last executing test programs: 15.061260341s ago: executing program 2 (id=4501): add_key$keyring(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14.488717245s ago: executing program 2 (id=4503): pipe2$9p(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905830391"], 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4800) 13.413422877s ago: executing program 3 (id=4510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket(0x1d, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r9) 10.256385915s ago: executing program 3 (id=4515): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b0000000000000006010040"]) 9.917454505s ago: executing program 2 (id=4517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000d000000000000005600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) 9.896292269s ago: executing program 1 (id=4518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 9.810292454s ago: executing program 3 (id=4519): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001240)='./file1\x00', &(0x7f00000002c0), 0xe2882, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x2f}, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfecf}], 0x1, 0x0, 0x0, 0x5865}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001280)=0x400005) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x445, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200)) socket(0xa, 0x0, 0x3) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0x680}, {&(0x7f0000001200)='`', 0x1}], 0x2) 9.656117521s ago: executing program 1 (id=4520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) 8.386614624s ago: executing program 2 (id=4521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @random="00f3ffff1f00", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r4, 0x0, r6, 0x0, 0x84ffe0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x7ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x7fff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000002}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) 8.299976108s ago: executing program 3 (id=4523): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) 7.094568592s ago: executing program 4 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000640)=ANY=[], 0x100000530) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 6.62801815s ago: executing program 4 (id=4527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x2720, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x169) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000127bd69b98664df250d00000024000180080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="7400018014000200766574683100000000000000000000001400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6400018008000300010000001400020076657468315f746f5f627269646765000800030000000000140002006d6163766c616e300000000000000000140002"], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4004) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) 6.51328873s ago: executing program 1 (id=4528): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x84) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, 0x0) recvmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000200)=""/197, 0xc5}, {0x0}, {0x0}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001680)=@phonet, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001700)=""/180, 0xb4}, {&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000017c0)=""/216, 0xd8}, {&(0x7f00000018c0)=""/97, 0x61}, {&(0x7f0000001940)=""/138, 0x8a}, {&(0x7f0000001a00)=""/97, 0x61}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/239, 0xef}], 0x8, &(0x7f0000001cc0)=""/110, 0x6e}, 0x8001}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001d40)=""/198, 0xc6}, {&(0x7f0000001f40)=""/201, 0xc9}, {0x0}, {&(0x7f0000002140)=""/175, 0xaf}], 0x4, &(0x7f0000002280)=""/221, 0xdd}, 0x5}, {{&(0x7f0000002380)=@alg, 0x80, &(0x7f0000003500)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/97, 0x61}, {&(0x7f0000003480)=""/101, 0x65}], 0x3, &(0x7f0000003540)=""/240, 0xf0}, 0x2}, {{&(0x7f0000003640)=@x25={0x9, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/106, 0x6a}, {&(0x7f0000003740)=""/133, 0x85}, {&(0x7f0000003900)=""/249, 0xf9}], 0x3, &(0x7f0000003a40)=""/28, 0x1c}, 0x3}, {{&(0x7f0000003a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/239, 0xef}, {&(0x7f0000004c00)=""/150, 0x96}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000005d00)=""/42, 0x2a}, 0xb80a}], 0x6, 0x40012004, &(0x7f0000005f00)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 6.189114372s ago: executing program 3 (id=4529): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 5.230021394s ago: executing program 4 (id=4530): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000300)='net/hci\x00') 5.013487003s ago: executing program 2 (id=4531): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) mlockall(0x1) mlockall(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 4.925335151s ago: executing program 1 (id=4532): syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() getdents(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r2}, 0x1) 4.79642112s ago: executing program 3 (id=4533): pipe2$9p(&(0x7f0000000000), 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in6=@loopback}}, {{@in6}, 0x0, @in6=@dev}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x5452, 0x0) 4.376281267s ago: executing program 0 (id=4535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 4.09420233s ago: executing program 4 (id=4536): socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001a0001000000000000400000020000000000000000000000080010000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r5, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x37, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0bc5351, &(0x7f0000000200)={{}, 'port1\x00'}) tkill(r4, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, 0x0, 0x400d0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x6bc6711ac5763745, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6}}]}, 0x24}}, 0x0) r11 = syz_open_dev$media(&(0x7f0000000000), 0x3f, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc01c7c02, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x80) 3.865455732s ago: executing program 1 (id=4537): r0 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, r0, r0}, &(0x7f0000000340)=""/87, 0x57, &(0x7f0000000080)={&(0x7f0000000100)={'sha1-ssse3\x00'}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x66a75000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x11, &(0x7f0000000300), 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) getgid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010010080"], 0x1d4}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000007210480000000000c6000000000000009500006c9a7f0889e4e95f703e75f6410c000000003bcc5bf5d0901588ba5d882cb531ba10e7a12828de22c4600135fb4f79f5ef2843b8e035c7c373e003259eff3cbf06973837a122893f57ebd64111ad74be1a715070d808921834155933c417"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x10000}, 0x10}, 0x90) 2.686948052s ago: executing program 1 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1}, 0x48) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xae, &(0x7f0000000340)=""/174, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0xe33, 0x1}, 0x10, 0x304bc, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0x22, 0x0, 0x2000e881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 2.685879896s ago: executing program 4 (id=4539): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) 2.226951213s ago: executing program 0 (id=4540): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c000200080003"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000390429bd7000e9ffffff000200e4cff79bcccc4a622a56c9", @ANYRES32, @ANYBLOB="03000000c3100600100012800800010073697400040002"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xe}, {0xd, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7fffffff}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0], 0x3}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xfffffecc) 1.140535714s ago: executing program 0 (id=4541): r0 = socket(0x28, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 884.215637ms ago: executing program 0 (id=4542): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x84) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, 0x0) recvmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000200)=""/197, 0xc5}, {0x0}, {0x0}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001680)=@phonet, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001700)=""/180, 0xb4}, {&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000017c0)=""/216, 0xd8}, {&(0x7f00000018c0)=""/97, 0x61}, {&(0x7f0000001940)=""/138, 0x8a}, {&(0x7f0000001a00)=""/97, 0x61}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/239, 0xef}], 0x8, &(0x7f0000001cc0)=""/110, 0x6e}, 0x8001}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001d40)=""/198, 0xc6}, {0x0}, {0x0}, {&(0x7f0000002140)=""/175, 0xaf}], 0x4, &(0x7f0000002280)=""/221, 0xdd}, 0x5}, {{&(0x7f0000002380)=@alg, 0x80, &(0x7f0000003500)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/97, 0x61}, {&(0x7f0000003480)=""/101, 0x65}], 0x3, &(0x7f0000003540)=""/240, 0xf0}, 0x2}, {{&(0x7f0000003640)=@x25={0x9, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/106, 0x6a}, {&(0x7f0000003740)=""/133, 0x85}, {&(0x7f0000003900)=""/249, 0xf9}], 0x3, &(0x7f0000003a40)=""/28, 0x1c}, 0x3}, {{&(0x7f0000003a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/239, 0xef}, {&(0x7f0000004c00)=""/150, 0x96}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000005d00)=""/42, 0x2a}, 0xb80a}], 0x6, 0x40012004, &(0x7f0000005f00)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 884.029301ms ago: executing program 4 (id=4543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x1f, &(0x7f0000000040), 0x0, 0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 460.03674ms ago: executing program 0 (id=4544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 459.280381ms ago: executing program 2 (id=4545): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x109842, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x26100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000d00)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020000400008000007"]) 0s ago: executing program 0 (id=4546): preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getpid() openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0\x00', 0x2) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "eab08e77e72927830d3bdf222d097d4235ffcd91f05f7fe7b0bce993da4b777b9a63a71dfe5ee505e7bcd911204751c0b6e66078e867260d0dcb8a7c00a64be7", 0x3d}, 0x48, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)="511bd178746e4fabf2ba027e32a14f4ed5688a980491cb305cad31d7c814bd69d46b5b9e644a6ad9b648c94d5abf6527a72d41f4ff04e8bea91a57", 0x3b, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000014f38aae49077fbec124a3941f0000", @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x3, 0xe, 0x2, 0x1080, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) kernel console output (not intermixed with test programs): 5266] usb 1-1: Using ep0 maxpacket: 8 [ 1002.944370][ T5266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.994932][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1003.067868][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.078871][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.118114][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.123269][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1003.145542][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.158524][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1003.175880][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.208457][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1003.333699][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1004.447969][ T5266] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1004.504017][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1004.554062][ T5266] usb 1-1: Product: syz [ 1004.568710][ T5266] usb 1-1: Manufacturer: syz [ 1004.573454][ T5266] usb 1-1: SerialNumber: syz [ 1004.617196][ T5266] usb 1-1: config 0 descriptor?? [ 1005.012799][ T5266] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1005.053754][ T5266] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1005.254823][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1005.315488][ T5218] Bluetooth: hci1: command tx timeout [ 1005.574011][T11023] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1005.643746][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1005.742972][ T5266] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1005.763661][ T5266] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1005.776913][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1005.783819][ T5266] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1005.807358][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.816149][ T5266] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1005.845367][ T9] usb 2-1: Product: syz [ 1005.849600][ T9] usb 2-1: Manufacturer: syz [ 1005.878321][ T9] usb 2-1: SerialNumber: syz [ 1005.910182][ T9] usb 2-1: config 0 descriptor?? [ 1005.930057][T11023] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.952537][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1005.972115][T11023] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1005.980394][T14446] chnl_net:caif_netlink_parms(): no params data found [ 1006.007380][T11023] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1006.027096][ T29] audit: type=1400 audit(1723689869.979:464): avc: denied { ioctl } for pid=14473 comm="syz.2.2382" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1006.040439][T14474] mmap: syz.2.2382 (14474) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1006.053253][T11023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.103685][T11023] usb 5-1: Product: syz [ 1006.114147][T11023] usb 5-1: Manufacturer: syz [ 1006.124283][T11023] usb 5-1: SerialNumber: syz [ 1006.150751][T11023] usb 5-1: config 0 descriptor?? [ 1006.174233][ T9] gp8psk: usb in 128 operation failed. [ 1006.188205][ T9] gp8psk: usb in 137 operation failed. [ 1006.203704][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 1006.216207][T14475] vcan0: entered promiscuous mode [ 1006.224383][ T9] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 1006.234202][T14475] vlan2: entered promiscuous mode [ 1006.275988][T14475] vcan0: left promiscuous mode [ 1006.499711][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.521365][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.554124][T14446] bridge_slave_0: entered allmulticast mode [ 1006.583011][T14446] bridge_slave_0: entered promiscuous mode [ 1006.596541][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.604054][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.611800][T14446] bridge_slave_1: entered allmulticast mode [ 1006.630177][T14446] bridge_slave_1: entered promiscuous mode [ 1006.826032][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.878349][ T5266] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1006.908791][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.912276][ T5266] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1006.941932][ T29] audit: type=1400 audit(1723689870.879:465): avc: denied { ioctl } for pid=14465 comm="syz.1.2381" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1006.944018][ T5266] usb 1-1: USB disconnect, device number 16 [ 1007.380432][ T5218] Bluetooth: hci1: command tx timeout [ 1007.749943][T11023] usb 5-1: USB disconnect, device number 27 [ 1008.131649][T14446] team0: Port device team_slave_0 added [ 1008.173209][T14446] team0: Port device team_slave_1 added [ 1008.187674][T14492] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1009.195606][ T5266] usb 2-1: USB disconnect, device number 20 [ 1009.452962][ T5218] Bluetooth: hci1: command tx timeout [ 1009.958653][T14503] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 1010.351092][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.713522][ T5218] Bluetooth: hci1: command tx timeout [ 1011.724228][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.797634][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.865451][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.873141][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.912408][ T29] audit: type=1400 audit(1723689875.859:466): avc: denied { module_request } for pid=14499 comm="syz.4.2389" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1012.018379][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.524604][ T8302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.631813][T14525] VFS: could not find a valid V7 on nullb0. [ 1013.397124][ T8302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.491032][T14446] hsr_slave_0: entered promiscuous mode [ 1013.510223][T14446] hsr_slave_1: entered promiscuous mode [ 1013.524721][T14446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.532739][T14446] Cannot create hsr debugfs directory [ 1013.933683][ T29] audit: type=1400 audit(1723689877.759:467): avc: denied { setopt } for pid=14528 comm="syz.4.