last executing test programs: 49.411504698s ago: executing program 4 (id=6002): mknod(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r5}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000340), 0x0) socket(0xa, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0/../file0'}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 48.853620036s ago: executing program 4 (id=6004): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xf}, {&(0x7f0000000140)=""/9, 0x7fffeff1}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0xffffff34}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 44.024012551s ago: executing program 3 (id=6020): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04230d00c90001", @ANYRESHEX], 0x10) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}]}]}, 0x24}, 0x1, 0x3000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x98e1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 43.926294052s ago: executing program 4 (id=6021): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) 43.523686622s ago: executing program 4 (id=6023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) shmdt(0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) 42.615921153s ago: executing program 3 (id=6025): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 40.986984576s ago: executing program 3 (id=6029): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) 40.555078268s ago: executing program 4 (id=6032): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 40.223030855s ago: executing program 3 (id=6035): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x9, 0x1, 0x3, 0x80000000}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r5, 0x0) madvise(&(0x7f0000836000/0x400000)=nil, 0x400000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 38.956520647s ago: executing program 4 (id=6038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860cc0702c1ffe80000000000000ffffa1dce408db9d13"], 0xffdd) 37.072236312s ago: executing program 3 (id=6041): socket$nl_generic(0x11, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0xb11, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 36.835329058s ago: executing program 3 (id=6042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmdt(0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) 11.915505155s ago: executing program 0 (id=6094): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) 11.824362439s ago: executing program 2 (id=6095): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 11.236587327s ago: executing program 2 (id=6096): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) 10.256616381s ago: executing program 2 (id=6097): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 10.03574039s ago: executing program 0 (id=6098): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0) setresuid(0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 9.911507886s ago: executing program 2 (id=6099): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9.857981158s ago: executing program 0 (id=6100): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 9.697268265s ago: executing program 2 (id=6102): ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0305615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) 9.688981301s ago: executing program 0 (id=6103): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$HIDIOCGUSAGE(r1, 0x4004480f, &(0x7f00000000c0)={0x2}) 9.18743436s ago: executing program 2 (id=6104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r2 = syz_open_dev$media(&(0x7f0000000080), 0x8, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) 8.24685595s ago: executing program 1 (id=6107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 8.067573054s ago: executing program 1 (id=6108): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0) setresuid(0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 7.866093885s ago: executing program 1 (id=6109): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 6.21154809s ago: executing program 0 (id=6110): openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_vhci(&(0x7f00000027c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf8, 0x0, 0x401}}}, 0x7) 5.268040364s ago: executing program 1 (id=6111): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x336b, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r4, 0xffffffffffffffff, 0x0) 4.976739144s ago: executing program 0 (id=6112): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x100000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 778.115519ms ago: executing program 1 (id=6113): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000010000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003200)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCMGET(r0, 0x5415, 0x0) 0s ago: executing program 1 (id=6114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r1, 0x105, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "585826a70e78d7f1319a652238f2fc18"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fb390df4c19d6077161ea9ba9f67d39d"}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 190366.936:1709): avc: denied { read } for pid=25509 comm="syz.1.5462" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2046.562781][ T29] audit: type=1400 audit(1720190367.086:1710): avc: denied { write } for pid=25508 comm="syz.4.5461" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2048.529600][T11808] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2048.747638][T11808] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2048.768144][T11808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.787973][T11808] usb 2-1: Product: syz [ 2048.798684][T11808] usb 2-1: Manufacturer: syz [ 2048.816214][T11808] usb 2-1: SerialNumber: syz [ 2048.840487][T11808] usb 2-1: config 0 descriptor?? [ 2048.859094][T11808] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 090 [ 2049.212737][T25534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.267258][T25534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.489750][T11808] (null): failure setting delay to 10us [ 2049.514530][T11808] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2049.580159][T11808] usb 2-1: USB disconnect, device number 90 [ 2050.047525][T25559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2050.200455][T25565] 9pnet_virtio: no channels available for device [ 2051.170293][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 2051.170317][ T29] audit: type=1400 audit(1720190371.926:1724): avc: denied { create } for pid=25571 comm="syz.2.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2052.579946][ T5135] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2052.885605][ T5135] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2052.982098][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.199550][ T5135] usb 4-1: Product: syz [ 2053.203833][ T5135] usb 4-1: Manufacturer: syz [ 2053.249989][ T5135] usb 4-1: SerialNumber: syz [ 2053.698569][ T5135] usb 4-1: config 0 descriptor?? [ 2053.715206][ T5135] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 088 [ 2054.070751][T25606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.110229][T25606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.471241][ T5135] (null): failure setting delay to 10us [ 2054.477094][ T5135] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2054.503060][ T5135] usb 4-1: USB disconnect, device number 88 [ 2055.199919][ T5135] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2055.399735][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 2055.408250][ T5135] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2055.422798][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.466787][ T5135] usb 1-1: config 0 has no interfaces? [ 2055.506118][ T5135] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2055.545396][ T5135] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2055.568703][ T5135] usb 1-1: Product: syz [ 2055.585900][ T5135] usb 1-1: Manufacturer: syz [ 2055.606180][ T5135] usb 1-1: SerialNumber: syz [ 2055.630438][ T5135] usb 1-1: config 0 descriptor?? [ 2055.906378][T11808] usb 1-1: USB disconnect, device number 86 [ 2057.959677][ T9650] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2058.612127][ T9650] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2058.705267][ T9650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.939786][ T9650] usb 5-1: Product: syz [ 2058.959630][ T9650] usb 5-1: Manufacturer: syz [ 2058.988011][ T9650] usb 5-1: SerialNumber: syz [ 2059.107539][ T9650] usb 5-1: config 0 descriptor?? [ 2059.132644][ T9650] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 087 [ 2059.448616][T25676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.508825][T25676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.249573][T21118] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2060.301931][ T9650] (null): failure setting delay to 10us [ 2060.320780][ T9650] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2060.361326][ T9650] usb 5-1: USB disconnect, device number 87 [ 2060.460458][T21118] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2060.488501][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.509395][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.543116][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.566554][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.583339][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.597614][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.611852][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.622216][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.633809][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.643355][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.669656][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.700214][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.716664][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.745294][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.776570][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.800975][ T29] audit: type=1400 audit(1720190381.546:1725): avc: denied { write } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2060.824453][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.834171][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2060.845365][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2060.852234][ T29] audit: type=1400 audit(1720190381.546:1726): avc: denied { remove_name } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2060.883071][ T29] audit: type=1400 audit(1720190381.546:1727): avc: denied { rename } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2060.918521][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2060.928128][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2061.164968][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2061.175244][T21118] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2061.184344][T21118] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2061.209600][T21118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2061.222758][T21118] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2061.225783][ T29] audit: type=1400 audit(1720190381.546:1728): avc: denied { add_name } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2061.462113][T21118] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2061.499709][T21118] usb 3-1: Product: syz [ 2061.517852][T21118] usb 3-1: Manufacturer: syz [ 2061.546619][T21118] usb 3-1: SerialNumber: syz [ 2061.648720][T21118] usb 3-1: config 0 descriptor?? [ 2061.773106][ T29] audit: type=1400 audit(1720190381.546:1729): avc: denied { unlink } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2061.925998][T21118] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2061.978428][ T29] audit: type=1400 audit(1720190381.556:1730): avc: denied { create } for pid=4516 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2062.638157][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 2062.684634][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 2062.687404][ T5135] usb 3-1: USB disconnect, device number 97 [ 2062.758369][ T5135] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2063.077158][ T29] audit: type=1804 audit(1720190383.826:1731): pid=25709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.5526" name="/" dev="pidfs" ino=26010 res=1 errno=0 [ 2063.319370][T25714] netlink: 'syz.3.5527': attribute type 1 has an invalid length. [ 2063.358072][T25714] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5527'. [ 2063.776129][ T29] audit: type=1400 audit(1720190384.526:1732): avc: denied { write } for pid=25725 comm="syz.1.5532" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2063.823025][ T29] audit: type=1400 audit(1720190384.566:1733): avc: denied { create } for pid=25725 comm="syz.1.5532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2063.843579][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 2064.029599][ T29] audit: type=1400 audit(1720190384.776:1734): avc: denied { ioctl } for pid=25725 comm="syz.1.5532" path="/dev/video7" dev="devtmpfs" ino=867 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2064.140829][T25731] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.150711][T25731] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.159613][T25731] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.168383][T25731] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.324061][T25739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5537'. [ 2066.476468][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2066.476493][ T29] audit: type=1400 audit(1720190387.226:1736): avc: denied { getopt } for pid=25770 comm="syz.0.5550" laddr=::ffff:172.20.20.170 lport=52465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2066.700533][ T29] audit: type=1400 audit(1720190387.456:1737): avc: denied { create } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2066.823127][ T29] audit: type=1400 audit(1720190387.576:1738): avc: denied { bind } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2066.914823][ T29] audit: type=1400 audit(1720190387.576:1739): avc: denied { listen } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2067.294692][ T29] audit: type=1400 audit(1720190387.576:1740): avc: denied { connect } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2067.529952][ T29] audit: type=1400 audit(1720190387.596:1741): avc: denied { accept } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2067.632432][ T29] audit: type=1400 audit(1720190387.596:1742): avc: denied { read } for pid=25773 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2067.835841][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 2067.988576][ T29] audit: type=1400 audit(1720190388.736:1743): avc: denied { setopt } for pid=25792 comm="syz.4.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2068.020673][ T29] audit: type=1400 audit(1720190388.756:1744): avc: denied { ioctl } for pid=25792 comm="syz.4.5558" path="socket:[113954]" dev="sockfs" ino=113954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2068.213947][ T29] audit: type=1400 audit(1720190388.766:1745): avc: denied { bind } for pid=25792 comm="syz.4.