last executing test programs: 5.850259424s ago: executing program 1 (id=883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 5.849990312s ago: executing program 1 (id=885): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.796110034s ago: executing program 1 (id=887): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) 5.409374285s ago: executing program 1 (id=891): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040841, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) 2.928380765s ago: executing program 3 (id=925): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x40806685, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000940)=""/95, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0, 0x0) 2.859648278s ago: executing program 3 (id=926): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x3}) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0)) 2.75681709s ago: executing program 3 (id=927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.75666003s ago: executing program 3 (id=928): syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c"], 0x0) 2.248305068s ago: executing program 0 (id=930): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x8}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x404, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.599937295s ago: executing program 3 (id=933): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002207000000351c9e27864c96e3"], 0x0}, 0x0) 1.441490728s ago: executing program 1 (id=891): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040841, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) 1.40001464s ago: executing program 1 (id=935): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x2752789b59c001a2, 0x400, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, 0x0, r4) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 1.350103401s ago: executing program 0 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, 0x0, r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 1.279908435s ago: executing program 0 (id=938): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x27, 0x22, 0x0, 0xffffffff, 0x8, 0x1000a9, 0x4, 0x20000003, 0x1}) 1.279817398s ago: executing program 0 (id=939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x6e26f8d0169bb25f, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x10) 1.230325905s ago: executing program 0 (id=940): syz_clone(0x401000, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/41, 0x29) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) truncate(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f"], 0x2c}], 0x1}, 0x0) 747.132084ms ago: executing program 2 (id=945): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001e00)={0x0, 0x1, 0x0, &(0x7f0000000900)=""/11, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f00000002c0)=""/95}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004fc0)={0x1, 0x0, [{0x8000000, 0x1000, &(0x7f0000003fc0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000780)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0xb3e7, 0x8, 0x1}) 689.617712ms ago: executing program 2 (id=946): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140), 0x4) 689.462717ms ago: executing program 2 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 560.264424ms ago: executing program 2 (id=948): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x3, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 559.967961ms ago: executing program 2 (id=949): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0xb2b9, 0x24, 0x81, 0xe4, 0x6, 0xfc000000, 0x10003, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe769, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 488.476315ms ago: executing program 0 (id=950): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES8], 0x0) 299.96725ms ago: executing program 2 (id=951): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="40174300000034a6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=952): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x40, 0x21, 0x2, {0x2, 0x2}}, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x8, "21d015d3"}, @global=@item_012={0x2, 0x1, 0x5, 'U\b'}, @global=@item_4={0x3, 0x1, 0x4, "42a59fc0"}]}}, 0x0}, 0x0) 0s ago: executing program 0 (id=953): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3.732028][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.734252][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.736508][ T5744] bridge_slave_1: entered allmulticast mode [ 53.739939][ T5744] bridge_slave_1: entered promiscuous mode [ 53.753788][ T5750] team0: Port device team_slave_0 added [ 53.777909][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.780948][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.784386][ T5738] bridge_slave_0: entered allmulticast mode [ 53.787633][ T5738] bridge_slave_0: entered promiscuous mode [ 53.790779][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.793543][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.795921][ T5738] bridge_slave_1: entered allmulticast mode [ 53.798579][ T5738] bridge_slave_1: entered promiscuous mode [ 53.802587][ T5750] team0: Port device team_slave_1 added [ 53.815047][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.820926][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.866626][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.869744][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.881111][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.894395][ T5744] team0: Port device team_slave_0 added [ 53.898638][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.903922][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.906983][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.917879][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.935111][ T5744] team0: Port device team_slave_1 added [ 53.939592][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.980337][ T5738] team0: Port device team_slave_0 added [ 53.992582][ T5738] team0: Port device team_slave_1 added [ 54.054124][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.056248][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.063884][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.071954][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.074919][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.085391][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.095483][ T5750] hsr_slave_0: entered promiscuous mode [ 54.098664][ T5750] hsr_slave_1: entered promiscuous mode [ 54.101585][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 54.105126][ T5750] Cannot create hsr debugfs directory [ 54.108558][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.111494][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.121200][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.136112][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.138715][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.148199][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.222397][ T5744] hsr_slave_0: entered promiscuous mode [ 54.224629][ T5744] hsr_slave_1: entered promiscuous mode [ 54.226751][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 54.228559][ T5744] Cannot create hsr debugfs directory [ 54.257621][ T5738] hsr_slave_0: entered promiscuous mode [ 54.259686][ T5738] hsr_slave_1: entered promiscuous mode [ 54.262032][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 54.264180][ T5738] Cannot create hsr debugfs directory [ 54.326759][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.336025][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.367488][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.373009][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.381331][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.387895][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.395936][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.400338][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.562455][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.567634][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.571335][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.577775][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.580900][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.585628][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.588440][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.594275][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.661954][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.669453][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.674895][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.680362][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.684167][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.690012][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.693802][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.699942][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.767454][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.794147][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.798455][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.803463][ T5749] Bluetooth: hci3: command tx timeout [ 54.810164][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.812901][ T5749] Bluetooth: hci0: command tx timeout [ 54.816825][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.819653][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.823824][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.827024][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.831457][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.835412][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.854990][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.858555][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.883585][ T5749] Bluetooth: hci2: command tx timeout [ 54.886808][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.889916][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.891997][ T5749] Bluetooth: hci1: command tx timeout [ 54.915921][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.955420][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.971200][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.989461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.992876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.005404][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.008515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.026187][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.045701][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.049007][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.057051][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.067559][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.070070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.113779][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.130865][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.133198][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.155604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.158600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.347255][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.389734][ T5737] veth0_vlan: entered promiscuous mode [ 55.405624][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.411659][ T5737] veth1_vlan: entered promiscuous mode [ 55.434900][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.466584][ T5737] veth0_macvtap: entered promiscuous mode [ 55.476913][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.482863][ T5737] veth1_macvtap: entered promiscuous mode [ 55.486070][ T5744] veth0_vlan: entered promiscuous mode [ 55.507800][ T5744] veth1_vlan: entered promiscuous mode [ 55.518090][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.525945][ T5750] veth0_vlan: entered promiscuous mode [ 55.538773][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.549879][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.554249][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.563285][ T5750] veth1_vlan: entered promiscuous mode [ 55.566517][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.569549][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.607280][ T5738] veth0_vlan: entered promiscuous mode [ 55.622302][ T5744] veth0_macvtap: entered promiscuous mode [ 55.640055][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.640725][ T5750] veth0_macvtap: entered promiscuous mode [ 55.644139][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.653280][ T5744] veth1_macvtap: entered promiscuous mode [ 55.659318][ T5738] veth1_vlan: entered promiscuous mode [ 55.668553][ T5750] veth1_macvtap: entered promiscuous mode [ 55.679367][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.682144][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.691249][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.697464][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.707462][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.714612][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.719707][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.734874][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.738181][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.738188][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.741101][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758866][ T5738] veth0_macvtap: entered promiscuous mode [ 55.768916][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.773104][ T5738] veth1_macvtap: entered promiscuous mode [ 55.781926][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785640][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.805077][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.829099][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.855570][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.872154][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.875256][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.898152][ T218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.902240][ T218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.916094][ T5888] pimreg9: entered allmulticast mode [ 55.919975][ T218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.924492][ T218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.950129][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.958173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.968703][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.971365][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.002614][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.008009][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.008895][ T5890] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 56.038878][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.045176][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.063919][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.069364][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.176415][ T5898] fuse: Bad value for 'fd' [ 56.180819][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 56.307174][ T5916] Bluetooth: MGMT ver 1.23 [ 56.326846][ T5916] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 56.331294][ T5916] bond1 (unregistering): Released all slaves [ 56.362358][ T5919] Cannot find del_set index 0 as target [ 56.381560][ T5922] Invalid source name [ 56.383475][ T5922] UBIFS error (pid: 5922): cannot open "/dev/sg0", error -22 [ 56.391118][ T5924] syzkaller0: entered promiscuous mode [ 56.396214][ T5924] syzkaller0: entered allmulticast mode [ 56.488366][ T5936] loop3: detected capacity change from 0 to 7 [ 56.496686][ T5936] Dev loop3: unable to read RDB block 7 [ 56.499358][ T5936] loop3: unable to read partition table [ 56.501601][ T5932] bond1: option xmit_hash_policy: invalid value (6) [ 56.505649][ T5936] loop3: partition table beyond EOD, truncated [ 56.506286][ T5932] bond1 (unregistering): Released all slaves [ 56.508411][ T5936] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 56.530283][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 56.534136][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 56.613768][ T5941] syzkaller0: entered promiscuous mode [ 56.615568][ T5941] syzkaller0: entered allmulticast mode [ 56.788999][ T5948] Cannot find del_set index 0 as target [ 56.882710][ T5749] Bluetooth: hci0: command tx timeout [ 56.882726][ T62] Bluetooth: hci3: command tx timeout [ 56.972159][ T62] Bluetooth: hci1: command tx timeout [ 56.972692][ T5749] Bluetooth: hci2: command tx timeout [ 57.076324][ T5956] FAULT_INJECTION: forcing a failure. [ 57.076324][ T5956] name failslab, interval 1, probability 0, space 0, times 0 [ 57.083126][ T5958] loop9: detected capacity change from 0 to 127 [ 57.083469][ T5956] CPU: 3 UID: 0 PID: 5956 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 57.083491][ T5956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.083502][ T5956] Call Trace: [ 57.083509][ T5956] [ 57.083517][ T5956] dump_stack_lvl+0x100/0x190 [ 57.083554][ T5956] should_fail_ex.cold+0x5/0xa [ 57.083580][ T5956] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 57.083614][ T5956] should_failslab+0xc2/0x120 [ 57.083636][ T5956] __kmalloc_noprof+0xe0/0x850 [ 57.083669][ T5956] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 57.083701][ T5956] genl_family_rcv_msg_doit+0xc7/0x300 [ 57.083729][ T5956] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 57.083763][ T5956] ? bpf_lsm_capable+0x9/0x10 [ 57.083783][ T5956] ? security_capable+0x80/0x260 [ 57.083814][ T5956] ? ns_capable+0xd2/0xf0 [ 57.083842][ T5956] genl_rcv_msg+0x560/0x800 [ 57.083870][ T5956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 57.083896][ T5956] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 57.083928][ T5956] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 57.083947][ T5956] ? __pfx_nl80211_post_doit+0x10/0x10 [ 57.083982][ T5956] netlink_rcv_skb+0x159/0x420 [ 57.084005][ T5956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 57.084031][ T5956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 57.084065][ T5956] ? netlink_deliver_tap+0x1ae/0xcc0 [ 57.084091][ T5956] genl_rcv+0x28/0x40 [ 57.084113][ T5956] netlink_unicast+0x585/0x850 [ 57.084140][ T5956] ? __pfx_netlink_unicast+0x10/0x10 [ 57.084170][ T5956] netlink_sendmsg+0x8b0/0xda0 [ 57.084203][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.084225][ T5956] ? __might_fault+0xc0/0x140 [ 57.084260][ T5956] ____sys_sendmsg+0x9e1/0xb70 [ 57.084296][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.084321][ T5956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.084353][ T5956] ___sys_sendmsg+0x190/0x1e0 [ 57.084378][ T5956] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.084430][ T5956] __sys_sendmsg+0x170/0x220 [ 57.084459][ T5956] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.084498][ T5956] ? rcu_is_watching+0x12/0xc0 [ 57.084529][ T5956] do_syscall_64+0x115/0x870 [ 57.084552][ T5956] ? clear_bhb_loop+0x40/0x90 [ 57.084576][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.084595][ T5956] RIP: 0033:0x7fe4f319ce59 [ 57.084612][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.084629][ T5956] RSP: 002b:00007fe4f3f82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.084647][ T5956] RAX: ffffffffffffffda RBX: 00007fe4f3415fa0 RCX: 00007fe4f319ce59 [ 57.084658][ T5956] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000005 [ 57.084670][ T5956] RBP: 00007fe4f3f82090 R08: 0000000000000000 R09: 0000000000000000 [ 57.084681][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.084690][ T5956] R13: 00007fe4f3416038 R14: 00007fe4f3415fa0 R15: 00007ffefbc7f6d8 [ 57.084715][ T5956] [ 57.134988][ T5962] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 57.180533][ T5964] Mount JFS Failure: -5 [ 57.190223][ T5964] jfs_mount failed w/return code = -5 [ 57.191262][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.285650][ T5967] syzkaller0: entered promiscuous mode [ 57.288047][ T5967] syzkaller0: entered allmulticast mode [ 57.435065][ T5975] 9p: Unknown access argument v:+f`άuHC"U|CS I~MֻfJ$~hxVhub 4xP@($wMp鴺T{(CG.izq{[mc: -22 [ 57.446805][ T5977] netlink: 180 bytes leftover after parsing attributes in process `syz.1.31'. [ 57.450218][ T5977] netlink: 180 bytes leftover after parsing attributes in process `syz.1.31'. [ 57.539709][ T5983] syzkaller0: entered promiscuous mode [ 57.542075][ T5983] syzkaller0: entered allmulticast mode [ 57.575721][ T5989] netlink: 'syz.0.35': attribute type 23 has an invalid length. [ 57.618682][ T5992] Cannot find del_set index 0 as target [ 57.658066][ T5995] syzkaller0: entered promiscuous mode [ 57.660405][ T5995] syzkaller0: entered allmulticast mode [ 57.675703][ T5996] syzkaller0: entered promiscuous mode [ 57.675801][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 57.675811][ T40] audit: type=1400 audit(1781049601.222:260): avc: denied { append } for pid=5993 comm="syz.2.39" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.677898][ T5998] QAT: Device 2 not found [ 57.677997][ T5996] syzkaller0: entered allmulticast mode [ 57.680299][ T5998] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 57.696217][ T5998] overlayfs: overlapping lowerdir path [ 57.706525][ T40] audit: type=1400 audit(1781049601.252:261): avc: denied { mount } for pid=5997 comm="syz.0.40" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.716676][ T5998] mac80211_hwsim hwsim5 : renamed from wlan0 (while UP) [ 57.716761][ T40] audit: type=1400 audit(1781049601.252:262): avc: denied { watch } for pid=5997 comm="syz.0.40" path="/16/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.755500][ T5998] ip6gretap1: entered promiscuous mode [ 57.758009][ T5998] ip6gretap1: entered allmulticast mode [ 57.849991][ T40] audit: type=1400 audit(1781049601.392:263): avc: denied { unmount } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.866502][ T6000] netlink: 256 bytes leftover after parsing attributes in process `syz.3.41'. [ 57.870187][ T6000] netlink: 56 bytes leftover after parsing attributes in process `syz.3.41'. [ 57.879647][ T40] audit: type=1400 audit(1781049601.422:264): avc: denied { read } for pid=6003 comm="syz.0.42" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.991228][ T6014] FAULT_INJECTION: forcing a failure. [ 57.991228][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 57.996219][ T6014] CPU: 2 UID: 0 PID: 6014 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 57.996235][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.996242][ T6014] Call Trace: [ 57.996248][ T6014] [ 57.996253][ T6014] dump_stack_lvl+0x100/0x190 [ 57.996278][ T6014] should_fail_ex.cold+0x5/0xa [ 57.996306][ T6014] should_failslab+0xc2/0x120 [ 57.996325][ T6014] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 57.996348][ T6014] ? __alloc_skb+0x140/0x710 [ 57.996366][ T6014] __alloc_skb+0x140/0x710 [ 57.996381][ T6014] ? __alloc_skb+0x5b7/0x710 [ 57.996396][ T6014] ? __pfx___alloc_skb+0x10/0x10 [ 57.996411][ T6014] ? genl_rcv_msg+0x4be/0x800 [ 57.996430][ T6014] netlink_ack+0x117/0xb80 [ 57.996446][ T6014] netlink_rcv_skb+0x333/0x420 [ 57.996460][ T6014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 57.996475][ T6014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 57.996494][ T6014] ? netlink_deliver_tap+0x1ae/0xcc0 [ 57.996508][ T6014] genl_rcv+0x28/0x40 [ 57.996521][ T6014] netlink_unicast+0x585/0x850 [ 57.996536][ T6014] ? __pfx_netlink_unicast+0x10/0x10 [ 57.996553][ T6014] netlink_sendmsg+0x8b0/0xda0 [ 57.996569][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.996581][ T6014] ? __might_fault+0xc0/0x140 [ 57.996602][ T6014] ____sys_sendmsg+0x9e1/0xb70 [ 57.996614][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.996629][ T6014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.996647][ T6014] ___sys_sendmsg+0x190/0x1e0 [ 57.996661][ T6014] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.996689][ T6014] __sys_sendmsg+0x170/0x220 [ 57.996707][ T6014] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.996732][ T6014] ? rcu_is_watching+0x12/0xc0 [ 57.996751][ T6014] do_syscall_64+0x115/0x870 [ 57.996766][ T6014] ? clear_bhb_loop+0x40/0x90 [ 57.996783][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.996794][ T6014] RIP: 0033:0x7f6748b9ce59 [ 57.996803][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.996813][ T6014] RSP: 002b:00007f674998d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.996824][ T6014] RAX: ffffffffffffffda RBX: 00007f6748e15fa0 RCX: 00007f6748b9ce59 [ 57.996831][ T6014] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000005 [ 57.996837][ T6014] RBP: 00007f674998d090 R08: 0000000000000000 R09: 0000000000000000 [ 57.996843][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.996849][ T6014] R13: 00007f6748e16038 R14: 00007f6748e15fa0 R15: 00007fff2a501348 [ 57.996862][ T6014] [ 58.110207][ T6018] veth1_macvtap: left promiscuous mode [ 58.113367][ T6018] macsec0: entered promiscuous mode [ 58.120255][ T40] audit: type=1326 audit(1781049601.662:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6748b9ce59 code=0x7ffc0000 [ 58.127807][ T6018] veth1_macvtap: entered promiscuous mode [ 58.127862][ T40] audit: type=1326 audit(1781049601.662:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6748b9ce59 code=0x7ffc0000 [ 58.131022][ T6018] macsec0: left promiscuous mode [ 58.138694][ T40] audit: type=1326 audit(1781049601.662:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6748b9ce59 code=0x7ffc0000 [ 58.148951][ T40] audit: type=1326 audit(1781049601.662:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6748b9ce59 code=0x7ffc0000 [ 58.157779][ T40] audit: type=1326 audit(1781049601.662:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6748b9ce59 code=0x7ffc0000 [ 58.217505][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.47'. [ 58.225829][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 58.328128][ T6026] syzkaller0: entered promiscuous mode [ 58.330391][ T6026] syzkaller0: entered allmulticast mode [ 58.766514][ T6031] nfs: Unknown parameter '00000000000000000004' [ 58.923463][ T6036] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 58.954697][ T6038] Cannot find del_set index 0 as target [ 58.962230][ T5749] Bluetooth: hci0: command tx timeout [ 58.962292][ T62] Bluetooth: hci3: command tx timeout [ 58.985376][ T6041] loop3: detected capacity change from 0 to 7 [ 58.989714][ T6041] Dev loop3: unable to read RDB block 7 [ 58.992184][ T6041] loop3: unable to read partition table [ 58.994582][ T6041] loop3: partition table beyond EOD, truncated [ 58.997142][ T6041] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 59.042043][ T62] Bluetooth: hci2: command tx timeout [ 59.042058][ T5749] Bluetooth: hci1: command tx timeout [ 59.048586][ T6044] faux_driver vgem: [drm] Unknown color mode 135172; guessing buffer size. [ 59.088047][ T6049] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.138052][ T6051] FAULT_INJECTION: forcing a failure. [ 59.138052][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 59.143604][ T6051] CPU: 3 UID: 0 PID: 6051 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 59.143627][ T6051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.143636][ T6051] Call Trace: [ 59.143642][ T6051] [ 59.143649][ T6051] dump_stack_lvl+0x100/0x190 [ 59.143670][ T6051] should_fail_ex.cold+0x5/0xa [ 59.143693][ T6051] should_failslab+0xc2/0x120 [ 59.143712][ T6051] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 59.143735][ T6051] ? skb_clone+0x190/0x400 [ 59.143760][ T6051] skb_clone+0x190/0x400 [ 59.143785][ T6051] netlink_deliver_tap+0xaed/0xcc0 [ 59.143808][ T6051] netlink_unicast+0x6a5/0x850 [ 59.143831][ T6051] ? __pfx_netlink_unicast+0x10/0x10 [ 59.143845][ T6051] ? genl_rcv_msg+0x4be/0x800 [ 59.143873][ T6051] netlink_ack+0x655/0xb80 [ 59.143899][ T6051] netlink_rcv_skb+0x333/0x420 [ 59.143916][ T6051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.143936][ T6051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.143965][ T6051] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.143987][ T6051] genl_rcv+0x28/0x40 [ 59.144004][ T6051] netlink_unicast+0x585/0x850 [ 59.144024][ T6051] ? __pfx_netlink_unicast+0x10/0x10 [ 59.144050][ T6051] netlink_sendmsg+0x8b0/0xda0 [ 59.144073][ T6051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.144089][ T6051] ? __might_fault+0xc0/0x140 [ 59.144127][ T6051] ____sys_sendmsg+0x9e1/0xb70 [ 59.144144][ T6051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.144165][ T6051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.144190][ T6051] ___sys_sendmsg+0x190/0x1e0 [ 59.144212][ T6051] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.144257][ T6051] __sys_sendmsg+0x170/0x220 [ 59.144279][ T6051] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.144313][ T6051] ? rcu_is_watching+0x12/0xc0 [ 59.144339][ T6051] do_syscall_64+0x115/0x870 [ 59.144357][ T6051] ? clear_bhb_loop+0x40/0x90 [ 59.144376][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.144392][ T6051] RIP: 0033:0x7f0e0439ce59 [ 59.144426][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.144438][ T6051] RSP: 002b:00007f0e052ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.144455][ T6051] RAX: ffffffffffffffda RBX: 00007f0e04615fa0 RCX: 00007f0e0439ce59 [ 59.144465][ T6051] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000005 [ 59.144474][ T6051] RBP: 00007f0e052ae090 R08: 0000000000000000 R09: 0000000000000000 [ 59.144482][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.144491][ T6051] R13: 00007f0e04616038 R14: 00007f0e04615fa0 R15: 00007ffdd94a4068 [ 59.144512][ T6051] [ 59.149584][ T6052] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.244406][ T6058] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.294328][ T6065] devpts: Bad value for 'max' [ 59.298519][ T6058] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.302231][ T6065] process 'syz.0.62' launched './file2' with NULL argv: empty string added [ 59.308268][ T6058] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.315118][ T6065] input: syz0 as /devices/virtual/input/input5 [ 59.369035][ T6072] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 59.421651][ T6078] loop3: detected capacity change from 0 to 7 [ 59.428540][ T6078] Dev loop3: unable to read RDB block 7 [ 59.430748][ T6078] loop3: unable to read partition table [ 59.433583][ T6078] loop3: partition table beyond EOD, truncated [ 59.436357][ T6078] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 59.597839][ T6096] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 59.607948][ T6096] CIFS mount error: No usable UNC path provided in device string! [ 59.607948][ T6096] [ 59.614756][ T6096] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.725071][ T6117] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 59.732696][ T6117] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 59.735136][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.68'. [ 59.737942][ T6117] dummy0: entered promiscuous mode [ 59.860886][ T6139] gtp0: entered promiscuous mode [ 59.862818][ T6139] gtp0: entered allmulticast mode [ 59.865917][ T6139] team0: Device gtp0 is of different type [ 60.390645][ T6164] ata1.00: invalid multi_count 128 ignored [ 61.041987][ T62] Bluetooth: hci3: command tx timeout [ 61.042059][ T5749] Bluetooth: hci0: command tx timeout [ 61.122234][ T5749] Bluetooth: hci2: command tx timeout [ 61.122447][ T62] Bluetooth: hci1: command tx timeout [ 61.364336][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 61.368471][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 63.442213][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.447287][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 63.450606][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 65.522176][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.524955][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 65.526790][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 67.602152][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.606838][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 67.608762][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 67.772465][ T6179] overlayfs: failed to resolve './bus': -2 [ 67.790046][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 67.790062][ T40] audit: type=1400 audit(1781049611.332:422): avc: denied { create } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.813059][ T40] audit: type=1400 audit(1781049611.342:423): avc: denied { write } for pid=6176 comm="syz.0.81" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.822491][ T40] audit: type=1400 audit(1781049611.342:424): avc: denied { getopt } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.829747][ T6187] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.85'. [ 67.830160][ T40] audit: type=1400 audit(1781049611.352:425): avc: denied { create } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.840777][ T40] audit: type=1400 audit(1781049611.352:426): avc: denied { ioctl } for pid=6181 comm="syz.3.83" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.850915][ T40] audit: type=1400 audit(1781049611.352:427): avc: denied { bind } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.857102][ T40] audit: type=1400 audit(1781049611.352:428): avc: denied { create } for pid=6176 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.864611][ T40] audit: type=1400 audit(1781049611.352:429): avc: denied { ioctl } for pid=6176 comm="syz.0.81" path="socket:[9980]" dev="sockfs" ino=9980 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.874889][ T40] audit: type=1400 audit(1781049611.352:430): avc: denied { connect } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.883014][ T40] audit: type=1400 audit(1781049611.352:431): avc: denied { write } for pid=6181 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.082751][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.170635][ T6202] syzkaller0: entered promiscuous mode [ 68.173166][ T6202] syzkaller0: entered allmulticast mode [ 68.254284][ T5822] usb 5-1: config 1 has an invalid interface number: 249 but max is 1 [ 68.257606][ T5822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.260655][ T5822] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 68.264322][ T5822] usb 5-1: config 1 has no interface number 2 [ 68.266477][ T5822] usb 5-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.270464][ T5822] usb 5-1: config 1 interface 249 has no altsetting 0 [ 68.275844][ T5822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.278728][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.281319][ T5822] usb 5-1: Product: syz [ 68.283087][ T5822] usb 5-1: Manufacturer: syz [ 68.284541][ T5822] usb 5-1: SerialNumber: syz [ 68.294839][ T5822] cdc_ncm 5-1:1.0: skipping garbage [ 68.296795][ T5822] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 68.299485][ T5822] cdc_ncm 5-1:1.0: bind() failure [ 68.307969][ T5822] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 68.310204][ T5822] cdc_ncm 5-1:1.1: bind() failure [ 68.415879][ T6204] Cannot find map_set index 3 as target [ 68.526737][ T6217] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.532070][ T5822] cdc_mbim 5-1:1.249: probe with driver cdc_mbim failed with error -71 [ 68.541053][ T5822] usb 5-1: USB disconnect, device number 2 [ 68.586796][ T6206] syzkaller0: entered promiscuous mode [ 68.588577][ T6206] syzkaller0: entered allmulticast mode [ 68.675900][ T6223] lo speed is unknown, defaulting to 1000 [ 68.679672][ T6223] lo speed is unknown, defaulting to 1000 [ 68.684446][ T6223] lo speed is unknown, defaulting to 1000 [ 68.765923][ T6223] infiniband sz1: set active [ 68.767877][ T6223] infiniband sz1: added lo [ 68.768331][ T24] lo speed is unknown, defaulting to 1000 [ 68.777397][ T6223] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 68.783917][ T6223] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 68.790091][ T6223] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 68.813753][ T6223] RDS/IB: sz1: added [ 68.815309][ T6223] smc: adding ib device sz1 with port count 1 [ 68.817389][ T6223] smc: ib device sz1 port 1 has no pnetid [ 68.820939][ T24] lo speed is unknown, defaulting to 1000 [ 68.824299][ T6223] lo speed is unknown, defaulting to 1000 [ 68.851042][ T6232] loop3: detected capacity change from 0 to 7 [ 68.856206][ T6232] Dev loop3: unable to read RDB block 7 [ 68.857998][ T6232] loop3: unable to read partition table [ 68.859882][ T6232] loop3: partition table beyond EOD, truncated [ 68.861926][ T6232] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 68.930518][ T6239] Cannot find map_set index 3 as target [ 68.977215][ T6223] lo speed is unknown, defaulting to 1000 [ 69.011293][ T6241] binder: 6240:6241 ioctl c0306201 200000000640 returned -22 [ 69.038411][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 69.061048][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880383b5c00: rx timeout, send abort [ 69.066433][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880383b5c00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.080781][ T6251] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.111629][ T6223] lo speed is unknown, defaulting to 1000 [ 69.117253][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 69.244571][ T6263] Cannot find map_set index 3 as target [ 69.246972][ T6223] lo speed is unknown, defaulting to 1000 [ 69.294223][ T6266] usb usb9: usbfs: process 6266 (syz.3.110) did not claim interface 8 before use [ 69.299742][ T6266] kvm: kvm [6265]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000066) = 0x402ff [ 69.336460][ T6264] Zero length message leads to an empty skb [ 69.504163][ T6292] ======================================================= [ 69.504163][ T6292] WARNING: The mand mount option has been deprecated and [ 69.504163][ T6292] and is ignored by this kernel. Remove the mand [ 69.504163][ T6292] option from the mount to silence this warning. [ 69.504163][ T6292] ======================================================= [ 69.504527][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 69.518668][ T6292] gfs2: not a GFS2 filesystem [ 69.542083][ T6296] Cannot find del_set index 0 as target [ 69.569183][ T6290] hsr_slave_1 (unregistering): left promiscuous mode [ 69.602823][ T6303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16920 sclass=netlink_route_socket pid=6303 comm=syz.1.122 [ 69.646158][ T6303] xt_CT: No such helper "pptp" [ 69.682974][ T6297] block nbd0: shutting down sockets [ 69.719515][ T6313] loop3: detected capacity change from 0 to 7 [ 69.727878][ T6313] Dev loop3: unable to read RDB block 7 [ 69.729977][ T6313] loop3: unable to read partition table [ 69.732283][ T6313] loop3: partition table beyond EOD, truncated [ 69.733578][ T6315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.126'. [ 69.734902][ T6313] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 69.809968][ T6319] syzkaller0: entered promiscuous mode [ 69.813434][ T6319] syzkaller0: entered allmulticast mode [ 69.951990][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.102121][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 70.105635][ T24] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 70.108893][ T24] usb 5-1: config 0 has no interface number 0 [ 70.111324][ T24] usb 5-1: too many endpoints for config 0 interface 25 altsetting 202: 224, using maximum allowed: 30 [ 70.116409][ T24] usb 5-1: config 0 interface 25 altsetting 202 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 70.124575][ T24] usb 5-1: config 0 interface 25 has no altsetting 0 [ 70.129787][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 70.133803][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.137022][ T24] usb 5-1: Product: syz [ 70.138749][ T24] usb 5-1: Manufacturer: syz [ 70.140662][ T24] usb 5-1: SerialNumber: syz [ 70.145591][ T24] usb 5-1: config 0 descriptor?? [ 70.364008][ T24] usb 5-1: USB disconnect, device number 3 [ 70.381968][ T844] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.497940][ T6340] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 70.531931][ T844] usb 6-1: Using ep0 maxpacket: 8 [ 70.534925][ T844] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.538202][ T844] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.541284][ T844] usb 6-1: config 0 interface 0 has no altsetting 0 [ 70.543475][ T844] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.546182][ T844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.550041][ T844] usb 6-1: config 0 descriptor?? [ 70.886043][ T6350] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.137'. [ 70.894205][ T6350] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.137'. [ 70.937007][ T6354] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.008591][ T844] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.013209][ T6354] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 71.015981][ T844] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.018255][ T844] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.018411][ T6354] netlink: 96 bytes leftover after parsing attributes in process `syz.3.138'. [ 71.021180][ T844] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.023918][ T6354] netlink: 658 bytes leftover after parsing attributes in process `syz.3.138'. [ 71.025613][ T844] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.028545][ T6354] netlink: 1 bytes leftover after parsing attributes in process `syz.3.138'. [ 71.032382][ T844] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 71.163504][ T6359] netlink: 'syz.3.140': attribute type 9 has an invalid length. [ 71.164811][ T6334] i2c i2c-2: unsupported multi-msg i2c transaction [ 71.173147][ T844] usb 6-1: USB disconnect, device number 2 [ 71.197066][ T6361] xt_hashlimit: size too large, truncated to 1048576 [ 73.177263][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 73.177274][ T40] audit: type=1400 audit(1781049616.722:499): avc: denied { relabelfrom } for pid=6575 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.196695][ T40] audit: type=1400 audit(1781049616.722:500): avc: denied { relabelto } for pid=6575 