last executing test programs: 2m9.549183221s ago: executing program 0 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfffffffffffffe57, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004859}, 0x4000) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x5, 0x1, 0x3, 0x0, 0x1, "43ee4d9cfb8893d2536110d947ba907097185c"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x2}, {0x2, 0x2}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m9.286801432s ago: executing program 0 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x94}}, 0xf5ffffff) 2m9.286629525s ago: executing program 0 (id=691): mkdir(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x400010000000006, 0x400) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioperm(0x0, 0xf4, 0x10000007f) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000005c0)={0x0, 0x2, 0x8}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 2m9.227173361s ago: executing program 0 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000200010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2m8.230703096s ago: executing program 0 (id=695): creat(&(0x7f0000000b00)='./file0\x00', 0xecf86c37d5304970) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x338, 0x3a8, 0x3a8, 0x338, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x0, 0x19}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 'dvmrp0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'rose0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x6) (fail_nth: 6) 2m7.835161594s ago: executing program 0 (id=699): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone3(&(0x7f0000000280)={0x100000800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0xa) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000197c0)=""/102384, 0xffffffa9) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) (async) r2 = userfaultfd(0x80001) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT={0x4, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r1}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(r6, &(0x7f0000000600)='./file0\x00', 0x81801) move_mount(r6, 0x0, r7, 0x0, 0x276) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x18, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1471}, [@call={0x85, 0x0, 0x0, 0xb8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000500)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000150a0514a2000000f6ffffff01000002"], 0x14}, 0x1, 0x0, 0x0, 0x431ea13cdaca204b}, 0x0) 1m58.693838019s ago: executing program 4 (id=736): socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socket$inet_sctp(0x2, 0x3, 0x84) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket(0x21, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) (fail_nth: 10) 1m58.149298101s ago: executing program 4 (id=739): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="98ad2e40204cc2ac6faf2571d9bfdc37724b27cb6754ea", 0x17}, 0x1, 0x0, 0x0, 0x24000054}, 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = open(0x0, 0x8080, 0x40) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x16f}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r3, 0x0, &(0x7f0000000380)='./file1\x00'}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) sendmmsg$nfc_llcp(r3, &(0x7f0000000440)=[{&(0x7f0000000000)={0x27, r7, 0x1, 0x7, 0x28, 0xff, "ad3fbdec670d707d4a513d867f44ff6e5f9a6b9ba4630f84030fb0300a1a03b43a6eb20bfaefbd87432b356ee13b13758e314b25689487d536dfefcdd2786c", 0x1c}, 0x60, &(0x7f0000000800)=[{&(0x7f00000001c0)="87e2634a300d", 0x6}, {&(0x7f0000000500)="8c36060820ccc61dc14c8588d492cfbc81246c702f3d767e93c2a4819df8597ef49d40c7cb682973bcc4ee64de37ffab2e8c00c804cdbc35b4b0b692b721485033640f7649f37a08782bf98c329e04dbdc5d4e9faee0d20a9862fad8dda7585d764ccef7fb4f20666fca9d0b160d7475731f60d684892470c3d5cf1bb9bcd0fb9b5f5ea53b074bf979c0505ae0efae4e85738a2efe19b9763b9c37512e071875239f1b5fa19ec514e658e3f816a5d1649f018fbc04df", 0xb6}, {&(0x7f00000005c0)="00166552a96bcc269878e65d19c5bb76bca93ee95bc3aa307802f6f22d2ccbb062ff655d43486cddd7efade01bbeaac9e3b7de9083b9dcfec4c0e63fa43cfe0a67ffb24bcdf1fa67e2fb0ce385d583414bea67235e43b9a8d9d06f49cdfe5c9812d0d5e38aa37e16f421bb4cafeabe2cd6b7a706bbae1296169a1162da1f432a505099735ec7cb556134c3f1c9224e99e8cd551a0bf03e", 0x97}, {&(0x7f0000000340)="f011cbfd5d82ec", 0x7}, {&(0x7f0000000680)="180d3a3f44564f160c536be230791415ae7dd0deeda83966e468eb57bb09fe2860a51a690581ab03cb99b188fbe9d6ca990d54a3828a8453a54e51adccfcd78a4a87fb9e433744a429c670a9b4c8aaf27af24e561b13db49109d8b5caff5726036eff8eb1d470071a3e97e3627003681257e31b2b0ca7599bd0d0cd9e1a0fafe96461bf7557a1bf97a9bd073f6f25b6ece24cff32ea25c24bdf68e4f7b41b6f9e4373bf57ea13947eaefebab4925ec1a583e6e", 0xb3}, {&(0x7f00000003c0)="828b288443e2dcb7850c866dc8bdb88a017a64d0b29707c5dbcfd3482bc2412a", 0x20}, {&(0x7f0000000740)="c35f4d5d22dc0f9b428349760567e3db47a4685b24bf469320d439302b2da4f75104b2e419da02b5c27d75044828bcd8e9bfa90775fb7183d58e5fabb4868c8d8ae72e86b1170c6f2c726e1fb574a1905824af451fe736270bd3a66ace8578bf004e623f8ea1f712e940b9b2f9d477cdadc77ca6592f758f266359ede3e62476345ed3a48da5524a", 0x88}], 0x7, &(0x7f0000000880)={0x110, 0x107, 0x5, "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"}, 0x110, 0x24000805}], 0x1, 0x4084) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.813755267s ago: executing program 4 (id=741): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1000}}, 0x30) r4 = gettid() process_vm_writev(r4, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10c7) 1m54.386356345s ago: executing program 4 (id=748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x24000800, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) umount2(&(0x7f0000000200)='./file1\x00', 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x20, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040) 1m52.824407244s ago: executing program 32 (id=699): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone3(&(0x7f0000000280)={0x100000800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0xa) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000197c0)=""/102384, 0xffffffa9) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) (async) r2 = userfaultfd(0x80001) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT={0x4, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r1}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(r6, &(0x7f0000000600)='./file0\x00', 0x81801) move_mount(r6, 0x0, r7, 0x0, 0x276) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x18, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1471}, [@call={0x85, 0x0, 0x0, 0xb8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000500)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000150a0514a2000000f6ffffff01000002"], 0x14}, 0x1, 0x0, 0x0, 0x431ea13cdaca204b}, 0x0) 1m52.707610467s ago: executing program 4 (id=753): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x20080) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) write$P9_RWRITE(r2, 0x0, 0x0) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) r3 = syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xfac6, 0x800, 0x3, 0x2c9}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r3, 0x16d4, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000080)=""/53, 0x35) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) 1m51.826771103s ago: executing program 4 (id=755): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f00000001c0)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0x1ff, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0xb, 0x6, 0x6, 0xffffffff, "fe1d00003413000000fe0220b42717e47f00f7ffffff00"}}) 1m50.8244553s ago: executing program 33 (id=755): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f00000001c0)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0x1ff, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0xb, 0x6, 0x6, 0xffffffff, "fe1d00003413000000fe0220b42717e47f00f7ffffff00"}}) 1.64539113s ago: executing program 5 (id=1511): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) 1.390872809s ago: executing program 5 (id=1516): r0 = io_uring_setup(0x40b0, &(0x7f0000000080)={0x0, 0xe9ce, 0x2, 0x20001, 0x175}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') close(r0) readv(r1, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 1.242788147s ago: executing program 5 (id=1521): r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.03881258s ago: executing program 5 (id=1527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x6}) 758.981794ms ago: executing program 2 (id=1533): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x143441, 0x10) sync_file_range(r0, 0x7f, 0xfffffffffffffdd7, 0x2) 710.819642ms ago: executing program 6 (id=1534): open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 710.544814ms ago: executing program 2 (id=1535): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) preadv2(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/187, 0xbb}], 0x1, 0x5, 0xebc0, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x80) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x57ad09c66372ece6) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @multicast2}, 0x348, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8, 0xc}) setreuid(r2, r2) writev(r0, &(0x7f0000000980), 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000b40)={0x0, 0x2}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x810) getsockname$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48885}, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x800) 665.918061ms ago: executing program 6 (id=1537): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) read(r0, &(0x7f00000004c0)=""/74, 0x4a) 582.699069ms ago: executing program 3 (id=1539): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) 582.593038ms ago: executing program 2 (id=1540): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000001240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000001280)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf0, 0x3a, 'datacow', 0x3a, '\\-%#!\\\\\'', 0x3a, './file0', 0x3a, [0x46]}, 0x37) 564.860331ms ago: executing program 6 (id=1541): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000001f9c0), 0x80040, 0x0) preadv(r0, &(0x7f000001fa00)=[{&(0x7f0000000b80)=""/5, 0x5}], 0x1, 0x6, 0xfffffff4) 471.14648ms ago: executing program 2 (id=1542): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r3, 0x1, 0x20, 0x6, @link_local}, 0x14) 471.022691ms ago: executing program 3 (id=1543): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x42142, 0x0) fcntl$setpipe(r0, 0x407, 0x6) 470.922158ms ago: executing program 6 (id=1544): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 414.850897ms ago: executing program 1 (id=1545): r0 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80001001}) poll(&(0x7f0000000080)=[{r1, 0x4a}], 0x1, 0x0) 391.268759ms ago: executing program 3 (id=1546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x7ffffffffffffffd, 0x100000001, 0x800000000, 0x20, 0x5, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0xffffffffffffffff], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 388.621054ms ago: executing program 1 (id=1547): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 338.61725ms ago: executing program 2 (id=1548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0), 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 321.094798ms ago: executing program 6 (id=1549): r0 = epoll_create(0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000024c0)={0x30000008}) 254.872988ms ago: executing program 1 (id=1550): r0 = syz_io_uring_setup(0x163c, &(0x7f0000000000)={0x0, 0x6dbb, 0x1000, 0x3, 0x28a}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 229.425002ms ago: executing program 3 (id=1551): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000009c0)) 209.920705ms ago: executing program 6 (id=1552): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xfff5, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_HASH={0x8, 0x2, 0x8}]}}]}, 0x40}}, 0x4000084) 154.800593ms ago: executing program 1 (id=1553): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0xcc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) 150.157799ms ago: executing program 5 (id=1554): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000003380)=""/65, 0x41, 0x7) 107.482852ms ago: executing program 1 (id=1555): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x10, 0x10000018, 0x6, 0x63, 0x4, 0xf5}) 79.220418ms ago: executing program 3 (id=1556): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 78.152897ms ago: executing program 2 (id=1557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14.254289ms ago: executing program 5 (id=1558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x6c00, 0x4000000}, 0x28) 14.049588ms ago: executing program 1 (id=1559): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 0s ago: executing program 3 (id=1560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) kernel console output (not intermixed with test programs): scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.569271][ T8144] batman_adv: batadv0: Adding interface: macvtap0 [ 239.578726][ T8144] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.608803][ T8144] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 239.614866][ T24] airspy 5-1:0.0: Registered as swradio24 [ 239.631143][ T24] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 239.951154][ T8131] wg2: entered promiscuous mode [ 239.956076][ T8131] wg2: entered allmulticast mode [ 239.961455][ T24] usb 5-1: USB disconnect, device number 21 [ 239.984114][ T3072] usb 1-1: USB disconnect, device number 20 [ 240.385589][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.672856][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.395629][ T8180] tmpfs: Unknown parameter 'TIPCv2' [ 242.029486][ T8183] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.099910][ T8191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.111920][ T30] audit: type=1400 audit(1748260542.242:468): avc: denied { read } for pid=8193 comm="syz.1.665" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.304232][ T8199] ======================================================= [ 242.304232][ T8199] WARNING: The mand mount option has been deprecated and [ 242.304232][ T8199] and is ignored by this kernel. Remove the mand [ 242.304232][ T8199] option from the mount to silence this warning. [ 242.304232][ T8199] ======================================================= [ 242.340934][ T8199] fuse: Bad value for 'fd' [ 242.871131][ T972] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.911005][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 243.047230][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 243.097772][ T972] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 243.129057][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 243.181994][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.196764][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.272436][ T972] usb 4-1: Product: syz [ 243.281509][ T9] usb 1-1: Product: syz [ 243.311281][ T972] usb 4-1: Manufacturer: syz [ 243.319810][ T9] usb 1-1: Manufacturer: syz [ 243.354043][ T972] usb 4-1: SerialNumber: syz [ 243.362253][ T9] usb 1-1: SerialNumber: syz [ 243.467062][ T972] usb 4-1: config 0 descriptor?? [ 243.479653][ T9] usb 1-1: config 0 descriptor?? [ 243.550833][ T972] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 243.626447][ T8216] bridge2: entered promiscuous mode [ 243.691080][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 243.717234][ T8203] wg2: entered promiscuous mode [ 243.722530][ T8203] wg2: entered allmulticast mode [ 243.735941][ T972] usb 4-1: USB disconnect, device number 19 [ 243.841161][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 243.847991][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.869573][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.879236][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.887907][ T5864] usb 3-1: Product: syz [ 243.892377][ T5864] usb 3-1: Manufacturer: syz [ 243.897003][ T5864] usb 3-1: SerialNumber: syz [ 243.904690][ T5864] usb 3-1: config 0 descriptor?? [ 243.912421][ T5864] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.921985][ T5864] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 243.929665][ T9] airspy 1-1:0.0: Board ID: 05 [ 243.931123][ T3072] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 243.934792][ T9] airspy 1-1:0.0: Firmware version:  [ 244.105255][ T3072] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 244.114803][ T3072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.124597][ T3072] usb 5-1: Product: syz [ 244.128761][ T3072] usb 5-1: Manufacturer: syz [ 244.133874][ T3072] usb 5-1: SerialNumber: syz [ 244.134925][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 244.147050][ T3072] usb 5-1: config 0 descriptor?? [ 244.147916][ T9] airspy 1-1:0.0: Registered as swradio24 [ 244.158021][ T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 244.173444][ T9] usb 1-1: USB disconnect, device number 21 [ 244.191034][ T972] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 244.343845][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.356962][ T972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 244.366598][ T972] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 244.379784][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.399407][ T972] usb 2-1: config 0 descriptor?? [ 244.415420][ T972] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 244.426719][ T972] dvb-usb: bulk message failed: -22 (3/0) [ 244.438482][ T972] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 244.453833][ T972] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 244.462776][ T972] usb 2-1: media controller created [ 244.470781][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.485916][ T972] dvb-usb: bulk message failed: -22 (6/0) [ 244.492150][ T972] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 244.501588][ T972] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 244.515004][ T5864] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 244.530479][ T972] dvb-usb: schedule remote query interval to 150 msecs. [ 244.551342][ T972] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 244.615921][ T30] audit: type=1400 audit(1748260544.732:469): avc: denied { append } for pid=8221 comm="syz.1.676" name="i2c-1" dev="devtmpfs" ino=3067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.714332][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 244.782189][ T972] dvb-usb: error while querying for an remote control event. [ 244.929208][ T3072] airspy 5-1:0.0: usb_control_msg() failed -32 request 0a [ 244.936754][ T3072] airspy 5-1:0.0: Could not detect board [ 244.942556][ T3072] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 244.952484][ T3072] usb 5-1: USB disconnect, device number 22 [ 244.984879][ T8230] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.052508][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 245.058713][ T972] dvb-usb: error while querying for an remote control event. [ 245.240811][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 245.278142][ T972] dvb-usb: error while querying for an remote control event. [ 245.307405][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 245.459213][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 245.566823][ T972] dvb-usb: error while querying for an remote control event. [ 246.252487][ T5864] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 246.260753][ T5864] em28xx 3-1:0.0: board has no eeprom [ 246.293503][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 246.299323][ T9] dvb-usb: error while querying for an remote control event. [ 246.322057][ T5864] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 246.330685][ T5864] em28xx 3-1:0.0: dvb set to bulk mode. [ 246.336945][ T972] em28xx 3-1:0.0: Binding DVB extension [ 246.392287][ T972] em28xx 3-1:0.0: Registering input extension [ 246.444315][ T8251] veth0_vlan: entered allmulticast mode [ 246.461100][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 246.467420][ T972] dvb-usb: error while querying for an remote control event. [ 246.561001][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 246.631882][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 246.639292][ T972] dvb-usb: error while querying for an remote control event. [ 246.725307][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 246.737530][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.745919][ T9] usb 5-1: Product: syz [ 246.750163][ T9] usb 5-1: Manufacturer: syz [ 246.755069][ T9] usb 5-1: SerialNumber: syz [ 246.762762][ T9] usb 5-1: config 0 descriptor?? [ 246.814101][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 246.831796][ T972] dvb-usb: error while querying for an remote control event. [ 246.853147][ T3072] usb 2-1: USB disconnect, device number 21 [ 246.894809][ T3072] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.980190][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 247.251444][ T3072] usb 3-1: USB disconnect, device number 17 [ 247.415899][ T3072] em28xx 3-1:0.0: Disconnecting em28xx [ 247.445932][ T3072] em28xx 3-1:0.0: Closing input extension [ 248.101894][ T3072] em28xx 3-1:0.0: Freeing device [ 248.227375][ T8267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.688'. [ 248.243102][ T8267] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 248.261758][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 248.389356][ T8277] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.415535][ T9] usb 5-1: USB disconnect, device number 23 [ 249.421654][ T8294] FAULT_INJECTION: forcing a failure. [ 249.421654][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 249.470980][ T8294] CPU: 1 UID: 0 PID: 8294 Comm: syz.0.695 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 249.471009][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.471019][ T8294] Call Trace: [ 249.471026][ T8294] [ 249.471033][ T8294] dump_stack_lvl+0x16c/0x1f0 [ 249.471064][ T8294] should_fail_ex+0x512/0x640 [ 249.471089][ T8294] ? fs_reclaim_acquire+0xae/0x150 [ 249.471114][ T8294] ? p9_fcall_init+0x97/0x260 [ 249.471137][ T8294] should_failslab+0xc2/0x120 [ 249.471155][ T8294] __kmalloc_noprof+0xd2/0x510 [ 249.471171][ T8294] ? rcu_is_watching+0x12/0xc0 [ 249.471196][ T8294] p9_fcall_init+0x97/0x260 [ 249.471221][ T8294] p9_tag_alloc+0x161/0x640 [ 249.471249][ T8294] ? __pfx_p9_tag_alloc+0x10/0x10 [ 249.471274][ T8294] ? stack_trace_save+0x8e/0xc0 [ 249.471297][ T8294] ? __pfx_stack_trace_save+0x10/0x10 [ 249.471317][ T8294] ? stack_depot_save_flags+0x28/0xa50 [ 249.471346][ T8294] p9_client_prepare_req+0x19b/0x4d0 [ 249.471372][ T8294] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 249.471399][ T8294] ? __filemap_fdatawrite_range+0xb2/0xf0 [ 249.471419][ T8294] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 249.471446][ T8294] p9_client_rpc+0x1c4/0xc50 [ 249.471474][ T8294] ? __pfx_p9_client_rpc+0x10/0x10 [ 249.471520][ T8294] p9_client_wstat+0x1f4/0x300 [ 249.471549][ T8294] v9fs_vfs_setattr+0x4f7/0xab0 [ 249.471577][ T8294] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 249.471600][ T8294] ? selinux_inode_setattr+0x245/0x400 [ 249.471631][ T8294] ? evm_inode_setattr+0x65/0x680 [ 249.471655][ T8294] ? __pfx_make_vfsgid+0x10/0x10 [ 249.471683][ T8294] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 249.471706][ T8294] notify_change+0x6a6/0x1230 [ 249.471738][ T8294] do_truncate+0x15b/0x220 [ 249.471767][ T8294] ? __pfx_do_truncate+0x10/0x10 [ 249.471807][ T8294] ? mnt_get_write_access+0x20c/0x300 [ 249.471835][ T8294] vfs_truncate+0x5d6/0x6e0 [ 249.471853][ T8294] ? __pfx_vfs_truncate+0x10/0x10 [ 249.471881][ T8294] ? putname+0x154/0x1a0 [ 249.471904][ T8294] __x64_sys_truncate+0x172/0x1e0 [ 249.471921][ T8294] ? __pfx___x64_sys_truncate+0x10/0x10 [ 249.471936][ T8294] ? rcu_is_watching+0x12/0xc0 [ 249.471965][ T8294] do_syscall_64+0xcd/0x260 [ 249.471992][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.472010][ T8294] RIP: 0033:0x7f4863b8e969 [ 249.472025][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.472041][ T8294] RSP: 002b:00007f486493a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 249.472059][ T8294] RAX: ffffffffffffffda RBX: 00007f4863db5fa0 RCX: 00007f4863b8e969 [ 249.472070][ T8294] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000240 [ 249.472081][ T8294] RBP: 00007f486493a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.472090][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.472099][ T8294] R13: 0000000000000000 R14: 00007f4863db5fa0 R15: 00007ffd72455938 [ 249.472114][ T8294] [ 250.854445][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 251.051874][ T8326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8326 comm=syz.3.704 [ 251.066954][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.704'. [ 251.321054][ T9] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 251.473775][ T9] usb 2-1: no configurations [ 251.478391][ T9] usb 2-1: can't read configurations, error -22 [ 251.541219][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 251.615911][ T8332] block device autoloading is deprecated and will be removed. [ 251.625117][ T8332] syz.4.706: attempt to access beyond end of device [ 251.625117][ T8332] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 251.638116][ T8332] FAT-fs (loop9): unable to read boot sector [ 251.973489][ T8334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.707'. [ 252.031573][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 252.272831][ T9] usb 2-1: no configurations [ 252.383622][ T9] usb 2-1: can't read configurations, error -22 [ 252.399599][ T9] usb usb2-port1: attempt power cycle [ 253.130980][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 253.182807][ T9] usb 2-1: no configurations [ 253.187572][ T9] usb 2-1: can't read configurations, error -22 [ 253.224934][ T30] audit: type=1400 audit(1748260553.352:470): avc: denied { getopt } for pid=8343 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.331058][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 253.365190][ T9] usb 2-1: no configurations [ 253.369953][ T9] usb 2-1: can't read configurations, error -22 [ 253.399315][ T9] usb usb2-port1: unable to enumerate USB device [ 253.681013][ T3072] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 253.876073][ T3072] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 253.896329][ T3072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.929300][ T3072] usb 4-1: Product: syz [ 253.950119][ T3072] usb 4-1: Manufacturer: syz [ 254.062775][ T3072] usb 4-1: SerialNumber: syz [ 254.090693][ T3072] usb 4-1: config 0 descriptor?? [ 254.689255][ T3072] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 255.268645][ T3072] airspy 4-1:0.0: Could not detect board [ 255.310373][ T8370] sctp: [Deprecated]: syz.2.718 (pid 8370) Use of int in max_burst socket option. [ 255.310373][ T8370] Use struct sctp_assoc_value instead [ 255.449447][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.459449][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.000466][ T3072] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 256.036123][ T3072] usb 4-1: USB disconnect, device number 20 [ 256.044218][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 256.405260][ T8384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.141136][ T30] audit: type=1400 audit(1748260556.972:471): avc: denied { write } for pid=8380 comm="syz.1.721" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.165758][ T30] audit: type=1400 audit(1748260556.972:472): avc: denied { ioctl } for pid=8380 comm="syz.1.721" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.420244][ T8400] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.452336][ T3072] IPVS: starting estimator thread 0... [ 257.561062][ T8406] IPVS: using max 46 ests per chain, 110400 per kthread [ 257.632278][ T5864] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 257.790976][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 257.803783][ T5864] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 257.812780][ T5864] usb 4-1: config 2 has no interface number 0 [ 257.818938][ T5864] usb 4-1: config 2 interface 31 has no altsetting 0 [ 257.830272][ T5864] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 257.839562][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.847828][ T5864] usb 4-1: Product: syz [ 257.852203][ T5864] usb 4-1: Manufacturer: syz [ 257.856941][ T5864] usb 4-1: SerialNumber: syz [ 257.891661][ T3072] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 258.001094][ T972] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 258.061125][ T3072] usb 2-1: Using ep0 maxpacket: 16 [ 258.073136][ T3072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 258.136727][ T3072] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.146057][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.154380][ T3072] usb 2-1: Product: syz [ 258.158738][ T3072] usb 2-1: Manufacturer: syz [ 258.162576][ T972] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 258.166949][ T3072] usb 2-1: SerialNumber: syz [ 258.180037][ T3072] usb 2-1: config 0 descriptor?? [ 258.190865][ T3072] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 258.204432][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.211036][ T3072] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 258.244627][ T972] usb 3-1: Product: syz [ 258.248886][ T972] usb 3-1: Manufacturer: syz [ 258.263934][ T972] usb 3-1: SerialNumber: syz [ 258.279966][ T972] usb 3-1: config 0 descriptor?? [ 258.293466][ T5864] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 258.337548][ T5864] usb 4-1: USB disconnect, device number 21 [ 258.427373][ T30] audit: type=1400 audit(1748260558.552:473): avc: denied { map } for pid=8417 comm="syz.4.733" path="socket:[17273]" dev="sockfs" ino=17273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 258.729402][ T972] airspy 3-1:0.0: usb_control_msg() failed -32 request 0a [ 258.830506][ T972] airspy 3-1:0.0: Could not detect board [ 258.843727][ T3072] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 258.891004][ T972] airspy 3-1:0.0: probe with driver airspy failed with error -32 [ 258.959829][ T972] usb 3-1: USB disconnect, device number 18 [ 259.000354][ T8426] x_tables: duplicate underflow at hook 3 [ 259.009543][ T30] audit: type=1400 audit(1748260559.142:474): avc: denied { connect } for pid=8425 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 259.040093][ T8424] FAULT_INJECTION: forcing a failure. [ 259.040093][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 259.103666][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.4.736 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 259.103694][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.103705][ T8424] Call Trace: [ 259.103711][ T8424] [ 259.103719][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 259.103759][ T8424] should_fail_ex+0x512/0x640 [ 259.103783][ T8424] ? __kmalloc_noprof+0xbf/0x510 [ 259.103800][ T8424] ? ethnl_default_notify+0x164/0x940 [ 259.103816][ T8424] should_failslab+0xc2/0x120 [ 259.103833][ T8424] __kmalloc_noprof+0xd2/0x510 [ 259.103846][ T8424] ? __pfx___ethnl_set_coalesce.isra.0+0x10/0x10 [ 259.103869][ T8424] ? rpm_resume+0x80c/0x1310 [ 259.103886][ T8424] ? __pfx_ethnl_default_notify+0x10/0x10 [ 259.103903][ T8424] ethnl_default_notify+0x164/0x940 [ 259.103923][ T8424] ? __pfx_ethnl_default_notify+0x10/0x10 [ 259.103954][ T8424] ? ethnl_set_coalesce+0xb8/0x170 [ 259.103979][ T8424] ? __pfx_ethnl_set_coalesce+0x10/0x10 [ 259.104009][ T8424] ? __pfx_ethnl_default_notify+0x10/0x10 [ 259.104028][ T8424] ethtool_notify+0xbf/0x200 [ 259.104048][ T8424] ethnl_default_set_doit+0x4e5/0xb10 [ 259.104069][ T8424] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 259.104092][ T8424] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 259.104119][ T8424] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 259.104150][ T8424] genl_family_rcv_msg_doit+0x209/0x2f0 [ 259.104178][ T8424] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.104213][ T8424] ? bpf_lsm_capable+0x9/0x10 [ 259.104229][ T8424] ? security_capable+0x7e/0x260 [ 259.104258][ T8424] ? ns_capable+0xd7/0x110 [ 259.104282][ T8424] genl_rcv_msg+0x55c/0x800 [ 259.104309][ T8424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.104332][ T8424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 259.104358][ T8424] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 259.104378][ T8424] ? __lock_acquire+0xaa4/0x1ba0 [ 259.104410][ T8424] netlink_rcv_skb+0x16d/0x440 [ 259.104432][ T8424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.104459][ T8424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.104493][ T8424] ? __pfx_down_read+0x10/0x10 [ 259.104509][ T8424] ? netlink_deliver_tap+0x1ae/0xd30 [ 259.104535][ T8424] genl_rcv+0x28/0x40 [ 259.104556][ T8424] netlink_unicast+0x53a/0x7f0 [ 259.104582][ T8424] ? __pfx_netlink_unicast+0x10/0x10 [ 259.104611][ T8424] netlink_sendmsg+0x8d1/0xdd0 [ 259.104637][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.104671][ T8424] ____sys_sendmsg+0xa95/0xc70 [ 259.104697][ T8424] ? copy_msghdr_from_user+0x10a/0x160 [ 259.104716][ T8424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.104760][ T8424] ___sys_sendmsg+0x134/0x1d0 [ 259.104782][ T8424] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.104839][ T8424] __sys_sendmsg+0x16d/0x220 [ 259.104861][ T8424] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.104900][ T8424] do_syscall_64+0xcd/0x260 [ 259.104927][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.104945][ T8424] RIP: 0033:0x7f1f99d8e969 [ 259.104960][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.104978][ T8424] RSP: 002b:00007f1f9acc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.104996][ T8424] RAX: ffffffffffffffda RBX: 00007f1f99fb5fa0 RCX: 00007f1f99d8e969 [ 259.105007][ T8424] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000014 [ 259.105017][ T8424] RBP: 00007f1f9acc0090 R08: 0000000000000000 R09: 0000000000000000 [ 259.105027][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.105037][ T8424] R13: 0000000000000000 R14: 00007f1f99fb5fa0 R15: 00007ffcaaf775f8 [ 259.105060][ T8424] [ 259.575125][ T8433] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.591009][ T24] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 259.722680][ T24] usb 4-1: device descriptor read/64, error -71 [ 259.783044][ T8439] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 259.795538][ T8439] qnx6: wrong signature (magic) in superblock #1. [ 259.802281][ T8439] qnx6: unable to read the first superblock [ 259.840009][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 260.017489][ T8439] : entered promiscuous mode [ 260.609763][ T24] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 260.757745][ T3072] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 260.769743][ T3072] em28xx 2-1:0.0: board has no eeprom [ 260.931598][ T24] usb 4-1: device descriptor read/64, error -71 [ 260.938271][ T3072] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 260.946324][ T3072] em28xx 2-1:0.0: dvb set to bulk mode. [ 260.952035][ T47] em28xx 2-1:0.0: Binding DVB extension [ 260.986768][ T47] em28xx 2-1:0.0: Registering input extension [ 261.481017][ T24] usb usb4-port1: attempt power cycle [ 261.682239][ T5864] usb 2-1: USB disconnect, device number 26 [ 261.689212][ T5864] em28xx 2-1:0.0: Disconnecting em28xx [ 261.745284][ T5864] em28xx 2-1:0.0: Closing input extension [ 261.778935][ T5864] em28xx 2-1:0.0: Freeing device [ 261.841287][ T24] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 261.891773][ T24] usb 4-1: device descriptor read/8, error -71 [ 261.954566][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 262.151132][ T24] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 262.451034][ T24] usb 4-1: device not accepting address 25, error -71 [ 262.951562][ T24] usb usb4-port1: unable to enumerate USB device [ 262.975193][ T30] audit: type=1326 audit(1748260563.102:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f99d8e969 code=0x0 [ 264.780972][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 264.941103][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 264.950536][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.966527][ T24] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 265.059719][ T8487] smc: net device bond0 applied user defined pnetid SYZ0 [ 265.454901][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.480944][ T24] usb 4-1: config 0 descriptor?? [ 266.511738][ T24] belkin 0003:050D:3201.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 266.543933][ T24] usb 4-1: USB disconnect, device number 26 [ 266.565512][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.575613][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.583682][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.593906][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.654856][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.734781][ T8492] hsr0 speed is unknown, defaulting to 1000 [ 267.376207][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 267.461104][ T5864] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 267.482504][ T8511] kAFS: unparsable volume name [ 267.906987][ T5864] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 268.000969][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.019723][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.020172][ T5864] usb 4-1: Product: syz [ 268.030214][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.032139][ T5864] usb 4-1: Manufacturer: syz [ 268.040501][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.051440][ T5864] usb 4-1: SerialNumber: syz [ 268.051461][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.064123][ T5864] usb 4-1: config 0 descriptor?? [ 268.082222][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.202719][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.209999][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.224827][ T8492] bridge_slave_0: entered allmulticast mode [ 268.245353][ T8492] bridge_slave_0: entered promiscuous mode [ 268.270546][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.389811][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.407986][ T8492] bridge_slave_1: entered allmulticast mode [ 268.418179][ T8492] bridge_slave_1: entered promiscuous mode [ 268.742190][ T5828] Bluetooth: hci3: command tx timeout [ 269.088024][ T5864] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 269.101003][ T5864] airspy 4-1:0.0: Could not detect board [ 269.109028][ T5864] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 269.121243][ T5864] usb 4-1: USB disconnect, device number 27 [ 269.164764][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.207819][ T8516] hsr0 speed is unknown, defaulting to 1000 [ 269.243504][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.310980][ T5865] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 269.322007][ T8492] team0: Port device team_slave_0 added [ 269.347887][ T8492] team0: Port device team_slave_1 added [ 269.432266][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.439494][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.466765][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.522404][ T5865] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 269.531709][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.539685][ T5865] usb 3-1: Product: syz [ 269.541026][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.544015][ T5865] usb 3-1: Manufacturer: syz [ 269.606364][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.612770][ T5865] usb 3-1: SerialNumber: syz [ 269.640220][ T5865] usb 3-1: config 0 descriptor?? [ 269.663965][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.693957][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.707949][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 269.724985][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.735339][ T24] usb 2-1: Product: syz [ 269.739554][ T24] usb 2-1: Manufacturer: syz [ 269.745076][ T24] usb 2-1: SerialNumber: syz [ 269.856097][ T8492] hsr_slave_0: entered promiscuous mode [ 269.862415][ T8492] hsr_slave_1: entered promiscuous mode [ 269.868893][ T5865] usb-storage 3-1:0.0: USB Mass Storage device detected [ 269.869210][ T24] usb 2-1: config 0 descriptor?? [ 269.877471][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.889330][ T8492] Cannot create hsr debugfs directory [ 269.943866][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 269.999806][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 270.023473][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 270.060545][ T24] usb 2-1: Detected FT2232HP [ 270.179579][ T5828] Bluetooth: hci5: command tx timeout [ 270.211631][ T8530] netlink: 'syz.1.765': attribute type 2 has an invalid length. [ 270.301735][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 270.327250][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 270.427719][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 270.523324][ T24] usb 2-1: USB disconnect, device number 27 [ 270.674963][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 270.736528][ T24] ftdi_sio 2-1:0.0: device disconnected [ 270.811038][ T5828] Bluetooth: hci3: command tx timeout [ 271.241704][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.250717][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.258831][ T8516] bridge_slave_0: entered allmulticast mode [ 271.273729][ T8516] bridge_slave_0: entered promiscuous mode [ 271.736010][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.750613][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.757937][ T8516] bridge_slave_1: entered allmulticast mode [ 271.766373][ T8516] bridge_slave_1: entered promiscuous mode [ 271.924788][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.966746][ T3072] usb 3-1: USB disconnect, device number 19 [ 271.999952][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.301072][ T5828] Bluetooth: hci5: command tx timeout [ 272.381145][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 272.686622][ T8492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.725106][ T8516] team0: Port device team_slave_0 added [ 272.731267][ T8492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.748352][ T8516] team0: Port device team_slave_1 added [ 272.756014][ T8492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.781167][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 272.788203][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.858050][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 272.881041][ T5828] Bluetooth: hci3: command tx timeout [ 272.900814][ T8492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.912887][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 272.943008][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.950546][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.961954][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.987955][ T24] usb 4-1: Product: syz [ 272.990957][ T5865] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 272.992320][ T24] usb 4-1: Manufacturer: syz [ 273.004604][ T24] usb 4-1: SerialNumber: syz [ 273.010557][ T24] usb 4-1: config 0 descriptor?? [ 273.023717][ T24] radioshark 4-1:0.0: Invalid radioSHARK device [ 273.030139][ T24] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 273.030223][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.040484][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 273.083348][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.090310][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.161146][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.171059][ T5864] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 273.212598][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.223879][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.274811][ T5865] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 273.284140][ T5865] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 273.310932][ T5865] usb 3-1: Manufacturer: syz [ 273.324362][ T5864] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 273.333891][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.338448][ T8516] hsr_slave_0: entered promiscuous mode [ 273.367406][ T5865] usb 3-1: config 0 descriptor?? [ 273.454773][ T5864] usb 2-1: Product: syz [ 273.463591][ T5864] usb 2-1: Manufacturer: syz [ 273.468264][ T5864] usb 2-1: SerialNumber: syz [ 273.483516][ T8516] hsr_slave_1: entered promiscuous mode [ 273.489984][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.502686][ T5864] usb 2-1: config 0 descriptor?? [ 273.509589][ T8516] Cannot create hsr debugfs directory [ 273.905701][ T5865] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 274.119922][ T5865] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 274.130022][ T5865] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 274.159619][ T5865] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 274.197871][ T5865] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 274.247358][ T5864] airspy 2-1:0.0: Board ID: 05 [ 274.252498][ T5864] airspy 2-1:0.0: Firmware version:  [ 274.265165][ T5865] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 274.331872][ T5828] Bluetooth: hci5: command tx timeout [ 274.596438][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.643175][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.673233][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.681455][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.785968][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.793123][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.961486][ T5828] Bluetooth: hci3: command tx timeout [ 275.000404][ T8516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.035056][ T8516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.051602][ T8516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.079592][ T8516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.273080][ T9] usb 4-1: USB disconnect, device number 28 [ 275.361368][ T5864] airspy 2-1:0.0: usb_control_msg() failed -110 request 11 [ 275.387439][ T5864] airspy 2-1:0.0: Registered as swradio24 [ 275.392615][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.415179][ T5864] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 275.463138][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.480454][ T30] audit: type=1400 