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1020.662461][ T8302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.046093][ T8302] bond0: (slave netdevsim0): Releasing backup interface [ 1021.068506][ T8302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.563756][ T29] audit: type=1400 audit(1723689885.439:468): avc: denied { read } for pid=14551 comm="syz.2.2405" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1021.628180][ T29] audit: type=1400 audit(1723689885.439:469): avc: denied { open } for pid=14551 comm="syz.2.2405" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1023.917532][T14558] binder: 14552:14558 ioctl c0306201 0 returned -14 [ 1024.161823][ T8302] bridge_slave_1: left allmulticast mode [ 1024.195803][ T8302] bridge_slave_1: left promiscuous mode [ 1024.221959][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.294937][ T8302] bridge_slave_0: left allmulticast mode [ 1024.300647][ T8302] bridge_slave_0: left promiscuous mode [ 1024.334543][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.105866][ T8302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.191130][ T8302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.276012][ T8302] bond0 (unregistering): Released all slaves [ 1027.552061][T14606] bridge0: port 3(vlan2) entered blocking state [ 1027.558853][T14606] bridge0: port 3(vlan2) entered disabled state [ 1027.577987][T14606] vlan2: entered allmulticast mode [ 1027.586512][T14606] vlan2: left allmulticast mode [ 1027.633683][T14630] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1029.212684][T14642] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1029.212684][T14642] program syz.4.2426 not setting count and/or reply_len properly [ 1029.366477][T14642] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1029.366477][T14642] program syz.4.2426 not setting count and/or reply_len properly [ 1029.538572][T14642] Illegal XDP return value 8 on prog (id 335) dev N/A, expect packet loss! [ 1030.503045][ T29] audit: type=1400 audit(1723689894.449:470): avc: denied { connect } for pid=14648 comm="syz.0.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1030.590711][ T29] audit: type=1400 audit(1723689894.499:471): avc: denied { map } for pid=14653 comm="syz.1.2431" path="socket:[61938]" dev="sockfs" ino=61938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.658885][ T5218] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1030.727570][T11271] IPVS: starting estimator thread 0... [ 1030.737202][ T8302] hsr_slave_0: left promiscuous mode [ 1030.782519][ T8302] hsr_slave_1: left promiscuous mode [ 1030.863702][T14663] IPVS: using max 21 ests per chain, 50400 per kthread [ 1030.870821][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.898929][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.015799][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.038294][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.111289][ T8302] veth1_macvtap: left promiscuous mode [ 1031.123727][ T8302] veth0_macvtap: left promiscuous mode [ 1031.149837][ T8302] veth1_vlan: left promiscuous mode [ 1031.190415][ T8302] veth0_vlan: left promiscuous mode [ 1031.254005][ T5267] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1031.486253][ T5267] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1031.518363][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.553266][ T5267] usb 3-1: config 0 descriptor?? [ 1031.809797][ T5267] usb 3-1: Cannot read MAC address [ 1031.848581][ T5267] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1031.883867][T11271] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1032.028867][ T25] usb 3-1: USB disconnect, device number 21 [ 1032.094586][T11271] usb 1-1: Using ep0 maxpacket: 32 [ 1032.113126][T11271] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1032.124176][T11271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.133001][T11271] usb 1-1: Product: syz [ 1032.140328][T11271] usb 1-1: Manufacturer: syz [ 1032.145660][T11271] usb 1-1: SerialNumber: syz [ 1032.160456][T11271] usb 1-1: config 0 descriptor?? [ 1033.131084][ T8302] team0 (unregistering): Port device team_slave_1 removed [ 1033.222161][ T8302] team0 (unregistering): Port device team_slave_0 removed [ 1034.165162][T11271] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:e4:0a:45:92:90 [ 1034.216265][T14678] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1034.324327][T11271] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 1034.369588][T11271] usb 1-1: USB disconnect, device number 17 [ 1034.540983][T14692] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1034.761756][T14446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1034.858910][T14446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1034.911035][T14446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1034.978226][T14446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1036.382651][T14446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.411362][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.511161][T14719] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2449'. [ 1036.550008][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.557428][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.652430][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.659722][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.533210][T14749] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2455'. [ 1037.614899][ T29] audit: type=1400 audit(1723689901.559:472): avc: denied { getopt } for pid=14748 comm="syz.0.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1037.737890][T14446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.991716][T14446] veth0_vlan: entered promiscuous mode [ 1038.076606][T14446] veth1_vlan: entered promiscuous mode [ 1038.232430][T14446] veth0_macvtap: entered promiscuous mode [ 1038.305482][T14446] veth1_macvtap: entered promiscuous mode [ 1038.390854][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.433593][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.442010][T11023] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1038.460735][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.502331][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.522663][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.599807][T14773] VFS: could not find a valid V7 on nullb0. [ 1038.697944][T11023] usb 2-1: Using ep0 maxpacket: 16 [ 1038.783769][T11023] usb 2-1: config 0 has no interfaces? [ 1038.867433][T11023] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.904899][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.006565][T11023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.076475][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.191670][T11023] usb 2-1: Product: syz [ 1039.256255][T11023] usb 2-1: Manufacturer: syz [ 1039.274675][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.323651][T11023] usb 2-1: SerialNumber: syz [ 1039.339296][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.366280][T11023] usb 2-1: config 0 descriptor?? [ 1039.395082][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.445976][T14446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.587014][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.639518][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.692252][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.713989][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.725154][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.758251][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.768854][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.801787][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.823013][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.845534][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.878973][T14446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.910762][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2458'. [ 1039.933107][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 1039.975535][ T7239] usb 2-1: USB disconnect, device number 21 [ 1039.998347][T14446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.018060][T14446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.043860][T14446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.073636][T14446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.358315][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.404366][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.544797][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.565919][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.877738][T14784] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2373'. [ 1041.105129][T14787] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2464'. [ 1041.380037][T14799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.447397][ T29] audit: type=1326 audit(1723689905.399:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.3.2466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32763799b9 code=0x0 [ 1041.723718][T14792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.899890][T14796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.974469][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1042.039569][T14792] IPVS: length: 97 != 8 [ 1042.115104][ T29] audit: type=1400 audit(1723689906.069:474): avc: denied { create } for pid=14803 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1042.179587][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.355288][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1042.368980][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1042.378875][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.424184][ T25] usb 3-1: config 0 descriptor?? [ 1043.072724][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1043.727220][ T29] audit: type=1400 audit(1723689907.589:475): avc: denied { create } for pid=14812 comm="syz.1.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1044.036642][ T29] audit: type=1400 audit(1723689907.599:476): avc: denied { bind } for pid=14812 comm="syz.1.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1044.665819][ T25] usb 3-1: USB disconnect, device number 22 [ 1044.895424][T14830] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1045.161228][T14840] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2479'. [ 1051.113942][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1051.318999][ T9] usb 5-1: device descriptor read/64, error -71 [ 1051.414342][ T29] audit: type=1326 audit(1723689915.369:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14902 comm="syz.1.2500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafbb799b9 code=0x0 [ 1051.699110][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1052.055453][ T9] usb 5-1: device descriptor read/64, error -71 [ 1052.318003][ T9] usb usb5-port1: attempt power cycle [ 1053.149715][T14931] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2506'. [ 1053.213981][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1053.293833][ T9] usb 5-1: device descriptor read/8, error -71 [ 1053.585603][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1054.542958][ T9] usb 5-1: device not accepting address 31, error -71 [ 1054.550191][ T9] usb usb5-port1: unable to enumerate USB device [ 1055.288812][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.617852][T11271] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1056.846531][T11271] usb 2-1: config index 0 descriptor too short (expected 61202, got 18) [ 1056.883689][T11271] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 1056.891913][T11271] usb 2-1: config 0 has no interface number 0 [ 1056.923620][T11271] usb 2-1: config 0 interface 124 has no altsetting 0 [ 1056.966209][T11271] usb 2-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 1056.993115][T11271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.024028][T11271] usb 2-1: Product: syz [ 1057.028256][T11271] usb 2-1: Manufacturer: syz [ 1057.032882][T11271] usb 2-1: SerialNumber: syz [ 1057.077292][T11271] usb 2-1: config 0 descriptor?? [ 1057.317479][T11271] ftdi_sio 2-1:0.124: FTDI USB Serial Device converter detected [ 1057.349498][T11271] usb 2-1: Detected FT2232HP [ 1057.376828][T11271] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1057.404213][T11271] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1057.426016][T11271] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1057.449523][T11271] usb 2-1: USB disconnect, device number 22 [ 1057.474716][T11271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1057.506017][T11271] ftdi_sio 2-1:0.124: device disconnected [ 1057.633726][ T5266] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1057.803718][ T5266] usb 3-1: device descriptor read/64, error -71 [ 1058.085115][ T5266] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1058.274288][ T5266] usb 3-1: device descriptor read/64, error -71 [ 1058.353673][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1058.413219][ T5266] usb usb3-port1: attempt power cycle [ 1058.565620][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1058.583621][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.636429][ T9] usb 2-1: config 0 descriptor?? [ 1058.853699][ T5266] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1058.895070][ T5266] usb 3-1: device descriptor read/8, error -71 [ 1059.173760][ T5266] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1059.224443][ T5266] usb 3-1: device descriptor read/8, error -71 [ 1059.354183][ T5266] usb usb3-port1: unable to enumerate USB device [ 1061.328785][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.413130][ T9] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1061.423888][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.499595][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.644291][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.907245][ T9] pegasus 2-1:0.0: can't locate MII phy, using default [ 1061.961220][ T9] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 3a:ca:a7:86:e8:9d [ 1062.012092][ T9] usb 2-1: USB disconnect, device number 23 [ 1063.463920][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1063.676777][ T25] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1063.720942][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.782107][ T25] usb 1-1: config 0 descriptor?? [ 1067.474432][ T25] usb 1-1: Cannot read MAC address [ 1067.479883][ T25] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1067.714249][ T25] usb 1-1: USB disconnect, device number 18 [ 1068.041269][T15058] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1068.211848][ T7239] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1068.912838][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 1069.094074][ T7239] usb 2-1: device descriptor read/64, error -71 [ 1069.366043][ T7239] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1069.405552][T15082] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1069.564054][ T7239] usb 2-1: device descriptor read/64, error -71 [ 1069.745876][ T7239] usb usb2-port1: attempt power cycle [ 1074.453932][ T7239] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1074.653822][ T7239] usb 2-1: device descriptor read/64, error -71 [ 1074.943713][ T7239] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1075.113765][ T7239] usb 2-1: device descriptor read/64, error -71 [ 1075.259330][ T7239] usb usb2-port1: attempt power cycle [ 1075.703651][ T7239] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1075.754258][ T7239] usb 2-1: device descriptor read/8, error -71 [ 1076.035719][ T7239] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1076.114051][ T7239] usb 2-1: device descriptor read/8, error -71 [ 1076.254177][ T7239] usb usb2-port1: unable to enumerate USB device [ 1079.263860][ T5265] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1079.440523][ T5265] usb 2-1: device descriptor read/64, error -71 [ 1079.714611][ T5265] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1079.893849][ T5265] usb 2-1: device descriptor read/64, error -71 [ 1080.054449][ T5265] usb usb2-port1: attempt power cycle [ 1080.503966][ T5265] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1080.567653][ T5265] usb 2-1: device descriptor read/8, error -71 [ 1080.876507][ T5265] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1080.945499][ T5265] usb 2-1: device descriptor read/8, error -71 [ 1081.074031][ T5265] usb usb2-port1: unable to enumerate USB device [ 1087.271444][T15263] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1088.270525][T15280] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 1089.935786][T15297] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 1090.074082][T15297] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1091.033748][T15315] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 1092.373662][ T5266] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1092.567668][ T5266] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1092.594379][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.626381][ T5266] usb 5-1: config 0 descriptor?? [ 1093.047283][ T5266] usb 5-1: Cannot read MAC address [ 1093.060934][ T5266] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1093.220585][ T5224] Bluetooth: hci6: command 0x0406 tx timeout [ 1093.268303][ T5266] usb 5-1: USB disconnect, device number 32 [ 1093.918175][T15352] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 1095.364346][T15369] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1099.153677][T11271] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1099.354642][T11271] usb 4-1: Using ep0 maxpacket: 16 [ 1099.405105][T11271] usb 4-1: config 0 has no interfaces? [ 1099.451174][T11271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.515205][T11271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.552364][T11271] usb 4-1: Product: syz [ 1099.595609][T11271] usb 4-1: Manufacturer: syz [ 1099.654609][T11271] usb 4-1: SerialNumber: syz [ 1099.714955][T11271] usb 4-1: config 0 descriptor?? [ 1100.166792][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1100.261665][T15418] team_slave_0: entered promiscuous mode [ 1100.267492][T15418] team_slave_1: entered promiscuous mode [ 1100.318733][T15418] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1100.389357][T11271] usb 4-1: USB disconnect, device number 19 [ 1103.040051][T15463] netlink: 'syz.3.2685': attribute type 1 has an invalid length. [ 1104.013674][ T29] audit: type=1400 audit(1723689967.959:478): avc: denied { setattr } for pid=15469 comm="syz.1.2686" name="tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1104.723980][T11271] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1105.623646][T11271] usb 4-1: Using ep0 maxpacket: 16 [ 1105.653663][T11271] usb 4-1: config 0 has no interfaces? [ 1105.679054][T11271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.702638][T11271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.733618][T11271] usb 4-1: Product: syz [ 1105.737933][T11271] usb 4-1: Manufacturer: syz [ 1105.742558][T11271] usb 4-1: SerialNumber: syz [ 1105.780151][T11271] usb 4-1: config 0 descriptor?? [ 1106.076605][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 1106.146707][T15474] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1106.198206][T11271] usb 4-1: USB disconnect, device number 20 [ 1107.020650][T15504] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 1110.295129][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1110.523724][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1110.534378][ T25] usb 3-1: no configurations [ 1110.539025][ T25] usb 3-1: can't read configurations, error -22 [ 1110.733632][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1110.934087][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1110.946270][ T25] usb 3-1: no configurations [ 1110.950934][ T25] usb 3-1: can't read configurations, error -22 [ 1110.968104][ T25] usb usb3-port1: attempt power cycle [ 1111.163812][ T5267] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1111.393668][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1111.444591][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1111.459754][ T25] usb 3-1: no configurations [ 1111.474929][ T25] usb 3-1: can't read configurations, error -22 [ 1111.609347][ T5267] usb 1-1: Using ep0 maxpacket: 16 [ 1111.618275][ T5267] usb 1-1: config 0 has no interfaces? [ 1111.628254][ T5267] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.644212][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1111.929113][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1112.007193][ T25] usb 3-1: no configurations [ 1112.101437][ T25] usb 3-1: can't read configurations, error -22 [ 1112.235476][ T25] usb usb3-port1: unable to enumerate USB device [ 1112.397377][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.414793][ T5267] usb 1-1: Product: syz [ 1112.419032][ T5267] usb 1-1: Manufacturer: syz [ 1112.423700][ T5267] usb 1-1: SerialNumber: syz [ 1112.464596][ T5267] usb 1-1: config 0 descriptor?? [ 1112.724767][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 1112.777142][T15535] team_slave_0: entered promiscuous mode [ 1112.782953][T15535] team_slave_1: entered promiscuous mode [ 1112.800506][T15535] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1112.831199][ T25] usb 1-1: USB disconnect, device number 19 [ 1115.270659][T15595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1116.734662][ T5267] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1116.744515][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.951184][ T5267] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1116.986772][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.013328][ T5267] usb 2-1: config 0 descriptor?? [ 1117.433738][ T7239] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1117.673800][ T7239] usb 4-1: Using ep0 maxpacket: 16 [ 1117.721117][ T7239] usb 4-1: config 0 has no interfaces? [ 1117.737675][ T7239] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.773664][ T7239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.797123][ T7239] usb 4-1: Product: syz [ 1117.801392][ T7239] usb 4-1: Manufacturer: syz [ 1117.807273][ T7239] usb 4-1: SerialNumber: syz [ 1117.818118][ T7239] usb 4-1: config 0 descriptor?? [ 1118.103740][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 1118.185115][T15607] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1118.238004][ T5266] usb 4-1: USB disconnect, device number 21 [ 1118.245140][T15618] IPVS: length: 106 != 24 [ 1119.143672][ T29] audit: type=1400 audit(1723689983.069:479): avc: denied { accept } for pid=15629 comm="syz.2.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1120.002993][ T5267] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1120.136860][ T5267] pegasus 2-1:0.0: can't locate MII phy, using default [ 1120.183986][ T5267] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 3a:ca:a7:86:e8:9d [ 1120.224311][ T5267] usb 2-1: USB disconnect, device number 35 [ 1120.432033][T15644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1123.434500][T15681] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1125.164418][ T29] audit: type=1326 audit(1723689989.099:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.1.2769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafbb799b9 code=0x0 [ 1129.054943][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 1129.332455][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1129.363447][T15724] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20003 [ 1130.888934][T15739] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2781'. [ 1141.220180][T15822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15822 comm=syz.4.2819 [ 1145.216755][T11271] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1145.419294][T11271] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1145.449159][T11271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.479282][T11271] usb 3-1: config 0 descriptor?? [ 1147.516065][T15877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15877 comm=syz.0.2835 [ 1147.760877][T11271] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1147.897108][T11271] pegasus 3-1:0.0: can't locate MII phy, using default [ 1147.945922][T11271] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 1e:d1:9b:90:c1:1b [ 1148.004772][T11271] usb 3-1: USB disconnect, device number 31 [ 1149.647965][T15914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15914 comm=syz.2.2855 [ 1153.718065][ T29] audit: type=1326 audit(1723690017.669:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1799b9 code=0x0 [ 1161.333583][ T29] audit: type=1400 audit(1723690025.279:482): avc: denied { lock } for pid=16051 comm="syz.0.2898" path="socket:[67056]" dev="sockfs" ino=67056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1162.575770][T16070] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1162.575770][T16070] program syz.1.2907 not setting count and/or reply_len properly [ 1162.643886][T16071] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1162.643886][T16071] program syz.1.2907 not setting count and/or reply_len properly [ 1162.877149][T16075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16075 comm=syz.1.2909 [ 1167.033420][T16165] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1168.433689][ T5266] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1168.647081][ T5266] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1168.673931][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.713259][ T5266] usb 2-1: config 0 descriptor?? [ 1169.755186][ T5266] usb 2-1: Cannot set autoneg [ 1169.760259][ T5266] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1169.985825][ T5266] usb 2-1: USB disconnect, device number 36 [ 1171.913757][ T29] audit: type=1400 audit(1723690035.859:483): avc: denied { lock } for pid=16202 comm="syz.1.2964" path="socket:[66420]" dev="sockfs" ino=66420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1173.006245][T16212] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1173.006245][T16212] program syz.1.2966 not setting count and/or reply_len properly [ 1173.231632][T16212] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1173.231632][T16212] program syz.1.2966 not setting count and/or reply_len properly [ 1173.683721][ T5265] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1173.916011][ T5265] usb 3-1: config index 0 descriptor too short (expected 61202, got 18) [ 1173.943769][ T5265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.986462][ T5265] usb 3-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 1174.013627][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.047214][ T5265] usb 3-1: Product: syz [ 1174.073076][ T5265] usb 3-1: Manufacturer: syz [ 1174.083219][ T5265] usb 3-1: SerialNumber: syz [ 1174.106808][ T5265] usb 3-1: config 0 descriptor?? [ 1174.339603][ T5265] usb 3-1: USB disconnect, device number 32 [ 1175.657496][ T29] audit: type=1400 audit(1723690039.609:484): avc: denied { lock } for pid=16232 comm="syz.1.2973" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1178.244936][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.935827][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1184.148064][ T9] usb 5-1: config index 0 descriptor too short (expected 61202, got 18) [ 1184.164156][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1184.220121][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 1184.273556][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.302800][ T9] usb 5-1: Product: syz [ 1184.314759][ T9] usb 5-1: Manufacturer: syz [ 1184.319431][ T9] usb 5-1: SerialNumber: syz [ 1184.364830][ T9] usb 5-1: config 0 descriptor?? [ 1184.635300][ T9] usb 5-1: USB disconnect, device number 33 [ 1187.194396][T16356] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1187.194396][T16356] program syz.3.3010 not setting count and/or reply_len properly [ 1187.602620][T16356] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1187.602620][T16356] program syz.3.3010 not setting count and/or reply_len properly [ 1189.626340][T16394] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 0, id = 0 [ 1200.236557][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 1201.254252][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3057'. [ 1203.813101][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 1203.853981][T16501] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1203.889928][ T29] audit: type=1400 audit(1723690067.839:485): avc: denied { connect } for pid=16502 comm="syz.0.