last executing test programs: 5.273989454s ago: executing program 3 (id=613): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d40)="6605df83423c20b6208dbd4396dbf06433b95e078b56f9abc40e2c893efff93eb66d06289fbb83eecf9778bf63a03448ef9e2f0b19204f5db67452f5218287899eec41be9269e10bc64da36d", 0x4c}, {&(0x7f0000002a00)="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", 0x675}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) gettid() 4.326162777s ago: executing program 3 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000e000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x6d74, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_setup(0x1a3a, &(0x7f00000005c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x4558, &(0x7f0000000280)={0x0, 0xeeb7, 0x0, 0xffffffff, 0xa7}, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x33ae, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.250811136s ago: executing program 3 (id=625): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x308800, 0x800, 0x0, 0x1}, 0x20) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 4.17065776s ago: executing program 3 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0xdc, 0x1e, 0xa01, 0x0, 0x0, {0x0, 0x2}, [@typed={0xc7, 0x32, 0x0, 0x0, @binary="0115f9b158ff052bb707c9351ace3f524a8973d1b8bbd09e972cf4642c57a1d79fd15644925376124983201eb7c82bfc0444d3bfd4079ff226b54c86d98ec2fd6b8f97ecca2def8efca10d139b914742df7183ec41220d02946c16439157efe88e94e402f7e7596671f60d5231fb183e72ea4466df81b3b4c77fba3cfbff4d93d8f6787f16bdcafe37893fe59a756322f4fa746b028251295ed4348d96b6019629bda93a6dba736e27dba14fcf5290e706b7af2c5fcf49999e1e5594616d3504a288da"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40804}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000b40)="020000004806a6234ab19e3793", &(0x7f0000000b80)=@tcp6=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000005c0)={r4, &(0x7f0000000400)='P', 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r6 = dup(r5) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b00)={&(0x7f0000000ec0)="49a71a5c05262f1e24362c911dfde715b66c8230bc3c709e74ca372c71ed29c6d34bcd3f0e0c7552019d71deb7c513f5320c6a76a7e277b64b2488e3b72ec60c3a1095f5c1006a02bf68bd66dc536f26e436f3142b12fa8b57e5aaa0b10f02b149a8e6f4392e790a9689b27a54079b91e51159b081b5b3952e896aa4c2205975b22dcdb1b8dc4f3fab06907083674345ffa36f722afed662ed3d6f3f49d7a2344998497df4b7a87ac4783524e743e1e755f363846c00c73cf3776a3ee18ff20575275665039f1baba976c1e78421", &(0x7f0000000800)=""/194, &(0x7f0000001840), 0x0, 0x67df, r6}, 0x38) sendmsg$nl_route(r6, 0x0, 0x8004) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000001300)=""/236}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x4c00000000000000}, 0x0) ioctl(r0, 0x8b22, &(0x7f0000000040)) 3.994169671s ago: executing program 3 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x340, 0x11, 0x148, 0x0, 0x0, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 3.955711074s ago: executing program 3 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents(r3, 0x0, 0x0) 2.926273126s ago: executing program 2 (id=639): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0xf}}]}}}]}, 0x60}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.025717322s ago: executing program 2 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 1.848937622s ago: executing program 2 (id=656): setresuid(0xee01, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x901a, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f00000002c0)=ANY=[]) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x868b, 0xa, 0x400, 0x6, 0x80010000000, 0x0, 0xd, 0x40, 0xffff, 0x8, 0x5, 0x81, 0x770}}, 0xa0) 1.794294451s ago: executing program 1 (id=657): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffc}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.562240184s ago: executing program 1 (id=661): r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) 1.541255534s ago: executing program 0 (id=662): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="92eeee4c04d266254cd56dd72983fb15421d055feeef8476a32a7ff5081906007713cf0b96e0ef74cd284086cf34154f3467aa00fea40bdeadd9e2745a0b63c1656373db9314d545642c927f131368b070c15a9793836d9bb3010776fef47e35b04b72495150815b1a2730365980e10ec24e626cd24eda9fba7d2de4af8342ccc1a0db4dd94697aae3428df222c73ce40912cb590c8382fb5f4537b4c936be1154012a83ae5ed221a3b4ba0b25fbe6093445a4881eba22df05a83e11c7f76b4a2af533123b300cc4cd70c232415a81793d544dfff73392b2a42e79a152278e112140af20f2c74735e490976ee2e6dd8e95738150b433476b8f4ef3ba4e4ad247ee5f3f52724edcc2928a1b769e2a1421d489672346d85be4713bea67125ce9d57e70266b690907fb1313cfd3cadd3a168f7b5dfd55b0b41a63dde956c578b7f65920c6d93a4ed05e73d1104490802eecd16d525b639151e003ad9412d94229a3d4e4e72b01b66bf4a5340b68f9411495c3273d2119bce2c24a138ac825a10ae86bbe35097f16606d77b00dc2d7c540e9c120359c70f88e23de4c0d37296f8dfe119b3319799c7c94b8b8bcaf7eca1bcfafad9126856dd55be061998defb033bbba5a17e915caa9cf9abced8458bb4fdeb99c162caf684771ca2dcdc58a073c70a6d4099c12ff1689c30bcaf8d1b76a7c81931ec7ebb8b7bbac32a88cfef5317c6cf316046ac99151ea807886c2b59ac48294fdcd7fe876f8d1c08f2b811e4497cf8cc6735e57a174ae0954c240ed2921b2e24586533c32fcce8d4a279de82a1e73d1a13d7184a6a4122a01e8ac156bd350309572167b0f361d813c20c60aebc1dabfb9572ecab69eb57185bd95d5586bc1d944d61a852c0f1f242a148100418ca89332d4020830afea8b9a5afd3bf03f5016be33ad8af50e47592467cd3b86a64d35fcc9b0453df25071cc204a9120fec06c33c69de7382f96c02fbaa4fd00cb1b22f6e37606c8ef821097f20dd1bff60a1dc7e938f069634cc8a09c089b88107e94eaf07246132bb3581ff08dc6ec4682712d151f95fa76cefac0942f8fc9be7eab17cd26bed95b6f673ecd88e4fe66c1117b35bf8ca997fa2892407e2e00c5b9b5a739fe8cac446994f3d185029881eb1c8cbea6f00946a328aaa6e9cfff4b616102374e9b72178d66fb2c0e7a76c092f4225571b8ef35f205e450337e5d5a33908208c0f33da1c138f8da4bdb2cc04b42e3002f89ae27da9fd8971a7faad6dbe745addf22803f23eef8f4f1bc17d00705908784b723948dd4e15fd2b4314a6017f0f9827ee968df579db5e8fc2858139f91605a022541a0e483a6637435f5e2a897347d08dcdd64a22829fcb893c3f2584310a059c813030dd9bd9318b92ab43f264600985de014598b786248844a31b4315ae8016af278c18f495f1ac5fde2b58ba7b29b2ab32f8baa3f5f4a5f786c0fd19c3afb19b9bc08f42e7dbc9fb9c0d8fa90ff695b4453e7adebfbcd0cb962cfe256a245fe777237597dd9c2733f56f4b89fbdbd79cd516e207b5d544b80df7f28eef005561e4a35f3fa213ff7e3b3a9f98c1f020adab66a8ca606cd42dfee315d02f037ec0f62516379f98f73fb4c11b54257d1fe5d312e62198444a05cb8216d98ea121f4fcc6e1695dc1cda8ba2a843020c2a5b35be8fbc8e753e88817af689067591b506ea1c7864c0d3bd0217cdf6bf2a11a1dab225a2197bbbe0f6cf277eb2b9a918fb018eb6aa2a3e453b56252d4619d108b39e9d67d6f8845709417373d4d1f5a7a43a39c158b4e8eed1802e7ee2a026f3ba6345e1dadb8019856a157c288eeacbc0745f454e3d5f167a9a62f348a203eb9cca54fb02ff3cb2aad788c2328068cca70cf484b58684de8b4e4cc0549cb671b1cf9227e644c508f5b0830ad835b83348c712024f0b2613ca2cf64d4fadc960c58688027bde20a5b8f42fdeb819c899040349ab0ad40793fb95956a5b8f9d7b55a35522e97c92115f18d9cf5b336117a185dbd54ce8848f02bdba59bb335d29acb5c89a241053dc6d7fc4feb4bbfc604e3ba3e0f00cd398bb12fdfe4af9b332763fe3f7c340ec930944fbcd2649d9397b7a8bbcbd992691bcde14d55ed43ae93beaf983a766420e4c41e7adb1fd3c65958780fd3a8b29cfb721316cf553ba5d87fcd8eea955dc400271118fd9e4c568939fe7eb444e1176fc2d0249fa316ac730629c884207d02209d3de7293a16b16efaaa4128f1ab86766e9fdcfc2cbde49e101986ce6fd0ace10407fa7a85606a8e9725fdb870109c3ebab3c2abc745f6c62d37251629a6a9f7fdafe92884ac7831dce7ab780377ed96691efc0dd21750decebb034a6d8e1c0f5cb77eb0ca18d14ed8cfdd2fcacefd16753d1788c19ac2e680fa65732a034046e81e6a949c1897c73e1a9c2bc6407368f1679511db6c5d717b8c849e6be4fb386ed7000ef81e5c294c7a35cf153b4e8e01afa3d24f747366aa9dca541013a824add4badbf70f489b6a9008f5fc341cdb1f584e9b9dc58712425440e727813ab4aadaa37e28608c147a3743caf7c13df58cf68d1baea85a01ab9420067002f074523acb403a34965c9bf1947b3804c0b792e00248b64aa1eb48c127a0a1372c2a8d95dd2a0b77382831ac2f121cfecdc4e3fbe6147cf49c10b2e5439b7081b8e2e002764b9a63f20e0c119c08ec1b0e53ae2cd46358b36634d72c97db6bdea28b1ef54214146ee1d1ae06f66ba2bb76d0f428bcc88c2123fe37fb4e317c1b5e582eb5ea9ad454cf5f67b12f66259b3ff3065cf355612214f02fce425a1dd0ac02bbff4316ae64fc9da6063d21eee514b481b57cc908cfc3b65eaea8cd983651300b9ea5670860ee9bb457e288ec5913c40053607e01c9aa03f7e44259fb29fae4d76f339a4b53da6adc705341b4511cfbe47acf43195b97e002a9b387d9b101c24539c8e1a9323011ba675ff9a8d92ebe55af80a893e8d8450c242c0adf58f994d60dbb222c8c940a634894c0634e32ae3d94652255b15fa7f5b096b46fd0fef4d60ce97460d37dd60f2199988c87e17bc304a2196236e70827d4a5bc85fe4b9b8195460e8a0a1250ef18458986f245012aebe16ed1f8fd01eb24d5663c5f9c8ad8fe934228f6bfcb2425b3be52085a090bf161a1d0db1afc968cc7490ccf933d92ef757801d953f1d7db3645c1fb771521a7fd253e0f33cb58b950aab00ae4717bf07646d1da0eac862bde639c955cd67d132766f1db477f8629cb1c9c2ca00be27ae7fc86a980d82e9400189a7e92fc4c6c710ef6a8c555f7511ecf36af897bc2e489c7617584e46a3878c8b3184f1371e90c18662c98daaf74bb701d410dcc83107b87b7ec8432e5152a284eec2408ed249948f7b3aee65eb43fcc519e02dd88e1129d92d1c5c9ef398b8e85add68beb5318882ccae5297a2f38199b7d0c33a68e54ec5df89372f9cc4fddc146a5de7b93de0c492bf56b2206c8f6c0b31cd2a6f805fce60a212ebe0a36e2550a248076cf130046c50772a067c124300afb3a1b824cfc15d2d9171e2295b3641b23315a6752de2b781e3b1e7fa692247486860a63cc01942fd0e1c25f15035626dbe89a28b8f27805d846a7c46d4a8eeaed8b8c57be0bbbb12abf20b58ff0b7dc1fa658d5d0592eab99b09660ee2de946815eeb9f832f73f3367b5c3482fda44b641b313fad8287353be3831306110f04484aa21740047944b85d32920d97c931151e1fe38e7d4151e08c27276f155249d0fb6810bee4acc22e7b56a205e41d6e89f74858343bf92ac1c87392c1554f97601bc5a444c1ca5cdc9f90ca28e0e2ba2b61d33726f8c5264d9fa725c71f36baeb8bdc36b60a88ed2668b3c6c72c44f3515a771c2a6bae35b216ef44cea6c353fefa8d604373d3c49b16a44a004dbc1186be3ebdabaf230cdb00ebc3ef1ba1afa6a4d69065dce83dc8fd5363f92d847975a171fbd2adfa8121bc16a7b55152f2a1b4d72d7ae1e927c10c7c5b82cf42d8e3e97cedf99ed6d6bdb13bf80e9cc05b09b295de4dd222729d618bdcb6b019505ba306d8c4b12eb7be9f34acef330898bcd00bb7868f6c95d1b21f6186a2a65beab56dd98e41efb0c44e770dbe99c4693cf78907d01526d22a1f1037400993e5462d57e92fb58d721815cc75713c93a6ea4cdbd21f95a17e1f3c00fc5b747d8eaad204d1ccaaee53378c145c3a3621e086ae825ebeded5496932a4c14e160b5ab3c8a0757fadbe27c3851ce38328ca57c0ea4b99b9bd4d640f91506ad3544499dfea5da5e8604ec8ee0545dc539bcac8553d3c9399f9a7b67fd4cd2ba1a062577e2238a4acaf08dda8fb041c5ac9e0a14c2ca977e8c8b81bbfdfc64d8a1a6b87732873ea3dc1a6f09a71743d8fc2da4e02ff6bb9ea1f61afeddbe3d1ab62a7e39c5419f8ac795a40bdabe1226edb24afe65616c2ea58d10f9980fe49a04569d4715708c4b9fe9534dc89867cac058d93e7670d1bd54a030a7fe4f406fe6665e41f95dd5950feb0b082c07ffe552940154431bcdb1893a8c3ed745a5f731577f7b22b8c895496cadd61a24f170d5a88c5d95cf944e635ffa6b06a1e11e4036746fea69210dc0020b5d5806a13e6905fdc462be95f5a2c7fdca32a2712d79087544f19327fc5a2e80f2c832411b022ebb4b5a59e9267a2cd1b587edf6ebd3655e63a3864638c6f2fe55626fa943ad85b4dd34a58febf359c2f465cb1db48afcd320bc348c3e386fe6a329f2494f44d6e5a720088b76e118642073ebb748b4be450fc41bd07690d1c4ca0c99fc2ed5d025e8862f47fc594b7234e011fea5ff354aa515841f970d4ea02bba028b3ab03481b89587473a69316563148d5094bfeee618d545506aabc10b0cbabdcf293beb16f96b5642b3b83714e221e9d36be7e899bc84b1a819c474b6763122149827bae34c7cdd30318b13cac9f7103c5b9b3b6637b37267786c5f6b3f52777ccbbb87ca44e87ae6225f2e25ac4e5b7aa1d7a85a5f9ae150914e79e97f27f9fa85f6b4771a12afb42157720f74b3d7f7f963da18696ba775b4d5605f4976ccb19a4ef26dc94bc87233251a88917fae838aa46231f1683bfd89c6d5d6fa4633034f402f79e2c475cf27120fb0dfb82f9f7e948e74e44dfa67127acda64574d1b1f004614398e38d5470100c38c117de531635fb47070c117912ece62501e422d7aa43094a0d6fad03ab228f0a9d281fdb2ce068abb340d42b2455d93b0d7a58664cc163cf160e91e3f161c6bfe8caf8d88553b924dc3a0ae109485c42efa0340fc11d31e6ff1ef1df4da7d46e4f8516bd19eec402f8bc0828d01adf6092615edbfdb37479dda88430bb189c06698e92e663321ac8c3a1bd10f60d6b3751b44e40cd36d9fc9d7b6892d9cbdab8c0c4ccf02bdd762f99d2db44fe8d05482a98a448cda2ef38ad38fff5d813d0cb66eb58ebf2d1c36257326cd632363177e19720eded90a12793affd319f51c3a0099db8617d58b6736b75ec72295693017812fa4ba1ad4fd9ce3d3721e13e4c822e336bbd855663c4e71e29c51a630e619b31c022009bead97cad9bfc6c6cafdb8acd01d661a7172a0641fbeb3b1a0832338f716f2003c610cbbbcc4a0c3cb9f9aef831a01b0a06739331df0874c22590cc82c626ae5678a2ab0b82063a54bb9023009ed90ff667d6fb843d88ed9c4700285111506d4d6f7d98800443920180427520b2f39aeb9a8c4f23f9efdc7c24a9c1275ebb214e4913331ae371c82e214e583a88b927b5d096814e2481574e8250eae2d96418e6c0c2ab77030cd01158ce3f3ad5ffe4080826eb209f7862387e0f1edd6724a7799b074ad2198e35605bdec63c11c2c596ea01c174ff8f7f193a42c703983d5731cfd0851a290dc99b6507b5500af3ae7cc6b84476b2ebf6429e96f9fbe4050b77c32d0fb0915deb35eca0e149b54ac663cddb41b8aa25c24242aa21bed150179020f9ee7c1122fd4acbe8eb632ff003ae77aa5ec622dec5d9e3fe6e80aa22a57c4e9f562186501880fbe7a7abd5dd5ca99d80aebc8495f3217abd7445d7491d18407445a887e9aa7ca6e528482d3d30d6f823bd6cab28986b3d8dbdcd86ffb4febab09be106ea50a23c0d73b900e40fdb73254e3efbedba257110ee8c4a49d6589ccfb4722e72282bbcd1d600a0f253dce9b97fb3a0d327af71ea309e15d3b35981e6cf70515a91ff3fe89eb1c3ca56c1425ea808e3109ca098ad92147ddef89e92887d2907d95a5ad1fb0793f3c31ace6169a3615f279bcfe490a05999d7959db474f0446c8bffc70e058152e7d6d6ced91b607c86c3941cadcd380137a2da688a608a3fe94a7685e24b48d91f4ea9cd048c6fdbee3a78904c43fae5afd19e528846e795e7041d125c1132d93d2f78084036bd80e7a0b327e2961967cdd6794682192e4ab8f101a3fc048a761c38f0354247b64094c304b3afda759ab74d40f7e7c4de89b7b8655265ec86ef6ea20abb714ee27be97aad7633088f3ae0ae3a877d1e30d145364275b694118d66593f3e2f9853f2fa1b0e702be523e7510d3fc35a813a84f732d5a8f2e70be291b0be4de6d009c8602dd7b5a80010fd6ce5199fd576798c79ac3ebdeef0e81bcea494c93514d6a1aa5e28ddaabcdde1f80caadb910ce1a76d2f39f49d23ca76597ddf9ec4a09590bdcec37dd62ce2e9768e5071d624ee7a0bbb24f0fa740a4ac4fc39c56a4bd58ace6963b1c8a94ee0167780799e8aa698e9b8d6de98029304d85e4d640bcdbc9981de46bca8560d16de49a63c3650e64fded3d6a0c8c3e0ceb294394622c4d1d86f7a34434d1ec35bc733c9112f31c3c763910ecf9b9b3da48abafcb8a1458b01687c924851d36c3111131e595ac87068cc01fba95ddbb364173d58d8082bdab5663857bc322bd9e8d7847280b37440dadca497b455542d502482e438e618eee6ad8f9e1336afb592e246ae79fe82b110b3b0cf13c31bba10e17cc08dc523b4747a34d1afcedd7c3364a5fd3098ea860413d38ae4af81bd7dd34ce8949410c0817b95dfabdfcec1e0490dd661849411e6eb4ecd026674dda6b4cc5092d07f2cd18aa75cbc9d8d898729bd9acc4de874dd6329c335accf3d42a43145e1e241eb06c08587ba6f385b2cdc6efc02d8fb11292580a555c129a8f4edb517805896cc6d1272ef846d00c517718dfdc3a7ac03bb23e600168f95f7e3aa7001cd9d9e0db202dc225a129680ed75280d84fe88db7206858eee5a83ada9608a1c5e8f184958088029de407642813a9083dbf2367693a767dc54c1bda1f520c8bab5c86ab5d59de057478ecaeee59e6579ccfdc5a1a59e12e204ffbc9e2334ec0120c8e0fd9a8b6126021c52559bbf1c043eacf5f5f9aabcaa8844df6be38da4e42dc8ecdd801f2244b5cad2680e8b130f4315ce95b7b4503dd292eab05390085bbc318d5d7113c204760376714a8bcd6c2508490ba67ec9654bac85a8572cbd86cfe024891f3b8c066ef18ab0354e4e0cd7eec4e85936f97925de39aeb5aabb0cc1a26d8ccef8e9fe7c81a3131e833d27eea44610d7283762eaf8784a8914aa52670e7c37d2258797c8c0dd760e5a2be99f574437f66bd9bbba5da69b594bc38d1851bb225c514d41374467998cf206c752ae7567272bdf20f1a12145f51574d6a69fc30fe50ddbab297285186829ead9e9e78b311966acaff3e2cc6f799f9a1d1b1288c70a22305b33d86bedb03752455be93948ca9c860a84ddcfb66dd817f40c6a86ab5b310279ddb31dc84367ff2597a209c6b925b7d6990af8238d91704cf65b04b5424753647381477c93993f82593ee39d1021e3d6c792be8753c64c5b3149bcbe86db5078332929b80dfc2aee1eba66289df3c570b6efaf08848137e2a0e7ae4663ee16a458f3a01af8c2801c9055b354771dc6eb64f15e49c7ebd3d0f86dd1189b7e85f3007881ff7346ae769f4f83599afbe9bd4398fd201a3fa00ccce1434bf87bf3942af3b8d377c747c5661463e447ddf6a20260ec5c87410a871fe97be3799a1a638ef16639b68212377e52a27f32cb0df13abf6968c3d92bb77788f43e33f68907c28963b9e4a2ac1f1ba3edfbcd8fb11fb6b685144e3b54b1d5733291514ac5644bfa2050f1fd5cf2e642e01952c20e563b9a5413e90b21b5ed0157de64997cff6564f8ddc2f30a3c49bbfda9535529576330206bb07f9a604b3a3c7e297248e6f219e7594670ca8a07273eb5694285d8bc13950c46b2e057b70a97e648c0377b3b8958bd9498917af86f7d66fbb42be83742a4f3ab001d3d4e1eb224683a213cefda62a9d59457f8d84278789664e3d1a08521d82c31cd7e56c3d9a395260257afcd48336f694b78fb90c99c81f2f5187264a26e7d33d30867d3a032dc31db7223a6740bdfc569f82c66fa520bb1fc055b063cf04d61d47a46fa8a75a4ba62d6b2183678c3eec3ca0fbbbfeaaa0db143646925bd05a72fc571d7c64a4c1ad1e8631d5012075502a65f4bdb5abc316bb7066c40166666d40292aa52c5272d6e37c9c0b3bd3dd3e50b9c79337145104970e232d3717d5c10254fd28207cb84b05c2fce1ed1a202c5f6498483061baf7cccc4c2d055325e64d6f48ed399e76bbc638bdadbd