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2069.210996][T25797] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.220210][T25797] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.229072][T25797] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.238155][T25797] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.570398][T25805] Bluetooth: MGMT ver 1.22 [ 2070.079830][T11808] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2070.282821][T11808] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 2070.339871][T11808] usb 2-1: config index 0 descriptor too short (expected 8368, got 10) [ 2070.375796][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2070.422598][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2070.471484][T11808] usb 2-1: config index 1 descriptor too short (expected 8368, got 10) [ 2070.506264][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2070.588938][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2070.755857][T11808] usb 2-1: config index 2 descriptor too short (expected 8368, got 10) [ 2071.329561][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.336907][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.357267][T11808] usb 2-1: config index 3 descriptor too short (expected 8368, got 10) [ 2071.369520][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.376885][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.552117][T11808] usb 2-1: config index 4 descriptor too short (expected 8368, got 10) [ 2071.562537][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.577932][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.601513][T11808] usb 2-1: config index 5 descriptor too short (expected 8368, got 10) [ 2071.613083][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.631622][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.675045][T11808] usb 2-1: config index 6 descriptor too short (expected 8368, got 10) [ 2071.694882][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.716635][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 2071.716661][ T29] audit: type=1400 audit(1720190392.466:1752): avc: denied { ioctl } for pid=25837 comm="syz.3.5575" path="socket:[114054]" dev="sockfs" ino=114054 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2071.719241][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.801641][T11808] usb 2-1: config index 7 descriptor too short (expected 8368, got 10) [ 2071.841957][T11808] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2071.849274][T11808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2071.909890][T11808] usb 2-1: string descriptor 0 read error: -71 [ 2071.940015][T11808] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2071.971791][T11808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.021107][T11808] usb 2-1: can't set config #1, error -71 [ 2072.071176][T11808] usb 2-1: USB disconnect, device number 91 [ 2072.816512][ T29] audit: type=1400 audit(1720190393.566:1753): avc: denied { wake_alarm } for pid=25848 comm="syz.2.5578" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2075.719783][T11808] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2075.973013][T11808] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2075.999770][T11808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.028837][T11808] usb 5-1: Product: syz [ 2076.041257][T11808] usb 5-1: Manufacturer: syz [ 2076.045930][T11808] usb 5-1: SerialNumber: syz [ 2076.091465][T11808] usb 5-1: config 0 descriptor?? [ 2076.125467][T11808] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 088 [ 2076.433479][T25888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.475175][T25888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.487419][T25890] wg2: entered promiscuous mode [ 2076.511071][T25890] wg2: entered allmulticast mode [ 2076.769637][ T29] audit: type=1400 audit(1720190397.516:1754): avc: denied { name_bind } for pid=25895 comm="syz.0.5594" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2076.826260][T11808] (null): failure setting delay to 10us [ 2076.847202][T11808] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2076.896210][T11808] usb 5-1: USB disconnect, device number 88 [ 2077.198787][T25904] team0: entered promiscuous mode [ 2077.216785][T25904] team_slave_0: entered promiscuous mode [ 2077.235196][T25904] team_slave_1: entered promiscuous mode [ 2077.430665][ T29] audit: type=1400 audit(1720190398.186:1755): avc: denied { read } for pid=25906 comm="syz.1.5599" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2077.475164][ T29] audit: type=1400 audit(1720190398.216:1756): avc: denied { open } for pid=25906 comm="syz.1.5599" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2077.545857][ T29] audit: type=1400 audit(1720190398.216:1757): avc: denied { ioctl } for pid=25906 comm="syz.1.5599" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2077.669854][ T9650] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2077.827681][T25903] team0: left promiscuous mode [ 2077.842339][T25903] team_slave_0: left promiscuous mode [ 2077.848032][T25903] team_slave_1: left promiscuous mode [ 2077.886880][ T9650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 2077.909536][ T9650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 2077.939757][ T9650] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2077.960571][ T9650] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2077.986664][ T9650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.018733][ T9650] usb 4-1: config 0 descriptor?? [ 2078.038759][T25909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2078.466796][ T9650] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x3 [ 2078.480591][ T9650] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x7 [ 2078.506332][ T9650] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 2078.537327][ T9650] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2078.773952][ T8] usb 4-1: USB disconnect, device number 89 [ 2079.204419][ T29] audit: type=1400 audit(1720190399.956:1758): avc: denied { create } for pid=25943 comm="syz.4.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2079.361754][ T9650] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2079.605564][ T9650] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2079.655539][ T9650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.726658][ T29] audit: type=1400 audit(1720190400.466:1759): avc: denied { write } for pid=25943 comm="syz.4.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2079.944259][ T9650] usb 1-1: Product: syz [ 2080.025615][ T5135] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2080.058019][ T9650] usb 1-1: Manufacturer: syz [ 2080.139958][ T9650] usb 1-1: SerialNumber: syz [ 2080.409699][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 2080.433369][ T9650] usb 1-1: config 0 descriptor?? [ 2080.570624][ T5135] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2080.588745][ T9650] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 087 [ 2080.607474][ T5135] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2080.626573][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2080.637838][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2080.671129][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2080.698994][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2080.741579][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2080.770253][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2080.803322][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2080.850319][ T5135] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 2080.864464][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.895378][ T5135] usb 5-1: Product: Ð’ [ 2080.899885][ T5135] usb 5-1: Manufacturer: 놱橹ï¨ä“¸ê³¦ç˜¾ç †äµ‚鷓쬡謆譖ꈶî¶â°•é¢à¤µã‡³ï¸” [ 2080.915809][T25941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.929663][ T5135] usb 5-1: SerialNumber: syz [ 2080.947317][T25941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.967346][ T5135] usb 5-1: config 0 descriptor?? [ 2080.994872][ T5135] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2081.003692][ T29] audit: type=1400 audit(1720190401.736:1760): avc: denied { create } for pid=25960 comm="syz.2.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2081.054652][ T5135] pvrusb2: ********** [ 2081.058781][ T5135] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2081.060828][ T29] audit: type=1400 audit(1720190401.746:1761): avc: denied { write } for pid=25960 comm="syz.2.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2081.111204][ T5135] pvrusb2: Important functionality might not be entirely working. [ 2081.167962][ T5135] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2081.169646][ T29] audit: type=1400 audit(1720190401.756:1762): avc: denied { setopt } for pid=25960 comm="syz.2.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2081.225018][ T5135] pvrusb2: ********** [ 2081.266023][ T1979] pvrusb2: Invalid write control endpoint [ 2081.278626][ T29] audit: type=1400 audit(1720190401.786:1763): avc: denied { read } for pid=25960 comm="syz.2.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2081.373343][ T9650] (null): failure setting delay to 10us [ 2081.396668][ T9650] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2081.494518][ T9650] usb 1-1: USB disconnect, device number 87 [ 2081.681724][ T1979] pvrusb2: Invalid write control endpoint [ 2081.708286][ T1979] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2081.717796][ T1979] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2081.849395][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2081.929859][ T1979] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2081.975724][ T29] audit: type=1400 audit(1720190402.556:1766): avc: denied { read } for pid=25964 comm="syz.2.5621" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2082.176126][ T1979] pvrusb2: Device being rendered inoperable [ 2082.224436][ T1979] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2082.280284][ T1979] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 2082.299644][ T29] audit: type=1400 audit(1720190402.556:1767): avc: denied { open } for pid=25964 comm="syz.2.5621" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2082.368196][ T1979] pvrusb2: Attached sub-driver cx25840 [ 2082.416362][ T1979] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2082.492290][ T29] audit: type=1400 audit(1720190402.566:1768): avc: denied { write } for pid=25964 comm="syz.2.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2082.522064][ T1979] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2082.535676][ T29] audit: type=1400 audit(1720190402.566:1769): avc: denied { nlmsg_read } for pid=25964 comm="syz.2.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2082.623883][ T5135] usb 5-1: USB disconnect, device number 89 [ 2083.205736][T25991] netlink: 'syz.3.5627': attribute type 10 has an invalid length. [ 2083.217372][T25991] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.5627'. [ 2084.542269][ T8] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2084.770009][T17413] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 2084.788673][ T8] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2084.804158][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.815745][ T8] usb 2-1: Product: syz [ 2084.834116][ T8] usb 2-1: Manufacturer: syz [ 2084.851923][ T8] usb 2-1: SerialNumber: syz [ 2084.876640][ T8] usb 2-1: config 0 descriptor?? [ 2084.887379][ T8] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 092 [ 2084.974788][T17413] usb 3-1: No LPM exit latency info found, disabling LPM. [ 2084.991585][T17413] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2085.023811][T17413] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.050140][T17413] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2085.061318][T17413] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2085.074573][T17413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.091822][T17413] usb 3-1: Product: 毻ë‚᧌籎袚弹ç·ë¦¢êƒ¶ã„ºè³‘ï·“î³ë±•éµ€à®™à½¯â€­áœ£îˆ©æšŸâ¯—雤귻兿éµá•›ä¼å¨¸ã«“ì Î°éž½ï礎ꞔ는춎蔼ᱮç赫ç¤ì¬§î¢½ì«‹î‚¯à´»è³ê¼Šë«¬ï°¢Õ²è³§é›žá»·é¨‹î¶¨è·­ì»€ê…Žï¤‰áž§ä®‡éƒ¢ [ 2085.158907][T17413] usb 3-1: SerialNumber: Ъ [ 2085.184340][T26007] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2085.195351][T26007] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2085.259110][T26005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.293690][T26005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.597044][ T8] (null): failure setting delay to 10us [ 2085.616586][ T8] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2085.634031][ T29] audit: type=1400 audit(1720190406.386:1770): avc: denied { mount } for pid=26028 comm="syz.0.5641" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2085.656014][ T8] usb 2-1: USB disconnect, device number 92 [ 2085.810823][T26007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26007 comm=syz.2.5635 [ 2086.723681][ T29] audit: type=1400 audit(1720190407.346:1771): avc: denied { ioctl } for pid=26028 comm="syz.0.5641" path="socket:[114470]" dev="sockfs" ino=114470 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2086.887527][ T29] audit: type=1400 audit(1720190407.376:1772): avc: denied { mount } for pid=26030 comm="syz.4.5642" name="/" dev="rpc_pipefs" ino=115455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2086.913365][T17413] usbhid 3-1:1.0: can't add hid device: -71 [ 2086.935095][T17413] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2086.945929][ T29] audit: type=1400 audit(1720190407.626:1773): avc: denied { unmount } for pid=25004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2087.039942][T17413] usb 3-1: USB disconnect, device number 98 [ 2087.963739][ T29] audit: type=1400 audit(1720190408.716:1774): avc: denied { write } for pid=26026 comm="syz.3.5640" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2089.105296][ T29] audit: type=1400 audit(1720190409.736:1775): avc: denied { create } for pid=26060 comm="syz.1.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2089.603152][T26070] netlink: 'syz.2.5652': attribute type 9 has an invalid length. [ 2089.647829][T26070] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5652'. [ 2090.141236][ T9650] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2090.394244][ T9650] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2090.430825][ T9650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.438953][ T9650] usb 2-1: Product: syz [ 2090.469496][ T9650] usb 2-1: Manufacturer: syz [ 2090.474201][ T9650] usb 2-1: SerialNumber: syz [ 2090.505758][ T9650] usb 2-1: config 0 descriptor?? [ 2090.522242][ T9650] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 093 [ 2090.713094][ T29] audit: type=1400 audit(1720190411.466:1776): avc: denied { create } for pid=26083 comm="syz.4.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2090.856158][T26089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2090.881805][T26089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2091.964756][ T9650] (null): failure setting delay to 10us [ 2091.999740][ T9650] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2092.088046][ T9650] usb 2-1: USB disconnect, device number 93 [ 2092.850056][ T29] audit: type=1400 audit(1720190413.516:1777): avc: denied { read } for pid=26105 comm="syz.2.5664" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2093.065789][ T29] audit: type=1400 audit(1720190413.516:1778): avc: denied { open } for pid=26105 comm="syz.2.5664" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2093.969958][T17413] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2094.179856][T17413] usb 1-1: Using ep0 maxpacket: 8 [ 2094.204841][T17413] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2094.231432][T17413] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2094.260473][T17413] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2094.285185][T17413] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2094.342003][T17413] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2094.368405][T17413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.414250][T26134] team0: entered promiscuous mode [ 2094.429649][T26134] team_slave_0: entered promiscuous mode [ 2094.446068][T26134] team_slave_1: entered promiscuous mode [ 2094.660296][T17413] usb 1-1: usb_control_msg returned -32 [ 2094.670765][T17413] usbtmc 1-1:16.0: can't read capabilities [ 2094.732289][T17413] usb 1-1: USB disconnect, device number 88 [ 2094.830834][T26133] team0: left promiscuous mode [ 2094.856988][T26133] team_slave_0: left promiscuous mode [ 2094.889981][T26133] team_slave_1: left promiscuous mode [ 2095.289924][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2095.496625][ T8] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2095.542802][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.638718][ T8] usb 3-1: Product: syz [ 2095.657313][ T8] usb 3-1: Manufacturer: syz [ 2095.683017][ T8] usb 3-1: SerialNumber: syz [ 2096.578896][ T8] usb 3-1: config 0 descriptor?? [ 2096.626802][ T8] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 099 [ 2097.096092][T26146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.146211][T26146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.407705][T26182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2098.685797][ T8] (null): failure setting delay to 10us [ 2098.705793][ T8] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2098.792028][ T8] usb 3-1: USB disconnect, device number 99 [ 2098.883142][T26185] team0: entered promiscuous mode [ 2098.898712][T26185] team_slave_0: entered promiscuous mode [ 2098.929377][T26185] team_slave_1: entered promiscuous mode [ 2099.220104][T26184] team0: left promiscuous mode [ 2099.225177][T26184] team_slave_0: left promiscuous mode [ 2099.232577][T26184] team_slave_1: left promiscuous mode [ 2099.259604][ T9650] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2099.460722][ T9650] usb 4-1: Using ep0 maxpacket: 8 [ 2099.472894][ T9650] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2099.489611][ T9650] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2099.525277][ T9650] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2099.559609][ T9650] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2099.619134][ T9650] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2099.666847][ T9650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.953159][ T9650] usb 4-1: usb_control_msg returned -32 [ 2099.958996][ T9650] usbtmc 4-1:16.0: can't read capabilities [ 2099.998054][ T29] audit: type=1400 audit(1720190420.746:1779): avc: denied { bind } for pid=26206 comm="syz.2.5696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2100.020102][ T9650] usb 4-1: USB disconnect, device number 90 [ 2100.095412][T26211] vlan0: entered promiscuous mode [ 2100.245453][T26209] vlan0 (unregistering): left promiscuous mode [ 2100.649806][ T29] audit: type=1400 audit(1720190421.406:1780): avc: denied { create } for pid=26219 comm="syz.0.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2100.669755][ T29] audit: type=1400 audit(1720190421.416:1781): avc: denied { getopt } for pid=26219 comm="syz.0.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2100.692071][ T29] audit: type=1400 audit(1720190421.446:1782): avc: denied { write } for pid=26221 comm="syz.1.