audit(1748260575.605:476): avc: denied { read } for pid=8573 comm="syz.3.775" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 275.514670][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.521784][ T3919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.642478][ T8577] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 275.650374][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.775'. [ 275.747689][ T5864] usb 3-1: USB disconnect, device number 20 [ 276.187831][ T30] audit: type=1400 audit(1748260575.665:477): avc: denied { open } for pid=8573 comm="syz.3.775" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 276.231032][ T9] usb 2-1: USB disconnect, device number 28 [ 276.247027][ T8578] CUSE: unknown device info "ÿ" [ 276.279722][ T8578] CUSE: zero length info key specified [ 276.404173][ T5828] Bluetooth: hci5: command tx timeout [ 276.411384][ T3919] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.418494][ T3919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.060409][ T8577] team0: Port device geneve0 added [ 277.128499][ T8516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.163599][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.288815][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.510358][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.541317][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 277.706366][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.735854][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.753397][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 277.783720][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.822745][ T5914] usb 4-1: config 0 descriptor?? [ 277.864384][ T8492] veth0_vlan: entered promiscuous mode [ 277.896213][ T8492] veth1_vlan: entered promiscuous mode [ 277.975869][ T8492] veth0_macvtap: entered promiscuous mode [ 278.019113][ T8492] veth1_macvtap: entered promiscuous mode [ 278.086027][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.129253][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.192456][ T8492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.209283][ T8492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.210986][ T3072] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 278.241144][ T8492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.265134][ T8492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.267224][ T5914] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 278.421027][ T30] audit: type=1800 audit(1748260578.535:478): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.782" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 278.423344][ T3072] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 278.457690][ T8516] veth0_vlan: entered promiscuous mode [ 278.538337][ T8516] veth1_vlan: entered promiscuous mode [ 278.557050][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.558821][ T5864] usb 4-1: USB disconnect, device number 29 [ 278.575158][ T3072] usb 2-1: Product: syz [ 278.582257][ T3072] usb 2-1: Manufacturer: syz [ 278.587034][ T3072] usb 2-1: SerialNumber: syz [ 278.602228][ T3072] usb 2-1: config 0 descriptor?? [ 278.609788][ T3072] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 029 [ 278.835206][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.871170][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.892388][ T3072] (null): failure setting delay to 10us [ 278.898052][ T3072] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 278.909116][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.938242][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.966150][ T8516] veth0_macvtap: entered promiscuous mode [ 278.972291][ T3072] usb 2-1: USB disconnect, device number 29 [ 279.036592][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.075846][ T8516] veth1_macvtap: entered promiscuous mode [ 279.122707][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.156524][ T30] audit: type=1400 audit(1748260579.275:479): avc: denied { mounton } for pid=8492 comm="syz-executor" path="/root/syzkaller.4pTke9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 279.254009][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.316521][ T30] audit: type=1400 audit(1748260579.405:480): avc: denied { mounton } for pid=8492 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 279.345048][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.387461][ T8516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.396689][ T8516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.410999][ T8516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.439434][ T8516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.551627][ T8617] wg2: left promiscuous mode [ 279.556241][ T8617] wg2: left allmulticast mode [ 279.748032][ T8621] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.859853][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.868254][ T47] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 280.030971][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 280.046553][ T47] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 280.055771][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.069051][ T47] usb 4-1: Product: syz [ 280.078886][ T47] usb 4-1: Manufacturer: syz [ 280.088066][ T47] usb 4-1: SerialNumber: syz [ 280.094876][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.212101][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.223481][ T47] usb 4-1: config 0 descriptor?? [ 280.253090][ T47] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 280.300822][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.432353][ T30] audit: type=1400 audit(1748260580.555:481): avc: denied { setopt } for pid=8632 comm="syz.6.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 280.835818][ T8617] wg2: entered promiscuous mode [ 280.871597][ T8617] wg2: entered allmulticast mode [ 280.939005][ T972] usb 4-1: USB disconnect, device number 30 [ 281.953297][ T30] audit: type=1400 audit(1748260582.085:482): avc: denied { ioctl } for pid=8644 comm="syz.6.790" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.349255][ T8656] nbd: nbd2 already in use [ 285.127698][ T972] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 285.305420][ T972] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 285.314695][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.335174][ T972] usb 3-1: Product: syz [ 285.339343][ T972] usb 3-1: Manufacturer: syz [ 285.367482][ T972] usb 3-1: SerialNumber: syz [ 285.400741][ T972] usb 3-1: config 0 descriptor?? [ 285.426121][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 285.635071][ T972] airspy 3-1:0.0: usb_control_msg() failed -32 request 09 [ 285.707129][ T972] airspy 3-1:0.0: Could not detect board [ 287.041154][ T972] airspy 3-1:0.0: probe with driver airspy failed with error -32 [ 287.051174][ T972] usb 3-1: USB disconnect, device number 21 [ 287.954423][ T8680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.191878][ T5864] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 288.484740][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 288.794275][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 288.807624][ T5864] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 288.818062][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.826150][ T5864] usb 7-1: Product: syz [ 288.840199][ T5864] usb 7-1: Manufacturer: syz [ 288.852627][ T5864] usb 7-1: SerialNumber: syz [ 288.869520][ T5864] usb 7-1: config 0 descriptor?? [ 289.386294][ T5864] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 289.400465][ T8691] wg2: entered promiscuous mode [ 289.405636][ T8691] wg2: entered allmulticast mode [ 289.415088][ T8711] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.491516][ T5914] usb 7-1: USB disconnect, device number 2 [ 291.263897][ T8735] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 291.600071][ T30] audit: type=1400 audit(1748260591.595:483): avc: denied { write } for pid=8745 comm="syz.5.814" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.030384][ T30] audit: type=1400 audit(1748260591.845:484): avc: denied { watch } for pid=8747 comm="syz.2.816" path="/160/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.141797][ T5914] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 292.203473][ T30] audit: type=1400 audit(1748260592.335:485): avc: denied { watch watch_reads } for pid=8753 comm="syz.5.817" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 292.233446][ T47] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 292.247605][ T30] audit: type=1400 audit(1748260592.375:486): avc: denied { bind } for pid=8753 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.283947][ T30] audit: type=1400 audit(1748260592.375:487): avc: denied { connect } for pid=8753 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.323450][ T5914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.337172][ T5914] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 292.376196][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.392809][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 292.455893][ T47] usb 4-1: config 0 has no interfaces? [ 292.466761][ T47] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 292.508041][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 292.520154][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.637861][ T47] usb 4-1: config 0 descriptor?? [ 292.643787][ T5914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.655244][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.663473][ T5914] usb 2-1: Product: syz [ 292.669724][ T5914] usb 2-1: Manufacturer: syz [ 292.677529][ T5914] cdc_wdm 2-1:1.0: skipping garbage [ 292.683033][ T5914] cdc_wdm 2-1:1.0: skipping garbage [ 293.662365][ T5914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 293.670000][ T5914] cdc_wdm 2-1:1.0: Unknown control protocol [ 294.132659][ T8749] team_slave_0: entered promiscuous mode [ 294.139730][ T8749] team_slave_1: entered promiscuous mode [ 294.145452][ T8749] geneve0: entered promiscuous mode [ 294.152063][ T8749] vlan3: entered promiscuous mode [ 294.157619][ T8749] team0: entered promiscuous mode [ 294.259688][ T5914] usb 2-1: USB disconnect, device number 30 [ 294.301607][ T8773] netlink: 112 bytes leftover after parsing attributes in process `syz.6.821'. [ 294.317095][ T47] usb 4-1: USB disconnect, device number 31 [ 294.618955][ T30] audit: type=1400 audit(1748260594.545:488): avc: denied { setopt } for pid=8776 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.889658][ T30] audit: type=1400 audit(1748260594.545:489): avc: denied { write } for pid=8776 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.642044][ T30] audit: type=1400 audit(1748260595.775:490): avc: denied { listen } for pid=8797 comm="syz.1.830" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 295.664724][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.829'. [ 297.230947][ T972] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 297.281191][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 297.340147][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 297.464628][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.481026][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 297.481140][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.490047][ T47] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 297.585231][ T5828] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 297.587538][ T972] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 297.623277][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.657394][ T47] usb 6-1: config 0 has no interface number 0 [ 297.768088][ T47] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 297.781614][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.789756][ T47] usb 6-1: Product: syz [ 297.864278][ T47] usb 6-1: Manufacturer: syz [ 297.869089][ T972] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 297.889500][ T47] usb 6-1: SerialNumber: syz [ 297.894422][ T972] usb 3-1: Manufacturer: syz [ 297.908312][ T47] usb 6-1: config 0 descriptor?? [ 297.911306][ T972] usb 3-1: config 0 descriptor?? [ 298.068282][ T8835] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 298.359299][ T972] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 298.380071][ T8855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 298.385942][ T972] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 298.402915][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.402920][ T972] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 298.402944][ T972] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 298.429277][ T972] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 298.440529][ T972] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 298.827411][ T5864] usb 3-1: USB disconnect, device number 22 [ 299.193128][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.753984][ T972] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 299.974554][ T47] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 299.987494][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8872 comm=syz.1.849 [ 300.017613][ T47] usb 6-1: No valid video chain found. [ 300.040645][ T47] usb 6-1: USB disconnect, device number 2 [ 300.061116][ T972] usb 7-1: Using ep0 maxpacket: 8 [ 300.201093][ T972] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 300.994444][ T972] usb 7-1: config 2 has no interface number 0 [ 301.017856][ T972] usb 7-1: config 2 interface 31 has no altsetting 0 [ 301.420376][ T972] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 301.442279][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.461534][ T972] usb 7-1: Product: syz [ 301.468939][ T972] usb 7-1: Manufacturer: syz [ 301.482655][ T972] usb 7-1: SerialNumber: syz [ 301.531189][ T30] audit: type=1400 audit(1748260601.655:491): avc: denied { watch_sb } for pid=8878 comm="syz.3.852" path="/154" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 301.658923][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 301.667955][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 301.692125][ T5828] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 301.703239][ T5828] Bluetooth: hci2: Injecting HCI hardware error event [ 301.716686][ T5820] Bluetooth: hci2: hardware error 0x00 [ 302.561524][ T8885] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 302.961992][ T972] ch9200 7-1:2.31: probe with driver ch9200 failed with error -71 [ 303.012136][ T972] usb 7-1: USB disconnect, device number 3 [ 303.391017][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 303.670990][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 303.881210][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 303.895064][ T9] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 303.952435][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 303.963210][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 303.973324][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 303.983409][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 304.016091][ T5820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 304.031308][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 304.040796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.055580][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 304.070898][ T8914] syz.2.862: attempt to access beyond end of device [ 304.070898][ T8914] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 304.084179][ T8914] FAT-fs (loop5): unable to read boot sector [ 304.116017][ T24] usb 2-1: config 0 descriptor?? [ 304.366587][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.378060][ T9] usb 6-1: Product: syz [ 304.400475][ T9] usb 6-1: Manufacturer: syz [ 304.404086][ T24] hdpvr 2-1:0.0: firmware version 0xf4 dated êÐœ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 304.410666][ T9] usb 6-1: SerialNumber: syz [ 304.445566][ T9] usb 6-1: config 0 descriptor?? [ 304.446828][ T24] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 304.476703][ T9] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 305.216813][ T8893] wg2: entered promiscuous mode [ 305.228035][ T8893] wg2: entered allmulticast mode [ 305.256837][ T5865] usb 6-1: USB disconnect, device number 3 [ 305.701802][ T3072] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 305.873564][ T24] hdpvr 2-1:0.0: Could not setup controls [ 305.884778][ T3072] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 305.899126][ T24] hdpvr 2-1:0.0: registering videodev failed [ 305.912894][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.953410][ T3072] usb 3-1: Product: syz [ 305.964955][ T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 305.983394][ T3072] usb 3-1: Manufacturer: syz [ 305.997833][ T3072] usb 3-1: SerialNumber: syz [ 306.009284][ T24] usb 2-1: USB disconnect, device number 31 [ 306.024800][ T3072] usb 3-1: config 0 descriptor?? [ 306.149466][ T8927] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 306.165512][ T3072] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 306.684493][ T3072] usb 3-1: Detected FT2232HP [ 306.697852][ T3072] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 306.714682][ T3072] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 306.731224][ T3072] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.765944][ T3072] usb 3-1: USB disconnect, device number 23 [ 306.795226][ T3072] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 306.828509][ T3072] ftdi_sio 3-1:0.0: device disconnected [ 307.092052][ T8944] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.693782][ T30] audit: type=1400 audit(1748260607.805:492): avc: denied { getopt } for pid=8948 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.251106][ T5865] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.426283][ T5865] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 308.673050][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0 [ 308.682974][ T8971] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20004 [ 308.697836][ T5865] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 308.707537][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.785348][ T5865] usb 7-1: Product: syz [ 308.789566][ T5865] usb 7-1: Manufacturer: syz [ 308.893512][ T5865] usb 7-1: SerialNumber: syz [ 308.952743][ T5865] usb 7-1: config 0 descriptor?? [ 308.983034][ T5865] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 309.332011][ T3072] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 309.426623][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 309.541380][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 309.571205][ T3072] usb 2-1: Using ep0 maxpacket: 16 [ 309.714229][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 309.722285][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 309.732953][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 309.740679][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 309.754297][ T5865] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 309.788707][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 309.791221][ T3072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.832812][ T3072] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 309.850983][ T3072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.859618][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 309.916532][ T3072] usb 2-1: config 0 descriptor?? [ 309.920739][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 309.971262][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 310.011511][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 310.063515][ T5865] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 310.079839][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 310.090634][ T5865] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 310.119963][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 310.131743][ T5865] usb 7-1: USB disconnect, device number 4 [ 310.144310][ T30] audit: type=1400 audit(1748260610.275:493): avc: denied { write } for pid=8999 comm="syz.6.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.167485][ T5865] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 310.238204][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 310.259661][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.268547][ T5865] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 310.301006][ T9] usb 6-1: Product: syz [ 310.305714][ T5865] keyspan 7-1:0.0: device disconnected [ 310.328131][ T9] usb 6-1: Manufacturer: syz [ 310.413521][ T9] usb 6-1: SerialNumber: syz [ 310.426118][ T9] usb 6-1: config 0 descriptor?? [ 310.435082][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 310.448436][ T3072] hid-led 0003:1294:1320.000B: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 310.450221][ T9] usb 6-1: Detected FT2232HP [ 310.516068][ T3072] hid-led 0003:1294:1320.000B: Riso Kagaku Webmail Notifier initialized [ 310.676749][ T8992] netlink: 'syz.5.885': attribute type 2 has an invalid length. [ 311.703176][ T9013] fuse: Bad value for 'fd' [ 311.711717][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 311.751683][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 311.886827][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.917499][ T9] usb 6-1: USB disconnect, device number 4 [ 312.306253][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 312.321687][ T9] ftdi_sio 6-1:0.0: device disconnected [ 312.698979][ T5865] usb 2-1: USB disconnect, device number 32 [ 312.740250][ T3919] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 312.757852][ T3919] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 312.775537][ T3919] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 313.044207][ T9033] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 313.058008][ T9033] qnx6: wrong signature (magic) in superblock #1. [ 313.064692][ T9033] qnx6: unable to read the first superblock [ 313.100044][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 313.155224][ T9033] : entered promiscuous mode [ 313.514196][ T9041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.743178][ T30] audit: type=1400 audit(1748260613.875:494): avc: denied { name_connect } for pid=9047 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 314.100977][ T30] audit: type=1400 audit(1748260613.995:495): avc: denied { accept } for pid=9047 comm="syz.2.902" lport=45478 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.142722][ T30] audit: type=1400 audit(1748260613.995:496): avc: denied { read } for pid=9047 comm="syz.2.902" lport=45478 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 314.221995][ T9055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9055 comm=syz.3.903 [ 314.254591][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 314.509189][ T30] audit: type=1400 audit(1748260614.095:497): avc: denied { setopt } for pid=9047 comm="syz.2.902" lport=45478 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 314.841026][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 314.941333][ T30] audit: type=1400 audit(1748260614.955:498): avc: denied { append } for pid=9064 comm="syz.1.907" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.021125][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 315.079575][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.496599][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.511033][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 315.530991][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 315.540947][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.558820][ T9] usb 6-1: config 0 descriptor?? [ 316.216186][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 316.316762][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 316.329588][ T9] usb 6-1: USB disconnect, device number 5 [ 316.380554][ T9089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.808816][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.815508][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.892765][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 318.321219][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 318.654771][ T9094] Invalid logical block size (268437504) [ 318.736324][ T9121] netlink: 'syz.6.920': attribute type 10 has an invalid length. [ 318.801243][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 318.811914][ T24] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 318.825547][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.840418][ T9121] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.848932][ T24] usb 3-1: config 2 has no interface number 0 [ 318.848998][ T24] usb 3-1: config 2 interface 31 has no altsetting 0 [ 318.867611][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 318.895598][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.962682][ T24] usb 3-1: Product: syz [ 318.979581][ T24] usb 3-1: Manufacturer: syz [ 319.025902][ T30] audit: type=1400 audit(1748260619.155:499): avc: denied { read } for pid=5170 comm="acpid" name="mouse6" dev="devtmpfs" ino=3187 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.027757][ T24] usb 3-1: SerialNumber: syz [ 319.051376][ T9128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.169726][ T30] audit: type=1400 audit(1748260619.155:500): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3187 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.192648][ T30] audit: type=1400 audit(1748260619.155:501): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3187 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.524315][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.810623][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 319.811813][ T9144] netlink: 144 bytes leftover after parsing attributes in process `syz.6.929'. [ 319.821060][ T9] usb 6-1: config 0 has no interface number 0 [ 319.887895][ T24] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 319.910740][ T9] usb 6-1: New USB device found, idVendor=fc21, idProduct=00ff, bcdDevice=ed.44 [ 319.924452][ T24] usb 3-1: USB disconnect, device number 24 [ 319.941234][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.993644][ T9] usb 6-1: Product: syz [ 320.005678][ T9] usb 6-1: Manufacturer: syz [ 320.026977][ T9] usb 6-1: SerialNumber: syz [ 320.083183][ T9] usb 6-1: config 0 descriptor?? [ 322.336964][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 322.371841][ T9190] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 322.371841][ T9190] The task syz.3.936 (9190) triggered the difference, watch for misbehavior. [ 322.828363][ T30] audit: type=1400 audit(1748260622.955:502): avc: denied { create } for pid=9196 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 323.111968][ T9197] tty tty22: ldisc open failed (-12), clearing slot 21 [ 323.321843][ T972] usb 6-1: USB disconnect, device number 6 [ 323.580781][ T9207] syzkaller0: entered promiscuous mode [ 323.599965][ T9207] syzkaller0: entered allmulticast mode [ 324.290272][ T9225] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 324.430937][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 324.657816][ T9] usb 2-1: config 0 has no interfaces? [ 324.668223][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 324.981435][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.012009][ T9] usb 2-1: config 0 descriptor?? [ 325.111682][ T3072] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 325.341195][ T3072] usb 7-1: Using ep0 maxpacket: 8 [ 325.546650][ T3072] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 325.580194][ T3072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 325.595167][ T3072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.605360][ T3072] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.623499][ T3072] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.635395][ T3072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.865487][ T3072] usb 7-1: GET_CAPABILITIES returned 0 [ 325.871397][ T3072] usbtmc 7-1:16.0: can't read capabilities [ 326.035891][ T9238] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 326.068797][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.095089][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.104905][ T5866] usb 7-1: USB disconnect, device number 5 [ 326.371497][ T9240] FAULT_INJECTION: forcing a failure. [ 326.371497][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 326.386093][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.5.953 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 326.386118][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.386128][ T9240] Call Trace: [ 326.386134][ T9240] [ 326.386141][ T9240] dump_stack_lvl+0x16c/0x1f0 [ 326.386172][ T9240] should_fail_ex+0x512/0x640 [ 326.386202][ T9240] should_failslab+0xc2/0x120 [ 326.386221][ T9240] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 326.386243][ T9240] ? sidtab_sid2str_get+0x17a/0x680 [ 326.386275][ T9240] kmemdup_noprof+0x29/0x60 [ 326.386296][ T9240] sidtab_sid2str_get+0x17a/0x680 [ 326.386326][ T9240] sidtab_entry_to_string+0x33/0x110 [ 326.386354][ T9240] security_sid_to_context_core+0x35c/0x640 [ 326.386382][ T9240] avc_audit_post_callback+0x109/0x8f0 [ 326.386399][ T9240] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 326.386423][ T9240] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 326.386438][ T9240] ? skb_put+0x138/0x1b0 [ 326.386464][ T9240] ? audit_log_n_string+0x253/0x540 [ 326.386499][ T9240] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 326.386515][ T9240] common_lsm_audit+0x24e/0x300 [ 326.386541][ T9240] ? __pfx_common_lsm_audit+0x10/0x10 [ 326.386564][ T9240] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 326.386587][ T9240] ? avc_update_node.isra.0+0x4c0/0xb60 [ 326.386610][ T9240] slow_avc_audit+0x186/0x210 [ 326.386629][ T9240] ? __pfx_slow_avc_audit+0x10/0x10 [ 326.386653][ T9240] ? avc_perm_nonode+0x160/0x180 [ 326.386670][ T9240] ? avc_perm_nonode+0xf4/0x180 [ 326.386692][ T9240] audit_inode_permission+0x1ec/0x2b0 [ 326.386714][ T9240] ? __pfx_audit_inode_permission+0x10/0x10 [ 326.386732][ T9240] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 326.386754][ T9240] ? avc_has_perm_noaudit+0x149/0x3b0 [ 326.386775][ T9240] selinux_inode_permission+0x4c4/0x5a0 [ 326.386799][ T9240] ? __pfx_selinux_inode_permission+0x10/0x10 [ 326.386824][ T9240] ? capable_wrt_inode_uidgid+0xeb/0x190 [ 326.386852][ T9240] security_inode_permission+0xda/0x260 [ 326.386876][ T9240] inode_permission+0x17a/0x5f0 [ 326.386900][ T9240] vfs_truncate+0x15c/0x6e0 [ 326.386915][ T9240] ? putname+0x154/0x1a0 [ 326.386931][ T9240] ? __pfx_vfs_truncate+0x10/0x10 [ 326.386957][ T9240] ? putname+0x154/0x1a0 [ 326.386978][ T9240] __x64_sys_truncate+0x172/0x1e0 [ 326.386993][ T9240] ? __pfx___x64_sys_truncate+0x10/0x10 [ 326.387007][ T9240] ? rcu_is_watching+0x12/0xc0 [ 326.387033][ T9240] do_syscall_64+0xcd/0x260 [ 326.387058][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.387075][ T9240] RIP: 0033:0x7fa38a58e969 [ 326.387089][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.387105][ T9240] RSP: 