __pfx_vfs_write+0x10/0x10 [ 1391.350773][T17109] ? do_futex+0x123/0x350 [ 1391.355107][T17109] ? __fget_files+0x256/0x400 [ 1391.359784][T17109] ? __fget_light+0x173/0x210 [ 1391.364457][T17109] ksys_write+0x1f8/0x260 [ 1391.368785][T17109] ? __pfx_ksys_write+0x10/0x10 [ 1391.373638][T17109] do_syscall_64+0xcd/0x250 [ 1391.378154][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.384047][T17109] RIP: 0033:0x7f7a7f77def9 [ 1391.388458][T17109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.408074][T17109] RSP: 002b:00007f7a80549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1391.416499][T17109] RAX: ffffffffffffffda RBX: 00007f7a7f935f80 RCX: 00007f7a7f77def9 [ 1391.424463][T17109] RDX: 0000000000000078 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1391.432426][T17109] RBP: 00007f7a7f7f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1391.440388][T17109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.448353][T17109] R13: 0000000000000000 R14: 00007f7a7f935f80 R15: 00007fff307c1e88 [ 1391.456340][T17109]