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2100.692118][T26223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=26223 comm=syz.1.5701 [ 2101.015771][T26232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2101.026234][ T5152] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2101.244982][ T5152] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2101.269963][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.289056][ T5152] usb 4-1: Product: syz [ 2101.303417][ T5152] usb 4-1: Manufacturer: syz [ 2101.308252][ T5152] usb 4-1: SerialNumber: syz [ 2101.330314][ T5152] usb 4-1: config 0 descriptor?? [ 2101.345295][ T5152] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 091 [ 2101.694492][T26225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.840735][T26225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2102.122963][T11808] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2102.629946][T11808] usb 5-1: Using ep0 maxpacket: 8 [ 2102.771368][T21118] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2102.932170][T11808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2102.954515][T11808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2102.980125][T11808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2102.991379][T11808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2103.008714][T11808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2103.018836][T11808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.035846][ T5152] (null): failure setting delay to 10us [ 2103.062657][ T5152] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2103.100153][ T5152] usb 4-1: USB disconnect, device number 91 [ 2103.139568][T21118] usb 3-1: Using ep0 maxpacket: 32 [ 2103.176812][T21118] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2103.194896][T21118] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2103.225478][T21118] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2103.257195][T21118] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2103.307706][T21118] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2103.334393][T11808] usb 5-1: usb_control_msg returned -32 [ 2103.344737][T21118] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2103.360219][T11808] usbtmc 5-1:16.0: can't read capabilities [ 2103.387268][T21118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2103.410081][T11808] usb 5-1: USB disconnect, device number 90 [ 2103.439670][T21118] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2103.489239][T21118] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 2103.509160][T21118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.527710][T21118] usb 3-1: Product: Ð’ [ 2103.539553][T21118] usb 3-1: Manufacturer: 놱橹ï¨ä“¸ê³¦ç˜¾ç †äµ‚鷓쬡謆譖ꈶî¶â°•é¢à¤µã‡³ï¸” [ 2103.565306][T21118] usb 3-1: SerialNumber: syz [ 2103.591767][T21118] usb 3-1: config 0 descriptor?? [ 2103.628421][T21118] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2103.669819][T21118] pvrusb2: ********** [ 2103.688949][T21118] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2103.725262][T21118] pvrusb2: Important functionality might not be entirely working. [ 2103.764349][T21118] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2103.805687][T21118] pvrusb2: ********** [ 2103.861636][ T1979] pvrusb2: Invalid write control endpoint [ 2103.889676][T22571] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2104.034408][ T1979] pvrusb2: Invalid write control endpoint [ 2104.064094][ T1979] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2104.094246][ T1979] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2104.099687][T22571] usb 1-1: Using ep0 maxpacket: 32 [ 2104.107511][ T1979] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2104.129388][ T1979] pvrusb2: Device being rendered inoperable [ 2104.133273][T22571] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2104.139958][ T1979] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2104.162763][T22571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.170347][ T1979] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 2104.206324][ T1979] pvrusb2: Attached sub-driver cx25840 [ 2104.217617][T22571] usb 1-1: config 0 descriptor?? [ 2104.243941][ T1979] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2104.249924][T22571] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2104.281895][ T1979] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2104.481688][T22571] gspca_nw80x: reg_w err -71 [ 2104.492209][T22571] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 2104.531638][T22571] usb 1-1: USB disconnect, device number 89 [ 2104.767425][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.774327][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.304331][ T8] usb 3-1: USB disconnect, device number 100 [ 2105.430760][T26285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2105.512951][T26289] netlink: 'syz.2.5724': attribute type 1 has an invalid length. [ 2105.951826][T11808] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2105.999729][T21118] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2106.156901][T11808] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2106.169776][T11808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.181131][T11808] usb 5-1: Product: syz [ 2106.185380][T11808] usb 5-1: Manufacturer: syz [ 2106.190207][T21118] usb 3-1: Using ep0 maxpacket: 8 [ 2106.196992][T11808] usb 5-1: SerialNumber: syz [ 2106.206413][T21118] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2106.223582][T11808] usb 5-1: config 0 descriptor?? [ 2106.234519][T21118] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2106.251319][T11808] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 091 [ 2106.270646][T21118] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2106.289548][T21118] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2106.321168][T21118] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2106.341700][T21118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.539756][ T29] audit: type=1400 audit(1720190427.286:1783): avc: denied { ioctl } for pid=26299 comm="syz.0.5727" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=116218 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2107.440495][T26304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.495102][ T29] audit: type=1400 audit(1720190427.286:1784): avc: denied { map } for pid=26299 comm="syz.0.5727" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2107.531858][T26304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.817838][T21118] usb 3-1: usb_control_msg returned -32 [ 2107.827753][T21118] usbtmc 3-1:16.0: can't read capabilities [ 2107.857941][T21118] usb 3-1: USB disconnect, device number 101 [ 2107.931373][T11808] (null): failure setting delay to 10us [ 2107.937192][T11808] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2107.988253][T11808] usb 5-1: USB disconnect, device number 91 [ 2108.213379][ T5152] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2108.231429][ T29] audit: type=1400 audit(1720190428.976:1785): avc: denied { write } for pid=26309 comm="syz.3.5730" name="mcfilter" dev="proc" ino=4026533344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2108.509664][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 2108.527980][ T5152] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2108.580052][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 2108.631795][ T5152] usb 2-1: config 0 interface 0 has no altsetting 1 [ 2108.708294][ T5152] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 2108.752993][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.779123][ T5152] usb 2-1: Product: syz [ 2108.787819][ T5152] usb 2-1: Manufacturer: syz [ 2108.805211][ T5152] usb 2-1: SerialNumber: syz [ 2108.865575][ T5152] usb 2-1: config 0 descriptor?? [ 2108.902149][ T5152] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 2108.953616][ T29] audit: type=1400 audit(1720190429.696:1786): avc: denied { write } for pid=26324 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2109.253949][ T29] audit: type=1400 audit(1720190430.006:1787): avc: denied { nlmsg_write } for pid=26330 comm="syz.0.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2109.390997][ T29] audit: type=1326 audit(1720190430.146:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9f75bd9 code=0x7ffc0000 [ 2109.507430][ T29] audit: type=1326 audit(1720190430.146:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9f75bd9 code=0x7ffc0000 [ 2109.949542][T21118] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 2110.165788][T21118] usb 4-1: No LPM exit latency info found, disabling LPM. [ 2110.189264][ T8] usb 2-1: USB disconnect, device number 94 [ 2110.190544][T21118] usb 4-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2110.224902][T21118] usb 4-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2110.251731][ T29] audit: type=1326 audit(1720190430.176:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6ed9f75bd9 code=0x7ffc0000 [ 2110.308225][T21118] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2110.348292][ T29] audit: type=1326 audit(1720190430.176:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9f75bd9 code=0x7ffc0000 [ 2110.405988][T21118] usb 4-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2110.426135][T21118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.437320][ T29] audit: type=1326 audit(1720190430.176:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9f75bd9 code=0x7ffc0000 [ 2110.479524][T21118] usb 4-1: Product: 毻ë‚᧌籎袚弹ç·ë¦¢êƒ¶ã„ºè³‘ï·“î³ë±•éµ€à®™à½¯â€­áœ£îˆ©æšŸâ¯—雤귻兿éµá•›ä¼å¨¸ã«“ì Î°éž½ï礎ꞔ는춎蔼ᱮç赫ç¤ì¬§î¢½ì«‹î‚¯à´»è³ê¼Šë«¬ï°¢Õ²è³§é›žá»·é¨‹î¶¨è·­ì»€ê…Žï¤‰áž§ä®‡éƒ¢ [ 2110.539511][T21118] usb 4-1: SerialNumber: Ъ [ 2110.563013][T26335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2110.600356][T26335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2111.039889][T26335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26335 comm=syz.3.5738 [ 2111.098191][T21118] usbhid 4-1:1.0: can't add hid device: -71 [ 2111.104651][T21118] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2111.144215][T21118] usb 4-1: USB disconnect, device number 92 [ 2111.889785][T21118] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2112.126135][T21118] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2112.165118][T21118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.189587][T21118] usb 2-1: Product: syz [ 2112.193854][T21118] usb 2-1: Manufacturer: syz [ 2112.210393][T21118] usb 2-1: SerialNumber: syz [ 2112.250170][T21118] usb 2-1: config 0 descriptor?? [ 2112.272942][T21118] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 095 [ 2112.318655][T26365] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5749'. [ 2112.693564][T26348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.728639][T26348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.848496][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 2112.848546][ T29] audit: type=1400 audit(1720190433.596:1825): avc: denied { read write } for pid=26366 comm="syz.3.5750" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2113.213504][ T29] audit: type=1400 audit(1720190433.596:1826): avc: denied { open } for pid=26366 comm="syz.3.5750" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2113.632129][T21118] (null): failure setting delay to 10us [ 2113.638217][T21118] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 2113.668834][T21118] usb 2-1: USB disconnect, device number 95 [ 2114.874942][ T29] audit: type=1400 audit(1720190435.626:1827): avc: denied { bind } for pid=26411 comm="syz.2.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2114.906680][ T29] audit: type=1400 audit(1720190435.626:1828): avc: denied { setopt } for pid=26411 comm="syz.2.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2115.599645][ T8] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2115.808519][ T8] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 2115.886263][ T8] usb 2-1: config 0 has no interface number 0 [ 2115.994913][ T8] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.195058][ T8] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2116.409581][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 2116.454515][ T8] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2116.508132][ T8] usb 2-1: Manufacturer: syz [ 2116.607000][ T8] usb 2-1: config 0 descriptor?? [ 2116.911844][T26448] kAFS: unable to lookup cell '.¥8/áeó'w˜Óz`vô^+Ïi–5Ë-;×íboSpÖ4å”™â°áÇ|ž¯OUÓ‘ÎÎqïUnÂÑ™ÿ¯Ok' [ 2117.194364][ T29] audit: type=1400 audit(1720190437.946:1829): avc: denied { create } for pid=26452 comm="syz.4.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2117.300745][ T29] audit: type=1400 audit(1720190438.046:1830): avc: denied { accept } for pid=26452 comm="syz.4.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2117.307985][ T8] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0018/input/input18 [ 2117.491589][ T29] audit: type=1400 audit(1720190438.146:1831): avc: denied { read } for pid=4519 comm="acpid" name="js0" dev="devtmpfs" ino=3470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2117.624291][ T29] audit: type=1400 audit(1720190438.146:1832): avc: denied { open } for pid=4519 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2117.656380][ T8] sony 0003:054C:03D5.0018: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 2117.779592][ T29] audit: type=1400 audit(1720190438.296:1833): avc: denied { ioctl } for pid=4519 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3470 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2118.065116][ T29] audit: type=1400 audit(1720190438.816:1834): avc: denied { unlink } for pid=26460 comm="syz.4.5777" name="#4e" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2118.066162][T26461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2118.276349][ T29] audit: type=1400 audit(1720190439.026:1835): avc: denied { mount } for pid=26460 comm="syz.4.5777" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2118.462573][ T5152] usb 2-1: USB disconnect, device number 96 [ 2119.260453][ T8] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2120.159533][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 2120.168114][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2120.208578][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2120.228381][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2120.248646][ T8] usb 1-1: Product: syz [ 2120.257665][ T8] usb 1-1: Manufacturer: syz [ 2120.267265][ T8] usb 1-1: SerialNumber: syz [ 2120.288275][ T8] usb 1-1: config 0 descriptor?? [ 2120.317356][T26472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2120.390211][T22571] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2120.599581][T22571] usb 4-1: Using ep0 maxpacket: 16 [ 2120.630064][T22571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.679985][T22571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.707562][ T9650] usb 1-1: USB disconnect, device number 90 [ 2120.739489][T22571] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2120.798729][T22571] usb 4-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 2120.824347][T22571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.863229][T22571] usb 4-1: config 0 descriptor?? [ 2121.391438][T22571] hid-generic 0003:1E7D:71CE.0019: unknown main item tag 0x0 [ 2121.448395][T22571] hid-generic 0003:1E7D:71CE.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:71ce] on usb-dummy_hcd.3-1/input0 [ 2122.495736][ T29] audit: type=1400 audit(1720190443.246:1836): avc: denied { shutdown } for pid=26512 comm="syz.2.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2123.781259][ T8] usb 4-1: USB disconnect, device number 93 [ 2125.192811][ T29] audit: type=1400 audit(1720190445.796:1837): avc: denied { setopt } for pid=26543 comm="syz.2.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2127.230249][T21118] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2127.449727][T21118] usb 3-1: Using ep0 maxpacket: 8 [ 2127.475760][T21118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.498990][T21118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2127.525380][T21118] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2127.537927][T21118] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2127.558328][T21118] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2127.568351][T21118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.604255][T21118] hub 3-1:1.0: bad descriptor, ignoring hub [ 2127.626013][T21118] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2127.642984][T21118] cdc_wdm 3-1:1.0: skipping garbage [ 2127.648433][T21118] cdc_wdm 3-1:1.0: skipping garbage [ 2127.676955][T21118] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2127.687449][T21118] cdc_wdm 3-1:1.0: Unknown control protocol [ 2127.901978][T11808] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 2128.138732][T11808] usb 2-1: No LPM exit latency info found, disabling LPM. [ 2128.179647][T11808] usb 2-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2128.232714][T11808] usb 2-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2128.283797][T11808] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2128.304321][T11808] usb 2-1: language id specifier not provided by device, defaulting to English [ 2128.326954][T11808] usb 2-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2128.358977][T11808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.404517][T26570] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 2128.427212][T11808] usb 2-1: Product: Ъ [ 2128.450567][T11808] usb 2-1: Manufacturer: 毻ë‚᧌籎袚弹ç·ë¦¢êƒ¶ã„ºè³‘ï·“î³ë±•éµ€à®™à½¯â€­áœ£îˆ©æšŸâ¯—雤귻兿éµá•›ä¼å¨¸ã«“ì Î°éž½ï礎ꞔ는춎蔼ᱮç赫ç¤ì¬§î¢½ì«‹î‚¯à´»è³ê¼Šë«¬ï°¢Õ²è³§é›žá»·é¨‹î¶¨è·­ì»€ê…Žï¤‰áž§ä®‡éƒ¢ [ 2128.525457][T11808] usb 2-1: SerialNumber: ဌ [ 2128.549401][T26575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2128.560799][T26575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2129.033552][T26575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26575 comm=syz.1.5812 [ 2129.406630][T11808] usbhid 2-1:1.0: can't add hid device: -71 [ 2129.475199][T11808] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2129.585744][T11808] usb 2-1: USB disconnect, device number 97 [ 2129.805393][ T9650] usb 3-1: USB disconnect, device number 102 [ 2130.012122][T26611] team0: entered promiscuous mode [ 2130.017338][T26611] team_slave_0: entered promiscuous mode [ 2130.040700][T26611] team_slave_1: entered promiscuous mode [ 2130.524039][T26610] team0: left promiscuous mode [ 2130.528989][T26610] team_slave_0: left promiscuous mode [ 2130.579946][T26610] team_slave_1: left promiscuous mode [ 2132.439766][T22906] Bluetooth: hci5: command 0x0406 tx timeout [ 2132.589862][ T29] audit: type=1400 audit(1720190453.336:1838): avc: denied { bind } for pid=26642 comm="syz.4.