002b:00007fa38b4b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 326.387121][ T9240] RAX: ffffffffffffffda RBX: 00007fa38a7b5fa0 RCX: 00007fa38a58e969 [ 326.387132][ T9240] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000240 [ 326.387143][ T9240] RBP: 00007fa38b4b2090 R08: 0000000000000000 R09: 0000000000000000 [ 326.387152][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.387162][ T9240] R13: 0000000000000000 R14: 00007fa38a7b5fa0 R15: 00007fff678da338 [ 326.387184][ T9240] [ 326.451912][ T30] audit: type=1400 audit(1748260626.505:503): avc: denied { write } for pid=9239 comm="syz.5.953" dev="9p" ino=2 ssid=148 tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.734130][ T30] audit: type=1400 audit(1748260626.585:504): avc: denied { open } for pid=9239 comm="syz.5.953" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.893897][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 327.791095][ T972] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 327.962785][ T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.974702][ T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.986395][ T972] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 327.995700][ T972] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 328.003980][ T972] usb 7-1: Manufacturer: syz [ 328.024750][ T9224] team_slave_0: entered promiscuous mode [ 328.030478][ T9224] team_slave_1: entered promiscuous mode [ 328.073916][ T972] usb 7-1: config 0 descriptor?? [ 328.099604][ T9224] vlan2: entered promiscuous mode [ 328.114176][ T9224] team0: entered promiscuous mode [ 328.194337][ T5895] usb 2-1: USB disconnect, device number 33 [ 328.391081][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 328.532603][ T972] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 328.544879][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.557171][ T972] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 328.565459][ T5895] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 328.575355][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.586236][ T972] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 328.605100][ T972] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 328.615795][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 328.626424][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 328.641777][ T972] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 328.650669][ T9] usb 3-1: Manufacturer: syz [ 328.658127][ T972] cougar 0003:060B:700A.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 328.670270][ T9] usb 3-1: config 0 descriptor?? [ 328.731023][ T5895] usb 2-1: Invalid ep0 maxpacket: 16 [ 328.861008][ T5895] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 329.024032][ T3072] usb 7-1: USB disconnect, device number 6 [ 329.081033][ T5895] usb 2-1: Invalid ep0 maxpacket: 16 [ 329.104920][ T9] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 329.125083][ T5895] usb usb2-port1: attempt power cycle [ 329.146413][ T9] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 329.480601][ T9] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 329.516364][ T9] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 329.623981][ T9] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 329.732715][ T5895] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 330.619305][ T9] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 330.640795][ T9] usb 3-1: USB disconnect, device number 25 [ 330.651628][ T5895] usb 2-1: Invalid ep0 maxpacket: 16 [ 330.767669][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 330.801106][ T5895] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 330.899384][ T5895] usb 2-1: Invalid ep0 maxpacket: 16 [ 331.407538][ T5895] usb usb2-port1: unable to enumerate USB device [ 332.061412][ T9310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.759473][ T30] audit: type=1400 audit(1748260632.055:505): avc: denied { read } for pid=9305 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 332.820397][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 332.958007][ T30] audit: type=1400 audit(1748260633.085:506): avc: denied { create } for pid=9307 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.706329][ T30] audit: type=1400 audit(1748260633.715:507): avc: denied { firmware_load } for pid=9311 comm="syz.2.977" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 334.243621][ T9322] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.273440][ T9324] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.346422][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 334.511191][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 334.662465][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.680970][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.781731][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 334.899512][ T30] audit: type=1400 audit(1748260635.025:508): avc: denied { connect } for pid=9334 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 335.025310][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 335.033515][ T9] usb 3-1: Manufacturer: syz [ 335.049130][ T9] usb 3-1: config 0 descriptor?? [ 335.641659][ T9] cougar 0003:060B:700A.000E: unknown main item tag 0x0 [ 335.926332][ T9] cougar 0003:060B:700A.000E: unknown main item tag 0x0 [ 335.938063][ T9] cougar 0003:060B:700A.000E: unknown main item tag 0x0 [ 335.945398][ T9] cougar 0003:060B:700A.000E: unknown main item tag 0x0 [ 335.952474][ T9] cougar 0003:060B:700A.000E: unknown main item tag 0x0 [ 335.982591][ T9] cougar 0003:060B:700A.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 336.038404][ T9] usb 3-1: USB disconnect, device number 26 [ 336.979306][ T9374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.992'. [ 337.005087][ T9374] ubi31: attaching mtd0 [ 337.019435][ T9374] ubi31: scanning is finished [ 337.024214][ T9374] ubi31: empty MTD device detected [ 337.626786][ T9374] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 337.634419][ T9374] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 337.641797][ T9374] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 337.648915][ T9374] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 337.657376][ T9374] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 337.664714][ T9374] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 337.672835][ T9374] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3298631180 [ 337.682936][ T9374] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 337.693975][ T9380] ubi31: background thread "ubi_bgt31d" started, PID 9380 [ 338.198382][ T30] audit: type=1400 audit(1748260638.215:509): avc: denied { getopt } for pid=9382 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.491294][ T3072] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 339.129090][ T3072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.140274][ T30] audit: type=1400 audit(1748260638.655:510): avc: denied { bind } for pid=9389 comm="syz.5.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 339.155137][ T3072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.371007][ T3072] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 339.380101][ T3072] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 339.450259][ T3072] usb 7-1: Manufacturer: syz [ 339.497996][ T3072] usb 7-1: config 0 descriptor?? [ 340.012818][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 341.144288][ T3072] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 341.152498][ T3072] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 341.159616][ T3072] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 341.166802][ T3072] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 341.175067][ T3072] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 341.189018][ T3072] cougar 0003:060B:700A.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 341.361278][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 341.548584][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.625823][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.640648][ T30] audit: type=1400 audit(1748260641.765:511): avc: denied { getopt } for pid=9427 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 341.665744][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.681777][ T3072] usb 7-1: USB disconnect, device number 7 [ 341.699680][ T9430] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1007'. [ 341.732930][ T24] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 341.743224][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.755234][ T24] usb 3-1: config 0 descriptor?? [ 342.578023][ T9430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.609133][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1006'. [ 342.620848][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 342.629939][ T30] audit: type=1400 audit(1748260642.745:512): avc: denied { setopt } for pid=9418 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 342.710687][ T9430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.740188][ T9430] bond0 (unregistering): Released all slaves [ 342.947299][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 342.953458][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.978570][ T24] usb 3-1: USB disconnect, device number 27 [ 343.317639][ T30] audit: type=1804 audit(1748260643.445:513): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1022" name="/newroot/186/file0" dev="tmpfs" ino=1004 res=1 errno=0 [ 343.581826][ T30] audit: type=1400 audit(1748260643.715:514): avc: denied { read } for pid=9470 comm="syz.6.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 343.614445][ T30] audit: type=1400 audit(1748260643.735:515): avc: denied { setopt } for pid=9474 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 343.693449][ T30] audit: type=1400 audit(1748260643.775:516): avc: denied { write } for pid=9470 comm="syz.6.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 344.083447][ T30] audit: type=1400 audit(1748260644.205:517): avc: denied { setattr } for pid=9494 comm="syz.2.1035" name="#22" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.495052][ T9505] block nbd6: shutting down sockets [ 344.582965][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 344.786807][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 344.805436][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 344.830409][ T30] audit: type=1400 audit(1748260644.955:518): avc: denied { ioctl } for pid=9523 comm="syz.6.1046" path="socket:[23726]" dev="sockfs" ino=23726 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 344.861418][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 344.874940][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 344.886248][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 344.902983][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 344.929746][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 344.944293][ T24] usb 3-1: Product: syz [ 344.974677][ T24] usb 3-1: Manufacturer: syz [ 345.002760][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 345.008046][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 345.023604][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 345.044481][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 345.089157][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 345.162228][ T9530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1049'. [ 345.200656][ T9530] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 345.248923][ T9535] block device autoloading is deprecated and will be removed. [ 345.357197][ T9537] kvm: user requested TSC rate below hardware speed [ 345.409323][ T9539] @: renamed from vlan0 (while UP) [ 345.418079][ T9537] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 345.611963][ T9547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.741033][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 345.773667][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 345.900980][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.942178][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 345.968995][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.020714][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.075392][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.119471][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.179961][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.227444][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.252209][ T9570] input: syz0 as /devices/virtual/input/input18 [ 346.419158][ T30] audit: type=1400 audit(1748260646.545:519): avc: denied { map } for pid=9573 comm="syz.3.1069" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.527742][ T9] usb 2-1: usb_control_msg returned -32 [ 346.580367][ T9] usbtmc 2-1:16.0: can't read capabilities [ 346.724201][ T30] audit: type=1400 audit(1748260646.855:520): avc: denied { bind } for pid=9583 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.910902][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 347.083162][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 347.094853][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.113935][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 347.146434][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.170318][ T24] usb 6-1: Product: syz [ 347.176493][ T24] usb 6-1: Manufacturer: syz [ 347.187712][ T24] usb 6-1: SerialNumber: syz [ 347.195523][ T24] usb 6-1: config 0 descriptor?? [ 347.202984][ T24] gs_usb 6-1:0.0: Required endpoints not found [ 347.340491][ T24] usb 3-1: USB disconnect, device number 28 [ 347.373761][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 347.445737][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.463210][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.749434][ T3919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.820034][ T3919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.886010][ T3919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.950102][ T3919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.968593][ T9622] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 348.059671][ T3919] bridge_slave_1: left allmulticast mode [ 348.065884][ T3919] bridge_slave_1: left promiscuous mode [ 348.072982][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.088456][ T3919] bridge_slave_0: left allmulticast mode [ 348.100927][ T3919] bridge_slave_0: left promiscuous mode [ 348.107262][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.420989][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 348.453552][ T3919] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 348.464447][ T3919] gretap1 (unregistering): left promiscuous mode [ 348.471926][ T3919] gretap1 (unregistering): left allmulticast mode [ 348.521424][ T3072] usb 2-1: USB disconnect, device number 38 [ 348.582700][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 348.610984][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.630270][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.653388][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 348.671602][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 348.685611][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 348.693856][ T9] usb 3-1: Manufacturer: syz [ 348.700688][ T9] usb 3-1: config 0 descriptor?? [ 348.738324][ T3919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.749015][ T3919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.759151][ T3919] bond0 (unregistering): Released all slaves [ 348.857298][ T3919] bond1 (unregistering): Released all slaves [ 348.926866][ T30] audit: type=1400 audit(1748260649.055:521): avc: denied { call } for pid=9642 comm="syz.6.