last executing test programs: 5m19.005809435s ago: executing program 2 (id=1420): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x8c00) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)) creat(0x0, 0x0) 5m18.884019624s ago: executing program 2 (id=1423): r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f00000003c0)) 5m17.9565557s ago: executing program 2 (id=1439): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) r0 = fanotify_init(0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5m17.027680023s ago: executing program 2 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) 5m16.848629609s ago: executing program 2 (id=1466): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0xff5}, &(0x7f00000003c0)=0x33) 5m16.23738744s ago: executing program 2 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0}) 5m16.036349413s ago: executing program 32 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0}) 3m12.524748375s ago: executing program 4 (id=3750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0088a8000002"], 0x110a) 3m12.142396056s ago: executing program 4 (id=3759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast2}, {0x8000, 0x8120, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) 3m11.892512604s ago: executing program 4 (id=3763): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8", 0x4}], 0x1, 0x0) write(r0, 0x0, 0x0) 3m11.747701937s ago: executing program 4 (id=3766): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x4) 3m11.553043256s ago: executing program 4 (id=3767): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close(0x3) 3m11.403350597s ago: executing program 4 (id=3771): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) 2m56.301165104s ago: executing program 33 (id=3771): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) 2m54.245406456s ago: executing program 3 (id=4047): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 2m54.058278704s ago: executing program 3 (id=4048): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m53.959895121s ago: executing program 3 (id=4050): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2m53.939652656s ago: executing program 3 (id=4051): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) msgsnd(0x0, &(0x7f00000017c0)={0x3}, 0x8, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 2m53.811824993s ago: executing program 3 (id=4052): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000000040)="05", 0x1, 0xfffffffd}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x8, 0x80000000}) 2m53.675575559s ago: executing program 3 (id=4054): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) 2m38.684652971s ago: executing program 34 (id=4054): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) 14.061084231s ago: executing program 6 (id=6662): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 13.847063705s ago: executing program 6 (id=6664): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x56054afd47b3f2e, 0x204031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x500}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 13.693779594s ago: executing program 6 (id=6665): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 13.400941049s ago: executing program 6 (id=6668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(r0, &(0x7f0000001b40)='./file0/file0\x00', r0, 0x0, 0x252) 13.221607453s ago: executing program 6 (id=6670): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12.22354928s ago: executing program 6 (id=6677): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/57, 0x0, 0x32d55b790c73fadc}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 11.918920689s ago: executing program 35 (id=6677): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/57, 0x0, 0x32d55b790c73fadc}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 5.007632173s ago: executing program 5 (id=6741): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) unshare(0x64000600) r2 = dup2(r1, r0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 4.657997516s ago: executing program 1 (id=6745): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 4.068216177s ago: executing program 1 (id=6750): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xb, 0x4) 3.62861961s ago: executing program 0 (id=6756): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 3.151782042s ago: executing program 0 (id=6757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 3.132490067s ago: executing program 7 (id=6758): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1}, 0x8}], 0x1, 0xcb, 0x0) 3.110902719s ago: executing program 1 (id=6759): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 3.058945625s ago: executing program 7 (id=6760): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x400000000003, 0xffffffff7ffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) 2.949250349s ago: executing program 0 (id=6761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x1, 0x1}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.803777561s ago: executing program 5 (id=6762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x409}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 2.714901842s ago: executing program 0 (id=6763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x10000, 0x6, 0x200006, 0x7, 0x4], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.584297918s ago: executing program 0 (id=6764): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="202001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000008c0)={0x40, 0x12, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x2, "c3a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0xa0, 0x4}, 0x0}) 2.159994381s ago: executing program 1 (id=6765): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.112958402s ago: executing program 7 (id=6766): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x111800, 0x80, 0x11}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000d80)) 2.03055311s ago: executing program 7 (id=6767): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 1.954171797s ago: executing program 5 (id=6768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_delete(r1) 1.696435784s ago: executing program 5 (id=6769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4) 1.222321372s ago: executing program 5 (id=6770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"808653769f50df58624295cc7aeae1914d55ba337e30f9a12499193c721e5882fd645f9bb2e2cf88f1c084f6a82522cec7592c4114e068ac3f651dc519c1dc1e763bb8e987153e52c192c5e8652809b057e483fa3281dc50559a0867e1a66e314026cfe30b84c3a1d0bf3db7a748162421014d3fcac3c4cb7e6a22e3938e05c03693bd4a88b47311dd93bede2a46065704f63fd88dacc60ec3004705fe45c8dd154025e7ba8e0e8ebd0e9036ccf370829c44b18e0b759644657724838f714cdffc3937dbf27e0b34eb6d21a0a453b8f9b469e8a61de2c33888e5413a5f884be17c8d210994dedefd3ed29099fb61c4e943a7f2d2af4a47e64d63af12b3b054007d645d4b3e55b34cb894bd58b1d21a45bf9418a78b60c7b5341b9107bf4b0d37fe622a36cd305f2fa2f566786d636838eaf8658e432510170ce247ecc5102e890fb9a6faf4671421b1173995c262bfe6d45c5a0eda06109f0f049a6a1114764b85e7339ffbb22e84b623a686dd5287f23bc09007ba19f515e0b7e649ab8a6474859328a09a561f5ebcd6f9e8f38b7d12d0df01bf147852ed5b090e7baa56720d9ba22f71704704c322650e05a5a9f3351793adbb4f746992f879d990598344ead42b812e9599a20d51bad7ff93bf6104330897a7a34c10f95f60b934b2a864f6936cac5b5a73b628adadebea5ae5906e18c8927eab35e53fa6f016984e376e223363376dbc510810807b69e13e2946f6f8835a97efc8e6d8f78446203eae0bcd3e7f63c88499dc0829c3df2b9900225c7f3074c1fcab2170d8d45e18679d10cdc394ae214960c1655b5f61fcb55dcabe240eab6d7f55d879ed12288be37c89406c28d2f95eb95e72e2a4d11554f2a5c3a03f1bb1d0f554531ecf5f19a435d484569a5c42ea89a1e7d664ad8f6ece582bcdb2d53c8002035fc4d99c12aacfaaf34e88c989d553ca138020f273a4b407c9f11f9c61f34d985a5e2acdf0ab14db335be776b84013153951363180d96fa765eb226b4bf25a652077749e6a8e987f9898f152205b175eee8c1e3fe47ab8ff68edd3453a0721817a29f4b3ea3022c3a5af3daf4d0cb9c4a34e3627e38bbeba0a67e5f142e252956d87a4fff8528b09432f2f5f4c15fbfdd2451925ea73f7a8bf37262580ab47d265ed6bfe3fb3e4e19feaa13a089fdba86043686d59792b865375b5665d6b91470ec80b7115ac095e4822815aeac232a1900daa6bd95efec249d485cf5e5a266e938d74ab9060622aa426cb76e9e22f24f6498448cc7c0c6ebf7dbc289f68faa0aeca1d51739f9d5868e573adc9a49523b476fe6f5e746ab57e50a996a38fe5f3d9181a8a03881aff8cb124bf981421d24e7d04b0aa43330616f4ebee30d23629f6f1387fdc0b3de32df913c205a211b921f7715c91f60bab4f7799b16798ae04baf89b9ae93becc59b"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.156620577s ago: executing program 1 (id=6771): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.00511362s ago: executing program 1 (id=6772): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 984.968312ms ago: executing program 7 (id=6773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x351a, 0x67d, 0x44, 0x0, 0x0) 854.310217ms ago: executing program 5 (id=6774): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r2, &(0x7f0000000380)=""/144, 0x90) 640.008925ms ago: executing program 7 (id=6775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=6776): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0xa, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) kernel console output (not intermixed with test programs): 92734][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 362.098875][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 362.172876][T14501] libceph: connect (1)[b::]:6789 error -101 [ 362.196049][T14501] libceph: mon0 (1)[b::]:6789 connect error [ 362.400729][T18001] loop9: detected capacity change from 0 to 7 [ 362.419930][T18001] Dev loop9: unable to read RDB block 7 [ 362.428528][T18001] loop9: unable to read partition table [ 362.434729][T18001] loop9: partition table beyond EOD, truncated [ 362.451154][T18001] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.987650][T18022] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5152'. [ 363.156256][ T30] audit: type=1400 audit(1765038973.936:816): avc: denied { read } for pid=18032 comm="syz.7.5157" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.534856][T18052] syzkaller1: entered promiscuous mode [ 363.540356][T18052] syzkaller1: entered allmulticast mode [ 363.623705][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5169'. [ 363.682518][T18060] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5171'. [ 363.905769][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5176'. [ 363.922482][ T30] audit: type=1326 audit(1765038974.686:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18063 comm="syz.5.5174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a7698f749 code=0x0 [ 364.763729][T18113] kernel read not supported for file /cpuacct.usage_percpu (pid: 18113 comm: syz.5.5193) [ 364.802566][ T30] audit: type=1800 audit(1765038975.576:818): pid=18113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5193" name="cpuacct.usage_percpu" dev="mqueue" ino=63259 res=0 errno=0 [ 364.827676][T14487] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 364.830955][T18121] input: syz1 as /devices/virtual/input/input64 [ 365.026919][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5197'. [ 365.045494][T14487] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.072667][T14487] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.092404][T14487] usb 1-1: config 0 interface 0 has no altsetting 0 [ 365.110973][T14487] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 365.115192][T18130] netlink: 'syz.1.5199': attribute type 1 has an invalid length. [ 365.129372][T14487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.164275][T14487] usb 1-1: config 0 descriptor?? [ 365.167207][T18130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.240218][T18130] bond2: (slave geneve3): making interface the new active one [ 365.253453][T18130] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 365.253575][T10578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.254663][T10578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.254924][T10578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.254955][T10578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.600475][T14487] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0033/input/input65 [ 365.637870][T18153] nvme_fabrics: missing parameter 'transport=%s' [ 365.662013][T18153] nvme_fabrics: missing parameter 'nqn=%s' [ 365.677718][ T30] audit: type=1400 audit(1765038976.456:819): avc: denied { mounton } for pid=18155 comm="syz.6.5209" path="/proc/471/cgroup" dev="proc" ino=63324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 365.759283][T14487] sony 0003:054C:03D5.0033: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 365.843026][T14487] usb 1-1: USB disconnect, device number 56 [ 365.951457][T18159] fido_id[18159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 366.672333][T14494] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 366.812480][T14497] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 366.832416][T14494] usb 7-1: Using ep0 maxpacket: 32 [ 366.839298][T14494] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.861903][T14494] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.874347][T14494] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.885689][T14494] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 366.898989][T14494] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.907909][T14494] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 366.917401][T14494] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.933068][T14494] usb 7-1: config 0 descriptor?? [ 366.983234][T14497] usb 1-1: Using ep0 maxpacket: 32 [ 366.989848][T14497] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 366.999592][T14497] usb 1-1: config 0 has no interface number 0 [ 367.006449][T14497] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.019274][T14497] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 367.029222][T14497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.037587][T14497] usb 1-1: Product: syz [ 367.041839][T14497] usb 1-1: Manufacturer: syz [ 367.047059][T14497] usb 1-1: SerialNumber: syz [ 367.054776][T14497] usb 1-1: config 0 descriptor?? [ 367.064705][T14497] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 367.075104][T14497] em28xx 1-1:0.132: Video interface 132 found: [ 367.258666][T14487] libceph: connect (1)[c::]:6789 error -101 [ 367.265672][T14487] libceph: mon0 (1)[c::]:6789 connect error [ 367.271827][T14487] libceph: connect (1)[c::]:6789 error -101 [ 367.278262][T14487] libceph: mon0 (1)[c::]:6789 connect error [ 367.308410][T14501] libceph: connect (1)[c::]:6789 error -101 [ 367.314710][T14501] libceph: mon0 (1)[c::]:6789 connect error [ 367.350498][T14494] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 367.361798][T14494] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 367.370113][T14494] hid-thrustmaster 0003:044F:B65D.0034: collection stack underflow [ 367.378549][T14494] hid-thrustmaster 0003:044F:B65D.0034: item 0 0 0 12 parsing failed [ 367.387468][T14494] hid-thrustmaster 0003:044F:B65D.0034: parse failed with error -22 [ 367.395787][T14494] hid-thrustmaster 0003:044F:B65D.0034: probe with driver hid-thrustmaster failed with error -22 [ 367.469072][T14497] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 367.543083][T14494] libceph: connect (1)[c::]:6789 error -101 [ 367.549327][T14494] libceph: mon0 (1)[c::]:6789 connect error [ 367.577398][T14494] usb 7-1: USB disconnect, device number 14 [ 367.582708][T14501] libceph: connect (1)[c::]:6789 error -101 [ 367.590936][T14501] libceph: mon0 (1)[c::]:6789 connect error [ 368.062642][T14487] libceph: connect (1)[c::]:6789 error -101 [ 368.069851][T18221] ceph: No mds server is up or the cluster is laggy [ 368.070148][T14487] libceph: mon0 (1)[c::]:6789 connect error [ 368.077077][T18224] ceph: No mds server is up or the cluster is laggy [ 368.122733][T14501] libceph: connect (1)[c::]:6789 error -101 [ 368.139149][T14501] libceph: mon0 (1)[c::]:6789 connect error [ 368.423247][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 368.423785][ T5815] Bluetooth: hci1: command 0x1003 tx timeout [ 368.583301][T14497] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 368.599476][T14497] em28xx 1-1:0.132: board has no eeprom [ 368.605474][T18205] em28xx 1-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 368.672545][T14497] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 368.683328][T14497] em28xx 1-1:0.132: analog set to bulk mode. [ 368.689377][T14501] em28xx 1-1:0.132: Registering V4L2 extension [ 368.705682][T14497] usb 1-1: USB disconnect, device number 57 [ 368.724460][T14497] em28xx 1-1:0.132: Disconnecting em28xx [ 368.763266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.857759][T14501] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 368.867582][T14501] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 368.878041][T14501] em28xx 1-1:0.132: No AC97 audio processor [ 368.890538][T14501] usb 1-1: Decoder not found [ 368.895576][T14501] em28xx 1-1:0.132: failed to create media graph [ 368.903214][T14500] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 368.911805][T14501] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 368.930847][T14501] em28xx 1-1:0.132: Remote control support is not available for this card. [ 368.939967][T14497] em28xx 1-1:0.132: Closing input extension [ 368.951773][T14497] em28xx 1-1:0.132: Freeing device [ 369.042485][T14487] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 369.066264][T14487] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.095645][T14500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.125328][T14500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.149993][T14500] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 369.172384][T14500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.211073][T14500] usb 7-1: config 0 descriptor?? [ 369.640295][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 369.670709][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5262'. [ 369.683867][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 369.693605][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5262'. [ 369.726627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.757779][T14500] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 369.787359][T14500] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 369.822368][T14500] playstation 0003:054C:0DF2.0036: unexpected long global item [ 369.832547][T14500] playstation 0003:054C:0DF2.0036: Parse failed [ 369.838869][T14500] playstation 0003:054C:0DF2.0036: probe with driver playstation failed with error -22 [ 369.983810][T14500] usb 7-1: USB disconnect, device number 15 [ 370.306278][T18314] batman_adv: batadv0: Adding interface: dummy0 [ 370.316561][T18314] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 370.336654][T18314] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 370.678404][T18331] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.692524][T14487] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 370.800402][ T30] audit: type=1400 audit(1765038981.576:820): avc: denied { read } for pid=18338 comm="syz.6.5286" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 370.842360][T14487] usb 1-1: Using ep0 maxpacket: 16 [ 370.852772][ T30] audit: type=1400 audit(1765038981.576:821): avc: denied { open } for pid=18338 comm="syz.6.5286" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 370.853621][T14487] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 370.912326][ T30] audit: type=1400 audit(1765038981.576:822): avc: denied { ioctl } for pid=18338 comm="syz.6.5286" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 370.935440][T14487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.968665][T14487] usb 1-1: Product: syz [ 370.986912][T14487] usb 1-1: Manufacturer: syz [ 371.007098][T14487] usb 1-1: SerialNumber: syz [ 371.010122][ T5934] hid-generic 0003:0004:0000.0037: unknown main item tag 0x0 [ 371.016914][T14487] usb 1-1: config 0 descriptor?? [ 371.030427][ T5934] hid-generic 0003:0004:0000.0037: unknown main item tag 0x0 [ 371.047696][ T5934] hid-generic 0003:0004:0000.0037: unknown main item tag 0x0 [ 371.056106][ T5934] hid-generic 0003:0004:0000.0037: unknown main item tag 0x0 [ 371.067097][ T5934] hid-generic 0003:0004:0000.0037: unknown main item tag 0x0 [ 371.081766][ T5934] hid-generic 0003:0004:0000.0037: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 371.173627][T18349] fido_id[18349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.225945][T18353] netlink: 'syz.6.5292': attribute type 10 has an invalid length. [ 371.244429][T18353] team0: Port device dummy0 added [ 371.373306][T18361] loop2: detected capacity change from 0 to 7 [ 371.383893][T18361] Dev loop2: unable to read RDB block 7 [ 371.389485][T18361] loop2: unable to read partition table [ 371.396035][T18361] loop2: partition table beyond EOD, truncated [ 371.402490][T18361] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.432553][T14494] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 371.443559][T14487] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 371.460687][T14487] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.473303][T14487] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 371.481390][T14487] usb 1-1: media controller created [ 371.492968][T14487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.605723][T14494] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.630983][T14494] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.651913][T14487] zl10353_read_register: readreg error (reg=127, ret==0) [ 371.672045][T14494] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.688274][T14487] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 371.705936][T14494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.714112][T14487] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 371.723977][T14494] usb 6-1: Product: syz [ 371.748424][T14494] usb 6-1: Manufacturer: syz [ 371.756149][T14487] usb 1-1: USB disconnect, device number 58 [ 371.775624][T14494] usb 6-1: SerialNumber: syz [ 371.811066][T14494] cdc_ncm 6-1:1.0: skipping garbage [ 371.855355][T14487] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 373.037979][T14494] cdc_ncm 6-1:1.0: bind() failure [ 373.052762][T14494] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 373.064985][T14494] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 373.077010][T14494] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 373.093856][T14494] usb 6-1: USB disconnect, device number 26 [ 373.162470][ T5925] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 373.324702][ T5925] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.336159][ T5925] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.347398][ T5925] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.357319][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.369215][T18417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 373.390188][ T5925] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.626338][ T5925] usb 7-1: USB disconnect, device number 16 [ 373.700446][ T30] audit: type=1400 audit(1765038984.476:823): avc: denied { read } for pid=18436 comm="syz.7.5329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.902449][T14487] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 374.062422][T14487] usb 6-1: Using ep0 maxpacket: 16 [ 374.068957][T14487] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 374.077479][T14487] usb 6-1: config 0 has no interface number 0 [ 374.086141][T14487] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 374.095540][T14487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.104669][T14487] usb 6-1: Product: syz [ 374.108888][T14487] usb 6-1: Manufacturer: syz [ 374.113649][T14487] usb 6-1: SerialNumber: syz [ 374.120837][T14487] usb 6-1: config 0 descriptor?? [ 374.128289][T14487] hub 6-1:0.132: bad descriptor, ignoring hub [ 374.134518][T14487] hub 6-1:0.132: probe with driver hub failed with error -5 [ 374.143798][T14487] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input66 [ 374.623062][ T5934] usb 6-1: USB disconnect, device number 27 [ 374.882673][T14500] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 375.000045][T18479] overlayfs: overlapping lowerdir path [ 375.024396][T18479] overlayfs: failed to verify upper (161/file0, ino=855, err=-116) [ 375.032661][T18479] overlayfs: failed to verify index dir 'upper' xattr [ 375.039498][T18479] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 375.049659][T14500] usb 7-1: Using ep0 maxpacket: 16 [ 375.056379][T14500] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 375.069938][T14500] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 375.079474][T14500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.090553][T14500] usb 7-1: config 0 descriptor?? [ 375.131128][T14500] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input67 [ 375.319396][ T5171] bcm5974 7-1:0.0: could not read from device [ 375.350723][T14500] bcm5974 7-1:0.0: could not read from device [ 375.367640][ T5171] bcm5974 7-1:0.0: could not read from device [ 375.379700][T14500] input: failed to attach handler mousedev to device input67, error: -5 [ 375.423097][ T5171] bcm5974 7-1:0.0: could not read from device [ 375.432753][T14500] usb 7-1: USB disconnect, device number 17 [ 375.992433][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5355'. [ 376.137329][T18523] input: syz1 as /devices/virtual/input/input68 [ 376.269414][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 377.030802][ T30] audit: type=1400 audit(1765038987.806:824): avc: denied { shutdown } for pid=18574 comm="syz.7.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 377.665052][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5398'. [ 377.690787][T18600] netlink: 'syz.7.5398': attribute type 5 has an invalid length. [ 377.712011][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5398'. [ 378.033866][T18625] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5406'. [ 378.069015][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5406'. [ 378.179449][T18629] overlayfs: failed to clone lowerpath [ 378.182434][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.200905][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.207523][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.216072][T18629] overlayfs: failed to clone lowerpath [ 378.234128][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5410'. [ 378.303592][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5410'. [ 378.483313][T18643] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5415'. [ 378.952499][ T5925] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 379.134625][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.156012][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.198265][ T5925] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 379.212383][ T5934] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 379.213102][ T5925] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 379.259067][ T5925] usb 7-1: Manufacturer: syz [ 379.277996][ T5925] usb 7-1: config 0 descriptor?? [ 379.374418][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.385093][ T5934] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 379.394308][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.404519][ T5934] usb 6-1: config 0 descriptor?? [ 379.714113][T18699] SELinux: failed to load policy [ 379.779166][ T30] audit: type=1400 audit(1765038990.556:825): avc: denied { read } for pid=18700 comm="syz.0.5441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 379.824903][ T5934] lenovo 0003:17EF:6047.0039: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 379.947035][ T30] audit: type=1400 audit(1765038990.716:826): avc: denied { write } for pid=18705 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.106721][ T5925] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0038/input/input69 [ 380.151534][T18716] lo speed is unknown, defaulting to 1000 [ 380.192686][T18719] overlayfs: failed to clone upperpath [ 380.193957][ T5925] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0038/input/input70 [ 380.239468][ T5925] input: syz Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0038/input/input71 [ 380.276045][ T5925] input: syz Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0038/input/input72 [ 380.330804][ T5925] uclogic 0003:256C:006D.0038: input,hidraw1: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 380.365464][ T5925] usb 7-1: USB disconnect, device number 18 [ 380.528030][T18727] fido_id[18727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 380.635333][ T5934] lenovo 0003:17EF:6047.0039: Sensitivity setting failed: -71 [ 380.707796][ T5934] usb 6-1: USB disconnect, device number 28 [ 380.908623][ T30] audit: type=1400 audit(1765038991.686:827): avc: denied { wake_alarm } for pid=18732 comm="syz.0.5453" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 381.318870][T18755] overlayfs: failed to clone lowerpath [ 381.349214][T18755] overlayfs: failed to clone lowerpath [ 381.555801][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5470'. [ 381.566646][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5470'. [ 381.592355][ T5934] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 381.743639][ T5934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.764535][ T5934] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.796328][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.812476][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.828854][ T5934] usb 1-1: Product: syz [ 381.833585][ T5934] usb 1-1: Manufacturer: syz [ 381.838194][ T5934] usb 1-1: SerialNumber: syz [ 381.848924][ T5934] cdc_ncm 1-1:1.0: skipping garbage [ 381.854583][ T5934] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 381.862071][ T5934] cdc_ncm 1-1:1.0: bind() failure [ 381.890275][ T5934] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 381.913719][ T5934] cdc_ncm 1-1:1.1: bind() failure [ 381.952985][T18783] overlayfs: failed to clone upperpath [ 382.087125][T14487] usb 1-1: USB disconnect, device number 59 [ 382.576840][T18807] netlink: 'syz.6.5484': attribute type 21 has an invalid length. [ 382.587202][T18807] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5484'. [ 383.445494][T18823] netem: change failed [ 384.142379][T18842] nbd2: detected capacity change from 0 to 127 [ 384.150269][ T5812] block nbd2: Receive control failed (result -104) [ 384.150287][ T5947] block nbd2: Send control failed (result -32) [ 384.170367][ T5947] block nbd2: Request send failed, requeueing [ 384.241289][ T25] block nbd2: Dead connection, failed to find a fallback [ 384.249967][ T25] block nbd2: shutting down sockets [ 384.255228][ T25] blk_print_req_error: 130 callbacks suppressed [ 384.255245][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.271224][ T25] buffer_io_error: 32 callbacks suppressed [ 384.271239][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 384.302329][ T5947] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.311370][ T5947] Buffer I/O error on dev nbd2, logical block 2, async page read [ 384.383783][ T5947] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.432271][ T5947] Buffer I/O error on dev nbd2, logical block 3, async page read [ 384.440544][ T30] audit: type=1400 audit(1765038995.216:828): avc: denied { block_suspend } for pid=18852 comm="syz.1.5505" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.502656][T18888] netlink: 'syz.7.5521': attribute type 20 has an invalid length. [ 385.530832][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5521'. [ 385.568257][T18888] netlink: 'syz.7.5521': attribute type 20 has an invalid length. [ 385.569261][T10614] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.602641][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5521'. [ 385.626519][T10614] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.651027][T10614] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.669599][T10614] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.687653][ T30] audit: type=1400 audit(1765038996.466:829): avc: denied { write } for pid=18891 comm="syz.6.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.772105][ T30] audit: type=1326 audit(1765038996.546:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18894 comm="syz.5.5523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a7698f749 code=0x0 [ 387.507182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.518448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.633065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.641661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.651459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.660117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 388.475209][T18993] block nbd3: shutting down sockets [ 388.742652][ T30] audit: type=1400 audit(1765038999.516:831): avc: denied { mounton } for pid=19007 comm="syz.5.5572" path="/516/file0" dev="tmpfs" ino=2659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 388.972324][ T5925] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 389.157399][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 389.180193][ T5925] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 389.203684][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.224411][ T5925] usb 1-1: config 0 descriptor?? [ 389.229968][T19003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.520557][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 389.539873][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 389.590015][ T5925] usb 1-1: USB disconnect, device number 60 [ 389.938229][T19031] bond1 (unregistering): Released all slaves [ 390.227040][T19053] bond2: option mode: unable to set because the bond device is up [ 390.276108][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5593'. [ 390.287286][T19053] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.319024][T19053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.345737][T19053] bond2: (slave lo): Enslaving as an active interface with an up link [ 390.377555][T19053] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 390.395364][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5593'. [ 390.415649][T19063] nbd: nbd64 already in use [ 390.590189][T19075] ipip0: entered promiscuous mode [ 390.596325][T19075] ipip0: entered allmulticast mode [ 390.656214][ T30] audit: type=1400 audit(1765039001.436:832): avc: denied { prog_load } for pid=19078 comm="syz.7.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.678457][ T30] audit: type=1400 audit(1765039001.436:833): avc: denied { prog_run } for pid=19078 comm="syz.7.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.752373][ T5934] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 390.778605][ T30] audit: type=1400 audit(1765039001.556:834): avc: denied { map_create } for pid=19084 comm="syz.1.5604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.799771][ T30] audit: type=1400 audit(1765039001.556:835): avc: denied { map_read map_write } for pid=19084 comm="syz.1.5604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.827715][T14501] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 390.912341][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 390.918946][ T5934] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.932417][ T5934] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.962956][ T5934] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.983189][ T5934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 390.993934][T14501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.012342][T14501] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 391.026469][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 391.035843][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.052673][T14501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.079709][ T5934] usb 1-1: Product: syz [ 391.087057][T14501] usb 6-1: config 0 descriptor?? [ 391.093563][ T5934] usb 1-1: Manufacturer: syz [ 391.097360][T19096] overlayfs: failed to clone upperpath [ 391.103959][ T5934] usb 1-1: SerialNumber: syz [ 391.358898][ T5934] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 391.541865][T14501] nintendo 0003:057E:200E.003A: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 391.590071][ T5925] usb 1-1: USB disconnect, device number 61 [ 391.609201][T19071] usblp0: removed [ 391.645540][T14501] nintendo 0003:057E:200E.003A: Failed charging grip handshake [ 391.685511][T14501] nintendo 0003:057E:200E.003A: Failed to initialize controller; ret=-110 [ 391.768870][T14501] nintendo 0003:057E:200E.003A: probe - fail = -110 [ 391.792712][T14501] nintendo 0003:057E:200E.003A: probe with driver nintendo failed with error -110 [ 391.841068][T14501] usb 6-1: USB disconnect, device number 29 [ 391.976053][T19135] netlink: 'syz.7.5625': attribute type 1 has an invalid length. [ 391.983961][T19135] netlink: 'syz.7.5625': attribute type 4 has an invalid length. [ 391.991689][T19135] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.5625'. [ 392.205494][T19151] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5633'. [ 392.706492][T19179] sit0: entered allmulticast mode [ 392.791482][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 392.801039][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 392.958825][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 393.002080][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 393.110325][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 393.127626][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 393.207355][T19205] bond0: entered promiscuous mode [ 393.223519][T19205] bond_slave_0: entered promiscuous mode [ 393.241168][T19205] @0Ù: entered promiscuous mode [ 393.255656][T19205] dummy0: entered promiscuous mode [ 393.270985][T19205] dummy0: left promiscuous mode [ 393.293886][T19205] bond0: left promiscuous mode [ 393.298958][T19205] bond_slave_0: left promiscuous mode [ 393.313995][T19205] @0Ù: left promiscuous mode [ 393.355161][T10614] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.369594][T10614] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.388904][T10614] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.422758][T10614] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.644574][T19233] ALSA: seq fatal error: cannot create timer (-16) [ 393.663041][ T30] audit: type=1400 audit(1765039004.446:836): avc: denied { unmount } for pid=11728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 393.803307][T14501] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 393.991950][T14501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.012301][T14501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.034160][T14501] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.044873][T14501] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 394.055199][T14501] usb 1-1: Manufacturer: syz [ 394.065013][T14501] usb 1-1: config 0 descriptor?? [ 394.442833][T19259] ip6erspan0: entered promiscuous mode [ 394.885494][T14501] uclogic 0003:256C:006D.003B: interface is invalid, ignoring [ 395.012584][T14487] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 395.105147][T14501] usb 1-1: USB disconnect, device number 62 [ 395.192367][T14487] usb 6-1: Using ep0 maxpacket: 16 [ 395.200555][T14487] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.212073][T14487] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.222596][T14487] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.239326][T14487] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.246958][T14487] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 395.256253][T14487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.268020][T14487] usb 6-1: config 0 descriptor?? [ 395.659109][T19287] syz.1.5685 (19287) used greatest stack depth: 19720 bytes left [ 395.689786][T14487] mcp2200 0003:04D8:00DF.003C: item 0 4 0 9 parsing failed [ 395.706786][T14487] mcp2200 0003:04D8:00DF.003C: can't parse reports [ 395.717003][T14487] mcp2200 0003:04D8:00DF.003C: probe with driver mcp2200 failed with error -22 [ 395.862483][ T5815] Bluetooth: hci1: command 0x1003 tx timeout [ 395.865032][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 395.928906][T14497] usb 6-1: USB disconnect, device number 30 [ 395.959262][T14501] Process accounting resumed [ 396.066959][T19314] __nla_validate_parse: 5 callbacks suppressed [ 396.066979][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5693'. [ 396.302019][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5699'. [ 396.316577][T19323] netlink: 'syz.7.5699': attribute type 7 has an invalid length. [ 396.393512][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5699'. [ 396.409816][T19323] netlink: 'syz.7.5699': attribute type 7 has an invalid length. [ 396.836634][T19337] lo speed is unknown, defaulting to 1000 [ 397.062779][ T5925] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 397.233299][T19348] input: syz1 as /devices/virtual/input/input73 [ 397.242817][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 397.264287][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.296879][ T5925] usb 6-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 397.316812][ T5925] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 397.346920][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.363082][ T5925] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 397.376806][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.397230][ T5925] usb 6-1: config 0 descriptor?? [ 397.421021][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5710'. [ 397.562338][T14501] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 397.717097][ T5925] usb 6-1: string descriptor 0 read error: -71 [ 397.758228][ T5925] usb 6-1: USB disconnect, device number 31 [ 397.772695][T14501] usb 1-1: Using ep0 maxpacket: 32 [ 397.791533][T14501] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.842818][T14501] usb 1-1: config 0 has no interface number 0 [ 397.862628][T14501] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.876923][T14501] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.890412][T14501] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 397.907951][T14501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.921483][T14501] usb 1-1: config 0 descriptor?? [ 398.499850][ T30] audit: type=1400 audit(1765039009.276:837): avc: denied { read write } for pid=19369 comm="syz.5.5717" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.578167][T14501] uclogic 0003:28BD:0094.003D: pen parameters not found [ 398.612622][ T30] audit: type=1400 audit(1765039009.306:838): avc: denied { open } for pid=19369 comm="syz.5.5717" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.642475][T14501] uclogic 0003:28BD:0094.003D: interface is invalid, ignoring [ 398.806297][T14501] usb 1-1: USB disconnect, device number 63 [ 398.982399][ T5925] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 399.136222][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 399.159676][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 399.182885][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 399.217738][ T5925] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 399.232253][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.250438][ T5925] usb 6-1: Product: syz [ 399.260516][ T5925] usb 6-1: Manufacturer: syz [ 399.265309][ T5925] usb 6-1: SerialNumber: syz [ 399.282899][ T5925] usb 6-1: config 0 descriptor?? [ 399.288494][T19375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 