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2133.030056][ T29] audit: type=1400 audit(1720190453.786:1839): avc: denied { read write } for pid=26651 comm="syz.0.5837" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2133.083193][ T29] audit: type=1400 audit(1720190453.786:1840): avc: denied { open } for pid=26651 comm="syz.0.5837" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2133.087985][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.123478][T11808] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 2133.130862][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.138747][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.146441][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.154413][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.162763][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.170908][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.178460][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.186405][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.193966][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.204700][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.212361][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.220090][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.227708][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.243899][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.251896][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.259593][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.267276][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.292057][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.310217][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.322997][T11808] usb 3-1: No LPM exit latency info found, disabling LPM. [ 2133.326355][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.331584][ T5152] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2133.356671][T11808] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2133.370023][T26654] team0: entered promiscuous mode [ 2133.374060][T11808] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2133.377322][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.392312][T11808] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2133.400751][T26654] team_slave_0: entered promiscuous mode [ 2133.416541][T11808] usb 3-1: language id specifier not provided by device, defaulting to English [ 2133.416813][T26654] team_slave_1: entered promiscuous mode [ 2133.433697][T11808] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2133.438929][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.449116][T11808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.468944][T11808] usb 3-1: Product: Ъ [ 2133.473255][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.473300][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.473337][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.481826][T11808] usb 3-1: Manufacturer: 毻ë‚᧌籎袚弹ç·ë¦¢êƒ¶ã„ºè³‘ï·“î³ë±•éµ€à®™à½¯â€­áœ£îˆ©æšŸâ¯—雤귻兿éµá•›ä¼å¨¸ã«“ì Î°éž½ï礎ꞔ는춎蔼ᱮç赫ç¤ì¬§î¢½ì«‹î‚¯à´»è³ê¼Šë«¬ï°¢Õ²è³§é›žá»·é¨‹î¶¨è·­ì»€ê…Žï¤‰áž§ä®‡éƒ¢ [ 2133.519801][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.527274][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.532159][T11808] usb 3-1: SerialNumber: ဌ [ 2133.557359][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.595965][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.627325][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.668936][ T8] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2133.700487][T26647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2133.709263][T26647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2133.734975][ T5152] usb 1-1: config 0 has no interfaces? [ 2133.741076][ T5152] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2133.751361][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.767569][ T8] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2133.798344][ T5152] usb 1-1: config 0 descriptor?? [ 2133.900257][T26653] team0: left promiscuous mode [ 2133.905127][T26653] team_slave_0: left promiscuous mode [ 2133.936810][T26653] team_slave_1: left promiscuous mode [ 2134.240639][T26647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26647 comm=syz.2.5836 [ 2134.432811][T11808] usbhid 3-1:1.0: can't add hid device: -71 [ 2134.439032][T11808] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2134.461584][T11808] usb 3-1: USB disconnect, device number 103 [ 2136.108928][T11808] usb 1-1: USB disconnect, device number 91 [ 2137.476124][T26702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 2137.531436][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 2138.045648][ T29] audit: type=1400 audit(1720190458.766:1841): avc: denied { mounton } for pid=26711 comm="syz.4.5858" path="/proc/684/task" dev="proc" ino=119329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2138.389610][T11808] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 2138.606613][T11808] usb 4-1: No LPM exit latency info found, disabling LPM. [ 2138.618671][T11808] usb 4-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2138.641920][T11808] usb 4-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2138.687152][T11808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2138.721955][T11808] usb 4-1: string descriptor 0 read error: -22 [ 2138.736687][T11808] usb 4-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2138.747228][T11808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.762723][T26716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2138.798347][T26716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2139.375153][T26710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26710 comm=syz.3.5857 [ 2139.938506][T26742] syz.2.5861 (26742): drop_caches: 2 [ 2140.248295][T11808] usbhid 4-1:1.0: can't add hid device: -71 [ 2140.255228][T11808] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2140.268795][T11808] usb 4-1: USB disconnect, device number 94 [ 2141.697112][T26758] trusted_key: encrypted_key: insufficient parameters specified [ 2142.498863][T26764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.317305][T26781] bridge_slave_1: left allmulticast mode [ 2143.330287][T26781] bridge_slave_1: left promiscuous mode [ 2143.336409][T26781] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.945857][ T29] audit: type=1400 audit(1720190464.646:1842): avc: denied { ioctl } for pid=26783 comm="syz.4.5876" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2144.807635][T26796] netlink: 'syz.3.5882': attribute type 9 has an invalid length. [ 2145.050310][T26802] syz.3.5883[26802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2145.050564][T26802] syz.3.5883[26802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2145.780972][T26807] trusted_key: encrypted_key: insufficient parameters specified [ 2146.362707][T26815] bridge_slave_1: left allmulticast mode [ 2146.389888][T26815] bridge_slave_1: left promiscuous mode [ 2146.427012][T26815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.433912][ T9650] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 2146.657560][ T9650] usb 5-1: No LPM exit latency info found, disabling LPM. [ 2146.667292][ T9650] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2147.115147][ T29] audit: type=1400 audit(1720190467.866:1843): avc: denied { unmount } for pid=25004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2147.276021][ T9650] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2147.289366][ T9650] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2147.302025][ T9650] usb 5-1: string descriptor 0 read error: -22 [ 2147.308501][ T9650] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2147.349929][ T9650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.394678][T26797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2147.413158][T26797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2147.719695][T11808] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2147.854674][T26797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26797 comm=syz.4.5880 [ 2147.875666][ T9650] usbhid 5-1:1.0: can't add hid device: -71 [ 2147.891827][ T9650] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2147.911391][ T5152] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 2147.913915][ T9650] usb 5-1: USB disconnect, device number 92 [ 2147.931239][T11808] usb 2-1: Using ep0 maxpacket: 8 [ 2147.955318][T11808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2147.985148][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2148.000007][T11808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2148.017704][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2148.033019][T11808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2148.057511][T11808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2148.072607][T11808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.133890][ T5152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.146984][ T5152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2148.168810][ T5152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2148.190861][ T5152] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2148.212486][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.235168][T26837] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2148.268380][ T5152] hub 3-1:1.0: bad descriptor, ignoring hub [ 2148.275754][ T5152] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2148.307993][ T5152] cdc_wdm 3-1:1.0: skipping garbage [ 2148.323373][ T5152] cdc_wdm 3-1:1.0: skipping garbage [ 2148.332704][ T5152] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2148.346237][ T5152] cdc_wdm 3-1:1.0: Unknown control protocol [ 2148.359354][T11808] usb 2-1: GET_CAPABILITIES returned 0 [ 2148.369183][T11808] usbtmc 2-1:16.0: can't read capabilities [ 2148.980097][T26854] bridge_slave_1: left allmulticast mode [ 2149.000244][T26854] bridge_slave_1: left promiscuous mode [ 2149.006772][T26854] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.512814][T26857] trusted_key: encrypted_key: insufficient parameters specified [ 2151.091360][ T29] audit: type=1400 audit(1720190471.836:1844): avc: denied { create } for pid=26878 comm="syz.4.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2151.162522][ T29] audit: type=1400 audit(1720190471.866:1845): avc: denied { ioctl } for pid=26878 comm="syz.4.5908" path="socket:[119581]" dev="sockfs" ino=119581 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2151.591117][ T29] audit: type=1400 audit(1720190472.336:1846): avc: denied { listen } for pid=26890 comm="syz.4.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2152.619743][ T5152] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 2152.673821][ T29] audit: type=1326 audit(1720190473.426:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2152.760494][ T29] audit: type=1326 audit(1720190473.426:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2152.811028][ T29] audit: type=1326 audit(1720190473.426:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2152.856983][ T5152] usb 1-1: No LPM exit latency info found, disabling LPM. [ 2152.874540][ T5152] usb 1-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2152.890642][ T29] audit: type=1326 audit(1720190473.426:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2152.925871][ T5152] usb 1-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2152.959560][ T5152] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2152.982155][ T29] audit: type=1326 audit(1720190473.426:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2153.038154][ T5152] usb 1-1: string descriptor 0 read error: -22 [ 2153.044918][ T5152] usb 1-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2153.064831][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.075304][ T29] audit: type=1326 audit(1720190473.426:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2153.106735][T26906] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2153.116245][T26881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2153.124675][T26881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2153.132625][ T29] audit: type=1326 audit(1720190473.426:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26899 comm="syz.2.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1375bd9 code=0x7ffc0000 [ 2153.593838][T26881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26881 comm=syz.0.5909 [ 2153.614183][ T5152] usbhid 1-1:1.0: can't add hid device: -71 [ 2153.623407][ T5152] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2153.638295][T26833] cdc_wdm 3-1:1.0: Error autopm - -16 [ 2153.645104][T11808] usb 3-1: USB disconnect, device number 104 [ 2153.856093][ T9650] usb 2-1: USB disconnect, device number 98 [ 2154.000099][ T5152] usb 1-1: USB disconnect, device number 92 [ 2155.130895][T26944] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2156.986749][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 2156.986774][ T29] audit: type=1326 audit(1720190477.736:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.058933][ T29] audit: type=1326 audit(1720190477.806:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.134647][ T29] audit: type=1326 audit(1720190477.806:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.249599][ T29] audit: type=1326 audit(1720190477.806:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.339593][ T29] audit: type=1326 audit(1720190477.846:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.429574][ T29] audit: type=1326 audit(1720190477.846:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2157.838554][ T29] audit: type=1326 audit(1720190477.846:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2159.264083][ T29] audit: type=1326 audit(1720190477.856:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2159.378215][ T29] audit: type=1326 audit(1720190477.856:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2159.402015][ T29] audit: type=1326 audit(1720190477.856:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c33f75bd9 code=0x7ffc0000 [ 2159.475900][T26982] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2159.759532][T11813] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2159.965106][T11813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 2160.013411][T11813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 2160.078239][T11813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2160.141449][T11813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2160.188134][T11813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.248638][T11813] usb 3-1: config 0 descriptor?? [ 2160.275802][T26981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2161.173753][ T9650] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2161.211365][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.218867][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.227099][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.236349][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.245401][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.253597][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.269508][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.277007][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.299597][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.307098][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.332314][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.350571][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.358097][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.379619][ T9650] usb 4-1: Using ep0 maxpacket: 32 [ 2161.388634][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.400614][ T9650] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2161.426864][T11813] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2161.437062][ T9650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2161.461018][T11813] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 2161.510086][ T9650] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2161.540178][ T9650] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2161.552092][T11813] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2161.605604][ T9650] usb 4-1: Product: syz [ 2161.623848][ T9650] usb 4-1: Manufacturer: syz [ 2161.672625][ T9650] usb 4-1: SerialNumber: syz [ 2161.679777][T11813] usb 3-1: USB disconnect, device number 105 [ 2161.692937][ T9650] usb 4-1: config 0 descriptor?? [ 2162.656645][ T9650] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2162.711471][ T9650] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2162.937692][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 2162.959577][ T9650] usb 4-1: USB disconnect, device number 95 [ 2162.981660][ T9650] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2163.138784][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'. [ 2163.223209][T11813] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2163.264376][T27042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=27042 comm=syz.0.5966 [ 2163.277567][T27042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=27042 comm=syz.0.5966 [ 2163.298884][T27042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=27042 comm=syz.0.5966 [ 2163.430706][T11813] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2163.446409][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.471589][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.499554][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.514286][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.541864][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.570613][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.584496][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.594213][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.608174][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.619115][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.628667][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.659506][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.669931][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.678950][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.747641][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.768290][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.778415][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.799902][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.816157][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.828371][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.849250][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2163.888384][T11813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.891937][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 2163.891962][ T29] audit: type=1400 audit(1720190484.636:1977): avc: denied { create } for pid=27049 comm="syz.3.