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 348.966491][ T3072] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 349.127092][ T9] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 349.140985][ T3072] usb 2-1: Using ep0 maxpacket: 8 [ 349.141151][ T9] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 349.157895][ T3072] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.158996][ T9] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 349.185175][ T3072] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.196494][ T3072] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.213191][ T3072] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.238460][ T3072] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.247992][ T3072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.284514][ T3919] hsr_slave_0: left promiscuous mode [ 349.290530][ T3919] hsr_slave_1: left promiscuous mode [ 349.299657][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.309851][ T3919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.342257][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.349842][ T3919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.390382][ T3919] veth1_macvtap: left promiscuous mode [ 349.396752][ T3919] veth0_macvtap: left promiscuous mode [ 349.402525][ T3919] veth1_vlan: left promiscuous mode [ 349.407986][ T3919] veth0_vlan: left promiscuous mode [ 349.476229][ T3072] usb 2-1: GET_CAPABILITIES returned 0 [ 349.483949][ T3072] usbtmc 2-1:16.0: can't read capabilities [ 349.508987][ T9654] input: syz0 as /devices/virtual/input/input19 [ 349.552621][ T972] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 349.601855][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1102'. [ 349.684280][ T9] usb 2-1: USB disconnect, device number 39 [ 349.700879][ T5865] usb 3-1: USB disconnect, device number 29 [ 349.718049][ T3072] usb 6-1: USB disconnect, device number 7 [ 349.721188][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 349.742976][ T972] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 349.754979][ T972] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.764959][ T972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.777876][ T972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.792264][ T972] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.805631][ T972] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.814800][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.870384][ T30] audit: type=1400 audit(1748260650.005:522): avc: denied { read write } for pid=9657 comm="syz.5.1103" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 349.898298][ T30] audit: type=1400 audit(1748260650.005:523): avc: denied { open } for pid=9657 comm="syz.5.1103" path="/68/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 350.050946][ T972] usb 4-1: usb_control_msg returned -32 [ 350.056912][ T972] usbtmc 4-1:16.0: can't read capabilities [ 350.079892][ T3919] team0 (unregistering): Port device team_slave_1 removed [ 350.136809][ T3919] team0 (unregistering): Port device team_slave_0 removed [ 350.325902][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.335338][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.348209][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.366071][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.376555][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.388331][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.396440][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.422987][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.434144][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.442136][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.450153][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.460341][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.471198][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.478967][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.487153][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.495047][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.503023][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.510795][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.519600][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.527496][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.536368][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.544190][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.552068][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.559820][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.573996][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.576363][ T972] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 350.585492][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.597269][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.605056][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.613085][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.620897][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.628691][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.636532][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.644324][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.661347][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.670649][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.682516][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.690297][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.698378][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.706293][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.714107][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.725577][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.733398][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.743892][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 350.748369][ T972] usb 3-1: config 0 has no interfaces? [ 350.757722][ T3072] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.773923][ T972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 350.783473][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.796299][ T972] usb 3-1: Product: syz [ 350.800576][ T972] usb 3-1: Manufacturer: syz [ 350.810121][ T972] usb 3-1: SerialNumber: syz [ 350.829599][ T972] usb 3-1: config 0 descriptor?? [ 350.867948][ T9673] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 351.055465][ T3072] usb 3-1: USB disconnect, device number 30 [ 351.139987][ T9685] xt_hashlimit: size too large, truncated to 1048576 [ 351.261048][ T3919] IPVS: stop unused estimator thread 0... [ 351.650896][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 351.688389][ T9714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.822369][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 351.829126][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 351.839418][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.856015][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.866559][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.891232][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.917246][ T9725] xt_hashlimit: size too large, truncated to 1048576 [ 351.918258][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.935394][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.159894][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 352.166924][ T24] usbtmc 2-1:16.0: can't read capabilities [ 352.191189][ T5866] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 352.319028][ T3072] usb 4-1: USB disconnect, device number 32 [ 352.351201][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 352.359898][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.369853][ T5866] usb 3-1: config 0 has no interface number 0 [ 352.379178][ T5866] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.380563][ T972] usb 2-1: USB disconnect, device number 40 [ 352.392651][ T5866] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.436816][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.472961][ T5866] usb 3-1: config 0 descriptor?? [ 352.495565][ T5866] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 352.736467][ T3072] usb 3-1: USB disconnect, device number 31 [ 353.691112][ T30] audit: type=1400 audit(1748260653.815:524): avc: denied { relabelfrom } for pid=9831 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 353.715622][ T30] audit: type=1400 audit(1748260653.825:525): avc: denied { relabelto } for pid=9831 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 353.784580][ T30] audit: type=1400 audit(1748260653.905:526): avc: denied { attach_queue } for pid=9831 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 353.958444][ T9842] syzkaller0: entered promiscuous mode [ 353.967749][ T9842] syzkaller0: entered allmulticast mode [ 357.820931][ T3072] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 357.981100][ T3072] usb 7-1: Using ep0 maxpacket: 16 [ 357.992644][ T3072] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.019766][ T3072] usb 7-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 358.029950][ T3072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.051206][ T3072] usb 7-1: Product: syz [ 358.055555][ T3072] usb 7-1: Manufacturer: syz [ 358.064728][ T3072] usb 7-1: SerialNumber: syz [ 358.080395][ T3072] usb 7-1: config 0 descriptor?? [ 358.473385][ T30] audit: type=1326 audit(1748260658.605:527): auid=4294967295 uid=3327 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9942 comm="syz.2.1228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81c8d8e969 code=0x0 [ 358.963072][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 359.220863][ T30] audit: type=1400 audit(1748260659.345:528): avc: denied { read } for pid=9975 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.771262][ T3072] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 359.931037][ T972] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 359.961303][ T3072] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 359.969526][ T3072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.989150][ T3072] usb 3-1: config 0 has no interface number 0 [ 359.996034][ T3072] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 360.006771][ T3072] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.028838][ T3072] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 360.040612][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.050466][ T3072] usb 3-1: Product: syz [ 360.054843][ T3072] usb 3-1: Manufacturer: syz [ 360.059899][ T3072] usb 3-1: SerialNumber: syz [ 360.066654][ T3072] usb 3-1: config 0 descriptor?? [ 360.083419][ T972] usb 6-1: Using ep0 maxpacket: 8 [ 360.097035][ T972] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 360.116378][ T972] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 360.127333][ T972] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.141097][ T972] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.157298][ T972] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.167538][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.402604][ T972] usb 6-1: GET_CAPABILITIES returned 0 [ 360.414224][ T972] usbtmc 6-1:16.0: can't read capabilities [ 360.539838][ T30] audit: type=1400 audit(1748260660.665:529): avc: denied { shutdown } for pid=10034 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.585572][ T972] usb 7-1: USB disconnect, device number 8 [ 360.610496][ T3072] usb 6-1: USB disconnect, device number 8 [ 360.691281][ T5914] usb 3-1: USB disconnect, device number 32 [ 360.733231][T10046] rtc_cmos 00:00: Alarms can be up to one day in the future [ 362.059279][ T30] audit: type=1400 audit(1748260662.175:530): avc: denied { name_bind } for pid=10078 comm="syz.5.1284" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 362.125581][ T5865] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 362.292590][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 362.301280][ T5865] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 362.320888][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.334752][ T5865] usb 2-1: Product: syz [ 362.338954][ T5865] usb 2-1: Manufacturer: syz [ 362.364762][ T5865] usb 2-1: SerialNumber: syz [ 362.373321][ T5865] usb 2-1: config 0 descriptor?? [ 362.571887][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 362.660964][ T972] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 362.673040][ T5865] usb 2-1: USB disconnect, device number 41 [ 362.740372][ T30] audit: type=1400 audit(1748260662.865:531): avc: denied { setopt } for pid=10104 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 362.846723][ T972] usb 7-1: Using ep0 maxpacket: 8 [ 362.861935][ T972] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 362.873566][ T972] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.890240][ T972] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.908113][ T972] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.948709][ T972] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.968864][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.234031][ T972] usb 7-1: GET_CAPABILITIES returned 0 [ 363.239591][ T972] usbtmc 7-1:16.0: can't read capabilities [ 363.453704][ T972] usb 7-1: USB disconnect, device number 9 [ 363.959265][ T30] audit: type=1400 audit(1748260664.085:532): avc: denied { listen } for pid=10163 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.829483][T10211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.910892][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 364.911003][ T3072] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 364.934470][T10216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 364.945238][T10216] overlayfs: missing 'lowerdir' [ 365.062777][ T9] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 365.072515][ T9] usb 6-1: config 0 has no interface number 0 [ 365.078631][ T9] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 365.097925][ T3072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.107879][ T9] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 365.115970][ T3072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.138451][ T3072] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.154546][ T3072] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.164476][ T3072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.164621][ T9] usb 6-1: config 0 interface 255 has no altsetting 0 [ 365.194551][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 365.205155][ T3072] usb 4-1: config 0 descriptor?? [ 365.205425][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.224588][ T9] usb 6-1: config 0 descriptor?? [ 365.245798][ T9] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 365.455961][ T9] usb 6-1: USB disconnect, device number 9 [ 365.641605][ T3072] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 365.650381][ T3072] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 365.662381][ T3072] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 365.771033][ T5865] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 365.926361][ T3072] usb 4-1: USB disconnect, device number 33 [ 365.932470][ T5865] usb 2-1: config 0 has no interfaces? [ 365.938494][ T5865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.947963][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.957442][ T5865] usb 2-1: config 0 descriptor?? [ 366.023816][T10253] syzkaller0: entered promiscuous mode [ 