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1204.020186][T16510] netlink: 'syz.0.3067': attribute type 4 has an invalid length. [ 1204.042656][ T29] audit: type=1400 audit(1723690067.989:486): avc: denied { nlmsg_write } for pid=16506 comm="syz.3.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1204.087482][T16514] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1204.118670][ T29] audit: type=1400 audit(1723690068.029:487): avc: denied { nlmsg_read } for pid=16506 comm="syz.3.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1204.133782][ T5266] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1204.143414][T16514] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1204.334370][ T5266] usb 5-1: Using ep0 maxpacket: 16 [ 1204.353721][ T5266] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1204.372951][ T5266] usb 5-1: config 0 has no interface number 0 [ 1204.380942][ T5266] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1204.397583][ T5266] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1204.417160][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.426219][ T5266] usb 5-1: Product: syz [ 1204.430515][ T5266] usb 5-1: Manufacturer: syz [ 1204.435941][ T5266] usb 5-1: SerialNumber: syz [ 1204.448971][ T5266] usb 5-1: config 0 descriptor?? [ 1204.524766][T16498] syz.2.3064 (16498) used greatest stack depth: 21056 bytes left [ 1204.672702][ T29] audit: type=1326 audit(1723690068.619:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16527 comm="syz.2.3076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa188d799b9 code=0x0 [ 1205.117102][ T5266] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1205.148543][ T5266] usb 5-1: USB disconnect, device number 34 [ 1205.389843][ T29] audit: type=1326 audit(1723690069.329:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.3078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafbb799b9 code=0x0 [ 1206.260138][T16542] KVM: debugfs: duplicate directory 16542-5 [ 1206.559540][ T5218] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 1206.591317][T16549] KVM: debugfs: duplicate directory 16549-5 [ 1206.711498][T16560] [U]  [ 1206.779922][ T29] audit: type=1400 audit(1723690070.729:490): avc: denied { ioctl } for pid=16547 comm="syz.4.3083" path="/164/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1206.784200][T16550] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1209.914901][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1210.112478][ T29] audit: type=1326 audit(1723690074.059:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.1.3093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafbb799b9 code=0x0 [ 1210.167458][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1210.190702][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.271053][ T9] usb 1-1: config 0 descriptor?? [ 1210.311494][ T9] cp210x 1-1:0.0: cp210x converter detected [ 1210.565338][ T5218] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1210.580196][ T5218] Bluetooth: hci5: Injecting HCI hardware error event [ 1210.589806][ T5224] Bluetooth: hci5: hardware error 0x00 [ 1210.879475][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1210.921873][ T9] cp210x 1-1:0.0: querying part number failed [ 1210.971251][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1210.994175][ T9] usb 1-1: USB disconnect, device number 20 [ 1211.064453][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1211.109407][ T9] cp210x 1-1:0.0: device disconnected [ 1211.384189][T16588] Process accounting resumed [ 1212.778865][ T5224] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1214.848441][ T5265] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1215.990663][ T29] audit: type=1326 audit(1723690079.929:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16627 comm="syz.1.3106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafbb799b9 code=0x0 [ 1216.277445][ T5266] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1216.293585][ T1852] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1216.545697][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.573624][ T1852] usb 3-1: Using ep0 maxpacket: 16 [ 1216.582247][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.596697][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1216.617510][ T1852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.627849][ T5266] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1216.640141][ T1852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.653394][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.662987][ T1852] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 1216.676117][ T5266] usb 5-1: config 0 descriptor?? [ 1216.682231][ T1852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.707043][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1216.741151][ T1852] usb 3-1: config 0 descriptor?? [ 1217.037433][ T1852] usbhid 3-1:0.0: can't add hid device: -71 [ 1217.053674][ T1852] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1217.122874][ T1852] usb 3-1: USB disconnect, device number 33 [ 1221.808006][ T1852] usb 5-1: USB disconnect, device number 35 [ 1222.042859][ T29] audit: type=1326 audit(1723690085.989:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz.0.3117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516ab799b9 code=0x0 [ 1223.779679][ T5267] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1223.977810][ T5267] usb 4-1: Using ep0 maxpacket: 32 [ 1224.001696][ T25] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1224.004179][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.063780][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.106353][ T5267] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1224.135725][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.161232][ T5267] usb 4-1: config 0 descriptor?? [ 1224.168306][T16697] serio: Serial port pts0 [ 1224.186194][ T5267] hub 4-1:0.0: USB hub found [ 1224.206142][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.227573][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.256996][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1224.272575][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.312989][ T25] usb 2-1: config 0 descriptor?? [ 1224.390941][ T5267] hub 4-1:0.0: 1 port detected [ 1224.728290][ T5267] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1224.763585][ T5267] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1224.859554][ T5267] usbhid 4-1:0.0: can't add hid device: -71 [ 1224.867122][ T5267] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1225.011430][ T5267] usb 4-1: USB disconnect, device number 22 [ 1225.627666][ T25] hid (null): bogus close delimiter [ 1226.618036][ T25] usb 2-1: string descriptor 0 read error: -71 [ 1226.624940][ T25] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 1226.636677][ T25] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 1226.645745][ T25] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 1226.654208][ T25] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 1226.662075][ T25] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 1226.676835][ T25] usb 2-1: USB disconnect, device number 37 [ 1226.842978][ T29] audit: type=1400 audit(1723690090.779:494): avc: denied { mount } for pid=16722 comm="syz.3.3140" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1227.887016][ T29] audit: type=1400 audit(1723690091.839:495): avc: denied { unmount } for pid=14446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1231.277346][ T29] audit: type=1400 audit(1723690095.229:496): avc: denied { getopt } for pid=16759 comm="syz.3.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1231.437423][ T8390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.590741][ T8390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.806209][ T8390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.108212][ T8390] team0: Port device netdevsim0 removed [ 1232.170545][ T8390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.882282][ T8390] bridge_slave_1: left allmulticast mode [ 1234.926525][ T8390] bridge_slave_1: left promiscuous mode [ 1234.959562][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.974988][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1234.997456][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1235.007650][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1235.028730][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1235.038435][ T5218] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1235.050914][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1235.059567][ T8390] bridge_slave_0: left allmulticast mode [ 1235.065592][ T8390] bridge_slave_0: left promiscuous mode [ 1235.071831][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.134274][ T5224] Bluetooth: hci2: command tx timeout [ 1238.886887][ T29] audit: type=1400 audit(1723690102.839:497): avc: denied { ioctl } for pid=16838 comm="syz.2.3178" path="socket:[69645]" dev="sockfs" ino=69645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1239.735021][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.095449][ T5218] Bluetooth: hci2: command tx timeout [ 1241.107898][T16867] vivid-007: ================= START STATUS ================= [ 1241.143099][T16867] vivid-007: Enable Output Cropping: true [ 1241.184778][T16867] vivid-007: Enable Output Composing: true [ 1241.234627][T16867] vivid-007: Enable Output Scaler: true [ 1241.252919][T16867] vivid-007: Tx RGB Quantization Range: Automatic [ 1241.274820][T16867] vivid-007: Transmit Mode: HDMI [ 1241.328544][T16867] vivid-007: Hotplug Present: 0x00000000 [ 1241.355716][T16867] vivid-007: RxSense Present: 0x00000000 [ 1241.375109][T16867] vivid-007: EDID Present: 0x00000000 [ 1241.547489][T16867] vivid-007: ================== END STATUS ================== [ 1241.714574][ T8390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.783798][ T8390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.875707][ T8390] bond0 (unregistering): Released all slaves [ 1242.032416][ T29] audit: type=1400 audit(1723690105.969:498): avc: denied { setopt } for pid=16897 comm="syz.3.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1242.164245][ T5218] Bluetooth: hci2: command tx timeout [ 1244.248534][ T5218] Bluetooth: hci2: command tx timeout [ 1244.694484][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1245.002456][ T8390] hsr_slave_0: left promiscuous mode [ 1245.074074][ T8390] hsr_slave_1: left promiscuous mode [ 1245.173672][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.181274][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.230598][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.269321][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.370717][ T8390] veth1_macvtap: left promiscuous mode [ 1245.410399][ T8390] veth0_macvtap: left promiscuous mode [ 1245.424286][ T8390] veth1_vlan: left promiscuous mode [ 1245.429757][ T8390] veth0_vlan: left promiscuous mode [ 1247.816584][T16973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1248.071010][ T29] audit: type=1400 audit(1723690112.019:499): avc: denied { write } for pid=16977 comm="syz.2.3219" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1250.121853][ T29] audit: type=1400 audit(1723690114.059:500): avc: denied { write } for pid=17010 comm="syz.4.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1250.616734][T17034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1250.641950][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1250.656956][ T8390] team0 (unregistering): Port device team_slave_1 removed [ 1250.659206][T17034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1250.749431][ T8390] team0 (unregistering): Port device team_slave_0 removed [ 1254.779979][T17018] syzkaller0: entered promiscuous mode [ 1254.825409][T17018] syzkaller0: entered allmulticast mode [ 1254.864138][T17039] netlink: 'syz.2.3239': attribute type 10 has an invalid length. [ 1254.885963][T17039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.942450][T17039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.993084][T17039] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1255.033027][T16801] chnl_net:caif_netlink_parms(): no params data found [ 1255.273943][ T1852] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1255.488270][ T1852] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1255.498171][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.525595][ T1852] usb 1-1: config 0 descriptor?? [ 1256.982028][ T1852] pegasus 1-1:0.0: can't reset MAC [ 1256.987859][ T1852] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1257.383157][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1257.418405][ T29] audit: type=1400 audit(1723690121.369:501): avc: denied { bind } for pid=17076 comm="syz.2.3253" laddr=::1 lport=4 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1263.274594][ T5265] usb 1-1: USB disconnect, device number 22 [ 1264.000011][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1264.029122][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1264.038851][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1264.061865][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1264.070630][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1264.078539][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1266.173734][ T5218] Bluetooth: hci3: command tx timeout [ 1266.885956][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.893202][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.924469][T16801] bridge_slave_0: entered allmulticast mode [ 1266.950047][T16801] bridge_slave_0: entered promiscuous mode [ 1266.990467][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.010808][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.034556][T16801] bridge_slave_1: entered allmulticast mode [ 1267.063992][T16801] bridge_slave_1: entered promiscuous mode [ 1267.110722][T11271] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1267.249254][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.335985][T11271] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1267.374568][T11271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.426058][T11271] usb 3-1: config 0 descriptor?? [ 1267.555524][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.839714][T16801] team0: Port device team_slave_0 added [ 1267.939570][T16801] team0: Port device team_slave_1 added [ 1268.228001][ T8390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.253739][ T5218] Bluetooth: hci3: command tx timeout [ 1268.430031][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.460307][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.502289][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.606296][ T8390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.670963][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.700110][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.771777][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.804845][T17097] chnl_net:caif_netlink_parms(): no params data found [ 1268.926067][T11271] pegasus 3-1:0.0: can't reset MAC [ 1268.930387][ T8390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.003893][T11271] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1270.327748][ T5218] Bluetooth: hci3: command tx timeout [ 1270.539036][ T9] usb 3-1: USB disconnect, device number 34 [ 1270.906844][ T8390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.109702][T16801] hsr_slave_0: entered promiscuous mode [ 1271.149570][T16801] hsr_slave_1: entered promiscuous mode [ 1271.935339][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.942557][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.995204][T17097] bridge_slave_0: entered allmulticast mode [ 1272.028848][T17097] bridge_slave_0: entered promiscuous mode [ 1272.212423][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.249642][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.264186][T17097] bridge_slave_1: entered allmulticast mode [ 1272.275057][T17097] bridge_slave_1: entered promiscuous mode [ 1272.403735][ T5218] Bluetooth: hci3: command tx timeout [ 1272.550442][ T8390] bridge_slave_1: left allmulticast mode [ 1272.574228][ T8390] bridge_slave_1: left promiscuous mode [ 1272.583309][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.618903][ T8390] bridge_slave_0: left allmulticast mode [ 1272.633278][ T8390] bridge_slave_0: left promiscuous mode [ 1272.643473][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.934250][ T8390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.972362][ T8390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.999826][ T8390] bond0 (unregistering): Released all slaves [ 1274.067932][T17097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.242960][T17097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.583603][ T5266] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1274.809092][ T5266] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1274.828825][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.875336][ T5266] usb 1-1: config 0 descriptor?? [ 1274.974805][T17097] team0: Port device team_slave_0 added [ 1275.164788][T17097] team0: Port device team_slave_1 added [ 1275.617393][ T8390] hsr_slave_0: left promiscuous mode [ 1275.637611][ T8390] hsr_slave_1: left promiscuous mode [ 1275.654453][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.661932][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.694782][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.702439][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.836001][ T8390] team_slave_0: left promiscuous mode [ 1275.841506][ T8390] team_slave_1: left promiscuous mode [ 1275.884094][ T8390] veth1_macvtap: left promiscuous mode [ 1275.891798][ T8390] veth0_macvtap: left promiscuous mode [ 1275.913844][ T8390] veth1_vlan: left promiscuous mode [ 1275.919312][ T8390] veth0_vlan: left promiscuous mode [ 1276.311618][ T5266] pegasus 1-1:0.0: can't reset MAC [ 1276.323914][ T5266] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1277.376080][ T1852] usb 1-1: USB disconnect, device number 23 [ 1278.007201][ T8390] team0 (unregistering): Port device team_slave_1 removed [ 1278.046276][ T5218] Bluetooth: hci6: unexpected event for opcode 0x0c1c [ 1278.226921][ T8390] team0 (unregistering): Port device team_slave_0 removed [ 1278.344350][T17224] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1278.344350][T17224] program syz.0.3285 not setting count and/or reply_len properly [ 1278.465168][T17224] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1278.465168][T17224] program syz.0.3285 not setting count and/or reply_len properly [ 1279.640678][T17097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.663530][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.744012][T17097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.771102][T17097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.783753][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.843863][T17097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.194137][T17097] hsr_slave_0: entered promiscuous mode [ 1280.224377][T17097] hsr_slave_1: entered promiscuous mode [ 1280.248656][T17097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.263849][T17097] Cannot create hsr debugfs directory [ 1280.447093][ T1852] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1280.665004][ T1852] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1280.682445][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.725191][ T1852] usb 1-1: config 0 descriptor?? [ 1280.962279][T16801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1280.999281][T16801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1281.113626][T16801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1281.146586][T16801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1281.749584][ T1852] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1281.834519][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.902185][T17097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1281.953304][T17097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1281.995952][T17097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1282.056297][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.075370][T17097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1282.120647][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.127908][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.211156][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.218403][T11025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.721237][T17097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.826716][T17097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.865489][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.872833][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.958201][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.965509][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.146519][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.241888][ T25] usb 1-1: USB disconnect, device number 24 [ 1283.572033][T16801] veth0_vlan: entered promiscuous mode [ 1283.645551][T16801] veth1_vlan: entered promiscuous mode [ 1283.836664][T16801] veth0_macvtap: entered promiscuous mode [ 1283.894675][T16801] veth1_macvtap: entered promiscuous mode [ 1283.998728][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.041609][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.084171][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.103497][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.143793][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.184285][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.216532][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.309951][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.354805][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.383659][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.443544][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.473541][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.523521][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.533383][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.594970][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.625910][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.676643][T17097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.718689][T16801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.751153][T16801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.781175][T16801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.813169][T16801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.209439][T17097] veth0_vlan: entered promiscuous mode [ 1285.429073][T17097] veth1_vlan: entered promiscuous mode [ 1285.462571][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.490865][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.727931][T11025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.761348][T11025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.812308][T17097] veth0_macvtap: entered promiscuous mode [ 1285.883616][T17097] veth1_macvtap: entered promiscuous mode [ 1285.956508][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.993860][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.023805][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.054517][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.069883][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.093148][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.125166][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.155156][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.196073][T17097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.260562][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.330042][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.360576][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.382711][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.402218][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.424537][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.453561][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.485547][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.526337][T17097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.570976][T17097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.612973][T17097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.666989][T17097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.696423][T17097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.722867][T17097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.760603][T17097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.271752][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.321367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.447267][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.485804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.605388][ T7239] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1287.826343][ T7239] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1287.854907][ T7239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.896859][ T7239] usb 3-1: config 0 descriptor?? [ 1288.033603][ T5265] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1288.254532][ T5265] usb 5-1: Using ep0 maxpacket: 16 [ 1288.262574][ T5265] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1288.273101][ T5265] usb 5-1: config 0 has no interface number 0 [ 1288.290667][ T5265] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1288.354340][ T5265] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1288.375826][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.411474][ T5265] usb 5-1: Product: syz [ 1288.427080][ T5265] usb 5-1: Manufacturer: syz [ 1288.472411][ T5265] usb 5-1: SerialNumber: syz [ 1288.500527][ T29] audit: type=1326 audit(1723690152.439:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17371 comm="syz.1.3313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8973f799b9 code=0x0 [ 1288.505230][ T5265] usb 5-1: config 0 descriptor?? [ 1288.951439][ T7239] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 1289.236540][ T5265] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1289.722337][ T5265] usb 5-1: USB disconnect, device number 36 [ 1290.512253][ T7239] usb 3-1: USB disconnect, device number 35 [ 1291.262354][ T29] audit: type=1400 audit(1723690155.199:503): avc: denied { connect } for pid=17421 comm="syz.1.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1292.383946][ T7239] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1295.583746][ T7239] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1295.594083][ T7239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.627623][ T7239] usb 2-1: config 0 descriptor?? [ 1295.847219][ T7239] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 1295.907582][ T7239] usb 2-1: USB disconnect, device number 38 [ 1297.147301][ T29] audit: type=1400 audit(1723690161.069:504): avc: denied { read } for pid=17476 comm="syz.4.3334" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1297.631177][ T29] audit: type=1400 audit(1723690161.069:505): avc: denied { open } for pid=17476 comm="syz.4.3334" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1301.049421][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.694920][ T29] audit: type=1400 audit(1723690171.639:506): avc: denied { map } for pid=17615 comm="syz.4.3394" path="socket:[72982]" dev="sockfs" ino=72982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1307.773794][ T29] audit: type=1400 audit(1723690171.639:507): avc: denied { accept } for pid=17615 comm="syz.4.3394" path="socket:[72982]" dev="sockfs" ino=72982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1308.244087][ T29] audit: type=1400 audit(1723690172.189:508): avc: denied { listen } for pid=17630 comm="syz.1.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1308.313931][ T29] audit: type=1400 audit(1723690172.199:509): avc: denied { write } for pid=17630 comm="syz.1.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1313.113594][ T29] audit: type=1400 audit(1723690177.059:510): avc: denied { watch_reads } for pid=17707 comm="syz.1.3436" path="/50/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1319.936634][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1320.167475][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1320.187036][ T25] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1320.236049][ T25] usb 2-1: config 0 has no interface number 0 [ 1320.283167][ T25] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1320.371928][ T25] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1320.420100][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.474306][ T25] usb 2-1: Product: syz [ 1320.478584][ T25] usb 2-1: Manufacturer: syz [ 1320.523784][ T25] usb 2-1: SerialNumber: syz [ 1320.677127][ T25] usb 2-1: config 0 descriptor?? [ 1321.399607][ T25] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1321.462923][ T25] usb 2-1: USB disconnect, device number 39 [ 1326.555614][ T29] audit: type=1400 audit(1723690190.499:511): avc: denied { execute_no_trans } for pid=17877 comm="syz.4.3502" path="/256/file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1327.115130][T17887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1330.057065][T17922] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1330.057065][T17922] program syz.3.3516 not setting count and/or reply_len properly [ 1330.178741][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1330.225874][T17922] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1330.225874][T17922] program syz.3.3516 not setting count and/or reply_len properly [ 1331.790934][ T29] audit: type=1326 audit(1723690195.739:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.1.3528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8973f799b9 code=0x0 [ 1333.163965][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1338.164811][ T5218] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1338.174632][ T5218] Bluetooth: hci3: Injecting HCI hardware error event [ 1338.186293][ T5218] Bluetooth: hci3: hardware error 0x00 [ 1338.400526][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1338.433636][ T29] audit: type=1400 audit(1723690202.379:513): avc: denied { read } for pid=18022 comm="syz.2.