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2163.899816][T11813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2164.217251][T11813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2164.564218][T11813] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2164.697512][T11813] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2164.813979][T11813] usb 3-1: Product: syz [ 2164.818229][T11813] usb 3-1: Manufacturer: syz [ 2164.866940][T11813] usb 3-1: SerialNumber: syz [ 2164.998944][T11813] usb 3-1: config 0 descriptor?? [ 2165.099629][T11813] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2165.299642][ T9650] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 2165.513716][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 2165.530588][ T9650] usb 1-1: No LPM exit latency info found, disabling LPM. [ 2165.531489][T11808] usb 3-1: USB disconnect, device number 106 [ 2165.557251][ T9650] usb 1-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2165.582664][T11808] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2165.629631][ T9650] usb 1-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2165.716153][ T9650] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2165.758218][ T9650] usb 1-1: language id specifier not provided by device, defaulting to English [ 2165.777299][ T9650] usb 1-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 2165.791403][ T9650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.828187][ T9650] usb 1-1: Product: 毻ë‚᧌籎袚弹ç·ë¦¢êƒ¶ã„ºè³‘ï·“î³ë±•éµ€à®™à½¯â€­áœ£îˆ©æšŸâ¯—雤귻兿éµá•›ä¼å¨¸ã«“ì Î°éž½ï礎ꞔ는춎蔼ᱮç赫ç¤ì¬§î¢½ì«‹î‚¯à´»è³ê¼Šë«¬ï°¢Õ²è³§é›žá»·é¨‹î¶¨è·­ì»€ê…Žï¤‰áž§ä®‡éƒ¢ [ 2165.930276][ T9650] usb 1-1: SerialNumber: Ъ [ 2166.001052][T27055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2166.040197][T27055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2166.138552][ T29] audit: type=1400 audit(1720190486.886:1978): avc: denied { create } for pid=27071 comm="syz.1.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2166.207340][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.219611][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.232006][T11808] IPVS: starting estimator thread 0... [ 2166.349845][T27075] IPVS: using max 21 ests per chain, 50400 per kthread [ 2166.515547][T27055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=27055 comm=syz.0.5972 [ 2166.870859][ T9650] usbhid 1-1:1.0: can't add hid device: -71 [ 2166.876986][ T9650] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2168.561248][T27085] trusted_key: encrypted_key: insufficient parameters specified [ 2168.759179][T27083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 2169.058713][ T9650] usb 1-1: USB disconnect, device number 93 [ 2169.869527][T21118] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2170.079561][T21118] usb 4-1: Using ep0 maxpacket: 8 [ 2170.092496][T21118] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2170.110059][T21118] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2170.129517][T21118] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2170.143419][T21118] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2170.184880][T21118] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2170.248151][T21118] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2170.307946][T21118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.481677][T27107] 9pnet_virtio: no channels available for device [ 2170.598836][T21118] usb 4-1: GET_CAPABILITIES returned 0 [ 2170.626529][T21118] usbtmc 4-1:16.0: can't read capabilities [ 2170.830308][T21118] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 2170.867959][T21118] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2170.887559][ T5151] usb 4-1: USB disconnect, device number 96 [ 2172.518368][T27129] trusted_key: encrypted_key: insufficient parameters specified [ 2173.503938][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6001'. [ 2173.864525][T27140] 9pnet_virtio: no channels available for device [ 2175.926009][T27174] trusted_key: encrypted_key: insufficient parameters specified [ 2175.940521][T11808] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2176.160143][T11808] usb 4-1: Using ep0 maxpacket: 8 [ 2176.182001][T11808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2176.233082][T11808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2176.285637][T11808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2176.346863][T11808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2176.415715][T11808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2176.489876][T11808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2176.548532][T11808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.996401][T11808] usb 4-1: GET_CAPABILITIES returned 0 [ 2177.007022][T11808] usbtmc 4-1:16.0: can't read capabilities [ 2177.069154][T27182] 9pnet_virtio: no channels available for device [ 2177.109940][T22571] usb 4-1: USB disconnect, device number 97 [ 2178.089909][T11808] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2178.420842][T11808] usb 3-1: Using ep0 maxpacket: 32 [ 2178.454718][T11808] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2178.661781][T11808] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2178.742019][T11808] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2178.800194][T11808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2178.830222][T11808] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2178.859577][T11808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2178.896386][T11808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2178.920608][T27200] input: syz0 as /devices/virtual/input/input19 [ 2178.931523][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6020'. [ 2178.937994][T11808] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2178.982312][T11808] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 2179.022257][T11808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.047016][T11808] usb 3-1: Product: Ð’ [ 2179.059700][T11808] usb 3-1: Manufacturer: 놱橹ï¨ä“¸ê³¦ç˜¾ç †äµ‚鷓쬡謆譖ꈶî¶â°•é¢à¤µã‡³ï¸” [ 2179.090492][T11808] usb 3-1: SerialNumber: syz [ 2179.109040][T11808] usb 3-1: config 0 descriptor?? [ 2179.145456][T11808] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2179.169670][T11808] pvrusb2: ********** [ 2179.173737][T11808] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2179.201934][T11808] pvrusb2: Important functionality might not be entirely working. [ 2179.228291][T11808] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2179.253058][T11808] pvrusb2: ********** [ 2179.386068][ T1979] pvrusb2: Invalid write control endpoint [ 2179.786233][ T1979] pvrusb2: Invalid write control endpoint [ 2179.835984][ T1979] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2179.866949][ T1979] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2179.877871][ T1979] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2179.917041][ T1979] pvrusb2: Device being rendered inoperable [ 2179.933418][ T1979] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2179.957003][ T1979] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 2180.014427][ T1979] pvrusb2: Attached sub-driver cx25840 [ 2180.049652][ T1979] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2180.079463][ T1979] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2180.697728][T11808] usb 3-1: USB disconnect, device number 107 [ 2181.370251][T27227] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2181.380536][T27227] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2182.249636][T11808] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2182.440168][T11808] usb 2-1: Using ep0 maxpacket: 8 [ 2182.449184][T11808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2182.480864][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2182.507178][T11808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2182.546598][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2182.577720][T11808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2182.620097][T11808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2182.649524][T11808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.065316][T11808] usb 2-1: usb_control_msg returned -71 [ 2183.074696][T11808] usbtmc 2-1:16.0: can't read capabilities [ 2183.091481][T11808] usb 2-1: USB disconnect, device number 99 [ 2184.325414][ T29] audit: type=1400 audit(1720190505.076:1979): avc: denied { mount } for pid=27262 comm="syz.0.6039" name="/" dev="autofs" ino=121475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2184.572637][T27261] syzkaller0: entered promiscuous mode [ 2184.608382][T27261] syzkaller0: entered allmulticast mode [ 2184.910313][T27269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6037'. [ 2186.230123][ T29] audit: type=1400 audit(1720190506.966:1980): avc: denied { unmount } for pid=25004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2188.188740][ T5152] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2188.420034][ T5152] usb 2-1: Using ep0 maxpacket: 8 [ 2188.438764][ T5152] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2188.448972][ T5152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2188.473503][ T5152] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2188.540832][ T5152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2188.596541][ T5152] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.700440][ T5152] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2188.780929][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.139951][ T5152] usb 2-1: usb_control_msg returned -71 [ 2189.179109][ T5152] usbtmc 2-1:16.0: can't read capabilities [ 2189.263420][ T5152] usb 2-1: USB disconnect, device number 100 [ 2194.585051][ T29] audit: type=1400 audit(1720190515.336:1981): avc: denied { mounton } for pid=27340 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2194.638381][ T29] audit: type=1400 audit(1720190515.336:1982): avc: denied { read } for pid=27340 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2194.644399][T22906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2194.678498][T22906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2194.688301][ T29] audit: type=1400 audit(1720190515.336:1983): avc: denied { open } for pid=27340 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2194.712627][T22906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2194.765826][T22906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2194.784259][T22906] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2194.813147][T22906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2194.854758][ T29] audit: type=1400 audit(1720190515.606:1984): avc: denied { mounton } for pid=27340 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2196.924713][T22906] Bluetooth: hci2: command tx timeout [ 2198.083017][T11338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.193538][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2198.212552][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2198.222551][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2198.305868][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2198.325179][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2198.349598][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2198.554064][T27378] xt_hashlimit: overflow, rate too high: 0 [ 2198.754976][T11338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.000005][ T5090] Bluetooth: hci2: command tx timeout [ 2199.010478][ T29] audit: type=1400 audit(1720190519.746:1985): avc: denied { write } for pid=27380 comm="syz.1.6072" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2199.346979][T11808] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2199.442925][T11338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.599691][T11808] usb 2-1: Using ep0 maxpacket: 8 [ 2199.618095][T11808] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2199.647321][T11808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2199.679654][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2199.697310][T11808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2199.708251][T11808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.722086][T11808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2199.739636][T11808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.779144][T11338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.442128][ T5090] Bluetooth: hci0: command tx timeout [ 2200.684928][T11338] bridge_slave_1: left allmulticast mode [ 2200.693214][T11338] bridge_slave_1: left promiscuous mode [ 2200.720007][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.754884][T11338] bridge_slave_0: left allmulticast mode [ 2200.762214][T11338] bridge_slave_0: left promiscuous mode [ 2200.770694][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.080935][ T5090] Bluetooth: hci2: command tx timeout [ 2202.547126][T11338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.587554][T11338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.611156][ T5090] Bluetooth: hci0: command tx timeout [ 2202.637065][T11338] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2202.668078][T11338] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2202.691330][T11338] bond0 (unregistering): Released all slaves [ 2203.170010][ T5090] Bluetooth: hci2: command tx timeout [ 2203.225345][T11338] bond1 (unregistering): Released all slaves [ 2203.705521][T27340] chnl_net:caif_netlink_parms(): no params data found [ 2203.944711][T27370] chnl_net:caif_netlink_parms(): no params data found [ 2204.440566][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'. [ 2204.750094][ T5090] Bluetooth: hci0: command tx timeout [ 2204.910956][T27440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 2205.209014][T11338] hsr_slave_0: left promiscuous mode [ 2205.259702][T11338] hsr_slave_1: left promiscuous mode [ 2205.304417][T27381] usbtmc 2-1:16.0: stb usb_control_msg returned -110 [ 2205.319004][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2205.360510][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2205.401930][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2205.422480][ T5151] usb 2-1: USB disconnect, device number 101 [ 2205.436883][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2205.508574][T11338] veth0_macvtap: left promiscuous mode [ 2205.539692][T11338] veth1_vlan: left promiscuous mode [ 2205.545093][T11338] veth0_vlan: left allmulticast mode [ 2205.576272][T11338] veth0_vlan: left promiscuous mode [ 2206.766931][ T5090] Bluetooth: hci0: command tx timeout [ 2207.290381][T11338] team0 (unregistering): Port device team_slave_1 removed [ 2208.423896][T27340] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.438606][T27340] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.447482][T27340] bridge_slave_0: entered allmulticast mode [ 2208.471172][T27340] bridge_slave_0: entered promiscuous mode [ 2208.544969][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6086'. [ 2208.709850][T27340] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.717148][T27340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.755921][T27340] bridge_slave_1: entered allmulticast mode [ 2208.801149][T27340] bridge_slave_1: entered promiscuous mode [ 2208.966470][T27370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.982811][T27370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.992008][T27370] bridge_slave_0: entered allmulticast mode [ 2209.002121][T27370] bridge_slave_0: entered promiscuous mode [ 2209.022862][T27475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.031817][T27475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.041359][T27475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.050197][T27475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.162972][T27340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2209.173332][T27370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.184110][T27370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.194206][T27370] bridge_slave_1: entered allmulticast mode [ 2209.221410][T27370] bridge_slave_1: entered promiscuous mode [ 2209.342799][T27340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2209.511443][T27340] team0: Port device team_slave_0 added [ 2209.556651][T27370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2209.590236][T27370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2209.647264][T27340] team0: Port device