399.296237][T19375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 399.305245][ T5925] usb 6-1: ucan: probing device on interface #0 [ 399.697461][T19402] binder: 19399:19402 ioctl c0306201 2000000003c0 returned -22 [ 399.721464][ T5925] usb 6-1: ucan: failed to retrieve device info [ 399.732638][ T5925] usb 6-1: ucan: probe failed; try to update the device firmware [ 399.762530][ T5925] usb 6-1: USB disconnect, device number 32 [ 400.591258][T19451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5752'. [ 401.023368][T14488] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 401.175914][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5767'. [ 401.185135][T14488] usb 6-1: Using ep0 maxpacket: 16 [ 401.196439][T14488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.216528][T14488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.232349][T14488] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 401.261812][T14488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.320672][T14488] usb 6-1: config 0 descriptor?? [ 401.674306][ T30] audit: type=1400 audit(1765039012.456:839): avc: denied { write } for pid=19499 comm="syz.6.5777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 401.707754][ T30] audit: type=1400 audit(1765039012.456:840): avc: denied { read } for pid=19499 comm="syz.6.5777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 401.754570][T14488] hid_parser_main: 13 callbacks suppressed [ 401.754592][T14488] konepure 0003:1E7D:2DB4.003E: unknown main item tag 0x0 [ 401.758838][T19506] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 401.758838][T19506] The task syz.7.5778 (19506) triggered the difference, watch for misbehavior. [ 401.760440][T14488] konepure 0003:1E7D:2DB4.003E: unknown main item tag 0x0 [ 401.760462][T14488] konepure 0003:1E7D:2DB4.003E: item fetching failed at offset 2/4 [ 401.819096][T19503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.836652][T14488] konepure 0003:1E7D:2DB4.003E: parse failed [ 401.843220][T14488] konepure 0003:1E7D:2DB4.003E: probe with driver konepure failed with error -22 [ 401.947349][T19503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.976931][ T5934] usb 6-1: USB disconnect, device number 33 [ 402.097954][T19503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.206625][T19503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.363571][T10571] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.407079][T10571] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.449255][T10571] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.477200][T10571] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.486055][T19513] kvm: user requested TSC rate below hardware speed [ 402.506878][T19513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 402.691052][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5782'. [ 402.703679][T19517] lo speed is unknown, defaulting to 1000 [ 403.183381][ T30] audit: type=1400 audit(1765039013.966:841): avc: denied { read write } for pid=19537 comm="syz.5.5790" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 403.322403][ T30] audit: type=1400 audit(1765039013.966:842): avc: denied { open } for pid=19537 comm="syz.5.5790" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 403.448207][T19545] netlink: 408 bytes leftover after parsing attributes in process `syz.5.5793'. [ 404.129268][T19559] kvm: apic: phys broadcast and lowest prio [ 404.491991][T19563] lo speed is unknown, defaulting to 1000 [ 405.308422][ T30] audit: type=1326 audit(1765039016.086:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.340702][ T30] audit: type=1326 audit(1765039016.086:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.372387][ T30] audit: type=1326 audit(1765039016.086:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.423389][ T30] audit: type=1326 audit(1765039016.086:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.502325][ T30] audit: type=1326 audit(1765039016.086:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.558672][ T30] audit: type=1326 audit(1765039016.086:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.639097][ T30] audit: type=1326 audit(1765039016.116:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.664892][ T30] audit: type=1326 audit(1765039016.116:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.705313][ T30] audit: type=1326 audit(1765039016.116:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 405.746842][ T30] audit: type=1326 audit(1765039016.176:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86158f749 code=0x7ffc0000 [ 407.009924][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5851'. [ 407.040188][T19683] bond1: Invalid ad_actor_system MAC address. [ 407.047205][T19683] bond1: option ad_actor_system: invalid value (1) [ 407.054941][T19683] bond1 (unregistering): Released all slaves [ 407.106261][T14488] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 407.263045][T14488] usb 7-1: Using ep0 maxpacket: 16 [ 407.272517][T14488] usb 7-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 407.292065][T14488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.313658][T14488] usb 7-1: config 0 descriptor?? [ 408.142461][T19726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5866'. [ 408.155846][T19722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5866'. [ 408.311663][T19733] kAFS: No cell specified [ 408.529510][T14488] pegasus 7-1:0.0: can't reset MAC [ 408.536009][T14488] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 408.565040][T14488] usb 7-1: USB disconnect, device number 19 [ 408.752359][ T5934] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 408.914035][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.939398][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.963529][ T5934] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.973106][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.981118][ T5934] usb 6-1: Product: syz [ 409.002856][ T5934] usb 6-1: Manufacturer: syz [ 409.007488][ T5934] usb 6-1: SerialNumber: syz [ 409.232320][ T5934] usb 6-1: 0:2 : does not exist [ 409.252981][ T5934] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 409.281389][ T5934] usb 6-1: USB disconnect, device number 34 [ 409.334008][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.662561][ T5925] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 409.823920][ T5925] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 409.832130][ T5925] usb 7-1: config 0 has no interface number 0 [ 409.839297][ T5925] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.850870][ T5925] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.861048][ T5925] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 409.870610][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.881185][ T5925] usb 7-1: config 0 descriptor?? [ 410.142449][T14488] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 410.303759][T14488] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 410.313731][T14488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.325874][T14488] usb 6-1: config 0 descriptor?? [ 410.343182][T14488] gspca_main: spca508-2.14.0 probing 8086:0110 [ 410.503073][T14500] usb 7-1: USB disconnect, device number 20 [ 410.541108][T14488] gspca_spca508: reg_read err -71 [ 410.560025][T14488] gspca_spca508: reg_read err -71 [ 410.574173][T14488] gspca_spca508: reg_read err -71 [ 410.586746][T14488] gspca_spca508: reg_read err -71 [ 410.592466][T14488] gspca_spca508: reg_read err -71 [ 410.597984][T14488] gspca_spca508: reg write: error -71 [ 410.603778][T14488] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 410.611798][T19832] use of bytesused == 0 is deprecated and will be removed in the future, [ 410.628782][T14488] usb 6-1: USB disconnect, device number 35 [ 410.639619][T19832] use the actual size instead. [ 410.969342][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 410.969358][ T30] audit: type=1400 audit(1765039021.746:862): avc: denied { map } for pid=19848 comm="syz.7.5924" path="socket:[71470]" dev="sockfs" ino=71470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 411.086146][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.093661][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.472053][T19882] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.5936'. [ 411.481472][ T30] audit: type=1400 audit(1765039022.246:863): avc: denied { write } for pid=19879 comm="syz.0.5937" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.695964][T19894] netlink: 'syz.7.5943': attribute type 1 has an invalid length. [ 411.734580][T19894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.910170][ T5925] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 412.082619][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 412.090318][ T5925] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.105912][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 412.120467][ T5925] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 412.123871][T19894] bond1 (unregistering): Released all slaves [ 412.139453][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.163452][ T5925] usb 1-1: config 0 descriptor?? [ 412.393527][T19908] netlink: 'syz.5.5948': attribute type 1 has an invalid length. [ 412.468351][T19908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.498186][T19913] bond1: (slave geneve2): making interface the new active one [ 412.507961][T19913] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 412.524224][ T3488] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.541663][ T3488] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.560423][ T3488] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.579560][ T3488] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.614018][ T5925] nzxt-smart2 0003:1E71:2009.0040: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 413.056377][ T5925] usb 1-1: USB disconnect, device number 64 [ 413.905653][ T30] audit: type=1400 audit(1765039024.686:864): avc: denied { write } for pid=19979 comm="syz.5.5979" path="socket:[72821]" dev="sockfs" ino=72821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 414.380059][T19984] SELinux: failed to load policy [ 414.666990][ T55] block nbd2: Possible stuck request ffff888026590000: control (read@0,1024B). Runtime 30 seconds [ 414.751679][T19995] kvm: apic: phys broadcast and lowest prio [ 414.757868][T19995] kvm: Disabled LAPIC found during irq injection [ 414.952432][T14487] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 415.009025][T20005] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 415.033309][ T30] audit: type=1400 audit(1765039025.806:865): avc: denied { relabelto } for pid=20003 comm="syz.0.5990" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 415.085749][ T30] audit: type=1400 audit(1765039025.836:866): avc: denied { associate } for pid=20003 comm="syz.0.5990" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 415.132373][T14487] usb 6-1: Using ep0 maxpacket: 16 [ 415.143102][T14487] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 415.173822][T14487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.194951][T14487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.214923][T14487] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 415.249472][T14487] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 415.262284][T14487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.283035][T14487] usb 6-1: config 0 descriptor?? [ 415.726340][T20029] input: syz0 as /devices/virtual/input/input75 [ 415.731682][T14487] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0041/input/input76 [ 415.827291][T14487] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0041/input/input77 [ 415.926745][T14487] kye 0003:0458:5013.0041: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 415.957871][T14487] usb 6-1: USB disconnect, device number 36 [ 416.010627][T20037] fido_id[20037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 416.102373][ T5925] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 416.118547][T20039] syzkaller1: entered promiscuous mode [ 416.124129][T20039] syzkaller1: entered allmulticast mode [ 416.265583][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.280345][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.296860][ T5925] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 416.306352][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.328406][ T5925] usb 1-1: config 0 descriptor?? [ 416.417922][ T30] audit: type=1326 audit(1765039027.196:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.447866][ T30] audit: type=1326 audit(1765039027.196:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.472476][ T30] audit: type=1326 audit(1765039027.196:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.496529][ T30] audit: type=1326 audit(1765039027.196:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.573454][ T30] audit: type=1326 audit(1765039027.196:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.614845][ T30] audit: type=1326 audit(1765039027.196:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.641376][ T30] audit: type=1326 audit(1765039027.196:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.665228][ T30] audit: type=1326 audit(1765039027.196:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.689195][ T30] audit: type=1326 audit(1765039027.196:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.762664][ T30] audit: type=1326 audit(1765039027.196:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.6.