87445d778f9c1d1500c0096d18533ade54f04e487d6fc24bfae4e189e697fbf378deb83777c32bcc3464b10e9cead62b66f22f089419500ff53e6dd17faca3e2ed5561fec38bdec77975b97b8475ed5cdb5a64bec5faad72d8a97964d0c127f9a31fe4f645e1b28174fa21c406382f03bf6b3956165fe7e95d191a4fc7ddc06af37fbd774caca5424708e77a56eaf3950b764fb8fab5307b7669da1dc361c3c9c844c6c95d9d4bb0e2843bcd449507ad75311dc2290da2e55f4d794f9a86da5f698799d5255352a8590351fa8f733287697688b5c9390b86767ce180cfa45ebb8132a7c2cc93cce4f977da36612b5e36c0df6b39a6a7c16d551e114c7c7e413c2528e514b19d4a8265cf5c2f7fde0eec5e395fbc47a51a036ea8800fc367e106fd95a412e42d3a67815d8a67bce8aea6fb7274bceb1b8b1e5358e320303b607a82639adf7b07f4b6a41d9bf9a2b8fd784e0b6add7f7d0a43537cfd7d341a01c69654621445bdd11d2e1b57fce90b0062a9b4f3b9e831140905171de0c1ac62bc6d04eab6ea3de7615f9b56245829fb533e1047a2e38a36dea4b73e52672b7e3a8b902dcf62075ef88a95bb61341d88bbad05855d4697906983f03b6e07bbd5b5a9cbd0a09888a2d3a06f1ddf000e45df2586df3e44ddfaacf3ff30bd1c12dabec645a329b18527b627418127c761f03f16043efed0390871a696965078462c7eac1109d13e545d6d306bc981b3407fb79282790e3f66c9acf53ca2d8bb7b19e2b98c8a0973dadc2e54734f9e22e0af08ecce9809001c5da72fcc635d64aec5c8d727c1e945235bfcc95b25bf6c5d30b39078b10a285841932d5fe3c4a7407684bcab82ea798c820b036cea15d06ee866b6e4acdf741809dbf20fa54e94d4fe893151ec6b7d13fd486dc625aadba7c7d9ae8c0d7ed04a4ddcafcd7cd5d0fc1ce8b8900f0b3ec251b0546e32b2d844884984f05ee3ca0f7a27a2040a8c226c073bcb820bdb4f09191563a5c431a626bf8520d321e6f070720fecbabee5bcd079494ee30e2bdaea2041b5db6997981fa7e625060e9deee1f0ae10015f54999b3bc883ecdd8c8c2bf9faf5e263daf57ff3a1bfc9d322eee139acbab9bb54188d9fe93f3c67ae61820f12b04737325bfe027359323253428f51429b45f41f3281ac304b8481649cdcf1471efa02d488b2d58698426178810680a10adaa7a22dbd8965dc859d72a762daa762898f53a2b63cc4ce1c57ca9f838ff0b3936cad7dc175e5fc5af7810cbe7f9b297c676227438bf9fbb61ec787082250a150e655e63c225a4d496b7886d4f0e1fa3bb71f8ede646af4137d8e783905b52d41db76dcda0b1eadf714a4a19b1c9842f9f0e39732ceb0e0bf4be40c53021e2c819695ee08d32c8a0b8a1c24e7d1d1ab42ef071fa823a7598695e1b611c8d508e43dd0b3164a337642c560a54dea7b43cb6293622246d8ce093a14142c957deb31406b96cb359d7d806a7bbb91c4da0bc888bb626e5cc5600e6aac8c5c3ef311e104535536acc8c90c6be3d86a3588842c7dbb7122b0b2347a73619da54ea7eda55a7b2aa53181a792239fdcee73c11cc46c5ae2ad652be85583ccd9710fdfe405624adebc98e6515825dba56bb1e473f3219f9e2cca52a48454079d5a55af678cc9cc00ed0c5311cd9f53fad2f4ebbbc70042b316efb2d2fe5383c0c8682e41ddf06e5005532116770de70b0a4409121757bbd5c540b1f34ac688bcbb671ea7f84895c895bbf012cd2ac8f8099b6fd4423c723db5e281b8877a6a5662c4719f1818b0032c80dc476891c4b407c21d334ba706154b5fdf23d5368f701f758c8f4e5784ff795e126ac9e4792d3d31f923bf62e68256506670af776aec3d91b194babe359beba7aba86e3a4596acade4de7b78ac62fd1cc1dec79a5ad5d9184589e3810746aceb349f02070f8d9790448a51804ffb1e56f14b8ac50281069b2e7ac82874e8828694585ff3f55ed883c0171b47ce38e12ff22883ab685af6be4d3a780254114a5d15e735f8f0e49ea174996a51428ed673a4a57346206a7b740fc653793e004c8ccc3860610af6ab6fcaa7d13193149cca113d7e319d6a9b0af79c8eb4d57d5bab3d1cfacbd3473c46809b1f5a6fd9448fb7a62184a1d11a6a4cb0caa812ae50102fdb140ff13f4754bebd5627a79e679784ffb4e70a0db9ccff6f1eb283e02059fdc63879d82a9cb7b8867031eeb7ce2a3ed1b6bdf0cc2f4b5e7aba4550ff6572da620abb9c52ce0f3cf473c1cdedbf8301323e5fe0676f81a6c90c5c3bb2bd20931494384f98b0545c10ec86e3399d85b94dd9262b2c23057b75dabd170b30bbc471b5f6709445e096f6f3839ad33547f6a2c30c80519ddb95a12b7e9cf4d5a9f8fe847783c2907f3279a8338376d1fc81805a97969623369f19e3d58bf7b0581b46c913130ede4c80c432be5bdb65687521cc3d4a7c067b43d01a1c005fad731b695349d7091c8f7eeace1e52f237ae5fc160f2693d9cdbae1d54eb6b5ce5a7a18545757f84c6061613c11d5b399e12e32e3e97c0c99765969cadb487ace198bdfbfd9bf21441c2df06b6ca884920e25d389cc1268381ab6fb0cf160a7473be3d0bfc8fa60a678f2fa0b73c8316e1f72b61ec6511ff173fae450d33c4fa7e9bca79c40303f8298cb4e270027177028c54684b23a86f0e4cd3aa6871765c87aff073225243586e2c292ae8c14f6d5b972c73f910d2ae35f78551a5391f768ae0e054ed18933cff72aa1119c7d19a11a788c098ef5d5cead60925fabf8a3062069b93976a252e2667c0f0aa33c09a5ea1a3960bcba429aa0cb758eca796de6209c0c525b19c230fc6926f27d844f17fafabaf14cba4ddb769b9f6fd123f9d4f4d9585ba51d6f7ef0175087ea76a41c09a5d14cb65effb08c5dc798cf", 0x2000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) syz_clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.429277934s ago: executing program 0 (id=663): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0xf}}]}}}]}, 0x60}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.346233562s ago: executing program 1 (id=664): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) pipe2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "94e087a424856f5b5026be9facabe069e79859d9c1ac372002f5ebf68e132af5dad8e6c614fa996edae027938c7140530d7ffc0ef62811cb90e5aee9dbad9e"}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "a8af03e62f144437ea3fa09330609122d058844222297400ac0d1b3dfb9373"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.178004663s ago: executing program 2 (id=665): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) 1.172323763s ago: executing program 2 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 1.134716658s ago: executing program 2 (id=667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 631.185427ms ago: executing program 1 (id=670): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x39, &(0x7f0000000000)='/proc/sys\x00net/\x00\x00v4\x00\x00s/\x92y\x03\xc0\xb8+\xab\xbbY\xcb\xf3nc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1\xeeu\x8b\x05\xb4\xa0'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) 528.435707ms ago: executing program 1 (id=672): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x308800, 0x800, 0x0, 0x1}, 0x20) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 518.910103ms ago: executing program 0 (id=673): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xf, 0x7}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 414.278345ms ago: executing program 4 (id=674): r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba", 0x2d}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) 408.315069ms ago: executing program 1 (id=675): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 400.566098ms ago: executing program 0 (id=676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x4}, 0x6}) 264.930339ms ago: executing program 4 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 264.805316ms ago: executing program 0 (id=678): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$sg(0x0, 0x0, 0x181a43) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000019000100000000000000000080"], 0xf4}}, 0x4000) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) 223.740318ms ago: executing program 0 (id=679): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d40)="6605df83423c20b6208dbd4396dbf06433b95e078b56f9abc40e2c893efff93eb66d06289fbb83eecf9778bf63a03448ef9e2f0b19204f5db67452f5218287899eec41be9269e10bc64da36d", 0x4c}, {&(0x7f0000002a00)="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", 0x675}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) gettid() 141.568475ms ago: executing program 4 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 54.384442ms ago: executing program 4 (id=681): r0 = socket(0x11, 0x800000003, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) 41.776677ms ago: executing program 4 (id=682): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x39, &(0x7f0000000000)='/proc/sys\x00net/\x00\x00v4\x00\x00s/\x92y\x03\xc0\xb8+\xab\xbbY\xcb\xf3nc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1\xeeu\x8b\x05\xb4\xa0'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=683): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0xf}}]}}}]}, 0x60}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): S using preconfigured BSSID 50:50:50:50:50:50 [ 60.631067][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.633431][ T29] audit: type=1400 audit(1728029918.455:120): avc: denied { mount } for pid=5215 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.691727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.694287][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.710210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.716122][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.728319][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.739045][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.758080][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.799352][ T5225] veth0_vlan: entered promiscuous mode [ 60.831042][ T5224] veth0_macvtap: entered promiscuous mode [ 60.845493][ T5216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.855936][ T5216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.867214][ T5216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.876978][ T5216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.893988][ T5224] veth1_macvtap: entered promiscuous mode [ 60.925033][ T5225] veth1_vlan: entered promiscuous mode [ 60.989053][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.008156][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.018891][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.029878][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.040141][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.051033][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.062983][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.064245][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.125715][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.136368][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.153318][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.165217][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.176602][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.187190][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.198057][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.220774][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.229771][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.240627][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 61.241157][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.256390][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.260433][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 61.276791][ T5225] veth0_macvtap: entered promiscuous mode [ 61.284217][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.296707][ T9] usb 3-1: config 0 descriptor?? [ 61.309432][ T5225] veth1_macvtap: entered promiscuous mode [ 61.324794][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 61.383206][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.396274][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.406924][ T5269] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.412767][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.415236][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.432611][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.444271][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.454459][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.465151][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.475336][ T5227] Bluetooth: hci4: command tx timeout [ 61.476244][ T54] Bluetooth: hci0: command tx timeout [ 61.483122][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.496851][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.509758][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.530835][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.541580][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.551699][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.563218][ T54] Bluetooth: hci2: command tx timeout [ 61.565714][ T5227] Bluetooth: hci3: command tx timeout [ 61.569133][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.574469][ T5227] Bluetooth: hci1: command tx timeout [ 61.586175][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 61.589964][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.598485][ T5269] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.612090][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.626540][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.637513][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.649230][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.652471][ T5269] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=c9.be [ 61.667374][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.675060][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.684453][ T5269] usb 4-1: Product: syz [ 61.689200][ T5269] usb 4-1: Manufacturer: syz [ 61.691510][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.695533][ T5269] usb 4-1: SerialNumber: syz [ 61.708339][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.719414][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.722879][ T5269] usb 4-1: config 0 descriptor?? [ 61.734798][ T9] gspca_vc032x: reg_w err -71 [ 61.739512][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.753368][ T5269] cdc_ether 4-1:0.0: skipping garbage [ 61.758774][ T5269] cdc_ether 4-1:0.0: skipping garbage [ 61.772397][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.777712][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.784841][ T5269] usb 4-1: bad CDC descriptors [ 61.806242][ T5269] usb 4-1: unsupported MDLM descriptors [ 61.814573][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.822382][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.827698][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.838179][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.852566][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.857881][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.865978][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.871834][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.877499][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.878066][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.891046][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.900771][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.918497][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.919961][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.942036][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.947354][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.962571][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.967983][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.002304][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.007628][ T9] gspca_vc032x: Unknown sensor... [ 62.050759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.062904][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 62.075192][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.099913][ T9] usb 3-1: USB disconnect, device number 2 [ 62.120464][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.146728][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.148283][ T5311] Zero length message leads to an empty skb [ 62.175476][ T5277] IPVS: starting estimator thread 0... [ 62.237733][ T5277] usb 4-1: USB disconnect, device number 2 [ 62.272616][ T5312] IPVS: using max 20 ests per chain, 48000 per kthread [ 62.277279][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.310138][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.678350][ T5326] bridge_slave_0: left allmulticast mode [ 62.692410][ T5277] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 62.710905][ T5326] bridge_slave_0: left promiscuous mode [ 62.720612][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.734946][ T5326] bridge_slave_1: left allmulticast mode [ 62.740608][ T5326] bridge_slave_1: left promiscuous mode [ 62.747394][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.760756][ T5326] bond0: (slave bond_slave_0): Releasing backup interface [ 62.773285][ T5326] bond0: (slave bond_slave_1): Releasing backup interface [ 62.793551][ T5326] team0: Port device team_slave_0 removed [ 62.821088][ T5326] team0: Port device team_slave_1 removed [ 62.830685][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.845514][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.862191][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 62.887347][ T5277] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 