team_slave_1 added [ 2210.042907][T27370] team0: Port device team_slave_0 added [ 2210.642752][T27340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2210.663751][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2210.749496][T27340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2210.777656][T27370] team0: Port device team_slave_1 added [ 2210.907733][T27340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2210.948254][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2211.046783][T27340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2211.128379][T11338] IPVS: stop unused estimator thread 0... [ 2211.269640][T11808] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2211.294145][T27370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2211.313348][T27370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2211.372920][T27370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2211.477512][T11808] usb 1-1: Using ep0 maxpacket: 32 [ 2211.498695][T11808] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2211.517829][T11808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2211.532405][T27340] hsr_slave_0: entered promiscuous mode [ 2211.554876][T11808] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2211.576015][T27340] hsr_slave_1: entered promiscuous mode [ 2211.584649][T11808] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2211.604930][T11808] usb 1-1: Product: syz [ 2211.609513][T27340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2211.617135][T27340] Cannot create hsr debugfs directory [ 2211.618736][T11808] usb 1-1: Manufacturer: syz [ 2211.635610][T11808] usb 1-1: SerialNumber: syz [ 2211.647191][T11808] usb 1-1: config 0 descriptor?? [ 2211.665230][T27370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2211.681957][T11808] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2211.700046][T27370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2211.741210][T11808] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2211.766484][T27370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2211.926313][T11813] usb 1-1: USB disconnect, device number 94 [ 2211.926392][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 2211.985211][T11813] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2212.174714][T11338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.456221][T11338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.787138][T11338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.857810][T27370] hsr_slave_0: entered promiscuous mode [ 2212.891931][T27370] hsr_slave_1: entered promiscuous mode [ 2212.920048][T27370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2212.948148][T27370] Cannot create hsr debugfs directory [ 2213.116562][T11338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.228865][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 2213.560275][ T5151] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2213.794023][ T5151] usb 1-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 2213.810035][ T5151] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2213.833578][ T5151] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2213.859506][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.911851][ T5151] usb 1-1: config 0 descriptor?? [ 2213.938804][ T5151] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2214.275605][T11338] bridge_slave_0: left allmulticast mode [ 2214.288783][T11338] bridge_slave_0: left promiscuous mode [ 2214.319886][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.030189][T22906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2215.048228][T22906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2215.057661][T22906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2215.068789][T22906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2215.077651][T22906] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2215.087063][T22906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2215.453824][ T5135] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2215.590674][T11338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2215.608417][T11338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2215.622460][T11338] bond0 (unregistering): Released all slaves [ 2215.675674][ T5135] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2215.685962][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.696147][ T5135] usb 2-1: Product: syz [ 2215.700597][ T5135] usb 2-1: Manufacturer: syz [ 2215.713110][ T5135] usb 2-1: SerialNumber: syz [ 2215.756008][ T5135] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2215.834488][T22571] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2216.102209][ T29] audit: type=1400 audit(1720190536.856:1986): avc: denied { read } for pid=27573 comm="syz.1.6109" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2216.189990][ T29] audit: type=1400 audit(1720190536.856:1987): avc: denied { open } for pid=27573 comm="syz.1.6109" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2216.321032][T11808] usb 1-1: USB disconnect, device number 95 [ 2216.884389][ T5090] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 2217.259336][ T5090] Bluetooth: hci1: command tx timeout [ 2219.329506][ T5090] Bluetooth: hci1: command tx timeout [ 2220.289478][T11338] hsr_slave_0: left promiscuous mode [ 2220.486582][T11338] hsr_slave_1: left promiscuous mode [ 2220.649286][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.670286][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.920021][T22906] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2220.929125][T22906] Bluetooth: hci5: Injecting HCI hardware error event [ 2220.947440][ T5090] Bluetooth: hci5: hardware error 0x00 [ 2220.991452][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2221.019925][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2221.314852][T11338] veth0_macvtap: left promiscuous mode [ 2221.351987][T11338] veth1_vlan: left promiscuous mode [ 2221.401200][T22906] Bluetooth: hci1: command tx timeout [ 2223.160841][ T5090] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2223.485005][ T5090] Bluetooth: hci1: command tx timeout [ 2228.415130][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 2228.430710][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.590737][T22906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2228.609825][T22906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2228.627724][T22906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2228.649225][T22906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2228.670942][T22906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2228.683950][T22906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2228.841321][T11338] team0 (unregistering): Port device team_slave_1 removed [ 2229.318720][T11338] team0 (unregistering): Port device team_slave_0 removed [ 2230.759909][ T5090] Bluetooth: hci4: command tx timeout [ 2232.856221][ T5090] Bluetooth: hci4: command tx timeout [ 2234.111992][T22906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2234.159619][T22906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2234.173615][T22906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2234.182810][T22906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2234.193370][T22906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2234.206153][T22906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2234.919686][T27341] Bluetooth: hci4: command tx timeout [ 2235.140929][T27571] chnl_net:caif_netlink_parms(): no params data found [ 2235.244025][T27340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2235.434566][T27340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2236.283636][T27341] Bluetooth: hci6: command tx timeout [ 2237.000004][T27341] Bluetooth: hci4: command tx timeout [ 2238.049605][T27340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2238.359547][T27341] Bluetooth: hci6: command tx timeout [ 2239.347937][T27340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2240.439632][T27341] Bluetooth: hci6: command tx timeout [ 2241.462470][ T29] audit: type=1400 audit(1720190562.186:1988): avc: denied { sys_chroot } for pid=27622 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2241.513043][ T29] audit: type=1400 audit(1720190562.206:1989): avc: denied { setgid } for pid=27622 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2241.558969][ T29] audit: type=1400 audit(1720190562.206:1990): avc: denied { setrlimit } for pid=27622 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 2242.521074][T27341] Bluetooth: hci6: command tx timeout [ 2242.758496][T27571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2242.781391][T27571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2242.789236][T27571] bridge_slave_0: entered allmulticast mode [ 2242.836001][T27571] bridge_slave_0: entered promiscuous mode [ 2242.867981][T27571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2242.901296][T27571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2242.908677][T27571] bridge_slave_1: entered allmulticast mode [ 2242.930588][T27571] bridge_slave_1: entered promiscuous mode [ 2255.182544][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2255.195585][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2255.206759][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2255.217674][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2255.227897][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2255.239907][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2257.179193][ T5090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2257.200628][ T5090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2257.219528][ T5090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2257.257758][ T5090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2257.270595][ T5090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2257.278391][ T5090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2257.337060][T27341] Bluetooth: hci3: command tx timeout [ 2259.409721][T27341] Bluetooth: hci3: command tx timeout [ 2259.416531][ T5090] Bluetooth: hci7: command tx timeout [ 2261.489651][T27341] Bluetooth: hci3: command tx timeout [ 2261.495912][ T5090] Bluetooth: hci7: command tx timeout [ 2263.565732][ T5090] Bluetooth: hci7: command tx timeout [ 2263.571383][ T5090] Bluetooth: hci3: command tx timeout [ 2265.649511][ T5090] Bluetooth: hci7: command tx timeout [ 2275.713458][T27341] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2275.748659][T27341] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2275.758539][T27341] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2275.770186][T27341] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2275.782093][T27341] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2275.790025][T27341] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2277.889842][T27341] Bluetooth: hci8: command tx timeout [ 2279.970699][T27341] Bluetooth: hci8: command tx timeout [ 2282.059501][T27341] Bluetooth: hci8: command tx timeout [ 2284.129740][T27341] Bluetooth: hci8: command tx timeout [ 2288.710824][ T5090] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2288.738100][ T5090] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2288.751462][ T5090] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2288.765936][ T5090] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2288.775191][ T5090] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2288.783519][ T5090] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2289.812049][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 2289.818474][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.850175][ T5090] Bluetooth: hci9: command tx timeout [ 2292.929996][ T5090] Bluetooth: hci9: command tx timeout [ 2294.632333][T27341] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2294.647577][T27341] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2294.667227][T27341] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2294.676858][T27341] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2294.689613][T27341] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2294.697391][T27341] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2295.009984][T27341] Bluetooth: hci9: command tx timeout [ 2296.776030][T27341] Bluetooth: hci10: command tx timeout [ 2297.090020][T27341] Bluetooth: hci9: command tx timeout [ 2298.853080][T27341] Bluetooth: hci10: command tx timeout [ 2300.933714][T27341] Bluetooth: hci10: command tx timeout [ 2303.009558][T27341] Bluetooth: hci10: command tx timeout [ 2315.211365][ T5090] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2315.227979][ T5090] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2315.238022][ T5090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2315.249282][ T5090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2315.257754][ T5090] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2315.275772][ T5090] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2317.409662][T27341] Bluetooth: hci11: command tx timeout [ 2317.689466][ T5090] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2317.714055][ T5090] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2317.727668][ T5090] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2317.739720][ T5090] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2317.748829][ T5090] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2317.760950][ T5090] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2319.489649][ T5090] Bluetooth: hci11: command tx timeout [ 2319.818373][T27341] Bluetooth: hci12: command tx timeout [ 2321.569884][T22906] Bluetooth: hci11: command tx timeout [ 2321.904907][T22906] Bluetooth: hci0: command 0x0406 tx timeout [ 2321.919440][T22906] Bluetooth: hci2: command 0x0406 tx timeout [ 2321.927957][T22906] Bluetooth: hci12: command tx timeout [ 2323.649662][T27341] Bluetooth: hci11: command tx timeout [ 2323.974227][T27341] Bluetooth: hci12: command tx timeout [ 2326.049513][T27341] Bluetooth: hci12: command tx timeout [ 2336.207066][T27673] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2336.231566][T27673] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2336.242021][T27673] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2336.255879][T27673] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2336.265823][T27673] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2336.274264][T27673] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2337.341368][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 2338.378357][T27341] Bluetooth: hci13: command tx timeout [ 2340.454415][T27341] Bluetooth: hci13: command tx timeout [ 2342.529475][T27341] Bluetooth: hci13: command tx timeout [ 2344.609635][T27341] Bluetooth: hci13: command tx timeout [ 2349.815625][ T5090] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2349.851922][ T5090] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2349.865438][ T5090] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2349.887453][ T5090] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2349.898620][ T5090] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2349.908620][ T5090] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2351.034417][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 2351.046174][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.969729][ T5090] Bluetooth: hci14: command tx timeout [ 2352.619958][ T5090] Bluetooth: hci4: command 0x0406 tx timeout [ 2354.049813][T27341] Bluetooth: hci14: command tx timeout [ 2354.700184][ T5090] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2354.714398][ T5090] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2354.739731][ T5090] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2354.773510][ T5090] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2354.783624][ T5090] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 2354.791781][ T5090] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2356.129470][ T5090] Bluetooth: hci14: command tx timeout [ 2356.929961][ T5090] Bluetooth: hci15: command tx timeout [ 2357.745679][ T5090] Bluetooth: hci6: command 0x0406 tx timeout [ 2358.209890][T27341] Bluetooth: hci14: command tx timeout [ 2359.009824][ T5090] Bluetooth: hci15: command tx timeout [ 2361.089716][ T5090] Bluetooth: hci15: command tx timeout [ 2363.169569][ T5090] Bluetooth: hci15: command tx timeout [ 2375.782777][T27341] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2375.813060][T27341] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2375.823156][T27341] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2375.834284][T27341] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2375.843035][T27341] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 2375.853880][T27341] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2377.973328][ T5090] Bluetooth: hci16: command tx timeout [ 2378.224378][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 2378.750403][ T5090] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2378.767952][ T5090] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2378.785978][ T5090] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2378.799648][ T5090] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2378.808015][ T5090] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 2378.847139][ T5090] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2380.049605][ T5090] Bluetooth: hci16: command tx timeout [ 2380.929772][ T5090] Bluetooth: hci17: command tx timeout [ 2382.129735][ T5090] Bluetooth: hci16: command tx timeout [ 2383.001408][ T5090] Bluetooth: hci17: command tx timeout [ 2383.338858][ T5090] Bluetooth: hci7: command 0x0406 tx timeout [ 