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.252853][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.255647][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.268495][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 77.271694][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 78.238544][ T40] audit: type=1400 audit(1781049621.782:501): avc: denied { mounton } for pid=6952 comm="syz.0.426" path="/128/bus" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.238876][ T6953] overlayfs: missing 'workdir' [ 78.282913][ T40] audit: type=1400 audit(1781049621.832:502): avc: denied { setopt } for pid=6954 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.434014][ T6971] syzkaller1: entered promiscuous mode [ 78.436234][ T6971] syzkaller1: entered allmulticast mode [ 78.621950][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.639977][ T40] audit: type=1400 audit(1781049622.182:503): avc: denied { create } for pid=6983 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.646965][ T40] audit: type=1400 audit(1781049622.182:504): avc: denied { setopt } for pid=6983 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.782125][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 78.786159][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 78.790766][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.795040][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.799066][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 78.803589][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 78.809191][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.814898][ T24] usb 6-1: config 0 descriptor?? [ 78.817925][ T6965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.996101][ T6950] Process accounting resumed [ 79.029321][ T10] usb 6-1: USB disconnect, device number 3 [ 79.029932][ T62] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 79.113948][ T40] audit: type=1400 audit(1781049622.662:505): avc: denied { mount } for pid=7002 comm="syz.3.449" name="/" dev="ramfs" ino=16480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.122830][ T40] audit: type=1400 audit(1781049622.662:506): avc: denied { execute } for pid=7002 comm="syz.3.449" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=16481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 79.283902][ T5848] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.347073][ T40] audit: type=1400 audit(1781049622.892:507): avc: denied { ioctl } for pid=7013 comm="syz.2.454" path="socket:[15494]" dev="sockfs" ino=15494 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.441893][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 79.445132][ T5848] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 79.447892][ T5848] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 79.451350][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.455219][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.655562][ T40] audit: type=1400 audit(1781049623.202:508): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.667330][ T6999] batadv_slave_0: entered promiscuous mode [ 79.672894][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 79.676153][ T6999] bridge_slave_1: left allmulticast mode [ 79.677896][ T6999] bridge_slave_1: left promiscuous mode [ 79.680316][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.687320][ T6999] bridge_slave_0: left allmulticast mode [ 79.689974][ T6999] bridge_slave_0: left promiscuous mode [ 79.692640][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.868048][ T6998] batadv_slave_0: left promiscuous mode [ 79.904958][ T5848] usb 5-1: USB disconnect, device number 4 [ 80.437305][ T7057] [U]  [ 80.439389][ T40] audit: type=1400 audit(1781049623.982:509): avc: denied { name_bind } for pid=7058 comm="syz.0.475" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.450761][ T40] audit: type=1400 audit(1781049623.982:510): avc: denied { node_bind } for pid=7058 comm="syz.0.475" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.497254][ T7066] mmap: syz.2.478 (7066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.555967][ T7072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.481'. [ 80.613835][ T7080] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.485'. [ 80.674089][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 80.768971][ T53] kernel read not supported for file [fscontext] (pid: 53 comm: kworker/1:1) [ 81.084155][ T5112] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.253538][ T5112] usb 7-1: Using ep0 maxpacket: 32 [ 81.264036][ T5112] usb 7-1: unable to get BOS descriptor or descriptor too short [ 81.266590][ T5112] usb 7-1: no configurations [ 81.268082][ T5112] usb 7-1: can't read configurations, error -22 [ 81.460904][ T7156] tipc: Enabling of bearer rejected, failed to enable media [ 81.669280][ T7165] kernel profiling enabled (shift: 19) [ 82.014144][ T7207] 9pnet_fd: p9_fd_create_tcp (7207): problem connecting socket to 127.0.0.1 [ 82.018129][ T7209] binder: 7208:7209 ioctl 4018620d 0 returned -22 [ 82.082490][ T7213] netlink: 'syz.0.550': attribute type 2 has an invalid length. [ 82.219186][ T7230] syzkaller1: entered promiscuous mode [ 82.220900][ T7230] syzkaller1: entered allmulticast mode [ 82.642250][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 82.811969][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 82.815177][ T53] usb 8-1: config 0 interface 0 altsetting 227 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 82.818868][ T53] usb 8-1: config 0 interface 0 altsetting 227 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 82.822537][ T53] usb 8-1: config 0 interface 0 altsetting 227 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.825808][ T53] usb 8-1: config 0 interface 0 altsetting 227 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 82.829970][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.832122][ T53] usb 8-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00 [ 82.834919][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.838884][ T53] usb 8-1: config 0 descriptor?? [ 82.841029][ T7240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.250575][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.253633][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.256013][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.258469][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.260688][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.263177][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.265482][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.267891][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.270141][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.272400][ T53] thrustmaster 0003:044F:B605.0003: unknown main item tag 0x0 [ 83.276191][ T53] thrustmaster 0003:044F:B605.0003: unknown global tag 0xe [ 83.279125][ T53] thrustmaster 0003:044F:B605.0003: item 0 1 1 14 parsing failed [ 83.285240][ T53] thrustmaster 0003:044F:B605.0003: parse failed [ 83.288547][ T53] thrustmaster 0003:044F:B605.0003: probe with driver thrustmaster failed with error -22 [ 83.447803][ T5822] usb 8-1: USB disconnect, device number 2 [ 83.542028][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.588244][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 83.588261][ T40] audit: type=1400 audit(1781049627.132:537): avc: denied { mount } for pid=7266 comm="syz.2.573" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.599959][ T40] audit: type=1400 audit(1781049627.132:538): avc: denied { search } for pid=7266 comm="syz.2.573" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.610089][ T40] audit: type=1400 audit(1781049627.132:539): avc: denied { search } for pid=7266 comm="syz.2.573" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.619254][ T40] audit: type=1400 audit(1781049627.132:540): avc: denied { read } for pid=7266 comm="syz.2.573" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.628570][ T40] audit: type=1400 audit(1781049627.132:541): avc: denied { read open } for pid=7266 comm="syz.2.573" path="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.637225][ T40] audit: type=1400 audit(1781049627.132:542): avc: denied { search } for pid=7266 comm="syz.2.573" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.693818][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 83.697391][ T53] usb 6-1: config 0 interface 0 altsetting 227 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 83.702151][ T53] usb 6-1: config 0 interface 0 altsetting 227 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 83.708323][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.710390][ T53] usb 6-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00 [ 83.713677][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.717849][ T53] usb 6-1: config 0 descriptor?? [ 83.719936][ T7265] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.816999][ T40] audit: type=1400 audit(1781049627.362:543): avc: denied { getopt } for pid=7271 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.848451][ T40] audit: type=1400 audit(1781049627.392:544): avc: denied { connect } for pid=7273 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.857073][ T40] audit: type=1400 audit(1781049627.392:545): avc: denied { write } for pid=7273 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.864959][ T40] audit: type=1400 audit(1781049627.402:546): avc: denied { read } for pid=7273 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.143315][ T53] thrustmaster 0003:044F:B605.0004: hidraw1: USB HID v0.00 Device [HID 044f:b605] on usb-dummy_hcd.1-1/input0 [ 84.153533][ T53] thrustmaster 0003:044F:B605.0004: no inputs found [ 84.245192][ T7312] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 84.279580][ T7316] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 84.333091][ T7320] netlink: 52 bytes leftover after parsing attributes in process `syz.2.596'. [ 84.339996][ T6338] usb 6-1: USB disconnect, device number 4 [ 84.435502][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 84.582224][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 84.585593][ T24] usb 8-1: config 0 has no interfaces? [ 84.589436][ T24] usb 8-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 84.593167][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.596215][ T24] usb 8-1: Product: syz [ 84.597801][ T24] usb 8-1: Manufacturer: syz [ 84.599579][ T24] usb 8-1: SerialNumber: syz [ 84.604347][ T24] usb 8-1: config 0 descriptor?? [ 84.911141][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 85.481502][ T7426] tmpfs: Bad value for 'mpol' [ 85.594404][ T7436] syzkaller1: entered promiscuous mode [ 85.596703][ T7436] syzkaller1: entered allmulticast mode [ 85.642073][ T6338] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.771954][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.801937][ T6338] usb 7-1: Using ep0 maxpacket: 8 [ 85.805759][ T6338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.808747][ T6338] usb 7-1: config 0 has no interfaces? [ 85.810417][ T6338] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 85.813205][ T6338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.822940][ T6338] usb 7-1: config 0 descriptor?? [ 85.911961][ T34] usb 6-1: device descriptor read/64, error -71 [ 86.037846][ T53] usb 7-1: USB disconnect, device number 4 [ 86.152032][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.291975][ T34] usb 6-1: device descriptor read/64, error -71 [ 86.402514][ T34] usb usb6-port1: attempt power cycle [ 86.486471][ T39] cfg80211: failed to load regulatory.db [ 86.755807][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 86.782583][ T34] usb 6-1: device descriptor read/8, error -71 [ 87.012150][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 87.041984][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.062558][ T34] usb 6-1: device descriptor read/8, error -71 [ 87.172127][ T34] usb usb6-port1: unable to enumerate USB device [ 87.191935][ T854] usb 8-1: USB disconnect, device number 3 [ 87.193521][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.197098][ T24] usb 7-1: config 0 has no interface number 0 [ 87.199743][ T24] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.204804][ T24] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.208439][ T24] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.212201][ T24] usb 7-1: config 0 interface 1 has no altsetting 0 [ 87.214157][ T24] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 87.217061][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.222609][ T24] usb 7-1: config 0 descriptor?? [ 87.223195][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.381960][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 87.384880][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.388683][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.392433][ T59] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.395857][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.400393][ T59] usb 5-1: config 0 descriptor?? [ 87.405218][ T59] hub 5-1:0.0: USB hub found [ 87.541945][ T854] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.607239][ T59] hub 5-1:0.0: 1 port detected [ 87.691975][ T854] usb 8-1: Using ep0 maxpacket: 16 [ 87.695444][ T854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.698639][ T854] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.702594][ T854] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 87.705307][ T854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.709546][ T854] usb 8-1: config 0 descriptor?? [ 87.833844][ T24] uclogic 0003:145F:0212.0005: pen parameters not found [ 87.836664][ T24] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 87.843117][ T24] usb 7-1: USB disconnect, device number 5 [ 88.116929][ T854] monterey 0003:0566:3004.0006: reserved main item tag 0xd [ 88.121806][ T854] monterey 0003:0566:3004.0006: hidraw1: USB HID v0.77 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 88.210467][ T59] hub 5-1:0.0: activate --> -90 [ 88.323856][ T34] usb 8-1: USB disconnect, device number 4 [ 88.614591][ T59] usb 5-1-port1: config error [ 88.616740][ T34] usb 5-1: USB disconnect, device number 5 [ 88.851972][ T844] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 88.988679][ T7486] binder: 7485:7486 ioctl c018620c 0 returned -14 [ 89.002045][ T844] usb 7-1: Using ep0 maxpacket: 16 [ 89.007938][ T844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.011495][ T844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.019593][ T844] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.023334][ T844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.026169][ T844] usb 7-1: Product: syz [ 89.027580][ T844] usb 7-1: Manufacturer: syz [ 89.029358][ T844] usb 7-1: SerialNumber: syz [ 89.047043][ T844] usb 7-1: 0:2 : does not exist [ 89.250250][ T844] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 89.252742][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 89.293237][ T844] usb 7-1: USB disconnect, device number 6 [ 89.318713][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.403711][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 89.406911][ T24] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 89.410565][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 89.412467][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 89.414963][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.418823][ T24] usb 8-1: config 0 descriptor?? [ 89.837069][ T24] lenovo 0003:17EF:60EE.0007: ignoring exceeding usage max [ 89.840470][ T24] hid_parser_main: 592 callbacks suppressed [ 89.840486][ T24] lenovo 0003:17EF:60EE.0007: unknown main item tag 0x6 [ 89.845305][ T24] lenovo 0003:17EF:60EE.0007: ignoring exceeding usage max [ 89.853175][ T24] lenovo 0003:17EF:60EE.0007: hidraw1: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 90.059803][ T7520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1610450249 (1610450249 ns) > initial count (751459529 ns). Using initial count to start timer. [ 90.072214][ T7520] kvm: kvm [7519]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 90.075587][ T7520] kvm: kvm [7519]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 90.635579][ T34] usb 8-1: USB disconnect, device number 5 [ 90.958245][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 90.958260][ T40] audit: type=1400 audit(1781049634.502:553): avc: denied { unlink } for pid=7547 comm="syz.1.691" name="#8" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.978682][ T40] audit: type=1400 audit(1781049634.522:554): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.293783][ T40] audit: type=1400 audit(1781049634.842:555): avc: denied { map } for pid=7564 comm="syz.3.697" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 91.303387][ T7561] kvm: kvm [7560]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 91.307984][ T7561] kvm: kvm [7560]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 91.413158][ T40] audit: type=1400 audit(1781049634.962:556): avc: denied { append } for pid=7572 comm="syz.2.701" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.517660][ T40] audit: type=1400 audit(1781049635.062:557): avc: denied { map } for pid=7578 comm="syz.0.704" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.553717][ T40] audit: type=1800 audit(1781049635.102:558): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.706" name="file0" dev="overlay" ino=861 res=0 errno=0 [ 91.714099][ T7589] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 91.736788][ T7589] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 91.791172][ T40] audit: type=1400 audit(1781049635.332:559): avc: denied { append } for pid=7602 comm="syz.3.710" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.807355][ T40] audit: type=1400 audit(1781049635.342:560): avc: denied { ioctl } for pid=7602 comm="syz.3.710" path="/dev/ptp0" dev="devtmpfs" ino=730 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.999183][ T40] audit: type=1400 audit(1781049635.542:561): avc: denied { call } for pid=7615 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 92.142009][ T6338] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.281986][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.292010][ T6338] usb 5-1: Using ep0 maxpacket: 8 [ 92.297500][ T6338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.302898][ T6338] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.304956][ T6338] usb 5-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 92.307747][ T6338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.311455][ T6338] usb 5-1: config 0 descriptor?? [ 92.433790][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.437279][ T53] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 92.441810][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.444895][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.448335][ T53] usb 7-1: Product: syz [ 92.449563][ T53] usb 7-1: Manufacturer: syz [ 92.451254][ T53] usb 7-1: SerialNumber: syz [ 92.532053][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.659891][ T7618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.682070][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 92.685902][ T34] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 92.689480][ T34] usb 6-1: config 0 has no interface number 0 [ 92.692238][ T34] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 92.696308][ T34] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.700720][ T34] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.705530][ T34] usb 6-1: config 0 interface 196 has no altsetting 0 [ 92.711049][ T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 92.714969][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.718586][ T34] usb 6-1: Product: syz [ 92.720457][ T34] usb 6-1: Manufacturer: syz [ 92.722945][ T34] usb 6-1: SerialNumber: syz [ 92.724206][ T6338] wacom 0003:056A:006B.0008: unknown main item tag 0x2 [ 92.727349][ T6338] wacom 0003:056A:006B.0008: unknown main item tag 0x6 [ 92.730524][ T34] usb 6-1: config 0 descriptor?? [ 92.734318][ T7623] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 92.919747][ T854] usb 5-1: USB disconnect, device number 6 [ 92.962426][ T844] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 93.113520][ T844] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.117252][ T844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.121969][ T844] usb 8-1: config 0 descriptor?? [ 93.144979][ T34] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 93.147901][ T34] ipheth 6-1:0.196: probe with driver ipheth failed with error -22 [ 93.266509][ T7618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.349635][ T854] usb 6-1: USB disconnect, device number 9 [ 93.474488][ T53] cdc_ncm 7-1:1.0: failed to get mac address [ 93.483417][ T53] cdc_ncm 7-1:1.0: bind() failure [ 93.489300][ T53] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 93.492763][ T53] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 93.496963][ T53] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 93.503313][ T53] usb 7-1: USB disconnect, device number 7 [ 93.525583][ T7629] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3619090304 (28952722432 ns) > initial count (28436128568 ns). Using initial count to start timer. [ 93.743677][ T7633] binder: 7632:7633 ioctl c0306201 200000000480 returned -14 [ 93.935916][ T844] usb 8-1: Cannot set autoneg [ 93.938221][ T844] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.951769][ T844] usb 8-1: USB disconnect, device number 6 [ 94.251955][ T6338] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.381994][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.401984][ T6338] usb 7-1: Using ep0 maxpacket: 32 [ 94.445356][ T6338] usb 7-1: unable to get BOS descriptor or descriptor too short [ 94.449574][ T6338] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 94.452835][ T6338] usb 7-1: can't read configurations, error -71 [ 94.551937][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 94.555811][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.560437][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.564937][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.569091][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.576652][ T24] usb 6-1: config 0 descriptor?? [ 94.582730][ T24] hub 6-1:0.0: USB hub found [ 94.658413][ T40] audit: type=1400 audit(1781049638.202:562): avc: denied { ioctl } for pid=7658 comm="syz.3.735" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.787454][ T24] hub 6-1:0.0: 1 port detected [ 95.113665][ T5112] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.264868][ T5112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.270217][ T5112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.274989][ T5112] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 95.278640][ T5112] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.282951][ T6338] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 95.284419][ T5112] usb 8-1: config 0 descriptor?? [ 95.395898][ T24] hub 6-1:0.0: activate --> -90 [ 95.433553][ T6338] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 95.436278][ T6338] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 95.439722][ T6338] usb 7-1: config 220 has no interface number 2 [ 95.441992][ T6338] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 95.446069][ T6338] usb 7-1: config 220 interface 0 has no altsetting 0 [ 95.448448][ T6338] usb 7-1: config 220 interface 76 has no altsetting 0 [ 95.450960][ T6338] usb 7-1: config 220 interface 1 has no altsetting 0 [ 95.458375][ T6338] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 95.461979][ T6338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.465611][ T6338] usb 7-1: Product: syz [ 95.467594][ T6338] usb 7-1: Manufacturer: syz [ 95.469878][ T6338] usb 7-1: SerialNumber: syz [ 95.600883][ T24] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 95.604522][ T9] usb 6-1: USB disconnect, device number 10 [ 95.678474][ T7697] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.687806][ T1275] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.688395][ T6338] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 95.693813][ T6338] uvcvideo 7-1:220.0: No valid video chain found. [ 95.696608][ T6338] usb 7-1: selecting invalid altsetting 0 [ 95.696939][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.702065][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.704568][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.705057][ T6338] usb 7-1: selecting invalid altsetting 0 [ 95.707003][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.709077][ T6338] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 95.711152][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.716779][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.717566][ T6338] usb 7-1: USB disconnect, device number 9 [ 95.719187][ T5112] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 95.731748][ T5112] hid-thrustmaster 0003:044F:B65D.0009: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 95.736392][ T5112] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 95.902052][ C2] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 95.902844][ T854] usb 8-1: USB disconnect, device number 7 [ 96.411952][ T6338] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 96.564297][ T6338] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 96.567902][ T6338] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 96.571420][ T6338] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 96.575623][ T6338] usb 6-1: config 8 has no interface number 0 [ 96.578324][ T6338] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.588006][ T6338] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 96.592588][ T6338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.595754][ T6338] usb 6-1: Product: syz [ 96.597628][ T6338] usb 6-1: Manufacturer: syz [ 96.599676][ T6338] usb 6-1: SerialNumber: syz [ 96.672002][ T5112] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.813773][ T6338] usb 6-1: USB disconnect, device number 11 [ 96.821935][ T5112] usb 8-1: Using ep0 maxpacket: 16 [ 96.825911][ T5112] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 96.832220][ T5112] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 96.836072][ T5112] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.839502][ T5112] usb 8-1: Product: syz [ 96.841325][ T5112] usb 8-1: Manufacturer: syz [ 96.843431][ T5112] usb 8-1: SerialNumber: syz [ 96.850993][ T5112] r8152-cfgselector 8-1: Unknown version 0x0000 [ 96.853828][ T5112] r8152-cfgselector 8-1: config 0 descriptor?? [ 97.061284][ T5112] r8152-cfgselector 8-1: Needed 1 retries to read version [ 97.064673][ T5112] r8152-cfgselector 8-1: Unknown version 0x0000 [ 97.067931][ T5112] r8152-cfgselector 8-1: No union descriptors [ 97.262558][ T6338] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 97.352066][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 97.352081][ T40] audit: type=1400 audit(1781049640.892:566): avc: denied { watch watch_reads } for pid=7718 comm="syz.1.758" path="/171/file0" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.682824][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.682885][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 98.152471][ T5112] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 98.202096][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 98.218295][ T7772] cgroup: noprefix used incorrectly [ 98.311950][ T5112] usb 6-1: Using ep0 maxpacket: 32 [ 98.315498][ T5112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 98.318767][ T5112] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 98.321384][ T5112] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 98.325305][ T5112] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 98.329231][ T5112] usb 6-1: config 128 has no interface number 0 [ 98.331446][ T5112] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 48, changing to 9 [ 98.336099][ T5112] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 24624, setting to 1024 [ 98.340747][ T5112] usb 6-1: config 128 interface 127 has no altsetting 0 [ 98.346365][ T5112] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 98.350227][ T5112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.353576][ T5112] usb 6-1: Product: syz [ 98.355338][ T5112] usb 6-1: Manufacturer: syz [ 98.357371][ T5112] usb 6-1: SerialNumber: syz [ 98.362897][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 98.369105][ T53] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.372743][ T53] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.376260][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.379901][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 98.384689][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 98.388778][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.395965][ T53] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.399657][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.405326][ T53] usb 8-1: config 0 descriptor?? [ 98.408193][ T7765] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 98.505732][ T40] audit: type=1400 audit(1781049642.052:567): avc: denied { nlmsg_read } for pid=7779 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.514839][ T40] audit: type=1400 audit(1781049642.052:568): avc: denied { read } for pid=7779 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.602917][ T5112] usb 6-1: USB disconnect, device number 12 [ 98.623608][ T53] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.624954][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.818262][ T40] audit: type=1400 audit(1781049642.362:569): avc: denied { read write } for pid=7764 comm="syz.3.777" name="lp0" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.827130][ T854] usb 8-1: USB disconnect, device number 9 [ 98.827329][ T40] audit: type=1400 audit(1781049642.362:570): avc: denied { open } for pid=7764 comm="syz.3.777" path="/dev/usb/lp0" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.838873][ T854] usblp0: removed [ 99.021953][ T53] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 99.191998][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 99.196863][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 99.198250][ T40] audit: type=1400 audit(1781049642.742:571): avc: denied { mounton } for pid=7788 comm="syz.1.787" path="/proc/419/task" dev="proc" ino=18197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.201097][ T53] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.213828][ T53] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.220410][ T53] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 99.224245][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.227555][ T53] usb 7-1: Product: syz [ 99.229279][ T53] usb 7-1: Manufacturer: syz [ 99.231208][ T53] usb 7-1: SerialNumber: syz [ 99.378860][ T7794] evm: overlay not supported [ 99.442955][ T53] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 99.445809][ T53] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.660768][ T7811] kvm: pic: non byte read [ 99.662894][ T7811] kvm: pic: non byte read [ 99.664651][ T7811] kvm: pic: non byte read [ 99.769751][ T7816] Invalid source name [ 99.771572][ T7816] UBIFS error (pid: 7816): cannot open "/dev/sg0", error -22 [ 99.863854][ T53] usb 7-1: USB disconnect, device number 10 [ 99.893178][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.010016][ T7829] kvm: pic: non byte read [ 100.012611][ T7829] kvm: pic: non byte write [ 100.015834][ T7829] kvm: pic: non byte write [ 100.018977][ T7829] kvm: pic: non byte write [ 100.022898][ T7829] kvm: pic: non byte write [ 100.026255][ T7829] kvm: pic: non byte write [ 100.029411][ T7829] kvm: pic: non byte write [ 100.033186][ T7829] kvm: pic: non byte write [ 100.036245][ T7829] kvm: pic: non byte write [ 100.039366][ T7829] kvm: pic: non byte write [ 100.042653][ T7829] kvm: pic: non byte write [ 100.376769][ T40] audit: type=1400 audit(1781049643.922:572): avc: denied { listen } for pid=7847 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.412483][ T6338] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 100.471066][ T40] audit: type=1400 audit(1781049644.012:573): avc: denied { read } for pid=7853 comm="syz.3.812" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.481646][ T40] audit: type=1400 audit(1781049644.012:574): avc: denied { open } for pid=7853 comm="syz.3.812" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.564051][ T6338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.567994][ T6338] usb 5-1: not running at top speed; connect to a high speed hub [ 100.575080][ T6338] usb 5-1: config 1 interface 0 altsetting 45 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 100.579612][ T6338] usb 5-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.585219][ T6338] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.590735][ T6338] usb 5-1: string descriptor 0 read error: -22 [ 100.593667][ T6338] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.597610][ T6338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.603987][ T7838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.611526][ T6338] usb 5-1: No union descriptors [ 100.651970][ T5112] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 100.805945][ T5112] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.809227][ T5112] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 100.815595][ T5112] usb 6-1: config 220 has no interface number 2 [ 100.818601][ T5112] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.824958][ T5112] usb 6-1: config 220 interface 0 has no altsetting 0 [ 100.827740][ T5112] usb 6-1: config 220 interface 76 has no altsetting 0 [ 100.830653][ T5112] usb 6-1: config 220 interface 1 has no altsetting 0 [ 100.839337][ T5112] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.843350][ T5112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.846703][ T5112] usb 6-1: Product: syz [ 100.848426][ T5112] usb 6-1: Manufacturer: syz [ 100.850288][ T5112] usb 6-1: SerialNumber: syz [ 101.003661][ T7879] binder: 7878:7879 ioctl 4018620d 0 returned -22 [ 101.006903][ T7879] binder: 7878:7879 ioctl c018620c 200000001fc0 returned -22 [ 101.071775][ T5112] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 101.076261][ T5112] uvcvideo 6-1:220.0: No valid video chain found. [ 101.078858][ T5112] usb 6-1: selecting invalid altsetting 0 [ 101.091974][ T5112] usb 6-1: selecting invalid altsetting 0 [ 101.094343][ T5112] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 101.099884][ T5112] usb 6-1: USB disconnect, device number 13 [ 101.292079][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 101.441961][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 101.451284][ T34] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 101.455179][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.458499][ T34] usb 8-1: Product: syz [ 101.460352][ T34] usb 8-1: Manufacturer: syz [ 101.462650][ T34] usb 8-1: SerialNumber: syz [ 101.772008][ T40] audit: type=1400 audit(1781049645.312:575): avc: denied { create } for pid=7889 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.079655][ T34] usb 8-1: clock source 0 is not valid, cannot use [ 102.187693][ T7904] lo speed is unknown, defaulting to 1000 [ 102.280839][ T34] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 102.286482][ T34] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 102.290179][ T34] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 102.293165][ T34] usb 8-1: clock source 0 is not valid, cannot use [ 102.295506][ T34] usb 8-1: 2:1: cannot get freq (v2/v3): err -71 [ 102.297717][ T34] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 102.337224][ T34] usb 8-1: USB disconnect, device number 10 [ 102.382747][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.881460][ T7924] binder: 7923:7924 ioctl c00c620f 200000000180 returned -22 [ 103.135174][ T5112] usb 5-1: USB disconnect, device number 7 [ 103.161930][ T59] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 103.202096][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 103.251935][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 103.332013][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 103.336002][ T59] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 103.339528][ T59] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 103.343812][ T59] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 103.347575][ T59] usb 6-1: config 250 has no interface number 0 [ 103.350303][ T59] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 103.355515][ T59] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 103.359770][ T59] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.364140][ T59] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.368380][ T59] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 103.373870][ T59] usb 6-1: config 250 interface 228 has no altsetting 0 [ 103.374363][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 103.379022][ T59] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 103.380964][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 103.385039][ T59] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 103.385062][ T59] usb 6-1: Product: syz [ 103.385077][ T59] usb 6-1: SerialNumber: syz [ 103.395126][ T59] hub 6-1:250.228: bad descriptor, ignoring hub [ 103.395802][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.400686][ T59] hub 6-1:250.228: probe with driver hub failed with error -5 [ 103.401909][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 103.406961][ T9] usb 7-1: config 0 descriptor?? [ 103.407760][ T53] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.409779][ T7929] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 103.411531][ T53] usb 8-1: config 0 has no interface number 0 [ 103.415832][ T53] usb 8-1: config 0 interface 184 has no altsetting 0 [ 103.420212][ T53] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.423727][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.426829][ T53] usb 8-1: Product: syz [ 103.430526][ T53] usb 8-1: Manufacturer: syz [ 103.432279][ T53] usb 8-1: SerialNumber: syz [ 103.435562][ T53] usb 8-1: config 0 descriptor?? [ 103.598247][ T59] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 103.605513][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 103.605531][ T40] audit: type=1400 audit(1781049647.152:577): avc: denied { append } for pid=7948 comm="syz.0.848" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.621261][ T7949] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.830414][ T9] kye 0003:0458:500F.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 103.835464][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.838251][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.840985][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.843937][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.846555][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.849095][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.851668][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.854320][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.856816][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.859708][ T9] kye 0003:0458:500F.000A: unknown main item tag 0x0 [ 103.866330][ T9] kye 0003:0458:500F.000A: hidraw1: USB HID v0.05 Device [HID 0458:500f] on usb-dummy_hcd.2-1/input0 [ 103.870379][ T9] kye 0003:0458:500F.000A: tablet-enabling feature report not found [ 103.873461][ T9] kye 0003:0458:500F.000A: tablet enabling failed [ 104.025365][ T854] usb 7-1: USB disconnect, device number 11 [ 104.048643][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 104.056495][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.188557][ T7926] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 104.260716][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 104.265267][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 104.268582][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 104.273183][ T53] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 104.277119][ T53] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 104.282510][ T53] usb 8-1: USB disconnect, device number 11 [ 104.550461][ T7926] usb 6-1: failed to restore interface 228 altsetting 255 (error=-71) [ 104.555920][ T59] usb 6-1: USB disconnect, device number 14 [ 104.573765][ T59] usblp0: removed [ 104.609653][ T8007] syzkaller0: entered promiscuous mode [ 104.611581][ T8007] syzkaller0: entered allmulticast mode [ 105.122205][ T5112] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.236322][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 105.291936][ T5112] usb 5-1: Using ep0 maxpacket: 32 [ 105.300940][ T5112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.305692][ T5112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.310773][ T5112] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 105.314889][ T5112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.323832][ T5112] usb 5-1: config 0 descriptor?? [ 105.391950][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 105.396631][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.401126][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.405274][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 105.409025][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.416177][ T9] usb 8-1: config 0 descriptor?? [ 105.748963][ T5112] koneplus 0003:1E7D:2D51.000B: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 105.829311][ T9] apple 0003:05AC:024B.000C: unknown global tag 0xe [ 105.831418][ T9] apple 0003:05AC:024B.000C: item 0 1 1 14 parsing failed [ 105.835336][ T9] apple 0003:05AC:024B.000C: parse failed [ 105.837184][ T9] apple 0003:05AC:024B.000C: probe with driver apple failed with error -22 [ 106.022682][ T8036] vcan0: entered allmulticast mode [ 106.030179][ T34] usb 8-1: USB disconnect, device number 12 [ 106.049915][ T8040] binder: 8039:8040 ioctl c0306201 200000000000 returned -22 [ 106.143571][ T5843] usb 5-1: USB disconnect, device number 8 [ 106.281983][ T53] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.322128][ T854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.432018][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 106.435127][ T53] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 106.437681][ T53] usb 6-1: config 0 has no interface number 0 [ 106.439633][ T53] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 106.443009][ T53] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 106.447906][ T53] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 106.450698][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.453314][ T53] usb 6-1: Product: syz [ 106.454636][ T53] usb 6-1: Manufacturer: syz [ 106.456058][ T53] usb 6-1: SerialNumber: syz [ 106.459395][ T53] usb 6-1: config 0 descriptor?? [ 106.461420][ T8038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.464067][ T8038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.481992][ T854] usb 7-1: Using ep0 maxpacket: 16 [ 106.485341][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.488999][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.492179][ T854] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 106.494991][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.501779][ T854] usb 7-1: config 0 descriptor?? [ 106.670966][ T8038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.674337][ T8038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.718327][ T8047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.736628][ T8050] lo speed is unknown, defaulting to 1000 [ 106.878385][ T53] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 106.907708][ T40] audit: type=1400 audit(1781049650.452:578): avc: denied { wake_alarm } for pid=8055 comm="syz.3.871" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.908240][ T854] hid (null): report_id 2238158770 is invalid [ 106.929852][ T854] wacom 0003:056A:0084.000D: report_id 2238158770 is invalid [ 106.934068][ T854] wacom 0003:056A:0084.000D: item 0 4 1 8 parsing failed [ 106.938364][ T854] wacom 0003:056A:0084.000D: parse failed [ 106.940807][ T854] wacom 0003:056A:0084.000D: probe with driver wacom failed with error -22 [ 107.062122][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.109258][ T854] usb 7-1: USB disconnect, device number 12 [ 107.201096][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 107.210644][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 107.213242][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 107.218104][ T5843] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.222012][ T5843] usb 5-1: config 0 has no interface number 0 [ 107.228068][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.230927][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.234263][ T5843] usb 5-1: Product: syz [ 107.235626][ T5843] usb 5-1: Manufacturer: syz [ 107.237256][ T5843] usb 5-1: SerialNumber: syz [ 107.242575][ T5843] usb 5-1: config 0 descriptor?? [ 107.704513][ T8074] syzkaller1: entered promiscuous mode [ 107.706863][ T8074] syzkaller1: entered allmulticast mode [ 107.857014][ T5843] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 107.860488][ T5843] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.864182][ T5843] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 107.868880][ T5843] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 107.877850][ T5843] usb 5-1: USB disconnect, device number 9 [ 108.032013][ T5112] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.086279][ T53] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.089848][ T53] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 108.093174][ T53] asix 6-1:0.34: probe with driver asix failed with error -71 [ 108.098697][ T53] usb 6-1: USB disconnect, device number 15 [ 108.181972][ T5112] usb 7-1: Using ep0 maxpacket: 16 [ 108.185429][ T5112] usb 7-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 108.188965][ T5112] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.191939][ T5112] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 59139, setting to 1024 [ 108.197083][ T5112] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 108.200250][ T5112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.202828][ T5112] usb 7-1: Product: syz [ 108.204106][ T5112] usb 7-1: Manufacturer: syz [ 108.205562][ T5112] usb 7-1: SerialNumber: syz [ 108.415141][ T5112] usb 7-1: incorrect wMaxPacketSize 0x1c00 for BADD profile [ 108.449568][ T5112] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.454843][ T5112] usb 7-1: USB disconnect, device number 13 [ 108.469200][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.515975][ T8083] can0: slcan on ttynull. [ 108.523521][ T40] audit: type=1400 audit(1781049652.072:579): avc: denied { search } for pid=5453 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.529947][ T40] audit: type=1400 audit(1781049652.072:580): avc: denied { search } for pid=5453 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.539735][ T40] audit: type=1400 audit(1781049652.072:581): avc: denied { search } for pid=5453 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.574500][ T40] audit: type=1400 audit(1781049652.122:582): avc: denied { read } for pid=8086 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.581646][ T40] audit: type=1400 audit(1781049652.122:583): avc: denied { read open } for pid=8086 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.589751][ T40] audit: type=1400 audit(1781049652.122:584): avc: denied { getattr } for pid=8086 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.597849][ T40] audit: type=1400 audit(1781049652.132:585): avc: denied { write } for pid=8085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.605429][ T40] audit: type=1400 audit(1781049652.132:586): avc: denied { add_name } for pid=8085 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.660372][ T40] audit: type=1400 audit(1781049652.202:587): avc: denied { write } for pid=8089 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.667750][ T40] audit: type=1400 audit(1781049652.202:588): avc: denied { remove_name } for pid=8089 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.670284][ T8094] cgroup: fork rejected by pids controller in /syz1 [ 108.692342][ T40] audit: type=1800 audit(1781049652.232:589): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.886" name="file0" dev="overlay" ino=1457 res=0 errno=0 [ 108.763405][ T53] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.922239][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 108.925532][ T53] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.929305][ T53] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.935620][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 108.938470][ T53] usb 8-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 108.941803][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.946852][ T53] usb 8-1: config 0 descriptor?? [ 109.082065][ T7995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.111015][ T40] audit: type=1400 audit(1781049652.652:590): avc: denied { execute } for pid=8109 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 109.119825][ T40] audit: type=1400 audit(1781049652.652:591): avc: denied { execute_no_trans } for pid=8109 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 109.156720][ T7995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.204976][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.212527][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.218559][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.218619][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.224294][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.229281][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.232900][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.261254][ T40] audit: type=1400 audit(1781049652.802:592): avc: denied { remount } for pid=8122 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.278801][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.284842][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.288250][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.298610][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.303063][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.326544][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 109.328521][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 109.337162][ T53] usb 8-1: USB disconnect, device number 13 [ 109.369282][ T40] audit: type=1400 audit(1781049652.912:593): avc: denied { write } for pid=8129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.393328][ T7995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.395286][ T8133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.424653][ T8082] can0 (unregistered): slcan off ttynull. [ 109.436879][ T40] audit: type=1400 audit(1781049652.982:594): avc: denied { write } for pid=8139 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.506402][ T40] audit: type=1400 audit(1781049653.052:595): avc: denied { write } for pid=8146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.529552][ T8116] lo speed is unknown, defaulting to 1000 [ 109.551505][ T7995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.577066][ T40] audit: type=1400 audit(1781049653.122:597): avc: denied { write } for pid=8153 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.604866][ T8155] SELinux: failed to load policy [ 110.082471][ T7995] bridge_slave_1: left allmulticast mode [ 110.086677][ T7995] bridge_slave_1: left promiscuous mode [ 110.090550][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.099465][ T7995] bridge_slave_0: left allmulticast mode [ 110.103642][ T7995] bridge_slave_0: left promiscuous mode [ 110.106202][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.202245][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 110.374442][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 110.377723][ T34] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 110.383787][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.386489][ T34] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 110.389818][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.399747][ T34] usb 8-1: config 0 descriptor?? [ 110.403664][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.435994][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.495110][ T7995] bond0 (unregistering): Released all slaves [ 110.522828][ T1353] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 110.571497][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.574634][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.577004][ T8116] bridge_slave_0: entered allmulticast mode [ 110.579599][ T8116] bridge_slave_0: entered promiscuous mode [ 110.587559][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.593786][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.596653][ T8116] bridge_slave_1: entered allmulticast mode [ 110.599545][ T8116] bridge_slave_1: entered promiscuous mode [ 110.614427][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.618941][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.646494][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.672433][ T8116] team0: Port device team_slave_0 added [ 110.677643][ T8116] team0: Port device team_slave_1 added [ 110.695979][ T1353] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 110.702951][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.711933][ T1353] usb 5-1: Product: syz [ 110.713749][ T1353] usb 5-1: Manufacturer: syz [ 110.716043][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.720093][ T1353] usb 5-1: SerialNumber: syz [ 110.722484][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.738907][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.745255][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.747509][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.755245][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.834924][ T34] isku 0003:1E7D:3264.000E: unexpected long global item [ 110.844724][ T34] isku 0003:1E7D:3264.000E: parse failed [ 110.849354][ T34] isku 0003:1E7D:3264.000E: probe with driver isku failed with error -22 [ 110.856972][ T8116] hsr_slave_0: entered promiscuous mode [ 110.859361][ T8116] hsr_slave_1: entered promiscuous mode [ 110.861561][ T8116] debugfs: 'hsr0' already exists in 'hsr' [ 110.865781][ T8116] Cannot create hsr debugfs directory [ 110.932880][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 111.017532][ T8206] usb 8-1: USB disconnect, device number 14 [ 111.242068][ T7995] hsr_slave_0: left promiscuous mode [ 111.249371][ T7995] hsr_slave_1: left promiscuous mode [ 111.255970][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.262067][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.272839][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.275275][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.306387][ T7995] veth1_macvtap: left promiscuous mode [ 111.311099][ T7995] veth0_macvtap: left promiscuous mode [ 111.313805][ T7995] veth1_vlan: left promiscuous mode [ 111.315568][ T7995] veth0_vlan: left promiscuous mode [ 111.362099][ T62] Bluetooth: hci2: command tx timeout [ 111.454027][ T1353] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.500021][ T1353] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 111.504200][ T1353] usb 5-1: USB disconnect, device number 10 [ 111.518102][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.587192][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 111.598479][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 111.652172][ T5822] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 111.675156][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 111.801954][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 111.804821][ T5822] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 111.809423][ T5822] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 111.812494][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.814955][ T5822] usb 7-1: Product: syz [ 111.816320][ T5822] usb 7-1: Manufacturer: syz [ 111.817779][ T5822] usb 7-1: SerialNumber: syz [ 111.820637][ T5822] usb 7-1: config 0 descriptor?? [ 111.823974][ T5822] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 111.827162][ T5822] usb 7-1: Detected FT232R [ 111.973503][ T53] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 112.123290][ T53] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 112.126022][ T53] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 112.129349][ T53] usb 8-1: config 8 has no interface number 0 [ 112.131317][ T53] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 112.136153][ T53] usb 8-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.142928][ T53] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 112.145825][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.148387][ T53] usb 8-1: Product: syz [ 112.149923][ T53] usb 8-1: Manufacturer: syz [ 112.151640][ T53] usb 8-1: SerialNumber: syz [ 112.230270][ T5822] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 112.236744][ T5822] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 112.247664][ T5822] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.252834][ T5822] usb 7-1: USB disconnect, device number 14 [ 112.262807][ T5822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.267273][ T5822] ftdi_sio 7-1:0.0: device disconnected [ 112.288031][ T8116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.305658][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.311261][ T8116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.317116][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.320016][ T8116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.326360][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.329272][ T8116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.334389][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.372472][ T53] usb 8-1: USB disconnect, device number 15 [ 112.391943][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.429072][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.437741][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.440662][ T7995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.450851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.453357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.764542][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.798740][ T8116] veth0_vlan: entered promiscuous mode [ 112.803915][ T8116] veth1_vlan: entered promiscuous mode [ 112.824967][ T8116] veth0_macvtap: entered promiscuous mode [ 112.831345][ T8116] veth1_macvtap: entered promiscuous mode [ 112.846211][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.853606][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.867129][ T7995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.873353][ T7995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.884418][ T7995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.889779][ T7995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.965881][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.970135][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.993353][ T8002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.995804][ T8002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.162406][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 113.247091][ T8322] netlink: 'syz.0.940': attribute type 27 has an invalid length. [ 113.298791][ T8323] netlink: 'syz.0.940': attribute type 27 has an invalid length. [ 113.314540][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.318060][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.320986][ T34] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 113.324305][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.331562][ T34] usb 8-1: config 0 descriptor?? [ 113.452109][ T62] Bluetooth: hci2: command tx timeout [ 113.574071][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.584710][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.743494][ T34] hkems 0003:2006:0118.000F: item fetching failed at offset 6/7 [ 113.749050][ T34] hkems 0003:2006:0118.000F: parse failed [ 113.750890][ T34] hkems 0003:2006:0118.000F: probe with driver hkems failed with error -22 [ 113.824802][ T8322] ip6gretap1: left promiscuous mode [ 113.826442][ T8322] ip6gretap1: left allmulticast mode [ 113.847637][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.850575][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.855162][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.875958][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.879623][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.885826][ T8323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.889232][ T8323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.895599][ T8323] veth1_vlan: left promiscuous mode [ 113.897909][ T8323] veth0_vlan: left promiscuous mode [ 113.900065][ T8323] veth0_vlan: entered promiscuous mode [ 113.903790][ T8323] veth1_vlan: entered promiscuous mode [ 113.905819][ T8340] SELinux: failed to load policy [ 113.909000][ T8323] veth1_macvtap: left promiscuous mode [ 113.912506][ T8323] veth0_macvtap: left promiscuous mode [ 113.914866][ T8323] veth0_macvtap: entered promiscuous mode [ 113.917193][ T8323] veth1_macvtap: entered promiscuous mode [ 113.923522][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.926293][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.928985][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.931735][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.935713][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.939119][ T8323] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 113.942905][ T10] usb 8-1: USB disconnect, device number 16 [ 114.241968][ T844] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 114.411966][ T5843] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 114.413913][ T844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.418607][ T844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 114.423529][ T844] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 114.426324][ T844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.428755][ T844] usb 5-1: Product: syz [ 114.430066][ T844] usb 5-1: Manufacturer: syz [ 114.431502][ T844] usb 5-1: SerialNumber: syz [ 114.434679][ T844] usb 5-1: config 0 descriptor?? [ 114.437772][ T8345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.441494][ T844] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 114.443960][ T844] uvcvideo 5-1:0.0: No valid video chain found. [ 114.563626][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.568009][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.572279][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.577644][ T5843] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.581339][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.588054][ T5843] usb 7-1: config 0 descriptor?? [ 114.644534][ T844] usb 5-1: USB disconnect, device number 11 [ 114.702010][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 114.852175][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 114.855387][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.858751][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.861726][ T24] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 114.864555][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.868283][ T24] usb 8-1: config 0 descriptor?? [ 115.001522][ T5843] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.180148][ T8353] ------------[ cut here ]------------ [ 115.182257][ T8353] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 115.182272][ T8353] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#2: syz.0.953/8353 [ 115.188112][ T8353] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.189608][ T8353] CPU: 2 UID: 0 PID: 8353 Comm: syz.0.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.193120][ T8353] Tainted: [L]=SOFTLOCKUP [ 115.194503][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.197644][ T8353] RIP: 0010:path_noexec+0x1cf/0x230 [ 115.199288][ T8353] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 aa 52 7d ff 83 e3 01 e8 c2 57 7d ff 89 d8 5b 5d 41 5c e9 d7 62 01 09 e8 b2 57 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 d4 3b eb ff e9 a3 fe ff ff e8 ca 3b eb [ 115.205456][ T8353] RSP: 0018:ffffc9000de8fbd8 EFLAGS: 00010283 [ 115.207404][ T8353] RAX: 00000000000000ce RBX: 0000000000000000 RCX: ffffc90007541000 [ 115.209844][ T8353] RDX: 0000000000080000 RSI: ffffffff828b59ce RDI: ffff88801cb10000 [ 115.212304][ T8353] RBP: ffff88802215f1a0 R08: 0000000000000007 R09: 0000000000000000 [ 115.214766][ T8353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 115.217595][ T8353] R13: 0000000000000001 R14: ffff8880253f8e48 R15: 0000000000000000 [ 115.220288][ T8353] FS: 00007f1801c006c0(0000) GS:ffff8880d6587000(0000) knlGS:0000000000000000 [ 115.223183][ T8353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.225245][ T8353] CR2: 00007f1800e4f156 CR3: 000000003da92000 CR4: 0000000000352ef0 [ 115.227770][ T8353] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 115.230211][ T8353] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 115.232699][ T8353] Call Trace: [ 115.233771][ T8353] [ 115.234747][ T8353] do_mmap+0x857/0x12f0 [ 115.236073][ T8353] ? __pfx_do_mmap+0x10/0x10 [ 115.237653][ T8353] ? __pfx_down_write_killable+0x10/0x10 [ 115.239559][ T8353] vm_mmap_pgoff+0x29e/0x470 [ 115.241039][ T8353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 115.242737][ T8353] ? __fget_files+0x215/0x3d0 [ 115.244299][ T8353] ? __fget_files+0x21f/0x3d0 [ 115.245977][ T8353] ksys_mmap_pgoff+0x3cb/0x610 [ 115.247675][ T8353] ? __x64_sys_futex+0x358/0x4d0 [ 115.249266][ T8353] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 115.250931][ T8353] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.252662][ T8353] ? selinux_file_ioctl+0xb6/0x290 [ 115.254293][ T8353] __x64_sys_mmap+0x125/0x190 [ 115.255864][ T8353] do_syscall_64+0x115/0x870 [ 115.257364][ T8353] ? clear_bhb_loop+0x40/0x90 [ 115.258868][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.260741][ T8353] RIP: 0033:0x7f1800d9ce59 [ 115.262313][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.268196][ T8353] RSP: 002b:00007f1801c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 115.270808][ T8353] RAX: ffffffffffffffda RBX: 00007f1801015fa0 RCX: 00007f1800d9ce59 [ 115.273288][ T8353] RDX: 000000000300000f RSI: 0000000000003000 RDI: 0000200000000000 [ 115.275718][ T8353] RBP: 00007f1800e32d6f R08: 0000000000000005 R09: 0000000000000000 [ 115.278155][ T8353] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 115.280589][ T8353] R13: 00007f1801016038 R14: 00007f1801015fa0 R15: 00007ffca7a8cbe8 [ 115.283432][ T8353] [ 115.284726][ T8353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.286946][ T8353] CPU: 2 UID: 0 PID: 8353 Comm: syz.0.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.290166][ T8353] Tainted: [L]=SOFTLOCKUP [ 115.291498][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.294522][ T8353] Call Trace: [ 115.295549][ T8353] [ 115.296463][ T8353] dump_stack_lvl+0x100/0x190 [ 115.297908][ T8353] vpanic+0x552/0x970 [ 115.299132][ T8353] ? __pfx_vpanic+0x10/0x10 [ 115.300524][ T8353] panic+0xd1/0xe0 [ 115.301692][ T8353] ? __pfx_panic+0x10/0x10 [ 115.303071][ T8353] check_panic_on_warn.cold+0x19/0x34 [ 115.304699][ T8353] ? path_noexec+0x1cf/0x230 [ 115.306111][ T8353] __warn.cold+0x191/0x328 [ 115.307501][ T8353] __report_bug+0x296/0x3d0 [ 115.308898][ T8353] ? path_noexec+0x1cf/0x230 [ 115.310324][ T8353] ? __pfx___report_bug+0x10/0x10 [ 115.311896][ T8353] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 115.313791][ T8353] ? path_noexec+0x1cf/0x230 [ 115.315215][ T8353] report_bug+0xb2/0x220 [ 115.316521][ T8353] ? path_noexec+0x1cf/0x230 [ 115.317942][ T8353] handle_bug+0x16a/0x2a0 [ 115.319274][ T8353] exc_invalid_op+0x17/0x50 [ 115.320670][ T8353] asm_exc_invalid_op+0x1a/0x20 [ 115.322186][ T8353] RIP: 0010:path_noexec+0x1cf/0x230 [ 115.323765][ T8353] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 aa 52 7d ff 83 e3 01 e8 c2 57 7d ff 89 d8 5b 5d 41 5c e9 d7 62 01 09 e8 b2 57 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 d4 3b eb ff e9 a3 fe ff ff e8 ca 3b eb [ 115.329530][ T8353] RSP: 0018:ffffc9000de8fbd8 EFLAGS: 00010283 [ 115.331407][ T8353] RAX: 00000000000000ce RBX: 0000000000000000 RCX: ffffc90007541000 [ 115.333800][ T8353] RDX: 0000000000080000 RSI: ffffffff828b59ce RDI: ffff88801cb10000 [ 115.336199][ T8353] RBP: ffff88802215f1a0 R08: 0000000000000007 R09: 0000000000000000 [ 115.338593][ T8353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 115.340966][ T8353] R13: 0000000000000001 R14: ffff8880253f8e48 R15: 0000000000000000 [ 115.343391][ T8353] ? path_noexec+0x1ce/0x230 [ 115.344818][ T8353] ? path_noexec+0x1ce/0x230 [ 115.346253][ T8353] do_mmap+0x857/0x12f0 [ 115.347556][ T8353] ? __pfx_do_mmap+0x10/0x10 [ 115.348976][ T8353] ? __pfx_down_write_killable+0x10/0x10 [ 115.350698][ T8353] vm_mmap_pgoff+0x29e/0x470 [ 115.352163][ T8353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 115.353732][ T8353] ? __fget_files+0x215/0x3d0 [ 115.355197][ T8353] ? __fget_files+0x21f/0x3d0 [ 115.356654][ T8353] ksys_mmap_pgoff+0x3cb/0x610 [ 115.358129][ T8353] ? __x64_sys_futex+0x358/0x4d0 [ 115.359659][ T8353] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 115.361297][ T8353] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.362913][ T8353] ? selinux_file_ioctl+0xb6/0x290 [ 115.364487][ T8353] __x64_sys_mmap+0x125/0x190 [ 115.365948][ T8353] do_syscall_64+0x115/0x870 [ 115.367392][ T8353] ? clear_bhb_loop+0x40/0x90 [ 115.368842][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.370653][ T8353] RIP: 0033:0x7f1800d9ce59 [ 115.372048][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.377843][ T8353] RSP: 002b:00007f1801c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 115.380369][ T8353] RAX: ffffffffffffffda RBX: 00007f1801015fa0 RCX: 00007f1800d9ce59 [ 115.382795][ T8353] RDX: 000000000300000f RSI: 0000000000003000 RDI: 0000200000000000 [ 115.385153][ T8353] RBP: 00007f1800e32d6f R08: 0000000000000005 R09: 0000000000000000 [ 115.387486][ T8353] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 115.389872][ T8353] R13: 00007f1801016038 R14: 00007f1801015fa0 R15: 00007ffca7a8cbe8 [ 115.392275][ T8353] [ 115.393931][ T8353] Kernel Offset: disabled [ 115.395254][ T8353] Rebooting in 86400 seconds..