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 416.805236][ T5925] isku 0003:1E7D:319C.0042: unknown main item tag 0x0 [ 416.837478][ T5925] isku 0003:1E7D:319C.0042: unknown main item tag 0x0 [ 416.853517][ T5925] isku 0003:1E7D:319C.0042: item fetching failed at offset 2/7 [ 416.871825][ T5925] isku 0003:1E7D:319C.0042: parse failed [ 416.881493][ T5925] isku 0003:1E7D:319C.0042: probe with driver isku failed with error -22 [ 417.015984][T14500] usb 1-1: USB disconnect, device number 65 [ 417.332807][ T5934] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 417.492572][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 417.502575][ T5934] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 417.511968][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.573606][ T5934] usb 6-1: config 0 descriptor?? [ 417.599334][ T5934] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 418.110053][T20108] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6032'. [ 418.210492][T20113] bridge_slave_0: entered promiscuous mode [ 418.232891][T20113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 418.504241][ T5925] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 418.662298][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 418.682857][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.698851][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.709062][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.734410][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.744900][ T5925] usb 1-1: config 0 descriptor?? [ 418.754017][ T5925] hub 1-1:0.0: USB hub found [ 418.808264][ T5934] gspca_vc032x: reg_w err -71 [ 418.815382][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.820759][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.826636][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.836750][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.842034][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.862858][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.868181][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.884581][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.889907][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.899333][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.908721][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.914697][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.920049][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.923193][T14488] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 418.925725][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.938730][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.972881][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 418.978499][ T5925] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 418.978675][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.010589][ T5934] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.026114][ T5934] gspca_vc032x: Unknown sensor... [ 419.034120][ T5934] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 419.054726][ T5934] usb 6-1: USB disconnect, device number 37 [ 419.113812][T14488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 419.132824][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.145408][T14488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.157722][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.173252][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.195141][T14488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 419.203067][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.227750][ T5925] hid-generic 0003:046D:C31C.0043: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 419.245334][T14488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.277556][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.289756][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.303411][T14488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 419.310836][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.327457][T14488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.340006][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.351446][T14488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.366738][T14488] usb 7-1: string descriptor 0 read error: -22 [ 419.373253][T14488] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.400661][T14488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.437895][T14488] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 419.595713][ T5934] usb 1-1: USB disconnect, device number 66 [ 419.646276][T20157] netlink: 'syz.1.6051': attribute type 22 has an invalid length. [ 419.656703][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'. [ 419.679351][ T4037] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.692445][T20157] netlink: 'syz.1.6051': attribute type 22 has an invalid length. [ 419.700289][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'. [ 419.710191][ T4037] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.719522][ T4037] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.728641][ T4037] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.798111][ T5934] usb 7-1: USB disconnect, device number 21 [ 420.546775][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6066'. [ 420.821415][T20211] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.6072'. [ 421.271825][T20247] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 421.464208][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 421.464224][ T30] audit: type=1400 audit(1765039032.246:1202): avc: denied { read open } for pid=20254 comm="syz.5.6089" path="/" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.770628][T20267] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6096'. [ 421.861185][ T30] audit: type=1400 audit(1765039032.636:1203): avc: denied { name_bind } for pid=20276 comm="syz.1.6100" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 422.422379][T14488] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 422.574674][T14488] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.585981][T14488] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 422.596889][T14488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.618886][T14488] usb 1-1: config 0 descriptor?? [ 422.626300][T20323] netlink: 'syz.5.6121': attribute type 7 has an invalid length. [ 422.638365][T20323] netlink: 'syz.5.6121': attribute type 8 has an invalid length. [ 422.649397][T14488] pwc: Askey VC010 type 2 USB webcam detected. [ 422.668911][T20323] netlink: 'syz.5.6121': attribute type 7 has an invalid length. [ 422.682940][T20323] netlink: 208740 bytes leftover after parsing attributes in process `syz.5.6121'. [ 422.750724][ T30] audit: type=1400 audit(1765039033.526:1204): avc: denied { watch } for pid=20328 comm="syz.7.6123" path="/322/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 423.054688][T14488] pwc: recv_control_msg error -32 req 02 val 2b00 [ 423.066703][T14488] pwc: recv_control_msg error -32 req 02 val 2700 [ 423.139722][T20346] lo speed is unknown, defaulting to 1000 [ 423.162548][ T5934] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 423.197001][ T30] audit: type=1400 audit(1765039033.976:1205): avc: denied { create } for pid=20345 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.251123][ T30] audit: type=1400 audit(1765039034.016:1206): avc: denied { setopt } for pid=20345 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.280457][T14488] pwc: recv_control_msg error -71 req 04 val 1000 [ 423.292729][T14488] pwc: recv_control_msg error -71 req 04 val 1300 [ 423.312695][T14488] pwc: recv_control_msg error -71 req 04 val 1400 [ 423.313701][ T5934] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 423.319551][T14488] pwc: recv_control_msg error -71 req 02 val 2000 [ 423.335925][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.366555][T14488] pwc: recv_control_msg error -71 req 02 val 2100 [ 423.373989][T14488] pwc: recv_control_msg error -71 req 04 val 1500 [ 423.380840][T14488] pwc: recv_control_msg error -71 req 02 val 2500 [ 423.389873][T14488] pwc: recv_control_msg error -71 req 02 val 2400 [ 423.396426][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.396456][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.396497][ T5934] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.396519][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.408505][ T5934] usb 7-1: config 0 descriptor?? [ 423.461606][T14488] pwc: recv_control_msg error -71 req 02 val 2600 [ 423.485084][T14488] pwc: recv_control_msg error -71 req 02 val 2900 [ 423.503974][T14488] pwc: recv_control_msg error -71 req 02 val 2800 [ 423.521115][T14488] pwc: recv_control_msg error -71 req 04 val 1100 [ 423.536980][T14488] pwc: recv_control_msg error -71 req 04 val 1200 [ 423.550565][T14488] pwc: Registered as video103. [ 423.557444][T14488] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input78 [ 423.571978][T14488] usb 1-1: USB disconnect, device number 67 [ 423.936633][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 423.969674][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 423.983891][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 423.999469][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.018106][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.040577][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.062590][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.079972][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.099765][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.108399][ T5934] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 424.122937][ T5934] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 424.228414][T14494] usb 7-1: USB disconnect, device number 22 [ 424.305636][T20379] fido_id[20379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 424.778071][T20415] netlink: 'syz.7.6156': attribute type 13 has an invalid length. [ 425.156348][T20427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 425.158869][ T30] audit: type=1400 audit(1765039035.936:1207): avc: denied { mounton } for pid=20426 comm="syz.6.6162" path="/388/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 425.173648][T20427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 425.331361][T20431] netlink: 'syz.6.6164': attribute type 1 has an invalid length. [ 425.339289][T20431] netlink: 'syz.6.6164': attribute type 2 has an invalid length. [ 425.439722][ T30] audit: type=1326 audit(1765039036.216:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20438 comm="syz.6.6167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe792b8f749 code=0x0 [ 425.538030][ T5812] block nbd5: Receive control failed (result -32) [ 425.545384][T20417] block nbd5: shutting down sockets [ 425.710721][T20453] serio: Serial port ttyS3 [ 425.864389][T20460] kvm: apic: phys broadcast and lowest prio [ 425.920848][T20463] could not open pipe file descriptor [ 426.027707][T20471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 426.076012][T20471] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 426.087301][T20471] overlayfs: failed to look up (tracing) for ino (-66) [ 426.165604][T20476] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.6182'. [ 426.647170][T10578] tipc: Subscription rejected, illegal request [ 426.690185][T20505] kvm: MWAIT instruction emulated as NOP! [ 427.062305][T14494] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 427.228549][T14494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.245414][T14494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.258159][T14494] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 427.267622][T14494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.285511][T14494] usb 1-1: config 0 descriptor?? [ 427.692338][T14500] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 427.708006][T14494] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0045/input/input79 [ 427.774332][T14494] cm6533_jd 0003:0D8C:0022.0045: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 427.877950][T14500] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 427.885775][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.912319][T14500] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.927536][T20512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.940975][T20512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.942790][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.972272][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.993072][T14500] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 427.997046][T14494] usb 1-1: USB disconnect, device number 68 [ 428.009335][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 428.037952][T14500] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.049892][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 428.061191][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 428.074019][T14500] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 428.081947][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 428.112662][T14500] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.128321][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 428.152529][T14500] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 428.177485][T14500] usb 7-1: string descriptor 0 read error: -22 [ 428.190218][T14500] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 428.200219][T14500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.224435][T14500] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 428.512337][T14500] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 428.575677][T14494] usb 7-1: USB disconnect, device number 23 [ 428.582994][T20554] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 428.664300][T14500] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 428.677839][T14500] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.687897][T14500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.696187][T14500] usb 6-1: Product: syz [ 428.700468][T14500] usb 6-1: Manufacturer: syz [ 428.720788][T14500] usb 6-1: SerialNumber: syz [ 429.955425][T14500] cdc_ncm 6-1:1.0: failed to get mac address [ 429.968931][T14500] cdc_ncm 6-1:1.0: bind() failure [ 429.997936][T14500] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 430.038573][T14500] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 430.056923][T14500] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 430.080718][T14500] usb 6-1: USB disconnect, device number 38 [ 430.263137][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6231'. [ 430.317298][T20590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6231'. [ 430.561291][T20597] Invalid ELF header magic: != ELF [ 431.022911][ T30] audit: type=1400 audit(1765039041.806:1209): avc: denied { write } for pid=20626 comm="syz.6.6249" lport=55220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 431.104271][T20633] netlink: 'syz.6.6251': attribute type 30 has an invalid length. [ 431.132853][T20632] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6250'. [ 431.221787][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6255'. [ 431.782347][T14494] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 431.932659][T14494] usb 1-1: Using ep0 maxpacket: 8 [ 431.950314][T14494] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 431.989386][ T30] audit: type=1400 audit(1765039042.766:1210): avc: denied { unmount } for pid=20676 comm="syz.1.6267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 431.999002][T14494] usb 1-1: config 0 has