2384.209516][T27341] Bluetooth: hci16: command tx timeout [ 2385.089572][T27341] Bluetooth: hci17: command tx timeout [ 2387.169497][T27341] Bluetooth: hci17: command tx timeout [ 2394.050033][ T31] INFO: task dhcpcd:4748 blocked for more than 143 seconds. [ 2394.057404][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2394.078653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2394.109446][ T31] task:dhcpcd state:D stack:23352 pid:4748 tgid:4748 ppid:4747 flags:0x00004002 [ 2394.138187][ T31] Call Trace: [ 2394.143387][ T31] [ 2394.146403][ T31] __schedule+0xf15/0x5d00 [ 2394.151624][ T31] ? __pfx___lock_acquire+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 2394.156927][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2394.175102][ T31] ? __pfx___schedule+0x10/0x10 [ 2394.200031][ T29] audit: type=1400 audit(1720190714.946:1991): avc: denied { write } for pid=5070 comm="syz-executor" path="pipe:[3624]" dev="pipefs" ino=3624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2394.224695][ T31] ? schedule+0x298/0x350 [ 2394.229184][ T31] ? __pfx_lock_release+0x10/0x10 [ 2394.240256][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2394.245046][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2394.291566][ T31] schedule+0xe7/0x350 [ 2394.295733][ T31] schedule_preempt_disabled+0x13/0x30 [ 2394.319443][ T31] __mutex_lock+0x5b8/0x9c0 [ 2394.330198][ T31] ? devinet_ioctl+0x26e/0x1f10 [ 2394.335153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2394.367150][ T31] ? __pfx_lock_release+0x10/0x10 [ 2394.379343][ T31] ? security_capable+0x98/0xd0 [ 2394.384294][ T31] ? devinet_ioctl+0x26e/0x1f10 [ 2394.389199][ T31] devinet_ioctl+0x26e/0x1f10 [ 2394.416698][ T31] ? __might_fault+0xe3/0x190 [ 2394.444711][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 2394.466327][ T31] ? _copy_from_user+0x5d/0xf0 [ 2394.526518][ T31] inet_ioctl+0x3aa/0x3f0 [ 2394.554364][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 2394.594042][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2394.622871][ T31] sock_do_ioctl+0x116/0x280 [ 2394.637977][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2394.648596][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 2394.658113][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2394.665329][ T31] sock_ioctl+0x22e/0x6c0 [ 2394.674958][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 2394.682927][ T31] ? selinux_file_ioctl+0x180/0x270 [ 2394.688207][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 2394.699338][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 2394.704276][ T31] __x64_sys_ioctl+0x193/0x220 [ 2394.709095][ T31] do_syscall_64+0xcd/0x250 [ 2394.723069][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.729067][ T31] RIP: 0033:0x7f60e641fd49 [ 2394.744379][ T31] RSP: 002b:00007ffde4ae7e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.753948][ T31] RAX: ffffffffffffffda RBX: 00007f60e63516c0 RCX: 00007f60e641fd49 [ 2394.778646][ T31] RDX: 00007ffde4af8048 RSI: 0000000000008914 RDI: 0000000000000014 [ 2394.800889][ T31] RBP: 00007ffde4b08208 R08: 00007ffde4af8008 R09: 00007ffde4af7fb8 [ 2394.808949][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2394.828941][ T31] R13: 00007ffde4af8048 R14: 0000000000000028 R15: 0000000000008914 [ 2394.843709][ T31] [ 2394.846814][ T31] INFO: task kworker/1:6:5151 blocked for more than 144 seconds. [ 2394.866242][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2394.879470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2394.888195][ T31] task:kworker/1:6 state:D stack:22240 pid:5151 tgid:5151 ppid:2 flags:0x00004000 [ 2394.898843][ T31] Workqueue: events linkwatch_event [ 2394.912446][ T31] Call Trace: [ 2394.915835][ T31] [ 2394.918803][ T31] __schedule+0xf15/0x5d00 [ 2394.924099][ T31] ? __pfx_mark_lock+0x10/0x10 [ 2394.928937][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2394.937859][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2394.951280][ T31] ? __pfx___schedule+0x10/0x10 [ 2394.956228][ T31] ? schedule+0x298/0x350 [ 2394.981643][ T31] ? __pfx_lock_release+0x10/0x10 [ 2394.986779][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2395.008874][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2395.017021][ T31] schedule+0xe7/0x350 [ 2395.021633][ T31] schedule_preempt_disabled+0x13/0x30 [ 2395.027168][ T31] __mutex_lock+0x5b8/0x9c0 [ 2395.038543][ T31] ? linkwatch_event+0x51/0xc0 [ 2395.047936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2395.053733][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 2395.058846][ T31] ? __pfx_lock_release+0x10/0x10 [ 2395.068519][ T31] ? linkwatch_event+0x51/0xc0 [ 2395.077613][ T31] ? rtnl_lock+0x9/0x20 [ 2395.083590][ T31] linkwatch_event+0x51/0xc0 [ 2395.088349][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 2395.107927][ T31] ? rcu_is_watching+0x12/0xc0 [ 2395.160474][ T31] process_one_work+0x9c5/0x1b40 [ 2395.165516][ T31] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 2395.199043][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2395.210332][ T31] ? assign_work+0x1a0/0x250 [ 2395.215037][ T31] worker_thread+0x6c8/0xf30 [ 2395.226330][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2395.233474][ T31] kthread+0x2c1/0x3a0 [ 2395.237684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2395.261753][ T31] ? __pfx_kthread+0x10/0x10 [ 2395.266451][ T31] ret_from_fork+0x45/0x80 [ 2395.290116][ T31] ? __pfx_kthread+0x10/0x10 [ 2395.294823][ T31] ret_from_fork_asm+0x1a/0x30 [ 2395.338008][ T31] [ 2395.350924][ T31] INFO: task kworker/u8:2:11338 blocked for more than 144 seconds. [ 2395.358894][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2395.376274][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2395.385900][ T31] task:kworker/u8:2 state:D stack:23992 pid:11338 tgid:11338 ppid:2 flags:0x00004000 [ 2395.404469][ T31] Workqueue: netns cleanup_net [ 2395.409926][ T31] Call Trace: [ 2395.413253][ T31] [ 2395.416223][ T31] __schedule+0xf15/0x5d00 [ 2395.425370][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2395.435279][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2395.442768][ T31] ? kasan_save_track+0x14/0x30 [ 2395.455957][ T31] ? __pfx___schedule+0x10/0x10 [ 2395.463873][ T31] ? schedule+0x298/0x350 [ 2395.468276][ T31] ? __pfx_lock_release+0x10/0x10 [ 2395.474451][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2395.479205][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2395.511954][ T31] schedule+0xe7/0x350 [ 2395.516466][ T31] schedule_preempt_disabled+0x13/0x30 [ 2395.537015][ T31] __mutex_lock+0x5b8/0x9c0 [ 2395.542355][ T31] ? mpls_net_exit+0x83/0x350 [ 2395.547115][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2395.561264][ T31] ? kfree+0x12a/0x3b0 [ 2395.568945][ T31] ? mpls_net_exit+0x83/0x350 [ 2395.586336][ T31] ? rtnl_lock+0x9/0x20 [ 2395.605964][ T31] mpls_net_exit+0x83/0x350 [ 2395.612665][ T31] ? __pfx_mpls_net_exit+0x10/0x10 [ 2395.617859][ T31] ops_exit_list+0xb0/0x180 [ 2395.623207][ T31] cleanup_net+0x5b7/0xbf0 [ 2395.627690][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2395.648454][ T31] process_one_work+0x9c5/0x1b40 [ 2395.663368][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2395.668517][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2395.695952][ T31] ? assign_work+0x1a0/0x250 [ 2395.712137][ T31] worker_thread+0x6c8/0xf30 [ 2395.716835][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2395.739388][ T31] kthread+0x2c1/0x3a0 [ 2395.743568][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2395.748830][ T31] ? __pfx_kthread+0x10/0x10 [ 2395.756899][ T31] ret_from_fork+0x45/0x80 [ 2395.768166][ T31] ? __pfx_kthread+0x10/0x10 [ 2395.774521][ T31] ret_from_fork_asm+0x1a/0x30 [ 2395.779770][ T31] [ 2395.782924][ T31] INFO: task kworker/u8:5:24895 blocked for more than 145 seconds. [ 2395.800009][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2395.807706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2395.826134][ T31] task:kworker/u8:5 state:D stack:24304 pid:24895 tgid:24895 ppid:2 flags:0x00004000 [ 2395.840866][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 2395.846943][ T31] Call Trace: [ 2395.880114][ T31] [ 2395.883120][ T31] __schedule+0xf15/0x5d00 [ 2395.887588][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2395.902510][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2395.907834][ T31] ? __pfx___schedule+0x10/0x10 [ 2395.919971][ T31] ? schedule+0x298/0x350 [ 2395.924428][ T31] ? __pfx_lock_release+0x10/0x10 [ 2395.932995][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2395.937753][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2395.952325][ T31] schedule+0xe7/0x350 [ 2395.956484][ T31] schedule_preempt_disabled+0x13/0x30 [ 2395.965049][ T31] __mutex_lock+0x5b8/0x9c0 [ 2395.980521][ T31] ? addrconf_dad_work+0xcf/0x1500 [ 2395.985818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2395.992944][ T31] ? debug_object_deactivate+0x1f0/0x370 [ 2395.998668][ T31] ? find_held_lock+0x2d/0x110 [ 2396.024401][ T31] ? addrconf_dad_work+0xcf/0x1500 [ 2396.036943][ T31] ? rtnl_lock+0x9/0x20 [ 2396.051425][ T31] addrconf_dad_work+0xcf/0x1500 [ 2396.056466][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 2396.079387][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 2396.084960][ T31] process_one_work+0x9c5/0x1b40 [ 2396.094484][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 2396.100190][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2396.105634][ T31] ? assign_work+0x1a0/0x250 [ 2396.118562][ T31] worker_thread+0x6c8/0xf30 [ 2396.123788][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2396.128963][ T31] kthread+0x2c1/0x3a0 [ 2396.147401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2396.154834][ T31] ? __pfx_kthread+0x10/0x10 [ 2396.159753][ T31] ret_from_fork+0x45/0x80 [ 2396.165628][ T31] ? __pfx_kthread+0x10/0x10 [ 2396.197689][ T31] ret_from_fork_asm+0x1a/0x30 [ 2396.208456][ T31] [ 2396.211910][ T31] INFO: task syz-executor:27340 blocked for more than 145 seconds. [ 2396.226380][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2396.235907][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2396.249391][ T31] task:syz-executor state:D stack:23744 pid:27340 tgid:27340 ppid:1 flags:0x00000004 [ 2396.268519][ T31] Call Trace: [ 2396.279752][ T31] [ 2396.282761][ T31] __schedule+0xf15/0x5d00 [ 2396.287294][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2396.296934][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2396.307699][ T31] ? find_held_lock+0x2d/0x110 [ 2396.313374][ T31] ? __pfx___schedule+0x10/0x10 [ 2396.318310][ T31] ? schedule+0x298/0x350 [ 2396.348909][ T31] ? __pfx_lock_release+0x10/0x10 [ 2396.354589][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2396.366279][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2396.376160][ T31] schedule+0xe7/0x350 [ 2396.385416][ T31] schedule_preempt_disabled+0x13/0x30 [ 2396.394652][ T31] __mutex_lock+0x5b8/0x9c0 [ 2396.404920][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2396.410901][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2396.416049][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2396.430501][ T31] rtnetlink_rcv_msg+0x372/0xea0 [ 2396.435587][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2396.442909][ T31] ? avc_has_perm+0x11b/0x1c0 [ 2396.447684][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2396.475829][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 2396.488474][ T31] ? __lock_acquire+0xc5d/0x3b30 [ 2396.503706][ T31] netlink_rcv_skb+0x16b/0x440 [ 2396.508584][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2396.522411][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2396.527805][ T31] ? netlink_deliver_tap+0x1ae/0xd90 [ 2396.534096][ T31] netlink_unicast+0x542/0x820 [ 2396.538945][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2396.549947][ T31] netlink_sendmsg+0x8b8/0xd70 [ 2396.554802][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2396.567663][ T31] __sys_sendto+0x47f/0x4e0 [ 2396.579343][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2396.584451][ T31] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2396.606657][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 2396.642809][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2396.648123][ T31] ? __fput+0x6c5/0xbb0 [ 2396.667573][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 2396.673453][ T31] ? do_syscall_64+0x91/0x250 [ 2396.680327][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2396.685624][ T31] do_syscall_64+0xcd/0x250 [ 2396.698806][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.706566][ T31] RIP: 0033:0x7f8944f7796c [ 2396.711396][ T31] RSP: 002b:00007ffebcf6de90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2396.726430][ T31] RAX: ffffffffffffffda RBX: 00007f8945c34620 RCX: 00007f8944f7796c [ 2396.736662][ T31] RDX: 0000000000000020 RSI: 00007f8945c34670 RDI: 0000000000000003 [ 2396.752585][ T31] RBP: 0000000000000000 R08: 00007ffebcf6dee4 R09: 000000000000000c [ 2396.761118][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2396.769159][ T31] R13: 0000000000000000 R14: 00007f8945c34670 R15: 0000000000000000 [ 2396.779675][ T31] [ 2396.790687][ T31] INFO: task syz-executor:27370 blocked for more than 146 seconds. [ 2396.798695][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2396.829379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2396.838131][ T31] task:syz-executor state:D stack:24048 pid:27370 tgid:27370 ppid:1 flags:0x00004006 [ 2396.867264][ T31] Call Trace: [ 2396.871074][ T31] [ 2396.874065][ T31] __schedule+0xf15/0x5d00 [ 2396.878534][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2396.894818][ T31] ? __pfx_lockdep_lock+0x10/0x10 [ 2396.900663][ T31] ? __pfx___schedule+0x10/0x10 [ 2396.905588][ T31] ? schedule+0x298/0x350 [ 2396.910914][ T31] ? __pfx_lock_release+0x10/0x10 [ 2396.916030][ T31] ? mark_lock+0xb5/0xc60 [ 2396.928563][ T31] ? __pfx_mark_lock+0x10/0x10 [ 2396.934255][ T31] schedule+0xe7/0x350 [ 2396.938393][ T31] schedule_timeout+0x258/0x2a0 [ 2396.953505][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2396.958986][ T31] ? mark_held_locks+0x9f/0xe0 [ 2396.964631][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2396.993762][ T31] __wait_for_common+0x3de/0x5f0 [ 2396.998808][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2397.028285][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2397.039535][ T31] ? mark_held_locks+0x9f/0xe0 [ 2397.044411][ T31] __flush_work+0x5bd/0xc60 [ 2397.048973][ T31] ? __pfx___flush_work+0x10/0x10 [ 2397.062687][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2397.068076][ T31] ? __pfx___might_resched+0x10/0x10 [ 2397.074094][ T31] ? mark_held_locks+0x9f/0xe0 [ 2397.078937][ T31] unregister_netdevice_many_notify+0x12c1/0x19f0 [ 2397.099449][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2397.104767][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2397.128509][ T31] ? nsim_destroy+0x6f/0x6a0 [ 2397.136282][ T31] unregister_netdevice_queue+0x307/0x3f0 [ 2397.145154][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2397.157100][ T31] nsim_destroy+0x107/0x6a0 [ 2397.162281][ T31] __nsim_dev_port_del+0x189/0x240 [ 2397.167474][ T31] nsim_dev_reload_destroy+0x108/0x4d0 [ 2397.211309][ T31] nsim_drv_remove+0x52/0x1d0 [ 2397.216103][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 2397.230415][ T31] device_remove+0xc8/0x170 [ 2397.235009][ T31] device_release_driver_internal+0x44a/0x610 [ 2397.250937][ T31] bus_remove_device+0x22f/0x420 [ 2397.255994][ T31] device_del+0x396/0x9f0 [ 2397.267584][ T31] ? __pfx_device_del+0x10/0x10 [ 2397.272913][ T31] ? rcu_is_watching+0x12/0xc0 [ 2397.277751][ T31] device_unregister+0x1d/0xc0 [ 2397.283226][ T31] del_device_store+0x346/0x4b0 [ 2397.288255][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2397.304071][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2397.309239][ T31] ? __pfx__copy_from_iter+0x10/0x10 [ 2397.319334][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2397.324834][ T31] bus_attr_store+0x76/0xa0 [ 2397.337328][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 2397.343183][ T31] sysfs_kf_write+0x117/0x170 [ 2397.347938][ T31] kernfs_fop_write_iter+0x343/0x500 [ 2397.385267][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2397.398183][ T31] vfs_write+0x6b6/0x1140 [ 2397.418017][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2397.429717][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2397.434589][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2397.444445][ T31] ? __fget_light+0x173/0x210 [ 2397.449218][ T31] ksys_write+0x12f/0x260 [ 2397.457006][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2397.468370][ T31] do_syscall_64+0xcd/0x250 [ 2397.473519][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.482664][ T31] RIP: 0033:0x7f3b4dd7475f [ 2397.487141][ T31] RSP: 002b:00007ffeaafe7bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2397.506337][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3b4dd7475f [ 2397.522609][ T31] RDX: 0000000000000001 RSI: 00007ffeaafe7c20 RDI: 0000000000000005 [ 2397.531130][ T31] RBP: 00007f3b4dde45a0 R08: 0000000000000000 R09: 00007ffeaafe7a27 [ 2397.539162][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2397.570388][ T31] R13: 00007ffeaafe7c20 R14: 00007f3b4ea34620 R15: 0000000000000003 [ 2397.578457][ T31] [ 2397.599486][ T31] INFO: task syz-executor:27571 blocked for more than 146 seconds. [ 2397.607494][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2397.622355][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2397.631663][ T31] task:syz-executor state:D stack:25072 pid:27571 tgid:27571 ppid:1 flags:0x00000004 [ 2397.647317][ T31] Call Trace: [ 