62.898929][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.911227][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.922564][ T5277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 62.933146][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.940310][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.978437][ T5277] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 63.001916][ T5277] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 63.009954][ T5277] usb 3-1: Manufacturer: syz [ 63.032379][ T5277] usb 3-1: config 0 descriptor?? [ 63.384334][ T5277] rc_core: IR keymap rc-hauppauge not found [ 63.391679][ T5277] Registered IR keymap rc-empty [ 63.403741][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.434701][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.455403][ T5277] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 63.468117][ T5277] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 63.495325][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.526795][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.552511][ T54] Bluetooth: hci0: command tx timeout [ 63.562019][ T54] Bluetooth: hci4: command tx timeout [ 63.588066][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.602135][ T5269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.612631][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.632616][ T54] Bluetooth: hci1: command tx timeout [ 63.632680][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.638781][ T54] Bluetooth: hci3: command tx timeout [ 63.646364][ T5227] Bluetooth: hci2: command tx timeout [ 63.703348][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.722366][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.752342][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.762131][ T5269] usb 1-1: Using ep0 maxpacket: 32 [ 63.802983][ T5269] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 63.807753][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.831563][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.862759][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 63.862777][ T29] audit: type=1400 audit(1728029921.905:163): avc: denied { create } for pid=5350 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.880502][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 63.888824][ T29] audit: type=1400 audit(1728029921.905:164): avc: denied { setopt } for pid=5350 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.888865][ T29] audit: type=1400 audit(1728029921.905:165): avc: denied { write } for pid=5350 comm="syz.4.20" path="socket:[6046]" dev="sockfs" ino=6046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.889834][ T5269] usb 1-1: config 0 descriptor?? [ 63.948021][ T29] audit: type=1400 audit(1728029921.965:166): avc: denied { read } for pid=5350 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.974185][ T5269] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 63.978026][ T5277] mceusb 3-1:0.0: Registered ؋ with mce emulator interface version 1 [ 64.008606][ T5277] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 64.027984][ T5277] usb 3-1: USB disconnect, device number 3 [ 64.067669][ T29] audit: type=1400 audit(1728029922.115:167): avc: denied { read } for pid=5354 comm="syz.3.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.127100][ T5355] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.127723][ T29] audit: type=1400 audit(1728029922.165:168): avc: denied { open } for pid=5354 comm="syz.3.22" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.173850][ T29] audit: type=1400 audit(1728029922.175:169): avc: denied { ioctl } for pid=5354 comm="syz.3.22" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.177221][ T5269] gspca_vc032x: reg_r err -71 [ 64.229138][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.245705][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.257176][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.268257][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.281073][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.289541][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.300781][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.306759][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.318787][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.324430][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.329810][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.341228][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.346941][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.362765][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.368205][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.374115][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.379552][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.386538][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 64.392443][ T5269] gspca_vc032x: Unknown sensor... [ 64.403355][ T5269] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 64.418343][ T5269] usb 1-1: USB disconnect, device number 2 [ 64.784844][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.792364][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.802525][ T5373] bridge0: entered allmulticast mode [ 64.815991][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.823438][ T5373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.831018][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.838201][ T5373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.846246][ T5373] bridge0: entered promiscuous mode [ 64.852035][ T5304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.133163][ T5304] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 65.144782][ T5304] usb 4-1: config 0 has no interface number 0 [ 65.153341][ T5304] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.171101][ T5304] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.206166][ T5304] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 65.231638][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.285803][ T5304] usb 4-1: config 0 descriptor?? [ 65.388053][ T5389] tipc: Invalid UDP bearer configuration [ 65.388101][ T5389] tipc: Enabling of bearer rejected, failed to enable media [ 65.473495][ T5227] Bluetooth: hci0: unexpected event 0x09 length: 11 > 3 [ 65.516332][ T937] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.623296][ T29] audit: type=1400 audit(1728029923.675:170): avc: denied { write } for pid=5396 comm="syz.2.40" name="igmp" dev="proc" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.702720][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 65.707059][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.716343][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.723203][ T937] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 65.723647][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.737971][ T937] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 65.739579][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.750168][ T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.757718][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.775617][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.775875][ T937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.782896][ T5304] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 65.797085][ T5304] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 65.808143][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.819763][ T937] usb 1-1: Product: syz [ 65.825643][ T937] usb 1-1: Manufacturer: syz [ 65.830374][ T937] usb 1-1: SerialNumber: syz [ 65.835336][ T5269] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.844771][ T5304] hid_prodikeys: hid-prodikeys: failed to find output report [ 65.844771][ T5304] [ 65.892253][ T4634] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 65.913800][ T5304] usb 4-1: USB disconnect, device number 3 [ 65.992035][ T5269] usb 5-1: Using ep0 maxpacket: 32 [ 65.998713][ T5269] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 66.007966][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.018500][ T5269] usb 5-1: config 0 descriptor?? [ 66.028516][ T5269] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 66.053473][ T4634] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 66.061793][ T4634] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 66.072220][ T4634] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 66.081467][ T4634] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 66.100152][ T4634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 66.112180][ T4634] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 66.131794][ T4634] usb 3-1: string descriptor 0 read error: -22 [ 66.138237][ T4634] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 66.147402][ T4634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.158097][ T4634] usb 3-1: config 0 descriptor?? [ 66.164343][ T5397] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 66.173376][ T4634] hub 3-1:0.0: bad descriptor, ignoring hub [ 66.179340][ T4634] hub 3-1:0.0: probe with driver hub failed with error -5 [ 66.191268][ T4634] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 66.230353][ T5269] gspca_vc032x: reg_r err -71 [ 66.247314][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.254061][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.259417][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.272212][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.277565][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.289883][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.297620][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.310392][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.317470][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.323812][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.329695][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.336864][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.343019][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.348365][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.355019][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.360371][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.365785][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.371101][ T5269] gspca_vc032x: I2c Bus Busy Wait 00 [ 66.383810][ T5269] gspca_vc032x: Unknown sensor... [ 66.389014][ T29] audit: type=1400 audit(1728029924.435:171): avc: denied { read append } for pid=5396 comm="syz.2.40" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 66.412835][ T5269] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 66.433256][ T5304] usb 3-1: USB disconnect, device number 4 [ 66.439319][ T29] audit: type=1400 audit(1728029924.435:172): avc: denied { ioctl open } for pid=5396 comm="syz.2.40" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 66.442495][ T5269] usb 5-1: USB disconnect, device number 2 [ 66.505839][ T937] usb 1-1: 0:2 : does not exist [ 66.565220][ T937] usb 1-1: USB disconnect, device number 3 [ 66.600448][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.619652][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.627111][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.643635][ T5399] bridge0: entered allmulticast mode [ 66.669303][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.676496][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.683964][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.691110][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.703724][ T5399] bridge0: entered promiscuous mode [ 66.790758][ T5403] ax25_connect(): syz.3.44 uses autobind, please contact jreuter@yaina.de [ 67.132147][ T5304] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.261243][ T5423] capability: warning: `syz.2.53' uses deprecated v2 capabilities in a way that may be insecure [ 67.303033][ T5304] usb 4-1: Using ep0 maxpacket: 16 [ 67.337512][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.350421][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.357946][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.368803][ T5304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.375243][ T5428] bridge0: entered allmulticast mode [ 67.389672][ T5304] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.418491][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.425692][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.433144][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.440272][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.460507][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.469024][ T5429] bridge0: entered promiscuous mode [ 67.493377][ T5304] usb 4-1: config 0 descriptor?? [ 67.944778][ T5304] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 67.974300][ T5442] mmap: syz.4.61 (5442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.027533][ T5304] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 68.078317][ T5304] microsoft 0003:045E:07DA.0002: no inputs found [ 68.098084][ T5304] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 68.182283][ T5308] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 68.366582][ T5308] usb 3-1: Using ep0 maxpacket: 32 [ 68.386834][ T5308] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 68.417793][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.427243][ T5304] usb 4-1: USB disconnect, device number 4 [ 68.459843][ T5308] usb 3-1: config 0 descriptor?? [ 68.507399][ T5308] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 68.618407][ T5462] bridge0: entered allmulticast mode [ 68.638111][ T5462] bridge0: entered promiscuous mode [ 68.708789][ T5308] gspca_vc032x: reg_r err -71 [ 68.714671][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.720284][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.732088][ T5271] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 68.735360][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.749882][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.764709][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.770101][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.776846][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.783107][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.788657][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.818858][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.825151][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.831046][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.840741][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.846607][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.852312][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.860437][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.866613][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.872116][ T5308] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.877628][ T5308] gspca_vc032x: Unknown sensor... [ 68.882795][ T5308] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 68.893533][ T5308] usb 3-1: USB disconnect, device number 5 [ 68.923889][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.935524][ T5271] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 68.944859][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.955297][ T5271] usb 1-1: config 0 descriptor?? [ 69.023496][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 69.023541][ T29] audit: type=1400 audit(1728029927.075:183): avc: denied { mounton } for pid=5470 comm="syz.3.72" path="/proc/31/task" dev="proc" ino=8355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.093550][ T5473] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 69.430588][ T29] audit: type=1400 audit(1728029927.475:184): avc: denied { connect } for pid=5474 comm="syz.3.74" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.470878][ T29] audit: type=1400 audit(1728029927.475:185): avc: denied { write } for pid=5474 