no interface number 0 [ 432.354230][T14494] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 432.372265][T14494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.380305][T14494] usb 1-1: Product: syz [ 432.410790][T14494] usb 1-1: Manufacturer: syz [ 432.415687][T14494] usb 1-1: SerialNumber: syz [ 432.440403][T14494] usb 1-1: config 0 descriptor?? [ 432.674719][T14494] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 432.683970][T14494] uvcvideo 1-1:0.31: No valid video chain found. [ 432.711707][T14494] usb 1-1: USB disconnect, device number 69 [ 433.211884][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6286'. [ 433.303698][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6286'. [ 433.633942][T20731] lo speed is unknown, defaulting to 1000 [ 433.914903][T20748] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6297'. [ 434.220809][T20734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6291'. [ 434.247869][T20764] netlink: 'syz.0.6301': attribute type 3 has an invalid length. [ 434.919244][T20792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6312'. [ 434.939512][T20792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20792 comm=syz.0.6312 [ 434.952098][T20792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6312'. [ 435.296346][T20806] netlink: 'syz.0.6317': attribute type 4 has an invalid length. [ 435.352857][T14501] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 435.522684][T14501] usb 7-1: Using ep0 maxpacket: 8 [ 435.529627][T14501] usb 7-1: config 162 has an invalid interface number: 166 but max is 0 [ 435.563227][T14501] usb 7-1: config 162 has no interface number 0 [ 435.569537][T14501] usb 7-1: config 162 interface 166 has no altsetting 0 [ 435.624137][T14501] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 435.649952][T14501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.672898][T14501] usb 7-1: Product: syz [ 435.682484][T14501] usb 7-1: Manufacturer: syz [ 435.687109][T14501] usb 7-1: SerialNumber: syz [ 435.705813][T20815] bond5: entered allmulticast mode [ 435.716473][T20815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.743027][T20815] bridge0: port 2(bond5) entered blocking state [ 435.749464][T20815] bridge0: port 2(bond5) entered disabled state [ 435.785310][T20815] bond5: entered promiscuous mode [ 435.832443][T20815] bridge0: port 2(bond5) entered blocking state [ 435.838795][T20815] bridge0: port 2(bond5) entered forwarding state [ 435.925515][T10575] bridge0: port 2(bond5) entered disabled state [ 435.954466][T14501] appledisplay 7-1:162.166: Could not find int-in endpoint [ 435.964929][T14501] usbhid 7-1:162.166: couldn't find an input interrupt endpoint [ 435.999558][T14501] usb 7-1: USB disconnect, device number 24 [ 436.412377][T14488] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 436.583121][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6333'. [ 436.594305][T14488] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.622610][T14488] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 436.633115][T14488] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.642156][T14488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.658083][T20831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 436.668833][T14488] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.749537][ T30] audit: type=1400 audit(1765039047.526:1211): avc: denied { read write } for pid=20850 comm="syz.7.6337" name="file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 436.779472][T20852] lo speed is unknown, defaulting to 1000 [ 436.832331][ T30] audit: type=1400 audit(1765039047.526:1212): avc: denied { open } for pid=20850 comm="syz.7.6337" path="/356/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 436.861621][ T30] audit: type=1400 audit(1765039047.576:1213): avc: denied { ioctl } for pid=20850 comm="syz.7.6337" path="/356/file0" dev="tmpfs" ino=1867 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 436.953081][T14488] usb 1-1: USB disconnect, device number 70 [ 437.387002][ T30] audit: type=1326 audit(1765039048.166:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.6.6336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x0 [ 437.542515][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 438.300319][T20885] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 439.628465][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.634884][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.834152][T20938] overlayfs: failed to clone upperpath [ 441.485896][T20962] IPVS: nq: FWM 3 0x00000003 - no destination available [ 441.626300][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'. [ 441.650866][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'. [ 441.830277][T20983] bond0: (slave bond_slave_0): Releasing backup interface [ 441.992444][T14487] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 442.169191][T14487] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 442.178763][T14487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.187395][T14487] usb 6-1: Product: syz [ 442.191708][T14487] usb 6-1: Manufacturer: syz [ 442.196777][T14487] usb 6-1: SerialNumber: syz [ 442.208650][T14487] usb 6-1: config 0 descriptor?? [ 442.222074][T14487] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 442.245224][T21005] gretap0: entered promiscuous mode [ 442.263620][T14487] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 442.283783][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6396'. [ 442.300110][T21005] gretap0: left promiscuous mode [ 442.305765][T14487] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 442.461605][T14487] usb 6-1: USB disconnect, device number 39 [ 442.692298][T14499] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 442.762852][T21021] kvm: pic: non byte write [ 442.767556][T21021] kvm: pic: non byte write [ 442.772067][T21021] kvm: pic: non byte write [ 442.777642][T21021] kvm: pic: non byte write [ 442.782720][T21021] kvm: pic: non byte write [ 442.787445][T21021] kvm: pic: non byte write [ 442.791968][T21021] kvm: pic: non byte write [ 442.797480][T21021] kvm: pic: non byte write [ 442.801980][T21021] kvm: pic: non byte write [ 442.806881][T21021] kvm: pic: non byte write [ 442.840160][T21028] sg_write: process 2694 (syz.0.6407) changed security contexts after opening file descriptor, this is not allowed. [ 442.843773][T14499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.864419][T14499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.876765][T14499] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 442.886064][T14499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.914346][T14499] usb 7-1: config 0 descriptor?? [ 443.193908][T21047] netlink: 'syz.5.6415': attribute type 13 has an invalid length. [ 443.358194][T14499] elan 0003:04F3:0755.0046: failed to start in urb: -90 [ 443.378762][T14499] elan 0003:04F3:0755.0046: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 443.565741][T14499] usb 7-1: USB disconnect, device number 25 [ 443.836407][T21090] netlink: 'syz.5.6433': attribute type 4 has an invalid length. [ 443.887788][T21090] netlink: 'syz.5.6433': attribute type 4 has an invalid length. [ 444.398268][ T30] audit: type=1400 audit(1765039055.176:1215): avc: denied { mounton } for pid=21119 comm="syz.1.6446" path="/file0" dev="hugetlbfs" ino=76619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 444.414562][T21120] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 444.430884][T14487] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 444.452532][T21120] overlayfs: failed to set xattr on upper [ 444.462319][T21120] overlayfs: ...falling back to redirect_dir=nofollow. [ 444.472427][T21120] overlayfs: ...falling back to index=off. [ 444.478348][T21120] overlayfs: ...falling back to uuid=null. [ 444.484708][T21120] overlayfs: maximum fs stacking depth exceeded [ 444.613917][T14487] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 444.622127][T14487] usb 7-1: config 0 has no interface number 0 [ 444.660032][T21128] netlink: 'syz.7.6452': attribute type 1 has an invalid length. [ 444.662376][T14487] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 444.679826][T21128] netlink: 'syz.7.6452': attribute type 4 has an invalid length. [ 444.699869][T21132] lo: Caught tx_queue_len zero misconfig [ 444.705754][T21128] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.6452'. [ 444.712298][T14487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.755671][ T55] block nbd2: Possible stuck request ffff888026590000: control (read@0,1024B). Runtime 60 seconds [ 444.772510][T14487] usb 7-1: Product: syz [ 444.776728][T14487] usb 7-1: Manufacturer: syz [ 444.781335][T14487] usb 7-1: SerialNumber: syz [ 444.831380][T14487] usb 7-1: config 0 descriptor?? [ 444.893927][T14500] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 445.073899][T14500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 21 [ 445.093688][T14500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.132272][T14500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 445.162622][T14500] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 445.193549][T14500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.282470][T14500] usb 1-1: config 0 descriptor?? [ 445.293647][T21127] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.314566][T14487] usb 7-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94) [ 445.516160][T14487] usb 7-1: no permanent extended address found, random address set [ 445.527310][T14487] usb 7-1: atusb_probe: initialization failed, error = -524 [ 445.548092][T14487] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 445.734656][T14500] hid_parser_main: 7 callbacks suppressed [ 445.734678][T14500] sony 0003:1345:3008.0047: unknown main item tag 0x0 [ 445.778049][ T5934] usb 7-1: USB disconnect, device number 26 [ 445.796149][T14500] sony 0003:1345:3008.0047: unknown main item tag 0x0 [ 445.824032][T14500] sony 0003:1345:3008.0047: unknown main item tag 0x0 [ 445.838448][T14500] sony 0003:1345:3008.0047: unknown main item tag 0x0 [ 445.858111][T14500] sony 0003:1345:3008.0047: unknown main item tag 0x0 [ 446.012287][T14499] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 446.021844][T14500] sony 0003:1345:3008.0047: hiddev0,hidraw0: USB HID v81.01 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 446.045883][T14500] sony 0003:1345:3008.0047: failed to claim input [ 446.080585][T14500] usb 1-1: USB disconnect, device number 71 [ 446.121806][T21160] fido_id[21160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 446.185716][T14499] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 446.202268][T14499] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 446.210544][T14499] usb 6-1: Product: syz [ 446.219061][T14499] usb 6-1: Manufacturer: syz [ 446.225554][T14499] usb 6-1: SerialNumber: syz [ 446.232102][T14499] usb 6-1: config 0 descriptor?? [ 446.243670][T14499] ch341 6-1:0.0: ch341-uart converter detected [ 446.334863][T14500] libceph: connect (1)[c::]:6789 error -101 [ 446.342799][T14500] libceph: mon0 (1)[c::]:6789 connect error [ 446.374776][T21164] ceph: No mds server is up or the cluster is laggy [ 446.881360][T21191] SELinux: unknown common  [ 446.895199][T21191] SELinux: failed to load policy [ 447.033223][T21198] netlink: 'syz.0.6474': attribute type 10 has an invalid length. [ 447.105001][ T30] audit: type=1400 audit(1765039057.886:1216): avc: denied { lock } for pid=21200 comm="syz.1.6475" path="socket:[77452]" dev="sockfs" ino=77452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 447.206728][T21203] evm: overlay not supported [ 447.468087][T14499] ch341-uart ttyUSB0: break control not supported, using simulated break [ 447.489806][T14499] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 447.508093][T14499] usb 6-1: USB disconnect, device number 40 [ 447.536750][T14499] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 447.569191][T14499] ch341 6-1:0.0: device disconnected [ 448.291020][T21269] gtp3: entered promiscuous mode [ 448.302582][T14499] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 448.495138][T14499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.517499][T14499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.548796][T14499] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 448.565816][T14499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 448.584134][T14499] usb 1-1: SerialNumber: syz [ 448.807482][T14499] usb 1-1: 0:2 : does not exist [ 448.850471][T14499] usb 1-1: USB disconnect, device number 72 [ 448.899911][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.212451][ T5934] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 449.385182][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 449.407788][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 449.443991][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 449.467144][ T5934] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.476601][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.501469][ T5934] usb 7-1: Product: syz [ 449.506239][ T5934] usb 7-1: Manufacturer: syz [ 449.510877][ T5934] usb 7-1: SerialNumber: syz [ 449.517090][T21326] netlink: 'syz.5.6516': attribute type 4 has an invalid length. [ 449.526135][ T5934] usb 7-1: config 0 descriptor?? [ 449.544524][ T5934] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 449.895437][ T30] audit: type=1326 audit(1765039060.676:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.1.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e2b8f749 code=0x7fc00000 [ 449.907682][T21352] sctp: [Deprecated]: syz.0.6529 (pid 21352) Use of int in maxseg socket option. [ 449.907682][T21352] Use struct sctp_assoc_value instead [ 449.936210][ T30] audit: type=1400 audit(1765039060.716:1218): avc: denied { read } for pid=21347 comm="syz.5.6527" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 449.967715][ T30] audit: type=1400 audit(1765039060.716:1219): avc: denied { open } for pid=21347 comm="syz.5.6527" path="/690/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 450.120361][T21361] erspan0: entered promiscuous mode [ 450.126711][T21361] erspan0: entered allmulticast mode [ 450.302768][T14487] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 450.454353][T14487] usb 1-1: Using ep0 maxpacket: 32 [ 450.461270][T14487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.473185][T14487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.485985][T14487] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.495493][T14487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.507619][T14487] usb 1-1: config 0 descriptor?? [ 450.519714][T14487] hub 1-1:0.0: USB hub found [ 450.716740][ T30] audit: type=1326 audit(1765039061.496:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.1.