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1340.247531][ T5218] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1341.820824][T18058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1344.220628][ T29] audit: type=1326 audit(1723690208.169:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8973f799b9 code=0x0 [ 1346.553073][ T5218] Bluetooth: hci6: unexpected event for opcode 0x2039 [ 1350.565240][ T5218] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1350.576394][ T5218] Bluetooth: hci6: Injecting HCI hardware error event [ 1350.587492][T18020] Bluetooth: hci6: hardware error 0x00 [ 1352.734141][T18020] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1358.413952][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1359.452353][ T5218] Bluetooth: hci2: command 0x0406 tx timeout [ 1360.422570][ T29] audit: type=1400 audit(1723690223.419:515): avc: denied { map } for pid=18286 comm="syz.2.3642" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1360.692778][T18295] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1360.712451][T18295] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 1360.728024][T18295] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1362.158385][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1362.497647][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.860401][T18458] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1372.893178][T18458] netlink: 'syz.0.3702': attribute type 1 has an invalid length. [ 1372.921747][T18458] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1373.108379][T18463] tmpfs: Unknown parameter 'trans' [ 1374.231454][T18486] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 1376.229943][ T29] audit: type=1400 audit(1723690240.179:516): avc: denied { getattr } for pid=18502 comm="syz.4.3712" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1379.714984][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1379.933557][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1379.944629][ T25] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1379.970332][ T25] usb 2-1: config 0 has no interface number 0 [ 1379.983886][ T25] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1380.039486][ T25] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1380.066898][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.093542][ T25] usb 2-1: Product: syz [ 1380.118613][ T25] usb 2-1: Manufacturer: syz [ 1380.123292][ T25] usb 2-1: SerialNumber: syz [ 1380.152614][ T25] usb 2-1: config 0 descriptor?? [ 1380.389168][ T25] usbtouchscreen 2-1:0.214: Failed to read FW rev: -32 [ 1380.412287][ T25] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 1381.512620][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1382.263978][ T5266] usb 2-1: USB disconnect, device number 40 [ 1382.634511][T18581] fuse: Unknown parameter 'group_i00000000000000000000' [ 1384.551687][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 1385.224827][T18613] fuse: Unknown parameter 'group_i00000000000000000000' [ 1385.682857][T18619] tmpfs: Unknown parameter 'trans' [ 1386.771319][T18639] fuse: Unknown parameter 'group_i00000000000000000000' [ 1390.997319][T18683] fuse: Unknown parameter 'group_id00000000000000000000' [ 1393.482979][T18718] fuse: Unknown parameter 'group_id00000000000000000000' [ 1397.455260][ T29] audit: type=1400 audit(1723690261.389:517): avc: denied { mounton } for pid=18760 comm="syz.3.3811" path="/proc/212/task" dev="proc" ino=76264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1397.524287][T18765] fuse: Unknown parameter 'group_id00000000000000000000' [ 1397.801122][ T29] audit: type=1400 audit(1723690261.749:518): avc: denied { remount } for pid=18771 comm="syz.0.3815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1397.908899][ T29] audit: type=1400 audit(1723690261.859:519): avc: denied { unmount } for pid=14027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1399.819056][T18793] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1399.873467][T18793] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1400.194085][T18795] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1400.194085][T18795] program syz.1.3825 not setting count and/or reply_len properly [ 1400.327086][T18795] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1400.327086][T18795] program syz.1.3825 not setting count and/or reply_len properly [ 1412.342722][T18911] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.3866'. [ 1412.373919][T18911] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3866'. [ 1416.680340][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1423.863505][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1423.929626][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.043954][ T9] usb 3-1: device descriptor read/64, error -71 [ 1424.353739][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1424.496655][T19052] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1424.496655][T19052] program syz.4.3916 not setting count and/or reply_len properly [ 1424.543650][ T9] usb 3-1: device descriptor read/64, error -71 [ 1424.622364][T19054] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1424.622364][T19054] program syz.4.3916 not setting count and/or reply_len properly [ 1424.683037][ T9] usb usb3-port1: attempt power cycle [ 1425.134034][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1425.174985][ T9] usb 3-1: device descriptor read/8, error -71 [ 1425.473510][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1425.524241][ T9] usb 3-1: device descriptor read/8, error -71 [ 1425.661086][ T9] usb usb3-port1: unable to enumerate USB device [ 1430.203898][T11271] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1430.384160][T11271] usb 2-1: device descriptor read/64, error -71 [ 1430.673941][T11271] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1430.864062][T11271] usb 2-1: device descriptor read/64, error -71 [ 1430.997496][T11271] usb usb2-port1: attempt power cycle [ 1431.443865][T11271] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1431.494648][T11271] usb 2-1: device descriptor read/8, error -71 [ 1431.763572][T11271] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1431.812770][T11271] usb 2-1: device descriptor read/8, error -71 [ 1431.948763][T11271] usb usb2-port1: unable to enumerate USB device [ 1436.363539][T11023] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1436.543512][T11023] usb 2-1: device descriptor read/64, error -71 [ 1436.813536][T11023] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1436.983613][T11023] usb 2-1: device descriptor read/64, error -71 [ 1437.104371][T11023] usb usb2-port1: attempt power cycle [ 1437.145775][T19157] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.3956'. [ 1437.175927][T19157] netlink: 199644 bytes leftover after parsing attributes in process `syz.2.3956'. [ 1437.523913][T11023] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1437.568734][T11023] usb 2-1: device descriptor read/8, error -71 [ 1437.863600][T11023] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1437.940540][T11023] usb 2-1: device descriptor read/8, error -71 [ 1438.074108][T11023] usb usb2-port1: unable to enumerate USB device [ 1439.817989][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1441.881132][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1442.743764][T11271] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1442.923469][T11271] usb 3-1: device descriptor read/64, error -71 [ 1443.223641][T11271] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1443.396980][T11271] usb 3-1: device descriptor read/64, error -71 [ 1443.524348][T11271] usb usb3-port1: attempt power cycle [ 1443.967089][T11271] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1444.043425][T11271] usb 3-1: device descriptor read/8, error -71 [ 1444.323467][T11271] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1444.364533][T11271] usb 3-1: device descriptor read/8, error -71 [ 1444.495679][T11271] usb usb3-port1: unable to enumerate USB device [ 1446.173736][T19276] SELinux: Context : is not valid (left unmapped). [ 1446.204751][ T29] audit: type=1400 audit(1723690310.159:520): avc: denied { relabelto } for pid=19275 comm="syz.2.4004" name="rdma.current" dev="tmpfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1446.303970][ T29] audit: type=1400 audit(1723690310.159:521): avc: denied { associate } for pid=19275 comm="syz.2.4004" name="rdma.current" dev="tmpfs" ino=2008 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 1446.400664][ T29] audit: type=1400 audit(1723690310.159:522): avc: denied { append } for pid=19275 comm="syz.2.4004" path="/361/rdma.current" dev="tmpfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1446.513522][ T29] audit: type=1400 audit(1723690310.299:523): avc: denied { unlink } for pid=12819 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1447.664474][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1447.764208][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1447.976538][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1447.994929][ T9] usb 4-1: can't read configurations, error -61 [ 1448.197555][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1448.445288][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1448.453008][ T9] usb 4-1: can't read configurations, error -61 [ 1448.494097][ T9] usb usb4-port1: attempt power cycle [ 1448.943465][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1449.026656][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1449.054031][ T9] usb 4-1: can't read configurations, error -61 [ 1449.213491][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1449.286940][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1449.303662][ T9] usb 4-1: can't read configurations, error -61 [ 1449.314545][ T9] usb usb4-port1: unable to enumerate USB device [ 1450.682742][T19324] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1450.682742][T19324] program syz.0.4021 not setting count and/or reply_len properly [ 1450.842872][T19324] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1450.842872][T19324] program syz.0.4021 not setting count and/or reply_len properly [ 1451.379283][ T29] audit: type=1400 audit(1723690315.329:524): avc: denied { create } for pid=19334 comm="syz.3.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1451.443039][ T29] audit: type=1400 audit(1723690315.329:525): avc: denied { ioctl } for pid=19334 comm="syz.3.4024" path="socket:[78324]" dev="sockfs" ino=78324 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1451.532923][T19340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4025'. [ 1452.163987][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1452.379734][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1452.412109][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1452.447604][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1452.467622][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.483597][ T9] usb 1-1: Product: syz [ 1452.487833][ T9] usb 1-1: Manufacturer: syz [ 1452.501588][T19358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19358 comm=syz.2.4033 [ 1452.503618][ T9] usb 1-1: SerialNumber: syz [ 1452.550811][ T9] usb 1-1: config 0 descriptor?? [ 1452.604815][ T9] as10x_usb: device has been detected [ 1452.611661][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1452.737260][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1452.877763][ T9] as10x_usb: error during firmware upload part1 [ 1452.900415][ T9] Registered device Abilis Systems DVB-Titan [ 1452.923686][ T9] usb 1-1: USB disconnect, device number 25 [ 1453.119884][ T29] audit: type=1400 audit(1723690317.069:526): avc: denied { ioctl } for pid=19365 comm="syz.4.4031" path="socket:[78858]" dev="sockfs" ino=78858 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1453.147361][T19367] @: renamed from vlan0 (while UP) [ 1453.219202][ T9] Unregistered device Abilis Systems DVB-Titan [ 1453.242829][ T9] as10x_usb: device has been disconnected [ 1453.787145][ T29] audit: type=1400 audit(1723690317.599:527): avc: denied { listen } for pid=19377 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1454.470715][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1454.711801][T19405] binder: 19403:19405 ioctl c018620c 0 returned -14 [ 1456.226022][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1456.944000][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1456.976345][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.039362][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.062882][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1457.114216][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1457.161064][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.241394][ T25] usb 3-1: config 0 descriptor?? [ 1457.324255][T19428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1457.330850][T19428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1457.373085][T19428] vhci_hcd vhci_hcd.0: Device attached [ 1457.386649][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1457.468673][T19429] vhci_hcd: connection closed [ 1457.482974][ T61] vhci_hcd: stop threads [ 1457.503540][ T61] vhci_hcd: release socket [ 1457.525390][ T61] vhci_hcd: disconnect device [ 1457.563631][T11271] vhci_hcd: vhci_device speed not set [ 1457.715774][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.740997][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.759802][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.786260][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.801453][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.813115][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.859391][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.881897][ T29] audit: type=1400 audit(1723690321.829:528): avc: denied { getopt } for pid=19451 comm="syz.0.