366.029750][T10253] syzkaller0: entered allmulticast mode [ 366.371920][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.398924][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.414488][ T972] usb 2-1: USB disconnect, device number 42 [ 367.156700][ T30] audit: type=1400 audit(1748260667.285:533): avc: denied { search } for pid=10269 comm="syz.3.1372" name="/" dev="configfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.970936][ T30] audit: type=1400 audit(1748260668.085:534): avc: denied { read } for pid=10269 comm="syz.3.1372" name="/" dev="configfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.007755][ T30] audit: type=1400 audit(1748260668.085:535): avc: denied { open } for pid=10269 comm="syz.3.1372" path="/" dev="configfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.031085][ T3072] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 368.202346][ T3072] usb 7-1: Using ep0 maxpacket: 8 [ 368.214408][ T3072] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 368.246842][ T3072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 368.258088][ T3072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.269643][ T3072] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.292722][ T3072] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.302054][ T3072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.553113][ T3072] usb 7-1: GET_CAPABILITIES returned 0 [ 368.558660][ T3072] usbtmc 7-1:16.0: can't read capabilities [ 368.575726][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 368.681010][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 368.755128][ T3072] usb 7-1: USB disconnect, device number 10 [ 368.861553][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 368.868429][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 368.878894][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.899395][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.933232][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.962721][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.988710][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.005214][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.227240][ T24] usb 6-1: usb_control_msg returned -32 [ 369.237229][ T24] usbtmc 6-1:16.0: can't read capabilities [ 369.535790][T10378] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 370.181096][ T5865] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 370.238593][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 370.340946][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 370.347467][ T5865] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.358552][ T5865] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.369766][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 370.379101][ T5865] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 370.387473][ T5865] usb 2-1: Product: syz [ 370.391837][ T5865] usb 2-1: Manufacturer: syz [ 370.400071][ T5865] hub 2-1:4.0: USB hub found [ 370.604424][ T5865] hub 2-1:4.0: 6 ports detected [ 370.610147][ T5865] hub 2-1:4.0: insufficient power available to use all downstream ports [ 370.881092][ T3072] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 371.010650][ T5865] hub 2-1:4.0: set hub depth failed [ 371.021504][ T5865] usb 2-1: USB disconnect, device number 43 [ 371.055945][ T3072] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 371.067806][ T3072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.080289][ T3072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.090209][ T3072] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 371.104462][ T3072] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 371.114303][ T3072] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 371.132701][ T3072] usb 7-1: Manufacturer: syz [ 371.147579][ T3072] usb 7-1: config 0 descriptor?? [ 371.472343][ T24] usb 6-1: USB disconnect, device number 10 [ 371.517529][ T30] audit: type=1400 audit(1748260671.645:536): avc: denied { create } for pid=10432 comm="syz.5.1439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 371.581453][ T3072] usbhid 7-1:0.0: can't add hid device: -71 [ 371.587530][ T3072] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 371.605195][ T3072] usb 7-1: USB disconnect, device number 11 [ 372.109803][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1448'. [ 372.825647][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 373.117973][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 373.213729][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.244143][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.255029][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 373.261973][T10487] overlayfs: failed to resolve './file1': -2 [ 373.272157][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 373.287215][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 373.297070][ T24] usb 6-1: Manufacturer: syz [ 373.317435][ T24] usb 6-1: config 0 descriptor?? [ 373.736716][ T30] audit: type=1400 audit(1748260673.865:537): avc: denied { map } for pid=10499 comm="syz.1.1470" path="socket:[29628]" dev="sockfs" ino=29628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.830404][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 373.921062][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 373.931166][ T5865] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 373.955069][ T30] audit: type=1400 audit(1748260673.905:538): avc: denied { read accept } for pid=10499 comm="syz.1.1470" path="socket:[29628]" dev="sockfs" ino=29628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.979796][ T24] usb 6-1: USB disconnect, device number 11 [ 374.086405][ T5865] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.086435][ T5865] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.086466][ T5865] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 374.128090][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.559601][ T5865] hid-led 0003:27B8:01ED.0013: item fetching failed at offset 0/5 [ 374.593564][ T5865] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -22 [ 374.716518][T10539] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1487'. [ 374.764402][ T5865] usb 4-1: USB disconnect, device number 34 [ 376.077191][T10596] kernel read not supported for file /file0 (pid: 10596 comm: syz.5.1511) [ 376.112825][ T30] audit: type=1800 audit(1748260676.245:539): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1511" name="file0" dev="mqueue" ino=31152 res=0 errno=0 [ 376.212503][ T30] audit: type=1400 audit(1748260676.315:540): avc: denied { read write } for pid=10605 comm="syz.1.1515" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 376.277019][ T30] audit: type=1400 audit(1748260676.315:541): avc: denied { open } for pid=10605 comm="syz.1.1515" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 376.658435][ T30] audit: type=1400 audit(1748260676.785:542): avc: denied { append } for pid=10634 comm="syz.6.1528" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.708969][ T30] audit: type=1400 audit(1748260676.835:543): avc: denied { unmount } for pid=8516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 376.819833][ T30] audit: type=1400 audit(1748260676.945:544): avc: denied { mounton } for pid=10645 comm="syz.6.1532" path="/154/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 376.819926][T10646] overlay: filesystem on ./file0 not supported [ 377.111601][T10660] binfmt_misc: register: failed to install interpreter file ./file0 [ 377.655979][T10701] ------------[ cut here ]------------ [ 377.661551][T10701] Please remove unsupported % in format string [ 377.668680][T10701] WARNING: CPU: 0 PID: 10701 at lib/vsprintf.c:2702 format_decode+0xac6/0xd40 [ 377.677594][T10701] Modules linked in: [ 377.681534][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.5.1558 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 377.693668][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.703781][T10701] RIP: 0010:format_decode+0xac6/0xd40 [ 377.709179][T10701] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 e0 b0 f1 8c e8 ab e5 10 f6 90 <0f> 0b 90 90 e9 d8 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 377.728845][T10701] RSP: 0018:ffffc9000521f6b8 EFLAGS: 00010282 [ 377.734943][T10701] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001bfb9000 [ 377.742967][T10701] RDX: 0000000000080000 RSI: ffffffff817ad505 RDI: 0000000000000001 [ 377.750957][T10701] RBP: ffffc9000521f758 R08: 0000000000000001 R09: 0000000000000000 [ 377.758948][T10701] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 377.766970][T10701] R13: ffffc9000521f95c R14: ffffc9000521f7e8 R15: 0000000000000000 [ 377.774998][T10701] FS: 00007fa38b4b26c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 377.783962][T10701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.790552][T10701] CR2: 0000001b2e51fffc CR3: 000000001db91000 CR4: 00000000003526f0 [ 377.798550][T10701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.806565][T10701] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.814562][T10701] Call Trace: [ 377.817850][T10701] [ 377.820790][T10701] ? __pfx_format_decode+0x10/0x10 [ 377.825949][T10701] ? is_bpf_text_address+0x8a/0x1a0 [ 377.831196][T10701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.837104][T10701] bstr_printf+0x168/0x10a0 [ 377.841655][T10701] ? __pfx_bstr_printf+0x10/0x10 [ 377.846607][T10701] ? __lock_acquire+0x5ca/0x1ba0 [ 377.851587][T10701] bpf_trace_printk+0x10a/0x190 [ 377.856452][T10701] ? __pfx_bpf_trace_printk+0x10/0x10 [ 377.861876][T10701] ? ktime_get+0x200/0x310 [ 377.866301][T10701] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.871536][T10701] ? read_tsc+0x9/0x20 [ 377.875618][T10701] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 377.881109][T10701] bpf_test_run+0x489/0xa70 [ 377.885628][T10701] ? __pfx_bpf_test_run+0x10/0x10 [ 377.890677][T10701] ? __asan_memset+0x23/0x50 [ 377.895331][T10701] bpf_prog_test_run_skb+0xb92/0x2280 [ 377.900737][T10701] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.906613][T10701] ? fput+0x70/0xf0 [ 377.910448][T10701] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.916298][T10701] __sys_bpf+0x1488/0x4d80 [ 377.920729][T10701] ? __pfx___sys_bpf+0x10/0x10 [ 377.925530][T10701] ? lock_acquire+0x179/0x350 [ 377.930215][T10701] ? find_held_lock+0x2b/0x80 [ 377.934917][T10701] ? do_futex+0x122/0x350 [ 377.939269][T10701] ? __pfx_do_futex+0x10/0x10 [ 377.944005][T10701] ? xfd_validate_state+0x5d/0x180 [ 377.949130][T10701] ? rcu_is_watching+0x12/0xc0 [ 377.953943][T10701] __x64_sys_bpf+0x78/0xc0 [ 377.958381][T10701] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.963612][T10701] do_syscall_64+0xcd/0x260 [ 377.968128][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.974043][T10701] RIP: 0033:0x7fa38a58e969 [ 377.978456][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.998106][T10701] RSP: 002b:00007fa38b4b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.006548][T10701] RAX: ffffffffffffffda RBX: 00007fa38a7b5fa0 RCX: 00007fa38a58e969 [ 378.014572][T10701] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 378.022599][T10701] RBP: 00007fa38a610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 378.030590][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.038631][T10701] R13: 0000000000000000 R14: 00007fa38a7b5fa0 R15: 00007fff678da338 [ 378.046673][T10701] [ 378.049696][T10701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.056977][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.5.1558 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 378.069039][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.079093][T10701] Call Trace: [ 378.082443][T10701] [ 378.085390][T10701] dump_stack_lvl+0x3d/0x1f0 [ 378.090010][T10701] panic+0x71c/0x800 [ 378.093924][T10701] ? __pfx_panic+0x10/0x10 [ 378.098352][T10701] ? show_trace_log_lvl+0x29b/0x3e0 [ 378.103567][T10701] ? format_decode+0xac6/0xd40 [ 378.108334][T10701] check_panic_on_warn+0xab/0xb0 [ 378.113282][T10701] __warn+0xf6/0x3c0 [ 378.117187][T10701] ? format_decode+0xac6/0xd40 [ 378.121958][T10701] report_bug+0x3c3/0x580 [ 378.126291][T10701] ? format_decode+0xac6/0xd40 [ 378.131062][T10701] handle_bug+0x184/0x210 [ 378.135389][T10701] exc_invalid_op+0x17/0x50 [ 378.139887][T10701] asm_exc_invalid_op+0x1a/0x20 [ 378.144735][T10701] RIP: 0010:format_decode+0xac6/0xd40 [ 378.150114][T10701] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 e0 b0 f1 8c e8 ab e5 10 f6 90 <0f> 0b 90 90 e9 d8 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 378.169766][T10701] RSP: 0018:ffffc9000521f6b8 EFLAGS: 00010282 [ 378.175860][T10701] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001bfb9000 [ 378.183848][T10701] RDX: 0000000000080000 RSI: ffffffff817ad505 RDI: 0000000000000001 [ 378.191835][T10701] RBP: ffffc9000521f758 R08: 0000000000000001 R09: 0000000000000000 [ 378.199822][T10701] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 378.207806][T10701] R13: ffffc9000521f95c R14: ffffc9000521f7e8 R15: 0000000000000000 [ 378.215801][T10701] ? __warn_printk+0x1a5/0x350 [ 378.220588][T10701] ? format_decode+0xac5/0xd40 [ 378.225360][T10701] ? __pfx_format_decode+0x10/0x10 [ 378.230474][T10701] ? is_bpf_text_address+0x8a/0x1a0 [ 378.235712][T10701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.241608][T10701] bstr_printf+0x168/0x10a0 [ 378.246126][T10701] ? __pfx_bstr_printf+0x10/0x10 [ 378.251075][T10701] ? __lock_acquire+0x5ca/0x1ba0 [ 378.256040][T10701] bpf_trace_printk+0x10a/0x190 [ 378.260902][T10701] ? __pfx_bpf_trace_printk+0x10/0x10 [ 378.266286][T10701] ? ktime_get+0x200/0x310 [ 378.270711][T10701] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.276350][T10701] ? read_tsc+0x9/0x20 [ 378.280434][T10701] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 378.285893][T10701] bpf_test_run+0x489/0xa70 [ 378.290405][T10701] ? __pfx_bpf_test_run+0x10/0x10 [ 378.295473][T10701] ? __asan_memset+0x23/0x50 [ 378.300076][T10701] bpf_prog_test_run_skb+0xb92/0x2280 [ 378.305463][T10701] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 378.311276][T10701] ? fput+0x70/0xf0 [ 378.315093][T10701] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 378.321079][T10701] __sys_bpf+0x1488/0x4d80 [ 378.325505][T10701] ? __pfx___sys_bpf+0x10/0x10 [ 378.330288][T10701] ? lock_acquire+0x179/0x350 [ 378.334976][T10701] ? find_held_lock+0x2b/0x80 [ 378.339662][T10701] ? do_futex+0x122/0x350 [ 378.343999][T10701] ? __pfx_do_futex+0x10/0x10 [ 378.348692][T10701] ? xfd_validate_state+0x5d/0x180 [ 378.353834][T10701] ? rcu_is_watching+0x12/0xc0 [ 378.358609][T10701] __x64_sys_bpf+0x78/0xc0 [ 378.363028][T10701] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.368238][T10701] do_syscall_64+0xcd/0x260 [ 378.372749][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.378642][T10701] RIP: 0033:0x7fa38a58e969 [ 378.383058][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.402673][T10701] RSP: 002b:00007fa38b4b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.411088][T10701] RAX: ffffffffffffffda RBX: 00007fa38a7b5fa0 RCX: 00007fa38a58e969 [ 378.419061][T10701] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 378.427033][T10701] RBP: 00007fa38a610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 378.435016][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.443009][T10701] R13: 0000000000000000 R14: 00007fa38a7b5fa0 R15: 00007fff678da338 [ 378.451023][T10701] [ 378.454261][T10701] Kernel Offset: disabled [ 378.458576][T10701] Rebooting in 86400 seconds..