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49e2b865e7 code=0x7fc00000 [ 450.758684][T14487] hub 1-1:0.0: 1 port detected [ 451.218215][ T30] audit: type=1400 audit(1765039061.996:1221): avc: denied { nlmsg_write } for pid=21381 comm="syz.1.6540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 451.390968][T14488] hub 1-1:0.0: activate --> -90 [ 451.795605][T14487] usb 1-1: USB disconnect, device number 73 [ 452.004466][T14494] usb 7-1: USB disconnect, device number 27 [ 452.073332][ T30] audit: type=1326 audit(1765039062.856:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.6.6550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 452.122427][ T30] audit: type=1326 audit(1765039062.876:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.6.6550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 452.162407][ T30] audit: type=1326 audit(1765039062.886:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.6.6550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 452.225524][ T30] audit: type=1326 audit(1765039062.886:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.6.6550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 452.263018][ T30] audit: type=1326 audit(1765039062.886:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.6.6550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7ffc0000 [ 452.371575][T21415] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 452.401083][T21415] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 452.992311][T14487] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 453.162414][T14487] usb 6-1: Using ep0 maxpacket: 32 [ 453.169197][T14487] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 453.181233][T14487] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 453.190783][T14487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.199521][T14487] usb 6-1: Product: syz [ 453.203947][T14487] usb 6-1: Manufacturer: syz [ 453.208841][T14487] usb 6-1: SerialNumber: syz [ 453.215455][T14487] usb 6-1: config 0 descriptor?? [ 453.221163][T21436] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 453.231711][T14487] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input80 [ 453.461304][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.472984][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.492111][ T5934] usb 6-1: USB disconnect, device number 41 [ 453.492171][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 453.588857][T21467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6571'. [ 453.847402][T21481] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 453.853921][T21481] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 453.861949][T21481] vhci_hcd vhci_hcd.0: Device attached [ 453.876167][T21482] vhci_hcd: cannot find the pending unlink 3 [ 453.882561][ T5934] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 453.891141][T21482] vhci_hcd: connection closed [ 453.892891][T10575] vhci_hcd: stop threads [ 453.901851][T10575] vhci_hcd: release socket [ 453.906510][T10575] vhci_hcd: disconnect device [ 454.049230][ T5934] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 454.059437][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.069522][ T5934] usb 1-1: Product: syz [ 454.073971][ T5934] usb 1-1: Manufacturer: syz [ 454.078571][ T5934] usb 1-1: SerialNumber: syz [ 454.085564][ T5934] usb 1-1: config 0 descriptor?? [ 454.104527][ T5934] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 454.124492][T21491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21491 comm=syz.6.6582 [ 454.141372][T21491] netlink: 'syz.6.6582': attribute type 1 has an invalid length. [ 454.209298][T21491] bond1: (slave bridge1): making interface the new active one [ 454.223618][T21491] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 455.286823][T21493] kexec: Could not allocate control_code_buffer [ 455.516297][T21531] team0: No ports can be present during mode change [ 455.677938][ T5934] gspca_stk1135: reg_w 0xf err -71 [ 455.693768][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.710553][ T5934] gspca_stk1135: Sensor write failed [ 455.719602][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.732402][ T5934] gspca_stk1135: Sensor write failed [ 455.742622][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.759198][ T5934] gspca_stk1135: Sensor read failed [ 455.765004][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.778019][ T5934] gspca_stk1135: Sensor read failed [ 455.787834][ T5934] gspca_stk1135: Detected sensor type unknown (0x0) [ 455.795754][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.802159][ T5934] gspca_stk1135: Sensor read failed [ 455.807732][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.814232][ T5934] gspca_stk1135: Sensor read failed [ 455.820197][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.827309][ T5934] gspca_stk1135: Sensor write failed [ 455.832969][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 455.839387][ T5934] gspca_stk1135: Sensor write failed [ 455.849298][ T5934] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 455.868437][ T5934] usb 1-1: USB disconnect, device number 74 [ 455.875084][T21550] xt_hashlimit: max too large, truncated to 1048576 [ 455.953379][T14487] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 456.123874][T14487] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 456.134168][T14487] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.143648][T14487] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.152979][T14487] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 456.161221][T14487] usb 6-1: Product: syz [ 456.166164][T14487] usb 6-1: Manufacturer: syz [ 456.170838][T14487] usb 6-1: SerialNumber: syz [ 456.178744][T14487] usb 6-1: config 0 descriptor?? [ 456.188977][T14487] usb 6-1: selecting invalid altsetting 0 [ 456.221518][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 456.221534][ T30] audit: type=1400 audit(1765039066.996:1245): avc: denied { allowed } for pid=21555 comm="syz.6.6607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 456.395104][T14494] usb 6-1: USB disconnect, device number 42 [ 456.503282][T14487] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 456.662440][T14487] usb 1-1: Using ep0 maxpacket: 16 [ 456.670723][T14487] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 456.704105][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.735302][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.774044][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.793188][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.824737][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.851192][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.863658][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.874962][T14487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.886229][T14487] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 456.901719][T14487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 456.909998][T14487] usb 1-1: SerialNumber: syz [ 456.922846][T14487] usb 1-1: config 0 descriptor?? [ 456.936471][T14487] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input81 [ 456.968962][T21584] atomic_op ffff8880288a7998 conn xmit_atomic 0000000000000000 [ 457.136773][T21558] input: syz1 as /devices/virtual/input/input82 [ 457.149435][ T5171] bcm5974 1-1:0.0: could not read from device [ 457.158795][ T5171] bcm5974 1-1:0.0: could not read from device [ 457.168016][T14487] usb 1-1: USB disconnect, device number 75 [ 457.307835][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6622'. [ 457.448547][T21598] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 457.452050][ T30] audit: type=1326 audit(1765039068.226:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.6.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe792b8f749 code=0x7fc00000 [ 457.851747][ T30] audit: type=1400 audit(1765039068.626:1247): avc: denied { append } for pid=21620 comm="syz.6.6634" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 458.588321][T21659] nbd: nbd0 already in use [ 458.594934][T21659] block nbd0: NBD_DISCONNECT [ 458.599624][T21659] block nbd0: Send disconnect failed -32 [ 458.699374][T10579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 458.844176][T10579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 458.925736][T10579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 459.008078][T14488] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 459.028133][T10579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 459.186898][T14488] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 459.201253][T14488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.213283][T14488] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 459.225880][T14488] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 459.234088][T14488] usb 6-1: Manufacturer: syz [ 459.278591][T14488] usb 6-1: config 0 descriptor?? [ 459.420090][T10579] bridge_slave_1: left promiscuous mode [ 459.438296][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.472797][T14488] rc_core: IR keymap rc-hauppauge not found [ 459.488518][T14488] Registered IR keymap rc-empty [ 459.511415][T14488] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 459.545969][T14488] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 459.563190][T10579] bridge_slave_0: left allmulticast mode [ 459.572573][T10579] bridge_slave_0: left promiscuous mode [ 459.580780][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.592196][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 459.621685][T14488] usb 6-1: USB disconnect, device number 43 [ 460.260826][T21734] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 460.429127][T21747] netlink: 'syz.0.6673': attribute type 1 has an invalid length. [ 460.694904][T10579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.704713][T10579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.714626][T10579] bond0 (unregistering): (slave bond1): Releasing backup interface [ 460.724288][T10579] bond0 (unregistering): Released all slaves [ 460.837293][T10579] bond1 (unregistering): Released all slaves [ 460.897798][T21747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.561419][T10579] hsr_slave_0: left promiscuous mode [ 461.602416][T10579] hsr_slave_1: left promiscuous mode [ 461.620216][T10579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.653124][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.661876][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.671157][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.680504][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.691444][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.699361][T10579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.731175][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.741287][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.749009][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.762499][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.770946][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.168125][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6687'. [ 462.560230][T10579] team0 (unregistering): Port device team_slave_1 removed [ 462.627408][T10579] team0 (unregistering): Port device team_slave_0 removed [ 463.140017][ T3488] smc: removing ib device syz0 [ 463.160011][T14500] lo speed is unknown, defaulting to 1000 [ 463.202351][T14500] syz0: Port: 1 Link DOWN [ 463.857698][ T30] audit: type=1400 audit(1765039074.636:1248): avc: denied { watch } for pid=21838 comm="syz.7.6701" path="/memory.numa_stat" dev="ramfs" ino=80187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 463.885390][ T5812] Bluetooth: hci1: command tx timeout [ 463.895041][ T30] audit: type=1400 audit(1765039074.636:1249): avc: denied { watch_sb watch_reads } for pid=21838 comm="syz.7.6701" path="/memory.numa_stat" dev="ramfs" ino=80187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 464.347229][T21780] chnl_net:caif_netlink_parms(): no params data found [ 464.685211][T21871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6708'. [ 465.124475][ T30] audit: type=1400 audit(1765039075.906:1250): avc: denied { ioctl } for pid=21878 comm="syz.0.6710" path="socket:[80222]" dev="sockfs" ino=80222 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 465.195956][T21780] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.210262][T21780] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.225007][ T30] audit: type=1400 audit(1765039075.966:1251): avc: denied { connect } for pid=21882 comm="syz.7.6711" lport=59056 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 465.253958][T21780] bridge_slave_0: entered allmulticast mode [ 465.261682][T21780] bridge_slave_0: entered promiscuous mode [ 465.272104][T21780] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.281537][T21780] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.289066][T21780] bridge_slave_1: entered allmulticast mode [ 465.319448][T21780] bridge_slave_1: entered promiscuous mode [ 465.404413][T10579] IPVS: stop unused estimator thread 0... [ 465.415783][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6715'. [ 465.455303][T21780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.476314][T21780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.525870][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6715'. [ 465.550312][ T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.567087][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6718'. [ 465.618323][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.711345][T21780] team0: Port device team_slave_0 added [ 465.725660][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.749606][T21780] team0: Port device team_slave_1 added [ 465.875792][T10579] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.913478][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.944368][ T5812] Bluetooth: hci1: command tx timeout [ 466.033793][T21780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.044795][T21780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.076976][T21780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.167307][T10579] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.260720][T21780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.290020][T21780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.405453][T21780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.497107][T10579] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.571711][T21780] hsr_slave_0: entered promiscuous mode [ 466.583471][T21780] hsr_slave_1: entered promiscuous mode [ 466.624456][T10579] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.862417][T14488] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 466.913745][T10579] bridge_slave_1: left allmulticast mode [ 466.932570][T10579] bridge_slave_1: left promiscuous mode [ 466.949064][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.956393][ T30] audit: type=1400 audit(1765039077.726:1252): avc: denied { mounton } for pid=21959 comm="syz.5.6732" path="/727/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 466.958066][T21960] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 467.001787][T10579] bridge_slave_0: left allmulticast mode [ 467.010392][T10579] bridge_slave_0: left promiscuous mode [ 467.017062][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.066044][T14488] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.092268][T14488] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.115062][T14488] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 467.132566][T14488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.140737][T14488] usb 1-1: Product: syz [ 467.152256][T14488] usb 1-1: Manufacturer: syz [ 467.156885][T14488] usb 1-1: SerialNumber: syz [ 467.170971][T14488] usb 1-1: config 0 descriptor?? [ 467.181662][T14488] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 467.205153][T14488] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.218257][T14488] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 467.232634][T14488] usb 1-1: media controller created [ 467.253928][T14488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.257128][T14497] SELinux: failure in sel_netif_sid_slow(), invalid network interface (101) [ 467.323752][T14488] DVB: Unable to find symbol tda10046_attach() [ 467.329940][T14488] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 467.412267][T14488] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 467.490661][T10579] bond1 (unregistering): (slave bridge1): Releasing active interface [ 467.521583][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 467.635260][T10579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.647062][T10579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.657246][T10579] bond0 (unregistering): Released all slaves [ 467.668992][T10579] bond1 (unregistering): Released all slaves [ 467.734605][T21972] vlan2: entered allmulticast mode [ 467.739836][T21972] dummy0: entered allmulticast mode [ 467.755055][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 467.823074][T10579] tipc: Left network mode [ 467.854834][T21780] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 467.926436][T21780] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 467.948837][T21780] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 467.962900][T21780] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 468.025439][ T5812] Bluetooth: hci1: command tx timeout [ 468.148663][T10579] hsr_slave_0: left promiscuous mode [ 468.164069][T10579] hsr_slave_1: left promiscuous mode [ 468.174327][T10579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.183668][T10579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.191651][T10579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.202522][T10579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.244294][T10579] veth1_macvtap: left promiscuous mode [ 468.256110][T10579] veth0_macvtap: left promiscuous mode [ 468.261824][T10579] veth1_vlan: left promiscuous mode [ 468.271976][T10579] veth0_vlan: left promiscuous mode [ 468.415758][T14487] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 468.439640][T14488] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 468.450511][T14487] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.491667][T14488] usb 1-1: USB disconnect, device number 76 [ 468.748157][T22013] loop9: detected capacity change from 0 to 7 [ 468.788636][ T5826] Dev loop9: unable to read RDB block 7 [ 468.799385][ T5826] loop9: unable to read partition table [ 468.811179][ T5826] loop9: partition table beyond EOD, truncated [ 468.844369][T22013] Dev loop9: unable to read RDB block 7 [ 468.850154][T22013] loop9: unable to read partition table [ 468.862703][T22013] loop9: partition table beyond EOD, truncated [ 468.890986][T22013] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.538144][T10579] team0 (unregistering): Port device team_slave_1 removed [ 469.603938][T10579] team0 (unregistering): Port device team_slave_0 removed [ 469.984315][T10579] team0 (unregistering): Port device dummy0 removed [ 470.103976][ T5812] Bluetooth: hci1: command tx timeout [ 470.125754][T22026] pim6reg: entered allmulticast mode [ 470.136281][T22033] pim6reg: left allmulticast mode [ 470.178364][T22043] netlink: 'syz.0.6756': attribute type 5 has an invalid length. [ 470.277849][T21780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.323744][T21780] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.379070][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.386256][T10529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.440318][T10578] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.447458][T10578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.861058][T21780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.062747][T14488] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 471.118556][T21780] veth0_vlan: entered promiscuous mode [ 471.134036][T21780] veth1_vlan: entered promiscuous mode [ 471.199695][T21780] veth0_macvtap: entered promiscuous mode [ 471.227810][T14488] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 471.237442][T21780] veth1_macvtap: entered promiscuous mode [ 471.251663][T14488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.280926][T14488] usb 1-1: Product: syz [ 471.294004][T21780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.301364][T14488] usb 1-1: Manufacturer: syz [ 471.313819][ T30] audit: type=1400 audit(1765039082.086:1253): avc: denied { ioctl } for pid=22101 comm="syz.7.6766" path="socket:[81921]" dev="sockfs" ino=81921 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 471.326802][T14488] usb 1-1: SerialNumber: syz [ 471.350612][T14488] usb 1-1: config 0 descriptor?? [ 471.387168][T21780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.450929][T10529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.480227][T10529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.521586][T10529] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.580536][T10529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.596503][ T30] audit: type=1326 audit(1765039082.376:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 471.685976][ T30] audit: type=1326 audit(1765039082.396:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 471.752619][ T30] audit: type=1326 audit(1765039082.396:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 471.809025][ T30] audit: type=1326 audit(1765039082.406:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 471.867012][ T30] audit: type=1326 audit(1765039082.406:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 471.938940][ T30] audit: type=1326 audit(1765039082.406:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 472.010043][ T30] audit: type=1326 audit(1765039082.406:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 472.090717][ T30] audit: type=1326 audit(1765039082.406:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 472.166343][ T30] audit: type=1326 audit(1765039082.406:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.5.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7698f749 code=0x7ffc0000 [ 472.307933][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6771'. [ 472.779491][T14488] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 472.799339][T22128] could not allocate digest TFM handle cryptd(blake2b-160) [ 472.801585][T14488] usb 1-1: USB disconnect, device number 77 [ 472.851442][T14488] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 472.852284][T14501] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 472.946172][T22139] binder: 22137:22139 ioctl c0306201 200000000640 returned -22 [ 472.946746][T14488] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 473.001851][T10595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.012370][T10595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.034320][T14501] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 473.054008][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.079805][T14501] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.110882][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 473.133129][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 473.157285][T14501] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 473.164945][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.173674][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.187546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.207526][T14501] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.229150][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 473.253761][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 473.274858][T14501] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 473.282882][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.331906][T21780] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 473.343972][T21780] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 473.352372][T21780] CPU: 0 UID: 0 PID: 21780 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 473.363474][T21780] Tainted: [L]=SOFTLOCKUP [ 473.368044][T21780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.378078][T21780] RIP: 0010:rb_first+0x1a/0x80 [ 473.382831][T21780] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 48 89 fa 48 c1 ea 03 48 83 ec 08 <80> 3c 02 00 75 4a 48 bb 00 00 00 00 00 fc ff df 48 8b 07 48 85 c0 [ 473.402453][T21780] RSP: 0000:ffffc900111c7ac8 EFLAGS: 00010292 [ 473.408513][T21780] RAX: dffffc0000000000 RBX: ffff88805ef9be10 RCX: ffffffff82691775 [ 473.416473][T21780] RDX: 0000000000000007 RSI: ffffffff8248422f RDI: 0000000000000038 [ 473.424423][T21780] RBP: ffff88805ef9bea8 R08: 0000000000000005 R09: 0000000000000000 [ 473.432458][T21780] R10: 00000000ffffffea R11: ffffffff8227a1e4 R12: 1ffff92002238f6b [ 473.440417][T21780] R13: 0000000000000000 R14: ffff88801e7b60a0 R15: 0000000000000038 [ 473.448366][T21780] FS: 000055556eff5500(0000) GS:ffff888124956000(0000) knlGS:0000000000000000 [ 473.457282][T21780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.463854][T21780] CR2: 000056518a3cfbf8 CR3: 0000000038343000 CR4: 00000000003526f0 [ 473.471807][T21780] DR0: 0000000000000001 DR1: fffffffffffffff7 DR2: 0000000000000000 [ 473.479755][T21780] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 473.487705][T21780] Call Trace: [ 473.490962][T21780] [ 473.493872][T21780] simple_xattrs_free+0x57/0x180 [ 473.498792][T21780] __kernfs_new_node+0x7b4/0x990 [ 473.503714][T21780] ? __pfx___kernfs_new_node+0x10/0x10 [ 473.509157][T21780] ? find_held_lock+0x2b/0x80 [ 473.513816][T21780] ? kernfs_root+0xee/0x2a0 [ 473.518302][T21780] kernfs_new_node+0x13c/0x1e0 [ 473.523056][T21780] ? kasan_save_track+0x14/0x30 [ 473.527887][T21780] kernfs_create_dir_ns+0x4c/0x1a0 [ 473.533006][T21780] cgroup_mkdir+0x40f/0x12e0 [ 473.537581][T21780] ? __pfx_cgroup_mkdir+0x10/0x10 [ 473.542587][T21780] kernfs_iop_mkdir+0x111/0x190 [ 473.547422][T21780] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 473.552427][T21780] vfs_mkdir+0x731/0xb60 [ 473.556654][T21780] do_mkdirat+0x442/0x5e0 [ 473.560973][T21780] ? __pfx_do_mkdirat+0x10/0x10 [ 473.565812][T21780] ? getname_flags.part.0+0x1c5/0x550 [ 473.571165][T21780] __x64_sys_mkdirat+0x83/0xb0 [ 473.575913][T21780] do_syscall_64+0xcd/0xf80 [ 473.580403][T21780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.586275][T21780] RIP: 0033:0x7f2d7798de97 [ 473.590673][T21780] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.610264][T21780] RSP: 002b:00007ffefc3ec078 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 473.618655][T21780] RAX: ffffffffffffffda RBX: 00007ffefc3ec0d0 RCX: 00007f2d7798de97 [ 473.626610][T21780] RDX: 00000000000001ff RSI: 00007ffefc3ec0d0 RDI: 00000000ffffff9c [ 473.634560][T21780] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffefc3ebdc7 [ 473.642507][T21780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 473.650455][T21780] R13: 0000000000000003 R14: 00007ffefc3ec548 R15: 0000000000000000 [ 473.658494][T21780] [ 473.661492][T21780] Modules linked in: [ 473.666238][T21780] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.681963][T14501] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.702538][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 473.713731][T14501] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 473.740472][T22142] ip6gre1: entered promiscuous mode [ 473.810454][T22142] ip6gre1: entered allmulticast mode [ 473.931758][T21780] RIP: 0010:rb_first+0x1a/0x80 [ 473.936853][T21780] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 48 89 fa 48 c1 ea 03 48 83 ec 08 <80> 3c 02 00 75 4a 48 bb 00 00 00 00 00 fc ff df 48 8b 07 48 85 c0 [ 473.968457][T21780] RSP: 0000:ffffc900111c7ac8 EFLAGS: 00010292 [ 474.096544][T21780] RAX: dffffc0000000000 RBX: ffff88805ef9be10 RCX: ffffffff82691775 [ 474.122508][T21780] RDX: 0000000000000007 RSI: ffffffff8248422f RDI: 0000000000000038 [ 474.154156][T21780] RBP: ffff88805ef9bea8 R08: 0000000000000005 R09: 0000000000000000 [ 474.162161][T21780] R10: 00000000ffffffea R11: ffffffff8227a1e4 R12: 1ffff92002238f6b [ 474.181869][T21780] R13: 0000000000000000 R14: ffff88801e7b60a0 R15: 0000000000000038 [ 474.202425][T21780] FS: 000055556eff5500(0000) GS:ffff888124956000(0000) knlGS:0000000000000000 [ 474.211397][T21780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.218378][T21780] CR2: 00007fb0c8e34e9c CR3: 0000000038343000 CR4: 00000000003526f0 [ 474.226589][T21780] DR0: 0000000000000001 DR1: fffffffffffffff7 DR2: 0000000000000000 [ 474.235082][T21780] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 474.243232][T21780] Kernel panic - not syncing: Fatal exception [ 474.249594][T21780] Kernel Offset: disabled [ 474.253903][T21780] Rebooting in 86400 seconds..