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1457.888283][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1457.989041][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1458.005769][ T25] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1458.053434][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1458.122681][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input45 [ 1458.331957][ T25] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1458.353514][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1458.390579][ T25] usb 3-1: USB disconnect, device number 44 [ 1458.437816][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1458.617523][ T9] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1458.658645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.698036][ T9] usb 4-1: Product: syz [ 1458.710967][ T9] usb 4-1: Manufacturer: syz [ 1458.736040][ T9] usb 4-1: SerialNumber: syz [ 1458.768666][ T9] usb 4-1: config 0 descriptor?? [ 1459.089072][ T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1459.134752][ T9] usb 4-1: USB disconnect, device number 27 [ 1459.255684][T11271] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1459.453766][T11271] usb 1-1: Using ep0 maxpacket: 16 [ 1459.470939][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1459.487655][T11271] usb 1-1: config 0 has no interfaces? [ 1459.546135][T11271] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1459.612610][T11271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.789934][T11271] usb 1-1: config 0 descriptor?? [ 1460.095198][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.138596][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.188485][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.236940][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.363101][ T5266] usb 1-1: USB disconnect, device number 26 [ 1461.180032][T19498] syzkaller1: entered promiscuous mode [ 1461.196478][T19498] syzkaller1: entered allmulticast mode [ 1462.793496][T19518] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1462.793496][T19518] program syz.2.4086 not setting count and/or reply_len properly [ 1463.018908][T19518] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1463.018908][T19518] program syz.2.4086 not setting count and/or reply_len properly [ 1463.994039][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1464.226566][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1464.265605][ T9] usb 3-1: config 0 has no interfaces? [ 1464.271161][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1464.317368][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.348638][ T9] usb 3-1: config 0 descriptor?? [ 1464.593194][T19527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.634165][T19527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.666627][T19527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.863929][T19527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.793072][ T9] usb 3-1: USB disconnect, device number 45 [ 1466.516066][ T29] audit: type=1326 audit(1723690330.469:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.1.4101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8973f799b9 code=0x0 [ 1472.003752][ T5265] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1472.226570][ T5265] usb 2-1: Using ep0 maxpacket: 16 [ 1472.264473][ T5265] usb 2-1: config 0 has no interfaces? [ 1472.282254][ T5265] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1472.314541][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.346182][ T5265] usb 2-1: config 0 descriptor?? [ 1472.605388][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.635839][ T29] audit: type=1326 audit(1723690336.589:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.4.4114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1799b9 code=0x0 [ 1472.675538][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.708038][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.740004][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.839384][ T5265] usb 2-1: USB disconnect, device number 49 [ 1474.183933][T19639] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1474.183933][T19639] program syz.4.4124 not setting count and/or reply_len properly [ 1474.348528][T19642] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1474.348528][T19642] program syz.4.4124 not setting count and/or reply_len properly [ 1477.373163][ T5265] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1477.573577][ T5265] usb 3-1: Using ep0 maxpacket: 16 [ 1477.594098][ T5265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.630242][ T5265] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1477.646383][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.673627][ T5265] usb 3-1: Product: syz [ 1477.684912][ T5265] usb 3-1: Manufacturer: syz [ 1477.696431][ T5265] usb 3-1: SerialNumber: syz [ 1477.724796][ T5265] usb 3-1: config 0 descriptor?? [ 1478.037051][ T5265] usb 3-1: Cannot retrieve CPort count: -71 [ 1478.043164][ T5265] usb 3-1: Cannot retrieve CPort count: -71 [ 1478.083700][ T5265] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 1478.116132][ T5265] usb 3-1: USB disconnect, device number 46 [ 1479.523543][ T29] audit: type=1326 audit(1723690343.469:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.1.4144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8973f799b9 code=0x0 [ 1485.368948][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1499.903705][T19910] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1499.903705][T19910] program syz.1.4224 not setting count and/or reply_len properly [ 1500.849724][T19910] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1500.849724][T19910] program syz.1.4224 not setting count and/or reply_len properly [ 1501.288773][T19921] dccp_xmit_packet: Payload too large (65475) for featneg. [ 1511.385303][T20030] dccp_xmit_packet: Payload too large (65475) for featneg. [ 1511.645330][T20032] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.4265'. [ 1511.681522][T20032] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.4265'. [ 1515.332252][T20067] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1515.332252][T20067] program syz.0.4279 not setting count and/or reply_len properly [ 1515.515520][T20067] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1515.515520][T20067] program syz.0.4279 not setting count and/or reply_len properly [ 1515.701841][T20072] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1515.729221][T20072] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1516.294068][T20081] fuse: Bad value for 'fd' [ 1522.761686][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1522.891847][ T29] audit: type=1400 audit(1723690386.839:532): avc: denied { unmount } for pid=12972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1536.143588][ T29] audit: type=1400 audit(1723690400.089:533): avc: denied { lock } for pid=20335 comm="syz.0.4370" path="socket:[81426]" dev="sockfs" ino=81426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1537.463559][ T7239] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1537.653493][ T7239] usb 2-1: Using ep0 maxpacket: 32 [ 1537.661667][ T7239] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1537.684429][ T7239] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1537.704689][ T7239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.731338][ T7239] usb 2-1: Product: syz [ 1537.740717][ T7239] usb 2-1: Manufacturer: syz [ 1537.746817][ T7239] usb 2-1: SerialNumber: syz [ 1537.768334][ T7239] usb 2-1: config 0 descriptor?? [ 1537.793757][T20363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1537.803921][ T7239] hub 2-1:0.0: bad descriptor, ignoring hub [ 1537.821026][ T7239] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1537.915592][ T7239] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 1538.082848][ T7239] usb 2-1: USB disconnect, device number 50 [ 1538.082916][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1540.632866][T20414] fuse: Unknown parameter 'group_id00000000000000000000' [ 1541.124693][T20419] netlink: 'syz.1.4404': attribute type 4 has an invalid length. [ 1541.444726][ T29] audit: type=1400 audit(1723690405.389:534): avc: denied { read } for pid=20420 comm="syz.1.4406" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1542.917170][T20431] [U] [ 1542.920251][T20431] [U] _HDZ2Fa{"(NWX3BDj3%˫Z jcJ>W!xfSIS|؈E_Q Crx [ 1542.932662][T20431] [U] o +,Vm [ 1542.936495][T20431] [U] [ 1542.939217][T20431] [U] [ 1542.941943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.952109][T20431] [U] [ 1542.954844][T20431] [U] [ 1542.957572][T20431] [U] [ 1542.960250][T20431] [U] [ 1542.962915][T20431] [U] Q2!O^#dd~ w}#IEuT9..iE“YI\ E\dhd}zQE [ 1542.972599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.044469][T20431] [U] XA(.<;{,x@ 6#Q$Y[ Av# [ 1543.051305][T20431] [U] [ 1543.054003][T20431] [U] [ 1543.633711][T20429] [U] [ 1543.968497][ T29] audit: type=1400 audit(1723690407.919:535): avc: denied { ioctl } for pid=20435 comm="syz.4.4409" path="socket:[81610]" dev="sockfs" ino=81610 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1544.076938][T20436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4409'. [ 1544.912073][ T29] audit: type=1400 audit(1723690408.859:536): avc: denied { audit_write } for pid=20463 comm="syz.0.4420" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1544.973450][ T29] audit: type=1107 audit(1723690408.899:537): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='DO=B4>T+MuŞ8H tidZB/p-V:f \΄Z G' [ 1546.536532][ T29] audit: type=1326 audit(1723690410.489:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.2.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188d799b9 code=0x7ffc0000 [ 1546.559933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.573764][ T5265] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1546.628014][ T29] audit: type=1326 audit(1723690410.489:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.2.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa188d799b9 code=0x7ffc0000 [ 1546.708236][ T29] audit: type=1326 audit(1723690410.489:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.2.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188d799b9 code=0x7ffc0000 [ 1546.788293][ T29] audit: type=1326 audit(1723690410.489:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.2.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa188d799b9 code=0x7ffc0000 [ 1546.827631][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.831104][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.873709][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.969600][ T5265] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1546.979618][T20486] serio: Serial port ptm0 [ 1547.021513][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.050770][ T5265] usb 2-1: config 0 descriptor?? [ 1547.513176][ T29] audit: type=1326 audit(1723690411.459:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1547.582567][ T5265] hid (null): bogus close delimiter [ 1547.689780][ T29] audit: type=1326 audit(1723690411.499:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1547.798240][ T5265] usb 2-1: string descriptor 0 read error: -22 [ 1547.884300][ T29] audit: type=1326 audit(1723690411.499:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1548.015234][ T5265] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 1548.043689][ T29] audit: type=1326 audit(1723690411.499:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1548.077785][ T29] audit: type=1326 audit(1723690411.509:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1548.077853][ T29] audit: type=1326 audit(1723690411.509:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.0.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ab799b9 code=0x7ffc0000 [ 1548.113718][ T5265] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 1548.113753][ T5265] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 1548.113839][ T5265] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 1548.113977][ T5265] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 1548.173985][ T5265] usb 2-1: USB disconnect, device number 51 [ 1549.931670][T11271] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1550.223498][T11271] usb 4-1: Using ep0 maxpacket: 16 [ 1550.259762][T11271] usb 4-1: config 0 has no interfaces? [ 1550.281027][T11271] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1550.311416][T11271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.354340][T11271] usb 4-1: config 0 descriptor?? [ 1550.456713][T20526] syzkaller1: entered promiscuous mode [ 1550.462567][T20526] syzkaller1: entered allmulticast mode [ 1550.773483][ T5265] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1550.820651][ T9] usb 4-1: USB disconnect, device number 28 [ 1551.013810][ T5265] usb 3-1: Using ep0 maxpacket: 16 [ 1551.055790][ T5265] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1551.099055][ T5265] usb 3-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 1551.156993][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.213494][ T5265] usb 3-1: Product: syz [ 1551.250701][ T5265] usb 3-1: Manufacturer: syz [ 1551.262883][ T5265] usb 3-1: SerialNumber: syz [ 1551.466721][T20540] input: syz0 as /devices/virtual/input/input48 [ 1552.023605][ T5265] usbhid 3-1:1.0: can't add hid device: -22 [ 1552.037638][ T5265] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 1552.094287][ T5265] usb 3-1: USB disconnect, device number 47 [ 1553.505155][T20560] syz.2.4453[20560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1553.505372][T20560] syz.2.4453[20560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1553.661487][T20563] syzkaller1: entered promiscuous mode [ 1553.694456][T20563] syzkaller1: entered allmulticast mode [ 1553.706850][T20560] pim6reg1: entered promiscuous mode [ 1553.712298][T20560] pim6reg1: entered allmulticast mode [ 1553.816029][T20564] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1554.637506][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1554.637525][ T29] audit: type=1326 audit(1723690418.589:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.2.4457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa188d799b9 code=0x0 [ 1557.258484][T20605] netlink: 'syz.3.4468': attribute type 3 has an invalid length. [ 1557.268440][T20605] netlink: 'syz.3.4468': attribute type 3 has an invalid length. [ 1557.887193][ T29] audit: type=1400 audit(1723690421.829:553): avc: denied { bind } for pid=20604 comm="syz.4.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1558.054195][T20617] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4471'. [ 1560.834093][T20645] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1560.834093][T20645] program syz.0.4478 not setting count and/or reply_len properly [ 1561.208021][T20645] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1561.208021][T20645] program syz.0.4478 not setting count and/or reply_len properly [ 1562.913467][ T29] audit: type=1400 audit(1723690426.859:554): avc: denied { create } for pid=20662 comm="syz.1.