comm="syz.3.74" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.497207][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.512797][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.525597][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.540731][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.554529][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.574816][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.592379][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.605918][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.614121][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.621154][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.627939][ T5481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.629010][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.644364][ T29] audit: type=1400 audit(1728029927.675:186): avc: denied { setopt } for pid=5480 comm="syz.2.77" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.678364][ T5481] x_tables: ip_tables: osf match: only valid for protocol 6 [ 69.695403][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.722242][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.742652][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.762428][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.769430][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.810494][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.832530][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.844006][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.861833][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.871788][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.885503][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.893501][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.900599][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.913451][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.920444][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.929626][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.939714][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.947377][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.954680][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.961770][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.968874][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.976190][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.985189][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.992659][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 69.999805][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.009548][ T29] audit: type=1326 audit(1728029928.055:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 70.033896][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.046423][ T29] audit: type=1326 audit(1728029928.055:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 70.052288][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.083014][ T5269] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.089363][ T29] audit: type=1326 audit(1728029928.055:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 70.116393][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.125622][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.141952][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.148944][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.156084][ T29] audit: type=1326 audit(1728029928.055:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 70.183546][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.192180][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.197854][ T29] audit: type=1400 audit(1728029928.095:191): avc: denied { unlink } for pid=5490 comm="syz.3.82" name="#1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.202172][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.231468][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.238590][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.238662][ T29] audit: type=1326 audit(1728029928.125:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 70.245698][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.269906][ T5269] usb 3-1: Using ep0 maxpacket: 8 [ 70.286434][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286470][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286501][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286530][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286557][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286584][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286612][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286641][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286669][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286698][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286728][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286756][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286783][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286811][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286839][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286867][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286896][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286924][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286952][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.286980][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.287008][ T5271] elecom 0003:056E:00E6.0003: unknown main item tag 0x0 [ 70.331138][ T5271] elecom 0003:056E:00E6.0003: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 70.368533][ T5269] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 70.417879][ T5271] usb 1-1: USB disconnect, device number 4 [ 70.429949][ T5269] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 70.429992][ T5269] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.430038][ T5269] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.430067][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.524109][ T5269] usbtmc 3-1:16.0: bulk endpoints not found [ 70.550298][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 70.559411][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 71.558597][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.565252][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.921544][ T5533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.165539][ T5543] process 'syz.0.104' launched './file0' with NULL argv: empty string added [ 72.846294][ T4634] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.860871][ T5277] usb 3-1: USB disconnect, device number 6 [ 73.024123][ T4634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.060901][ T4634] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 73.082570][ T4634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.103020][ T4634] usb 5-1: config 0 descriptor?? [ 73.147947][ T4634] pwc: Askey VC010 type 2 USB webcam detected. [ 73.298147][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.338225][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.371372][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.383947][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.411180][ T5585] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.568741][ T4634] pwc: recv_control_msg error -32 req 02 val 2b00 [ 73.787532][ T4634] pwc: recv_control_msg error -32 req 02 val 2c00 [ 73.812332][ T4634] pwc: recv_control_msg error -71 req 04 val 1000 [ 73.823115][ T4634] pwc: recv_control_msg error -71 req 04 val 1300 [ 73.829970][ T4634] pwc: recv_control_msg error -71 req 04 val 1400 [ 73.852360][ T4634] pwc: recv_control_msg error -71 req 02 val 2000 [ 73.859754][ T4634] pwc: recv_control_msg error -71 req 02 val 2100 [ 73.870537][ T4634] pwc: recv_control_msg error -71 req 04 val 1500 [ 73.880701][ T4634] pwc: recv_control_msg error -71 req 02 val 2500 [ 73.887612][ T4634] pwc: recv_control_msg error -71 req 02 val 2400 [ 73.894944][ T4634] pwc: recv_control_msg error -71 req 02 val 2600 [ 73.902121][ T4634] pwc: recv_control_msg error -71 req 02 val 2900 [ 73.909467][ T4634] pwc: recv_control_msg error -71 req 02 val 2800 [ 73.916906][ T4634] pwc: recv_control_msg error -71 req 04 val 1100 [ 73.938587][ T4634] pwc: recv_control_msg error -71 req 04 val 1200 [ 74.029416][ T4634] pwc: Registered as video71. [ 74.106848][ T4634] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 74.253907][ T4634] usb 5-1: USB disconnect, device number 3 [ 74.641457][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 74.641476][ T29] audit: type=1400 audit(1728029932.675:322): avc: denied { execute } for pid=5611 comm="syz.2.132" name="file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.676527][ T29] audit: type=1400 audit(1728029932.675:323): avc: denied { execute_no_trans } for pid=5611 comm="syz.2.132" path="/19/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.699919][ T29] audit: type=1400 audit(1728029932.685:324): avc: denied { create } for pid=5612 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.719662][ T29] audit: type=1400 audit(1728029932.685:325): avc: denied { setopt } for pid=5612 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.739398][ T29] audit: type=1400 audit(1728029932.695:326): avc: denied { create } for pid=5612 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.759676][ T29] audit: type=1400 audit(1728029932.695:327): avc: denied { write } for pid=5612 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.994089][ T29] audit: type=1400 audit(1728029933.045:328): avc: denied { bind } for pid=5623 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.058009][ T29] audit: type=1326 audit(1728029933.065:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 75.086490][ T29] audit: type=1326 audit(1728029933.065:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 75.120684][ T29] audit: type=1326 audit(1728029933.065:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 76.284663][ T5650] xt_l2tp: missing protocol rule (udp|l2tpip) [ 76.449184][ T5658] loop8: detected capacity change from 0 to 7 [ 76.464151][ T5658] Dev loop8: unable to read RDB block 7 [ 76.470146][ T5658] loop8: unable to read partition table [ 76.483569][ T5658] loop8: partition table beyond EOD, truncated [ 76.490031][ T5658] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 76.490031][ T5658] ) failed (rc=-5) [ 76.518293][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.534244][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.583480][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.616798][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.678355][ T25] cfg80211: failed to load regulatory.db [ 76.766770][ T5672] netlink: 1312 bytes leftover after parsing attributes in process `syz.3.155'. [ 76.862125][ T5277] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.032498][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 77.043351][ T5277] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 77.059727][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.081282][ T5277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 77.126530][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.162992][ T5277] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.176595][ T5277] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.192548][ T5277] usb 1-1: Manufacturer: syz [ 77.209520][ T5277] usb 1-1: config 0 descriptor?? [ 77.731955][ T5277] rc_core: IR keymap rc-hauppauge not found [ 77.737909][ T5277] Registered IR keymap rc-empty [ 77.744018][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.762982][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.792884][ T5277] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 77.823443][ T5277] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 77.845406][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.872401][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.892808][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.912170][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.932208][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.959592][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.999283][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 78.044833][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 78.065751][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 78.092182][ T5277] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 78.125742][ T5277] mceusb 1-1:0.0: Registered ؋ with mce emulator interface version 1 [ 78.142175][ T5277] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.166138][ T5277] usb 1-1: USB disconnect, device number 5 [ 78.261997][ T5304] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.415259][ T5304] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 78.431422][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.456148][ T5304] usb 5-1: config 0 descriptor?? [ 78.721610][ T5304] ath6kl: Failed to submit usb control message: -71 [ 78.737301][ T5304] ath6kl: unable to send the bmi data to the device: -71 [ 78.752353][ T5304] ath6kl: Unable to send get target info: -71 [ 78.775557][ T5304] ath6kl: Failed to init ath6kl core: -71 [ 78.798758][ T5304] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 78.824659][ T5304] usb 5-1: USB disconnect, device number 4 [ 78.867537][ T5735] netlink: 'syz.3.181': attribute type 63 has an invalid length. [ 78.912050][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.919680][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.929283][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.937558][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.041749][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.050665][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.059607][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.068251][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.077124][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.085074][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.497751][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 79.828575][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846244][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.853432][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 79.853448][ T29] audit: type=1400 audit(1728029937.895:459): avc: denied { ioctl } for pid=5775 comm="syz.3.198" path="socket:[9008]" dev="sockfs" ino=9008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.874908][ T5740] bridge_slave_0: entered allmulticast mode [ 79.900629][ T5740] bridge_slave_0: entered promiscuous mode [ 79.925349][ T29] audit: type=1326 audit(1728029937.945:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 79.951159][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.951393][ T29] audit: type=1326 audit(1728029937.945:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 79.958486][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.981457][ T29] audit: type=1326 audit(1728029937.945:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 79.981502][ T29] audit: type=1326 audit(1728029937.955:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 80.058597][ T5778] bridge0: left promiscuous mode [ 80.062061][ T937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.071994][ T5778] bridge0: left allmulticast mode [ 80.081243][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.095293][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.102517][ T29] audit: type=1326 audit(1728029937.955:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 80.140435][ T5740] bridge_slave_1: entered allmulticast mode [ 80.148203][ T5740] bridge_slave_1: entered promiscuous mode [ 80.161523][ T29] audit: type=1326 audit(1728029937.955:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 80.220686][ T29] audit: type=1400 audit(1728029937.955:466): avc: denied { ioctl } for pid=5775 comm="syz.3.198" path="socket:[9015]" dev="sockfs" ino=9015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.222352][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 80.249562][ T29] audit: type=1326 audit(1728029937.965:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 80.289175][ T937] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 80.302918][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.317062][ T937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 80.327755][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.353038][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.360461][ T937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.369014][ T29] audit: type=1326 audit(1728029938.045:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61c4d7dff9 code=0x7ffc0000 [ 80.378497][ T937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.405044][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.438279][ T937] usb 1-1: Manufacturer: syz [ 80.455318][ T937] usb 1-1: config 0 descriptor?? [ 80.482054][ T5740] team0: Port device team_slave_0 added [ 80.496173][ T5740] team0: Port device team_slave_1 added [ 80.573424][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.580548][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.615366][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.629043][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.640006][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.669182][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.680892][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 80.747916][ T937] rc_core: IR keymap rc-hauppauge not found [ 80.758578][ T5740] hsr_slave_0: entered promiscuous mode [ 80.766268][ T937] Registered IR keymap rc-empty [ 80.771426][ T5740] hsr_slave_1: entered promiscuous mode [ 80.779794][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.786560][ T5740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.794241][ T5740] Cannot create hsr debugfs directory [ 80.802123][ T5271] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.812574][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.844407][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 80.872908][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 80.902563][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.922716][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.943432][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.959826][ T5740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.970604][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 80.971997][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 80.987954][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.998495][ T5271] usb 5-1: config 0 has no interfaces? [ 81.002164][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.006443][ T5271] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 81.019941][ T5271] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 81.028524][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.037746][ T5271] usb 5-1: Product: syz [ 81.043914][ T5271] usb 5-1: Manufacturer: syz [ 81.051360][ T5271] usb 5-1: config 0 descriptor?? [ 81.067194][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.075782][ T5740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.092110][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.112199][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.139178][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 81.153029][ T5227] Bluetooth: hci5: command tx timeout [ 81.163589][ T937] mceusb 1-1:0.0: Registered ؋ with mce emulator interface version 1 [ 81.178259][ T5740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.192295][ T937] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.244843][ T937] usb 1-1: USB disconnect, device number 6 [ 81.275752][ T5794] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 81.307168][ T5308] usb 5-1: USB disconnect, device number 5 [ 81.340820][ T5740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.561586][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.583101][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.598950][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.617612][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.746623][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.809857][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.846833][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854096][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.882311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.889433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.002138][ T5304] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 82.156650][ T5839] syz.0.222 uses obsolete (PF_INET,SOCK_PACKET) [ 82.173470][ T5304] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 82.186622][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.193670][ T5304] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 82.201778][ T5304] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.211528][ T5304] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 82.222981][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 82.233125][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.243002][ T5304] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 82.258718][ T5304] usb 3-1: string descriptor 0 read error: -22 [ 82.302326][ T5304] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 82.311413][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.326636][ T5740] veth0_vlan: entered promiscuous mode [ 82.339439][ T5740] veth1_vlan: entered promiscuous mode [ 82.348047][ T5304] usb 3-1: config 0 descriptor?? [ 82.355451][ T5304] hub 3-1:0.0: bad descriptor, ignoring hub [ 82.361400][ T5304] hub 3-1:0.0: probe with driver hub failed with error -5 [ 82.394517][ T5304] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 82.417565][ T5740] veth0_macvtap: entered promiscuous mode [ 82.456014][ T5740] veth1_macvtap: entered promiscuous mode [ 82.488125][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.512036][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.536124][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.551153][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.572936][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.600113][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.633363][ T5740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.650949][ T5740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660335][ T5740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.669796][ T5740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.857134][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.883497][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.958822][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.979413][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240750][ T5227] Bluetooth: hci5: command tx timeout [ 83.402249][ T5304] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.602265][ T5304] usb 5-1: Using ep0 maxpacket: 16 [ 83.614191][ T5304] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 83.671295][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.700211][ T5304] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 83.714858][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.751087][ T5304] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 83.760622][ T5304] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.768975][ T5304] usb 5-1: Manufacturer: syz [ 83.783779][ T5304] usb 5-1: config 0 descriptor?? [ 84.072837][ T5304] rc_core: IR keymap rc-hauppauge not found [ 84.078803][ T5304] Registered IR keymap rc-empty [ 84.084392][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.142661][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.164509][ T5304] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 84.178946][ T5304] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 84.201358][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.228328][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.262571][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.289801][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.325806][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.363852][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.415623][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.444910][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.482347][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.500823][ T5900] syzkaller0: entered promiscuous mode [ 84.510763][ T5900] syzkaller0: entered allmulticast mode [ 84.512250][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 84.543948][ T5304] mceusb 5-1:0.0: Registered ؋ with mce emulator interface version 1 [ 84.552699][ T5304] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 84.567077][ T5304] usb 5-1: USB disconnect, device number 6 [ 84.700425][ T25] usb 3-1: USB disconnect, device number 7 [ 85.312045][ T5227] Bluetooth: hci5: command tx timeout [ 86.202196][ T5308] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.363893][ T5308] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.375300][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.395534][ T5308] usb 5-1: config 0 descriptor?? [ 86.403016][ T5308] cp210x 5-1:0.0: cp210x converter detected [ 86.675375][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 86.675395][ T29] audit: type=1400 audit(1728029944.725:595): avc: denied { create } for pid=5937 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.710763][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 86.743447][ T29] audit: type=1400 audit(1728029944.755:596): avc: denied { setopt } for pid=5937 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.810998][ T5308] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 86.811947][ T29] audit: type=1400 audit(1728029944.755:597): avc: denied { write } for pid=5937 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.866181][ T5308] usb 5-1: cp210x converter now attached to ttyUSB0 [ 86.912723][ T29] audit: type=1400 audit(1728029944.755:598): avc: denied { read write } for pid=5937 comm="syz.3.261" name="ppp" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.993188][ T29] audit: type=1400 audit(1728029944.755:599): avc: denied { open } for pid=5937 comm="syz.3.261" path="/dev/ppp" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.018533][ T29] audit: type=1400 audit(1728029944.755:600): avc: denied { ioctl } for pid=5937 comm="syz.3.261" path="/dev/ppp" dev="devtmpfs" ino=696 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.054245][ T29] audit: type=1400 audit(1728029944.755:601): avc: denied { create } for pid=5937 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.055089][ T5308] usb 5-1: USB disconnect, device number 7 [ 87.077596][ T29] audit: type=1400 audit(1728029944.755:602): avc: denied { write } for pid=5937 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.184395][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.213428][ T5308] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 87.255363][ T5308] cp210x 5-1:0.0: device disconnected [ 87.303466][ T5277] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 87.352141][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 87.359433][ T25] usb 4-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 87.370781][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.382631][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 87.394123][ T5227] Bluetooth: hci5: command tx timeout [ 87.399798][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.417112][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 87.427003][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 87.435099][ T25] usb 4-1: Manufacturer: syz [ 87.442400][ T25] usb 4-1: config 0 descriptor?? [ 87.464223][ T5277] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 87.473265][ T5277] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 87.481396][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 87.498671][ T5277] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 87.514907][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 87.527795][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 87.564414][ T5277] usb 3-1: string descriptor 0 read error: -22 [ 87.582007][ T5277] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 87.601414][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.639871][ T5277] usb 3-1: config 0 descriptor?? [ 87.656111][ T5950] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 87.692779][ T5277] hub 3-1:0.0: bad descriptor, ignoring hub [ 87.713204][ T5277] hub 3-1:0.0: probe with driver hub failed with error -5 [ 87.739271][ T5277] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 87.764701][ T25] rc_core: IR keymap rc-hauppauge not found [ 87.770834][ T25] Registered IR keymap rc-empty [ 87.787779][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 87.805813][ C1] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 87.836450][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'. [ 87.862300][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 87.901238][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 87.949871][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 87.984783][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 87.998277][ T5308] usb 3-1: USB disconnect, device number 8 [ 88.012666][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.062236][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.094900][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.122181][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.142204][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.172252][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.194235][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.215070][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.242834][ T25] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 88.285393][ T25] mceusb 4-1:0.0: Registered ؋ with mce emulator interface version 1 [ 88.300099][ T25] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 88.319061][ T25] usb 4-1: USB disconnect, device number 5 [ 89.356148][ T29] audit: type=1326 audit(1728029947.345:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 89.835823][ T29] audit: type=1326 audit(1728029947.345:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 90.078479][ T6026] bridge0: entered allmulticast mode [ 90.090650][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.097855][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.105367][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.112573][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.135969][ T6026] bridge0: entered promiscuous mode [ 90.281970][ T937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.432013][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 90.457932][ T937] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 90.475876][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.494309][ T937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 90.521943][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.544624][ T937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.563595][ T937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.576002][ T937] usb 1-1: Manufacturer: syz [ 90.588001][ T937] usb 1-1: config 0 descriptor?? [ 90.702104][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 90.961948][ T937] rc_core: IR keymap rc-hauppauge not found [ 90.967894][ T937] Registered IR keymap rc-empty [ 90.976241][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.012230][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.032622][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 91.037598][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 91.063142][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 91.096986][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.122562][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.144555][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.196222][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.232817][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.262663][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.283883][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.302112][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.322398][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.655304][ T937] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 91.683203][ T937] mceusb 1-1:0.0: Registered ؋ with mce emulator interface version 1 [ 91.703758][ T937] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.725826][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 91.758533][ T937] usb 1-1: USB disconnect, device number 7 [ 92.075962][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 