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1562.978051][T20656] serio: Serial port pts0 [ 1563.014496][T20664] lo speed is unknown, defaulting to 1000 [ 1563.067995][T20664] lo speed is unknown, defaulting to 1000 [ 1563.095627][T20664] lo speed is unknown, defaulting to 1000 [ 1563.219150][T20673] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4487'. [ 1563.241204][T20664] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1563.341789][T20664] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1564.326439][T20664] lo speed is unknown, defaulting to 1000 [ 1564.388965][T20664] lo speed is unknown, defaulting to 1000 [ 1564.425629][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'. [ 1564.455609][T20664] lo speed is unknown, defaulting to 1000 [ 1564.498986][T20664] lo speed is unknown, defaulting to 1000 [ 1564.536434][T20664] lo speed is unknown, defaulting to 1000 [ 1564.571823][T20664] lo speed is unknown, defaulting to 1000 [ 1565.137842][T20709] netlink: 'syz.1.4498': attribute type 1 has an invalid length. [ 1566.147341][T20719] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4502'. [ 1567.643995][ T5266] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1567.973549][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 1568.361541][ T5266] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1568.369991][ T5266] usb 3-1: config 179 has no interface number 0 [ 1568.383473][ T5266] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1568.403439][ T5266] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1568.431557][ T5266] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1568.733394][ T5266] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1568.773477][ T5266] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1568.780454][ T5266] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1569.465154][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.494858][T20728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1569.629947][ T5265] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1569.719465][ T5266] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input49 [ 1569.845224][ T5265] usb 5-1: Using ep0 maxpacket: 32 [ 1569.863774][ T4654] input input49: unable to receive magic message: -71 [ 1569.904963][ T5265] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1569.931130][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.943879][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1569.991114][ T5265] usb 5-1: Product: syz [ 1570.004399][ T5266] usb 3-1: USB disconnect, device number 48 [ 1570.004465][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1570.013415][ T5265] usb 5-1: Manufacturer: syz [ 1570.104242][ T5265] usb 5-1: SerialNumber: syz [ 1570.131522][ T5266] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1570.151146][ T5265] usb 5-1: config 0 descriptor?? [ 1570.813006][ T5265] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 1571.034371][ T5266] usb 5-1: USB disconnect, device number 37 [ 1571.301865][T20777] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1572.277268][T20789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20789 comm=syz.1.4520 [ 1572.819047][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.861475][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.902345][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.921853][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.946842][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.967631][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1572.983370][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.011227][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.042564][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.064643][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.072105][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.103016][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.111156][T11023] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1573.140356][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.163466][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.170914][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.178683][ T7239] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1573.241779][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.271936][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.310195][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.327983][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.349956][T11023] usb 4-1: config 0 has no interfaces? [ 1573.364991][T11023] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1573.375190][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.389555][ T7239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.409382][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.419802][T11023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.438319][ T7239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.455649][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.474891][T11023] usb 4-1: config 0 descriptor?? [ 1573.483430][ T7239] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1573.492733][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.512753][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.521651][ T7239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.536537][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.552804][ T7239] usb 3-1: config 0 descriptor?? [ 1573.568945][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.623252][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.658405][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.693039][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.733527][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.741037][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.755624][T11023] usb 4-1: USB disconnect, device number 29 [ 1573.810194][ T5265] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1573.902305][ T5265] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1574.109980][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4521'. [ 1575.845806][ T7239] usbhid 3-1:0.0: can't add hid device: -71 [ 1575.859739][ T7239] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1575.879133][T20840] @: renamed from vlan0 (while UP) [ 1575.905628][ T7239] usb 3-1: USB disconnect, device number 49 [ 1576.923158][T20864] siw: device registration error -23 [ 1578.381796][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.403368][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.431300][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.451457][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.473435][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.507977][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.527841][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.548266][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.573395][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.601523][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.623656][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.631120][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.663380][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.681223][ T7239] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1578.712006][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.742435][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.793529][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.801033][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.833422][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.853413][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.860865][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.889189][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.913730][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.927169][ T7239] usb 5-1: config 0 has no interfaces? [ 1578.932716][ T7239] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1578.963416][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1578.971093][ T7239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.987461][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.008823][ T7239] usb 5-1: config 0 descriptor?? [ 1579.016267][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.043420][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.071352][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.097272][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.119270][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.156221][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.178009][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.213955][T11023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1579.242958][ T7239] usb 5-1: USB disconnect, device number 38 [ 1579.309171][T11023] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1685.913251][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1685.920461][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20893/1:b..l P20878/1:b..l [ 1685.930546][ C1] rcu: (detected by 1, t=10502 jiffies, g=180585, q=60 ncpus=2) [ 1685.938276][ C1] task:syz.1.4538 state:R running task stack:25808 pid:20878 tgid:20876 ppid:16801 flags:0x00004002 [ 1685.951969][ C1] Call Trace: [ 1685.955265][ C1] [ 1685.958211][ C1] __schedule+0xe37/0x5490 [ 1685.962639][ C1] ? hlock_class+0x4e/0x130 [ 1685.967173][ C1] ? mark_lock+0xb5/0xc60 [ 1685.971511][ C1] ? find_held_lock+0x2d/0x110 [ 1685.976311][ C1] ? __pfx___schedule+0x10/0x10 [ 1685.981194][ C1] ? find_held_lock+0x2d/0x110 [ 1685.985970][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1685.991331][ C1] preempt_schedule_common+0x44/0xc0 [ 1685.996644][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1686.001861][ C1] _raw_spin_unlock+0x3e/0x50 [ 1686.006567][ C1] unmap_page_range+0xbb8/0x3c10 [ 1686.011594][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1686.017158][ C1] unmap_single_vma+0x194/0x2b0 [ 1686.022113][ C1] unmap_vmas+0x22f/0x490 [ 1686.026475][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1686.031342][ C1] ? __pfx_lock_release+0x10/0x10 [ 1686.036369][ C1] exit_mmap+0x1b8/0xb20 [ 1686.040631][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1686.045433][ C1] __mmput+0x12a/0x480 [ 1686.049533][ C1] mmput+0x62/0x70 [ 1686.053253][ C1] do_exit+0x9bf/0x2bb0 [ 1686.057419][ C1] ? get_signal+0x8f2/0x2770 [ 1686.062035][ C1] ? __pfx_do_exit+0x10/0x10 [ 1686.066654][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1686.071687][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1686.077053][ C1] do_group_exit+0xd3/0x2a0 [ 1686.081559][ C1] get_signal+0x25fd/0x2770 [ 1686.086065][ C1] ? __pfx_get_signal+0x10/0x10 [ 1686.090911][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1686.096454][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1686.102617][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1686.108283][ C1] do_syscall_64+0xda/0x250 [ 1686.112788][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.118701][ C1] RIP: 0033:0x7f8973f799b9 [ 1686.123227][ C1] RSP: 002b:00007f8974d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1686.131735][ C1] RAX: 0000000000df7b80 RBX: 00007f8974115f80 RCX: 00007f8973f799b9 [ 1686.139712][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000556 [ 1686.147694][ C1] RBP: 00007f8973fe78d8 R08: 0000000000000286 R09: 0000000000000000 [ 1686.155863][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 1686.163866][ C1] R13: 0000000000000000 R14: 00007f8974115f80 R15: 00007ffdf6cfdb78 [ 1686.171861][ C1] [ 1686.174926][ C1] task:syz.4.4543 state:R running task stack:26240 pid:20893 tgid:20891 ppid:12972 flags:0x00004004 [ 1686.186662][ C1] Call Trace: [ 1686.190024][ C1] [ 1686.192979][ C1] __schedule+0xe37/0x5490 [ 1686.197416][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1686.202177][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1686.206961][ C1] ? __pfx___schedule+0x10/0x10 [ 1686.211857][ C1] ? find_held_lock+0x2d/0x110 [ 1686.216635][ C1] ? mark_held_locks+0x9f/0xe0 [ 1686.221402][ C1] preempt_schedule_irq+0x51/0x90 [ 1686.226428][ C1] irqentry_exit+0x36/0x90 [ 1686.230921][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1686.236901][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 1686.242188][ C1] Code: c1 05 ea 0d 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 1686.261810][ C1] RSP: 0018:ffffc9000348f818 EFLAGS: 00000206 [ 1686.267872][ C1] RAX: dffffc0000000000 RBX: 1ffff92000691f05 RCX: 0000000000000001 [ 1686.275859][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb09380 [ 1686.283861][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c60d8 [ 1686.291849][ C1] R10: ffffffff946306c7 R11: 0000000000000000 R12: 0000000000000000 [ 1686.299821][ C1] R13: 0000000000000000 R14: ffffffff8ddb5ba0 R15: 0000000000000000 [ 1686.307900][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1686.312960][ C1] ? hlock_class+0x4e/0x130 [ 1686.317467][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 1686.322428][ C1] __pte_offset_map+0x48/0x540 [ 1686.327199][ C1] ? __pte_offset_map+0x42/0x540 [ 1686.332145][ C1] __pte_offset_map_lock+0x8e/0x300 [ 1686.337375][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 1686.343213][ C1] follow_page_pte+0xde/0x1cf0 [ 1686.348012][ C1] ? __pfx_lock_release+0x10/0x10 [ 1686.353031][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1686.358323][ C1] follow_page_mask+0x3a1/0x21d0 [ 1686.363282][ C1] ? handle_mm_fault+0x4c9/0x7b0 [ 1686.368239][ C1] __get_user_pages+0x32d/0x15c0 [ 1686.373168][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1686.378556][ C1] populate_vma_page_range+0x27f/0x3a0 [ 1686.384021][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1686.390202][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1686.396052][ C1] ? vm_mmap_pgoff+0x25b/0x360 [ 1686.400849][ C1] __mm_populate+0x1d6/0x380 [ 1686.405565][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1686.410724][ C1] ? up_write+0x1b2/0x520 [ 1686.415137][ C1] vm_mmap_pgoff+0x293/0x360 [ 1686.419826][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1686.424957][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 1686.429989][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 1686.435031][ C1] ksys_mmap_pgoff+0x7d/0x5d0 [ 1686.439839][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1686.445753][ C1] __x64_sys_mmap+0x125/0x190 [ 1686.450459][ C1] do_syscall_64+0xcd/0x250 [ 1686.454973][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.460868][ C1] RIP: 0033:0x7fef7f1799b9 [ 1686.465310][ C1] RSP: 002b:00007fef7ff18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1686.474004][ C1] RAX: ffffffffffffffda RBX: 00007fef7f316058 RCX: 00007fef7f1799b9 [ 1686.482003][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 1686.490163][ C1] RBP: 00007fef7f1e78d8 R08: ffffffffffffffff R09: 0000000000000000 [ 1686.498489][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1686.506665][ C1] R13: 0000000000000000 R14: 00007fef7f316058 R15: 00007ffd3bd4b3b8 [ 1686.514999][ C1] [ 1686.518122][ C1] rcu: rcu_preempt kthread starved for 10221 jiffies! g180585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1686.529527][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1686.539919][ C1] rcu: RCU grace-period kthread stack dump: [ 1686.545985][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1686.558348][ C1] Call Trace: [ 1686.562211][ C1] [ 1686.565150][ C1] __schedule+0xe37/0x5490 [ 1686.569569][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1686.574848][ C1] ? __pfx___schedule+0x10/0x10 [ 1686.579792][ C1] ? schedule+0x298/0x350 [ 1686.584129][ C1] ? __pfx_lock_release+0x10/0x10 [ 1686.589259][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1686.594354][ C1] ? lock_acquire+0x1b1/0x560 [ 1686.599343][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1686.605162][ C1] schedule+0xe7/0x350 [ 1686.609404][ C1] schedule_timeout+0x136/0x2a0 [ 1686.614516][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1686.619903][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1686.625357][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1686.631244][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1686.636702][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1686.641487][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1686.646791][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1686.651569][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1686.656803][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1686.662616][ C1] rcu_gp_kthread+0x271/0x380 [ 1686.667350][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1686.672607][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1686.677833][ C1] ? __kthread_parkme+0x148/0x220 [ 1686.682894][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1686.688098][ C1] kthread+0x2c1/0x3a0 [ 1686.692193][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1686.697411][ C1] ? __pfx_kthread+0x10/0x10 [ 1686.702021][ C1] ret_from_fork+0x45/0x80 [ 1686.706460][ C1] ? __pfx_kthread+0x10/0x10 [ 1686.711046][ C1] ret_from_fork_asm+0x1a/0x30 [ 1686.715811][ C1] [ 1686.718852][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1686.725303][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1686.730576][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20