92.076005][ T29] audit: type=1400 audit(1728029950.125:611): avc: denied { name_bind } for pid=6093 comm="syz.2.327" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 92.454094][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 92.536309][ T6117] netlink: 80 bytes leftover after parsing attributes in process `syz.0.336'. [ 92.546150][ T6117] netlink: 80 bytes leftover after parsing attributes in process `syz.0.336'. [ 92.831962][ T5227] Bluetooth: hci2: command tx timeout [ 92.872214][ T6124] bridge0: entered promiscuous mode [ 92.877448][ T6124] bridge0: entered allmulticast mode [ 92.956120][ T29] audit: type=1400 audit(1728029950.975:612): avc: denied { mount } for pid=6130 comm="syz.0.343" name="/" dev="hugetlbfs" ino=10215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.979168][ T29] audit: type=1400 audit(1728029951.005:613): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.062241][ T5308] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.231989][ T5308] usb 3-1: Using ep0 maxpacket: 16 [ 93.250536][ T5308] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 93.266056][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.279271][ T5308] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 93.292112][ T5308] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.337159][ T5308] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.349102][ T5308] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.377812][ T5308] usb 3-1: Manufacturer: syz [ 93.390050][ T5308] usb 3-1: config 0 descriptor?? [ 93.585932][ T29] audit: type=1400 audit(1728029951.635:614): avc: denied { create } for pid=6156 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 93.718994][ T5308] rc_core: IR keymap rc-hauppauge not found [ 93.755040][ T5308] Registered IR keymap rc-empty [ 93.769967][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 93.779129][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 93.810500][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 93.833440][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 93.853812][ T5308] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 93.891635][ T5308] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 93.949371][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.005073][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.311002][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.332272][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.352391][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.368734][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 94.378287][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.417245][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.482229][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.531954][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.563310][ T5308] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 94.591158][ T5308] mceusb 3-1:0.0: Registered ؋ with mce emulator interface version 1 [ 94.617710][ T5308] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.632190][ T5277] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.680070][ T5308] usb 3-1: USB disconnect, device number 9 [ 94.815267][ T5277] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.824454][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.835326][ T5277] usb 4-1: Product: syz [ 94.839523][ T5277] usb 4-1: Manufacturer: syz [ 94.844507][ T5277] usb 4-1: SerialNumber: syz [ 94.853503][ T5277] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.888513][ T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.356056][ T5304] usb 4-1: USB disconnect, device number 6 [ 95.954401][ T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 95.962600][ T25] ath9k_htc: Failed to initialize the device [ 95.971736][ T5304] usb 4-1: ath9k_htc: USB layer deinitialized [ 96.263866][ T937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 96.442220][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 96.460762][ T937] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 96.471738][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.508152][ T937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 96.539727][ T937] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.570342][ T937] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.580134][ T937] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.597050][ T937] usb 3-1: Manufacturer: syz [ 96.608612][ T937] usb 3-1: config 0 descriptor?? [ 96.631855][ T29] audit: type=1400 audit(1728029954.675:615): avc: denied { create } for pid=6249 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.664382][ T29] audit: type=1400 audit(1728029954.705:616): avc: denied { write } for pid=6249 comm="syz.3.394" path="socket:[11145]" dev="sockfs" ino=11145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.688918][ T29] audit: type=1400 audit(1728029954.705:617): avc: denied { nlmsg_read } for pid=6249 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.922018][ T937] rc_core: IR keymap rc-hauppauge not found [ 96.928036][ T937] Registered IR keymap rc-empty [ 96.933667][ T29] audit: type=1400 audit(1728029954.985:618): avc: denied { rename } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.963505][ T29] audit: type=1400 audit(1728029954.985:619): avc: denied { unlink } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.964674][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.017303][ T29] audit: type=1400 audit(1728029954.985:620): avc: denied { create } for pid=4655 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.069992][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.103624][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 97.116767][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 97.171805][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.206113][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.232256][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.265095][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.292126][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.327154][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.401067][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.432351][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.486102][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.502868][ T6280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.405'. [ 97.513877][ T937] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 97.553365][ T937] mceusb 3-1:0.0: Registered ؋ with mce emulator interface version 1 [ 97.553393][ T937] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 97.566209][ T937] usb 3-1: USB disconnect, device number 10 [ 99.565431][ T6348] lo speed is unknown, defaulting to 1000 [ 99.578687][ T6348] lo speed is unknown, defaulting to 1000 [ 99.590154][ T6348] lo speed is unknown, defaulting to 1000 [ 99.642837][ T5304] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.822189][ T5304] usb 5-1: Using ep0 maxpacket: 16 [ 99.828580][ T6348] infiniband sz0: set active [ 99.829315][ T5304] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 99.834636][ T5307] lo speed is unknown, defaulting to 1000 [ 99.846791][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.877308][ T6348] infiniband sz0: added lo [ 99.895790][ T5304] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 99.922211][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.948363][ T6348] RDS/IB: sz0: added [ 99.953690][ T6348] smc: adding ib device sz0 with port count 1 [ 99.960093][ T6348] smc: ib device sz0 port 1 has pnetid [ 99.971031][ T5307] lo speed is unknown, defaulting to 1000 [ 99.978079][ T6348] lo speed is unknown, defaulting to 1000 [ 99.999885][ T5304] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.028199][ T5304] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.050483][ T5304] usb 5-1: Manufacturer: syz [ 100.097412][ T5304] usb 5-1: config 0 descriptor?? [ 100.264386][ T6359] lo speed is unknown, defaulting to 1000 [ 100.402011][ T5304] rc_core: IR keymap rc-hauppauge not found [ 100.407966][ T5304] Registered IR keymap rc-empty [ 100.434925][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.441938][ T29] audit: type=1400 audit(1728029958.485:621): avc: denied { ioctl } for pid=6360 comm="syz.1.440" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12405 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.482208][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.502775][ T5304] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 100.537558][ T5304] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 100.577249][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.612020][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.634150][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.662652][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.681197][ T6348] lo speed is unknown, defaulting to 1000 [ 100.703852][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.747685][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.777072][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.855826][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.915537][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.985301][ T5304] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 101.001522][ T6348] lo speed is unknown, defaulting to 1000 [ 101.015105][ T5304] mceusb 5-1:0.0: Registered ؋ with mce emulator interface version 1 [ 101.042172][ T5277] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.081923][ T5304] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.106536][ T5304] usb 5-1: USB disconnect, device number 8 [ 101.212826][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.249625][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.263418][ T5277] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 101.272876][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.313277][ T5277] usb 4-1: config 0 descriptor?? [ 101.391638][ T6348] lo speed is unknown, defaulting to 1000 [ 101.686461][ T6348] lo speed is unknown, defaulting to 1000 [ 101.840838][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.864951][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.881313][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.891829][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.925135][ T29] audit: type=1326 audit(1728029959.975:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 101.973809][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 101.987417][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.002106][ T29] audit: type=1326 audit(1728029959.975:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.016154][ T5277] usb 4-1: USB disconnect, device number 7 [ 102.060112][ T29] audit: type=1326 audit(1728029959.975:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.066645][ T6348] lo speed is unknown, defaulting to 1000 [ 102.138580][ T29] audit: type=1326 audit(1728029959.975:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.171289][ T5227] Bluetooth: hci0: link tx timeout [ 102.177925][ T5227] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.231296][ T29] audit: type=1326 audit(1728029960.045:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.341259][ T29] audit: type=1326 audit(1728029960.075:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.380151][ T29] audit: type=1326 audit(1728029960.085:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 102.409885][ T29] audit: type=1326 audit(1728029960.085:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86fb7ff17 code=0x7ffc0000 [ 102.436718][ T29] audit: type=1326 audit(1728029960.085:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb86fb7fe8c code=0x7ffc0000 [ 102.662166][ T937] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.832420][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 102.841716][ T937] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 102.855407][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.884289][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 102.912072][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.936771][ T937] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.972147][ T54] Bluetooth: hci0: link tx timeout [ 102.977381][ T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.987498][ T937] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.002224][ T937] usb 5-1: Manufacturer: syz [ 103.014318][ T937] usb 5-1: config 0 descriptor?? [ 103.211582][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.218946][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.227586][ T6435] bridge0: left promiscuous mode [ 103.240007][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.247280][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.254756][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.261945][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.280670][ T6435] bridge0: entered promiscuous mode [ 103.322015][ T937] rc_core: IR keymap rc-hauppauge not found [ 103.331663][ T937] Registered IR keymap rc-empty [ 103.352081][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.354575][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.402436][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.434012][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 103.456385][ T6442] lo speed is unknown, defaulting to 1000 [ 103.478722][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 103.515732][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.532961][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.538266][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 103.554453][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.582928][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.585730][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.613972][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.629051][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.645672][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.653950][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.661493][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.682022][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.690078][ T25] usb 4-1: config 0 descriptor?? [ 103.701351][ T6430] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.702321][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.752231][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.790199][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.822925][ T937] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 103.854188][ T937] mceusb 5-1:0.0: Registered ؋ with mce emulator interface version 1 [ 103.872001][ T937] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.912302][ T937] usb 5-1: USB disconnect, device number 9 [ 104.138136][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 104.164672][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 104.193517][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 104.208521][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.365154][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.406943][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.498049][ T5270] usb 4-1: USB disconnect, device number 8 [ 104.608132][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.615454][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.656000][ T6471] bridge0: left promiscuous mode [ 104.678693][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.685894][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.693352][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.700503][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.726443][ T6475] bridge0: entered promiscuous mode [ 105.314686][ T5270] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.333794][ T5304] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.408369][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.416168][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.426150][ T6511] bridge0: left promiscuous mode [ 105.436590][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.443671][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.451112][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.458356][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.466955][ T6511] bridge0: entered promiscuous mode [ 105.473666][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 105.485599][ T5270] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 105.496509][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.509729][ T5270] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 105.513609][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 105.521441][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.542527][ T5270] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.555648][ T5270] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.566895][ T5304] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 105.572171][ T5270] usb 5-1: Manufacturer: syz [ 105.587904][ T5304] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.590146][ T5270] usb 5-1: config 0 descriptor?? [ 105.598659][ T5304] usb 4-1: config 0 has no interface number 0 [ 105.609278][ T5304] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.619669][ T5304] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 105.630005][ T5304] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 105.639823][ T5304] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.688275][ T5304] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 105.692834][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 105.692849][ T29] audit: type=1326 audit(1728029963.745:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.697446][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.727279][ T29] audit: type=1326 audit(1728029963.755:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.727355][ T29] audit: type=1326 audit(1728029963.755:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.727395][ T29] audit: type=1326 audit(1728029963.755:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.736117][ T5304] usb 4-1: Product: syz [ 105.758722][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.810388][ T29] audit: type=1326 audit(1728029963.855:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.819654][ T5304] usb 4-1: Manufacturer: syz [ 105.839580][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.851284][ T5304] usb 4-1: SerialNumber: syz [ 105.863542][ T5304] usb 4-1: config 0 descriptor?? [ 105.903798][ T29] audit: type=1326 audit(1728029963.905:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.927302][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.959659][ T29] audit: type=1326 audit(1728029963.925:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 105.984064][ T5270] rc_core: IR keymap rc-hauppauge not found [ 105.990018][ T5270] Registered IR keymap rc-empty [ 105.997736][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.007475][ T29] audit: type=1326 audit(1728029963.925:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 106.032587][ T29] audit: type=1326 audit(1728029963.925:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 106.055780][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.062088][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.068976][ T29] audit: type=1326 audit(1728029963.925:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86fb7ff17 code=0x7ffc0000 [ 106.092131][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.109402][ T5270] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 106.136289][ T5270] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 106.167447][ T6496] netlink: 104 bytes leftover after parsing attributes in process `syz.3.494'. [ 106.188145][ T5304] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 106.228573][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.261164][ T5304] usb 4-1: USB disconnect, device number 9 [ 106.268487][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.325905][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.362904][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.392450][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.416400][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.687467][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.734185][ T6532] lo speed is unknown, defaulting to 1000 [ 106.903598][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 106.937883][ T5227] Bluetooth: hci0: Malformed Event: 0x13 [ 107.029773][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.195614][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.444486][ T5270] mceusb 5-1:0.0: Registered ؋ with mce emulator interface version 1 [ 107.476284][ T5270] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.544226][ T5270] usb 5-1: USB disconnect, device number 10 [ 108.361997][ T5307] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 108.415297][ T6567] ucma_write: process 138 (syz.1.522) changed security contexts after opening file descriptor, this is not allowed. [ 108.523738][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.562183][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.562268][ T5277] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.574643][ T5307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 108.598431][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.606909][ T5307] usb 1-1: SerialNumber: syz [ 108.649173][ T5307] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 108.674255][ T5307] usb-storage 1-1:1.0: USB Mass Storage device detected [ 108.744678][ T5307] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 108.783498][ T5307] scsi host1: usb-storage 1-1:1.0 [ 108.837636][ T6573] lo speed is unknown, defaulting to 1000 [ 109.073337][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 109.075180][ T5277] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 109.075230][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.075272][ T5277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 109.075306][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.076376][ T5277] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.076413][ T5277] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.076441][ T5277] usb 3-1: Manufacturer: syz [ 109.411542][ T6580] tty tty26: ldisc open failed (-12), clearing slot 25 [ 109.477735][ T5277] usb 3-1: config 0 descriptor?? [ 109.706577][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.714392][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.725351][ T6599] bridge0: left promiscuous mode [ 109.771209][ T6601] bond0: entered promiscuous mode [ 109.777629][ T6601] bond_slave_0: entered promiscuous mode [ 109.784757][ T6601] bond_slave_1: entered promiscuous mode [ 109.796229][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.803425][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.810921][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.818113][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.829453][ T6599] bridge0: entered promiscuous mode [ 110.083513][ T937] usb 1-1: USB disconnect, device number 8 [ 110.402008][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.563638][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 110.573387][ T25] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=cb.d8 [ 110.582757][ T25] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 110.590878][ T25] usb 2-1: Manufacturer: syz [ 110.596564][ T25] usb 2-1: SerialNumber: syz [ 110.604136][ T25] usb 2-1: config 0 descriptor?? [ 110.702997][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 110.703015][ T29] audit: type=1326 audit(1728029968.745:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.733159][ T29] audit: type=1326 audit(1728029968.755:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.760014][ T29] audit: type=1326 audit(1728029968.755:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.784595][ T29] audit: type=1326 audit(1728029968.755:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.808425][ T29] audit: type=1326 audit(1728029968.755:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.832600][ T29] audit: type=1326 audit(1728029968.755:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.857771][ T29] audit: type=1326 audit(1728029968.755:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.860980][ T25] gspca_main: spca501-2.14.0 probing 0000:0000 [ 110.887732][ T29] audit: type=1326 audit(1728029968.755:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.902729][ T25] gspca_spca501: reg write: error -71 [ 110.919315][ T29] audit: type=1326 audit(1728029968.755:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.940470][ T25] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 110.959008][ T29] audit: type=1326 audit(1728029968.755:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e97f7dff9 code=0x7ffc0000 [ 110.969659][ T25] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 111.012998][ T25] usb 2-1: USB disconnect, device number 2 [ 111.362095][ T5308] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.369204][ T6623] lo speed is unknown, defaulting to 1000 [ 111.522106][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 111.522569][ T5277] rc_core: IR keymap rc-hauppauge not found [ 111.545108][ T5308] usb 5-1: config 129 has an invalid interface number: 225 but max is 0 [ 111.572146][ T5308] usb 5-1: config 129 has no interface number 0 [ 111.576051][ T5277] Registered IR keymap rc-empty [ 111.595506][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.624674][ T5308] usb 5-1: config 129 interface 225 has no altsetting 0 [ 111.645531][ T5308] usb 5-1: New USB device found, idVendor=0707, idProduct=0200, bcdDevice=62.94 [ 111.654955][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.662896][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.668369][ T5308] usb 5-1: Product: syz [ 111.677333][ T5308] usb 5-1: Manufacturer: syz [ 111.682727][ T5308] usb 5-1: SerialNumber: syz [ 111.772868][ T5277] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 111.788233][ T5277] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 111.894836][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.922510][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.944982][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.963933][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 111.973991][ T5307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.016157][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.083110][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.139206][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.194013][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 112.208968][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.233014][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.257544][ T5307] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 112.262156][ T5277] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 112.266966][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.282369][ T5307] usb 2-1: Product: syz [ 112.286693][ T5307] usb 2-1: Manufacturer: syz [ 112.291528][ T5307] usb 2-1: SerialNumber: syz [ 112.315701][ T5307] usb 2-1: config 0 descriptor?? [ 112.344767][ T5307] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 112.352969][ T5277] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 112.384233][ T5277] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.421440][ T5277] usb 3-1: USB disconnect, device number 11 [ 112.566904][ T5307] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 112.807051][ T6661] bond0: (slave vlan2): Opening slave failed [ 112.842104][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.043674][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 113.054142][ T25] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 113.064722][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.088891][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 113.110440][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.126337][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.135957][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.148057][ T25] usb 1-1: Manufacturer: syz [ 113.157648][ T25] usb 1-1: config 0 descriptor?? [ 113.310133][ T6677] ebtables: ebtables: counters copy to user failed while replacing table [ 113.543335][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 113.757362][ T5308] pegasus 5-1:129.225: can't locate MII phy, using default [ 113.790866][ T5308] pegasus 5-1:129.225: eth1, SMC 202 USB Ethernet, 5a:fb:18:be:61:96 [ 113.811342][ T5308] usb 5-1: USB disconnect, device number 11 [ 114.878887][ T4634] usb 2-1: USB disconnect, device number 3 [ 115.575693][ T5277] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.714603][ T25] rc_core: IR keymap rc-hauppauge not found [ 115.720627][ T25] Registered IR keymap rc-empty [ 115.726401][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.754414][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.772307][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 115.779159][ T5277] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 115.790373][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.799548][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 115.812307][ T4634] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.836257][ T5277] usb 3-1: config 0 descriptor?? [ 115.841467][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 115.856259][ T5277] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 115.866918][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.893344][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.942491][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.971971][ T4634] usb 2-1: Using ep0 maxpacket: 32 [ 115.978067][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 115.993075][ T4634] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.011963][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 116.011980][ T29] audit: type=1400 audit(1728029974.055:944): avc: denied { write } for pid=6750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.064652][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.093027][ T4634] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 116.103401][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.110279][ T4634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.121031][ T29] audit: type=1400 audit(1728029974.055:945): avc: denied { add_name } for pid=6750 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.143495][ T4634] usb 2-1: Product: syz [ 116.147714][ T4634] usb 2-1: Manufacturer: syz [ 116.153133][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.159844][ T4634] usb 2-1: SerialNumber: syz [ 116.172829][ T4634] usb 2-1: config 0 descriptor?? [ 116.178236][ T29] audit: type=1400 audit(1728029974.055:946): avc: denied { create } for pid=6750 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.208131][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.217846][ T4634] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 116.229112][ T29] audit: type=1400 audit(1728029974.055:947): avc: denied { write } for pid=6750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3238 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.262590][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.275208][ T29] audit: type=1400 audit(1728029974.055:948): avc: denied { append } for pid=6750 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3238 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.304529][ T25] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.314752][ T29] audit: type=1400 audit(1728029974.275:949): avc: denied { remove_name } for pid=6779 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3238 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.341414][ T25] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 116.353393][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.362465][ T29] audit: type=1400 audit(1728029974.275:950): avc: denied { unlink } for pid=6779 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3238 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.394752][ T25] usb 1-1: USB disconnect, device number 9 [ 116.434151][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.478303][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.512412][ T4634] gspca_sunplus: reg_r err -32 [ 116.772750][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.780026][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.810003][ T6805] bridge0: left promiscuous mode [ 117.162028][ T5270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.332672][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 117.348487][ T5270] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 117.364371][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.375410][ T5270] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 117.386692][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.405801][ T5270] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.414977][ T5270] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.424391][ T5270] usb 5-1: Manufacturer: syz [ 117.439319][ T5270] usb 5-1: config 0 descriptor?? [ 117.632715][ T4634] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 117.728947][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.022491][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.029736][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.038906][ T6856] bridge0: left promiscuous mode [ 118.547257][ T5277] gspca_vc032x: reg_w err -71 [ 118.553329][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.560010][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.566522][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.571997][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.577301][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.583713][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.589025][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.594406][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.599708][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.605327][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.610643][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.617068][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.624381][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.629696][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.636844][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.642219][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.647514][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.655825][ T5277] gspca_vc032x: Unknown sensor... [ 118.660894][ T5277] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 118.670848][ T5277] usb 3-1: USB disconnect, device number 12 [ 119.018951][ T5307] usb 2-1: USB disconnect, device number 4 [ 119.540046][ T29] audit: type=1400 audit(1728029977.585:951): avc: denied { create } for pid=6896 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.566862][ T29] audit: type=1400 audit(1728029977.615:952): avc: denied { bind } for pid=6896 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.587556][ T29] audit: type=1400 audit(1728029977.615:953): avc: denied { name_bind } for pid=6896 comm="syz.1.638" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 119.644383][ T6901] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 119.659983][ T6901] team0: Port device netdevsim0 added [ 119.947820][ T6912] Invalid ELF header type: 2 != 1 [ 120.015147][ T5270] rc_core: IR keymap rc-hauppauge not found [ 120.022824][ T5270] Registered IR keymap rc-empty [ 120.028239][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.063056][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.092657][ T5270] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 120.108313][ T5270] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 120.143710][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.162323][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.183688][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.205214][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.233226][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.254244][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.256096][ T6922] bridge0: port 3(syz_tun) entered blocking state [ 120.283990][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.284559][ T6922] bridge0: port 3(syz_tun) entered disabled state [ 120.297658][ T6922] syz_tun: entered allmulticast mode [ 120.304664][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.305844][ T6922] syz_tun: entered promiscuous mode [ 120.318076][ T6922] bridge0: port 3(syz_tun) entered blocking state [ 120.324797][ T6922] bridge0: port 3(syz_tun) entered forwarding state [ 120.336404][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 120.345375][ T6924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 120.345661][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.359051][ T6924] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 120.415903][ T5270] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 120.483301][ T5270] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 120.503380][ T5270] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 120.561765][ T5270] usb 5-1: USB disconnect, device number 12 [ 120.705368][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 121.038936][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 121.038956][ T29] audit: type=1326 audit(1728029979.085:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 121.075970][ T29] audit: type=1326 audit(1728029979.125:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86fb7dff9 code=0x7ffc0000 [ 121.347346][ T29] audit: type=1400 audit(1728029979.395:996): avc: denied { bind } for pid=6966 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.367223][ T29] audit: type=1400 audit(1728029979.415:997): avc: denied { connect } for pid=6966 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.391541][ T29] audit: type=1400 audit(1728029979.435:998): avc: denied { write } for pid=6966 comm="syz.2.667" path="socket:[13787]" dev="sockfs" ino=13787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.762813][ T6969] netlink: 100 bytes leftover after parsing attributes in process `syz.4.668'. [ 121.838622][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 122.120183][ T29] audit: type=1400 audit(1728029980.165:999): avc: denied { bind } for pid=6982 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.175983][ T29] audit: type=1400 audit(1728029980.165:1000): avc: denied { accept } for pid=6982 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.211504][ T29] audit: type=1400 audit(1728029980.165:1001): avc: denied { ioctl } for pid=6982 comm="syz.0.676" path="socket:[13817]" dev="sockfs" ino=13817 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.243032][ T29] audit: type=1400 audit(1728029980.255:1002): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.267705][ T29] audit: type=1400 audit(1728029980.265:1003): avc: denied { append } for pid=6986 comm="syz.0.678" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.352092][ T5308] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.507664][ T5308] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.518206][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.528292][ T5308] usb 2-1: Product: syz [ 122.532707][ T5308] usb 2-1: Manufacturer: syz [ 122.537299][ T5308] usb 2-1: SerialNumber: syz [ 122.554581][ T5308] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 122.570183][ T937] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.646408][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a288000: rx timeout, send abort [ 122.657316][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807a288000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.671933][ C1] ------------[ cut here ]------------ [ 122.677413][ C1] refcount_t: underflow; use-after-free. [ 122.683851][ C1] WARNING: CPU: 1 PID: 24 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 122.693145][ C1] Modules linked in: [ 122.697081][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 122.707710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.717806][ C1] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 122.724038][ C1] Code: ff 89 de e8 48 1d fe fc 84 db 0f 85 66 ff ff ff e8 5b 1b fe fc c6 05 72 85 b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 e7 03 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 1b fe fc 0f b6 1d 4d 85 b8 0b 31 [ 122.743754][ C1] RSP: 0018:ffffc900001e77c8 EFLAGS: 00010286 [ 122.749861][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e7329 [ 122.757905][ C1] RDX: ffff88801d6f8000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 122.765949][ C1] RBP: ffff88802f945724 R08: 0000000000000001 R09: 0000000000000000 [ 122.774002][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 122.782037][ C1] R13: 0000000000000000 R14: ffff88802f945724 R15: 0000000000000001 [ 122.790050][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 122.799089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.805741][ C1] CR2: 0000000000000000 CR3: 000000007b7e0000 CR4: 00000000003526f0 [ 122.813779][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.821788][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.829827][ C1] Call Trace: [ 122.833158][ C1] [ 122.836124][ C1] ? __warn+0xea/0x3d0 [ 122.840267][ C1] ? refcount_warn_saturate+0x14a/0x210 [ 122.845894][ C1] ? report_bug+0x3c0/0x580 [ 122.850445][ C1] ? handle_bug+0x54/0xa0 [ 122.854875][ C1] ? exc_invalid_op+0x17/0x50 [ 122.859598][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 122.864707][ C1] ? __warn_printk+0x199/0x350 [ 122.869498][ C1] ? __warn_printk+0x1a6/0x350 [ 122.874302][ C1] ? refcount_warn_saturate+0x14a/0x210 [ 122.879856][ C1] ? refcount_warn_saturate+0x149/0x210 [ 122.885431][ C1] sk_skb_reason_drop+0x183/0x1a0 [ 122.890504][ C1] j1939_session_destroy+0x163/0x460 [ 122.895852][ C1] j1939_xtp_rx_abort_one+0x3f9/0x560 [ 122.901279][ C1] j1939_tp_recv+0xcf8/0xf50 [ 122.905944][ C1] j1939_can_recv+0x78f/0xa50 [ 122.910673][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 122.915940][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 122.921609][ C1] ? rcu_is_watching+0x12/0xc0 [ 122.926461][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 122.931727][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 122.937000][ C1] can_rcv_filter+0x2a8/0x900 [ 122.941724][ C1] can_receive+0x320/0x5c0 [ 122.946198][ C1] ? __pfx_can_rcv+0x10/0x10 [ 122.950823][ C1] can_rcv+0x1e2/0x280 [ 122.954968][ C1] __netif_receive_skb_one_core+0x1b1/0x1e0 [ 122.960913][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 122.967398][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 122.973103][ C1] ? process_backlog+0x3f1/0x15f0 [ 122.978163][ C1] ? process_backlog+0x3f1/0x15f0 [ 122.983264][ C1] __netif_receive_skb+0x1d/0x160 [ 122.988340][ C1] process_backlog+0x443/0x15f0 [ 122.993287][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 122.998723][ C1] net_rx_action+0xa92/0x1010 [ 123.003492][ C1] ? tmigr_handle_remote+0x153/0xdd0 [ 123.008835][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 123.014033][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 123.019701][ C1] ? run_timer_base+0x119/0x190 [ 123.024663][ C1] ? run_timer_base+0x11e/0x190 [ 123.029572][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 123.034868][ C1] handle_softirqs+0x213/0x8f0 [ 123.039682][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 123.045044][ C1] ? rcu_is_watching+0x12/0xc0 [ 123.049864][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 123.055050][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 123.060214][ C1] run_ksoftirqd+0x3a/0x60 [ 123.064722][ C1] smpboot_thread_fn+0x661/0xa30 [ 123.069726][ C1] ? __kthread_parkme+0x148/0x220 [ 123.074840][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 123.080351][ C1] kthread+0x2c1/0x3a0 [ 123.084501][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.089753][ C1] ? __pfx_kthread+0x10/0x10 [ 123.094440][ C1] ret_from_fork+0x45/0x80 [ 123.098896][ C1] ? __pfx_kthread+0x10/0x10 [ 123.103564][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.108410][ C1] [ 123.111457][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.118757][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 123.129382][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.139472][ C1] Call Trace: [ 123.142856][ C1] [ 123.145811][ C1] dump_stack_lvl+0x3d/0x1f0 [ 123.150463][ C1] panic+0x71d/0x800 [ 123.154422][ C1] ? __pfx_panic+0x10/0x10 [ 123.158942][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 123.164193][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 123.169364][ C1] ? refcount_warn_saturate+0x14a/0x210 [ 123.174954][ C1] check_panic_on_warn+0xab/0xb0 [ 123.179948][ C1] __warn+0xf6/0x3d0 [ 123.183894][ C1] ? refcount_warn_saturate+0x14a/0x210 [ 123.189482][ C1] report_bug+0x3c0/0x580 [ 123.193863][ C1] handle_bug+0x54/0xa0 [ 123.198072][ C1] exc_invalid_op+0x17/0x50 [ 123.202629][ C1] asm_exc_invalid_op+0x1a/0x20 [ 123.207519][ C1] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 123.213714][ C1] Code: ff 89 de e8 48 1d fe fc 84 db 0f 85 66 ff ff ff e8 5b 1b fe fc c6 05 72 85 b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 e7 03 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 1b fe fc 0f b6 1d 4d 85 b8 0b 31 [ 123.233361][ C1] RSP: 0018:ffffc900001e77c8 EFLAGS: 00010286 [ 123.239459][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e7329 [ 123.247448][ C1] RDX: ffff88801d6f8000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 123.255450][ C1] RBP: ffff88802f945724 R08: 0000000000000001 R09: 0000000000000000 [ 123.263449][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 123.271449][ C1] R13: 0000000000000000 R14: ffff88802f945724 R15: 0000000000000001 [ 123.279460][ C1] ? __warn_printk+0x199/0x350 [ 123.284374][ C1] ? __warn_printk+0x1a6/0x350 [ 123.289202][ C1] ? refcount_warn_saturate+0x149/0x210 [ 123.294792][ C1] sk_skb_reason_drop+0x183/0x1a0 [ 123.299862][ C1] j1939_session_destroy+0x163/0x460 [ 123.305203][ C1] j1939_xtp_rx_abort_one+0x3f9/0x560 [ 123.310638][ C1] j1939_tp_recv+0xcf8/0xf50 [ 123.315288][ C1] j1939_can_recv+0x78f/0xa50 [ 123.320008][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 123.325243][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 123.330923][ C1] ? rcu_is_watching+0x12/0xc0 [ 123.335724][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 123.340946][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 123.346174][ C1] can_rcv_filter+0x2a8/0x900 [ 123.350895][ C1] can_receive+0x320/0x5c0 [ 123.355354][ C1] ? __pfx_can_rcv+0x10/0x10 [ 123.359980][ C1] can_rcv+0x1e2/0x280 [ 123.364090][ C1] __netif_receive_skb_one_core+0x1b1/0x1e0 [ 123.370031][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 123.376497][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 123.381740][ C1] ? process_backlog+0x3f1/0x15f0 [ 123.386816][ C1] ? process_backlog+0x3f1/0x15f0 [ 123.391884][ C1] __netif_receive_skb+0x1d/0x160 [ 123.396960][ C1] process_backlog+0x443/0x15f0 [ 123.401863][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 123.407292][ C1] net_rx_action+0xa92/0x1010 [ 123.412105][ C1] ? tmigr_handle_remote+0x153/0xdd0 [ 123.417440][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 123.422596][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 123.428272][ C1] ? run_timer_base+0x119/0x190 [ 123.433193][ C1] ? run_timer_base+0x11e/0x190 [ 123.438091][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 123.443327][ C1] handle_softirqs+0x213/0x8f0 [ 123.448140][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 123.453463][ C1] ? rcu_is_watching+0x12/0xc0 [ 123.458272][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 123.463420][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 123.468571][ C1] run_ksoftirqd+0x3a/0x60 [ 123.473025][ C1] smpboot_thread_fn+0x661/0xa30 [ 123.478004][ C1] ? __kthread_parkme+0x148/0x220 [ 123.483074][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 123.488574][ C1] kthread+0x2c1/0x3a0 [ 123.492682][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.497916][ C1] ? __pfx_kthread+0x10/0x10 [ 123.502559][ C1] ret_from_fork+0x45/0x80 [ 123.507014][ C1] ? __pfx_kthread+0x10/0x10 [ 123.511651][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.516485][ C1] [ 123.520614][ C1] Kernel Offset: disabled [ 123.524963][ C1] Rebooting in 86400 seconds..