2397.653908][ T31] [ 2397.656890][ T31] __schedule+0xf15/0x5d00 [ 2397.676735][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2397.685206][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2397.691164][ T31] ? find_held_lock+0x2d/0x110 [ 2397.696034][ T31] ? __pfx___schedule+0x10/0x10 [ 2397.711710][ T31] ? schedule+0x298/0x350 [ 2397.716135][ T31] ? __pfx_lock_release+0x10/0x10 [ 2397.723300][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2397.728109][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2397.739345][ T31] schedule+0xe7/0x350 [ 2397.743526][ T31] schedule_preempt_disabled+0x13/0x30 [ 2397.749040][ T31] __mutex_lock+0x5b8/0x9c0 [ 2397.788199][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2397.799363][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2397.807808][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2397.817925][ T31] rtnetlink_rcv_msg+0x372/0xea0 [ 2397.827403][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2397.837225][ T31] ? avc_has_perm+0x11b/0x1c0 [ 2397.842400][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2397.847815][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 2397.853922][ T31] ? __lock_acquire+0xc5d/0x3b30 [ 2397.858986][ T31] netlink_rcv_skb+0x16b/0x440 [ 2397.871811][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2397.877355][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2397.913674][ T31] ? netlink_deliver_tap+0x1ae/0xd90 [ 2397.919165][ T31] netlink_unicast+0x542/0x820 [ 2397.959473][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2397.964904][ T31] netlink_sendmsg+0x8b8/0xd70 [ 2397.975327][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2397.986286][ T31] __sys_sendto+0x47f/0x4e0 [ 2397.996508][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2398.002388][ T31] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2398.019835][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 2398.025362][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2398.038019][ T31] ? __fput+0x6c5/0xbb0 [ 2398.043658][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 2398.048497][ T31] ? do_syscall_64+0x91/0x250 [ 2398.061678][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2398.067061][ T31] do_syscall_64+0xcd/0x250 [ 2398.073777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.086734][ T31] RIP: 0033:0x7f05c737796c [ 2398.091783][ T31] RSP: 002b:00007ffd105bf360 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2398.100930][ T31] RAX: ffffffffffffffda RBX: 00007f05c8034620 RCX: 00007f05c737796c [ 2398.108975][ T31] RDX: 0000000000000028 RSI: 00007f05c8034670 RDI: 0000000000000003 [ 2398.160788][ T31] RBP: 0000000000000000 R08: 00007ffd105bf3b4 R09: 000000000000000c [ 2398.168857][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2398.188183][ T31] R13: 0000000000000000 R14: 00007f05c8034670 R15: 0000000000000000 [ 2398.198202][ T31] [ 2398.209783][ T31] INFO: task syz-executor:27612 blocked for more than 147 seconds. [ 2398.223590][ T31] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2398.237220][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2398.252353][ T31] task:syz-executor state:D stack:25248 pid:27612 tgid:27612 ppid:1 flags:0x00000004 [ 2398.277268][ T31] Call Trace: [ 2398.283100][ T31] [ 2398.286090][ T31] __schedule+0xf15/0x5d00 [ 2398.291571][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2398.296954][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2398.324459][ T31] ? find_held_lock+0x2d/0x110 [ 2398.341898][ T31] ? __pfx___schedule+0x10/0x10 [ 2398.346840][ T31] ? schedule+0x298/0x350 [ 2398.371618][ T31] ? __pfx_lock_release+0x10/0x10 [ 2398.376763][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 2398.391510][ T31] ? __mutex_trylock_common+0x78/0x250 [ 2398.397095][ T31] schedule+0xe7/0x350 [ 2398.402025][ T31] schedule_preempt_disabled+0x13/0x30 [ 2398.407563][ T31] __mutex_lock+0x5b8/0x9c0 [ 2398.418507][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2398.428393][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2398.434112][ T31] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2398.442158][ T31] rtnetlink_rcv_msg+0x372/0xea0 [ 2398.447177][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2398.462206][ T31] ? avc_has_perm+0x11b/0x1c0 [ 2398.466982][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 2398.480924][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 2398.486054][ T31] ? __lock_acquire+0xc5d/0x3b30 [ 2398.492203][ T31] netlink_rcv_skb+0x16b/0x440 [ 2398.497056][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2398.536617][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2398.559450][ T31] ? netlink_deliver_tap+0x1ae/0xd90 [ 2398.569019][ T31] netlink_unicast+0x542/0x820 [ 2398.577145][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2398.589350][ T31] netlink_sendmsg+0x8b8/0xd70 [ 2398.594306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2398.603467][ T31] __sys_sendto+0x47f/0x4e0 [ 2398.608052][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2398.619207][ T31] ? __pfx___sys_socket+0x10/0x10 [ 2398.627022][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 2398.640303][ T31] ? do_syscall_64+0x91/0x250 [ 2398.645157][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2398.657403][ T31] do_syscall_64+0xcd/0x250 [ 2398.662509][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.668509][ T31] RIP: 0033:0x7f598537796c [ 2398.694771][ T5090] Bluetooth: hci8: command 0x0406 tx timeout [ 2398.702887][ T31] RSP: 002b:00007ffe13585410 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2398.735001][ T31] RAX: ffffffffffffffda RBX: 00007f5986034620 RCX: 00007f598537796c [ 2398.751546][ T31] RDX: 0000000000000044 RSI: 00007f5986034670 RDI: 0000000000000003 [ 2398.760035][ T31] RBP: 0000000000000000 R08: 00007ffe13585464 R09: 000000000000000c [ 2398.768063][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2398.784649][ T31] R13: 0000000000000000 R14: 00007f5986034670 R15: 0000000000000000 [ 2398.795892][ T31] [ 2398.816501][ T31] [ 2398.816501][ T31] Showing all locks held in the system: [ 2398.837633][ T31] 1 lock held by khungtaskd/31: [ 2398.842952][ T31] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 2398.866742][ T31] 1 lock held by dhcpcd/4748: [ 2398.879336][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1f10 [ 2398.888618][ T31] 2 locks held by getty/4838: [ 2398.940992][ T31] #0: ffff88802a82b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2398.966824][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 2398.985744][ T31] 3 locks held by kworker/1:6/5151: [ 2398.996535][ T31] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2399.011584][ T31] #1: ffffc900039afd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2399.022710][ T31] #2: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2399.042791][ T31] 3 locks held by kworker/1:7/5152: [ 2399.048054][ T31] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2399.080037][ T31] #1: ffffc900039bfd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2399.109030][ T31] #2: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2399.120160][ T31] 4 locks held by kworker/u8:2/11338: [ 2399.125704][ T31] #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2399.146383][ T31] #1: ffffc90003aafd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2399.156970][ T31] #2: ffffffff8f733450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 2399.181841][ T31] #3: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x83/0x350 [ 2399.196714][ T31] 5 locks held by kworker/0:8/11813: [ 2399.202561][ T31] 3 locks held by kworker/0:2/22571: [ 2399.207979][ T31] 3 locks held by kworker/u8:5/24895: [ 2399.231632][ T31] #0: ffff88802a00b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2399.266479][ T31] #1: ffffc9000321fd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2399.296855][ T31] #2: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x1500 [ 2399.315552][ T31] 1 lock held by syz-executor/27340: [ 2399.321480][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.346153][ T31] 8 locks held by syz-executor/27370: [ 2399.351979][ T31] #0: ffff88802f9b4420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 2399.368525][ T31] #1: ffff888029d2d888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 2399.401449][ T31] #2: ffff888020147878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 2399.425061][ T31] #3: ffffffff8ed83768 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 2399.443838][ T31] #4: ffff8880123ed0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 2399.462653][ T31] #5: ffff8880687d5250 (&devlink->lock_key#52){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 2399.479329][ T31] #6: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0 [ 2399.488340][ T31] #7: ffffffff8da555d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x531/0x19f0 [ 2399.507242][ T31] 1 lock held by syz-executor/27571: [ 2399.514719][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.532587][ T31] 2 locks held by syz.0.6112/27603: [ 2399.537853][ T31] 1 lock held by syz-executor/27612: [ 2399.545736][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.578455][ T31] 2 locks held by syz-executor/27615: [ 2399.596813][ T31] #0: ffffffff8f733450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2399.610435][ T31] #1: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 2399.628461][ T31] 1 lock held by syz-executor/27639: [ 2399.634378][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.654317][ T31] 1 lock held by syz-executor/27645: [ 2399.660088][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.677621][ T31] 1 lock held by syz-executor/27648: [ 2399.687234][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.697340][ T31] 1 lock held by syz-executor/27653: [ 2399.706836][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.719342][ T31] 1 lock held by syz-executor/27659: [ 2399.724680][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.757769][ T31] 1 lock held by syz-executor/27665: [ 2399.764852][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.779803][ T31] 1 lock held by syz-executor/27671: [ 2399.785138][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.815433][ T31] 1 lock held by syz-executor/27677: [ 2399.825971][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.839518][ T31] 1 lock held by syz-executor/27682: [ 2399.844861][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.868238][ T31] 1 lock held by syz-executor/27686: [ 2399.890031][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.905693][ T31] 1 lock held by syz-executor/27690: [ 2399.916579][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.926671][ T31] 1 lock held by syz-executor/27695: [ 2399.939423][ T31] #0: ffffffff8f7486e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2399.956550][ T31] [ 2399.959016][ T31] ============================================= [ 2399.959016][ T31] [ 2399.978955][ T31] NMI backtrace for cpu 1 [ 2399.983341][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2399.993275][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2400.003369][ T31] Call Trace: [ 2400.006677][ T31] [ 2400.009637][ T31] dump_stack_lvl+0x116/0x1f0 [ 2400.014365][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2400.019361][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2400.025399][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2400.031439][ T31] watchdog+0xf86/0x1240 [ 2400.035735][ T31] ? __pfx_watchdog+0x10/0x10 [ 2400.040455][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2400.045706][ T31] ? __kthread_parkme+0x148/0x220 [ 2400.050783][ T31] ? __pfx_watchdog+0x10/0x10 [ 2400.055507][ T31] kthread+0x2c1/0x3a0 [ 2400.059645][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2400.064887][ T31] ? __pfx_kthread+0x10/0x10 [ 2400.069522][ T31] ret_from_fork+0x45/0x80 [ 2400.073993][ T31] ? __pfx_kthread+0x10/0x10 [ 2400.078628][ T31] ret_from_fork_asm+0x1a/0x30 [ 2400.083455][ T31] [ 2400.087793][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2400.093726][ C0] NMI backtrace for cpu 0 [ 2400.093751][ C0] CPU: 0 PID: 27603 Comm: syz.0.6112 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2400.093781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2400.093796][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 2400.093831][ C0] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 64 f4 75 7e 65 8b 05 65 f4 75 7e a9 00 01 [ 2400.093858][ C0] RSP: 0018:ffffc90000006c10 EFLAGS: 00000082 [ 2400.093879][ C0] RAX: 0000000000000000 RBX: ffffc90000006c98 RCX: ffffffff813cd8c1 [ 2400.093897][ C0] RDX: ffff8880256b0000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2400.093914][ C0] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 2400.093930][ C0] R10: ffffffff8151fd8a R11: 0000000000000004 R12: ffffffff8151fd8a [ 2400.093947][ C0] R13: 0000000000000000 R14: ffffc90000006d58 R15: ffffc90000006ccd [ 2400.093966][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2400.093991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2400.094010][ C0] CR2: 00007f2c340ce2d8 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 2400.094027][ C0] DR0: 0000000000007b00 DR1: 0000000000000000 DR2: 0000000000000000 [ 2400.094044][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2400.094061][ C0] Call Trace: [ 2400.094070][ C0] [ 2400.094079][ C0] ? show_regs+0x8c/0xa0 [ 2400.094116][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2400.094157][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2400.094192][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2400.094231][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2400.094258][ C0] ? default_do_nmi+0x6a/0x160 [ 2400.094283][ C0] ? exc_nmi+0x170/0x1e0 [ 2400.094305][ C0] ? end_repeat_nmi+0xf/0x53 [ 2400.094330][ C0] ? irq_exit_rcu+0xba/0x120 [ 2400.094360][ C0] ? irq_exit_rcu+0xba/0x120 [ 2400.094394][ C0] ? unwind_next_frame+0x1c1/0x23a0 [ 2400.094435][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2400.094463][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2400.094490][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2400.094518][ C0] [ 2400.094527][ C0] [ 2400.094534][ C0] unwind_next_frame+0x1cf/0x23a0 [ 2400.094575][ C0] ? irq_exit_rcu+0xbb/0x120 [ 2400.094614][ C0] ? irq_exit_rcu+0xbb/0x120 [ 2400.094642][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2400.094677][ C0] arch_stack_walk+0x100/0x170 [ 2400.094704][ C0] ? irq_exit_rcu+0xbb/0x120 [ 2400.094732][ C0] stack_trace_save+0x95/0xd0 [ 2400.094764][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2400.094796][ C0] ? hlock_class+0x4e/0x130 [ 2400.094825][ C0] ? __lock_acquire+0x14f4/0x3b30 [ 2400.094862][ C0] kasan_save_stack+0x33/0x60 [ 2400.094896][ C0] ? kasan_save_stack+0x33/0x60 [ 2400.094929][ C0] ? kasan_save_track+0x14/0x30 [ 2400.094962][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 2400.094994][ C0] ? dummy_urb_enqueue+0x8d/0x8a0 [ 2400.095024][ C0] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 2400.095053][ C0] ? usb_submit_urb+0x87c/0x1730 [ 2400.095084][ C0] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 2400.095116][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 2400.095143][ C0] ? usb_hcd_giveback_urb+0x396/0x450 [ 2400.095169][ C0] ? dummy_timer+0x17f6/0x3900 [ 2400.095197][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 2400.095224][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 2400.095252][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 2400.095291][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 2400.095320][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2400.095359][ C0] ? queue_work_on+0x98/0x140 [ 2400.095388][ C0] ? ieee80211_rx_handlers+0x6a1d/0x9a50 [ 2400.095426][ C0] ? ieee80211_prepare_and_rx_handle+0x2b6a/0x6ec0 [ 2400.095464][ C0] ? ieee80211_rx_for_interface+0x10a/0x1f0 [ 2400.095501][ C0] ? ieee80211_rx_list+0x10e2/0x2e90 [ 2400.095537][ C0] ? ieee80211_rx_napi+0xdd/0x400 [ 2400.095572][ C0] ? ieee80211_handle_queued_frames+0xd5/0x130 [ 2400.095606][ C0] ? tasklet_action_common.constprop.0+0x24c/0x3e0 [ 2400.095637][ C0] ? handle_softirqs+0x216/0x8f0 [ 2400.095664][ C0] ? irq_exit_rcu+0xbb/0x120 [ 2400.095698][ C0] kasan_save_track+0x14/0x30 [ 2400.095732][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2400.095767][ C0] dummy_urb_enqueue+0x8d/0x8a0 [ 2400.095796][ C0] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 2400.095827][ C0] usb_hcd_submit_urb+0x2d1/0x2090 [ 2400.095857][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 2400.095885][ C0] ? lock_acquire+0x1b1/0x560 [ 2400.095922][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2400.095958][ C0] ? find_held_lock+0x2d/0x110 [ 2400.095987][ C0] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 2400.096019][ C0] usb_submit_urb+0x87c/0x1730 [ 2400.096053][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2400.096079][ C0] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 2400.096112][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 2400.096141][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 2400.096170][ C0] dummy_timer+0x17f6/0x3900 [ 2400.096201][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 2400.096240][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2400.096298][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 2400.096327][ C0] ? __pfx_lock_release+0x10/0x10 [ 2400.096366][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2400.096405][ C0] ? timerqueue_del+0x83/0x150 [ 2400.096441][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2400.096471][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 2400.096504][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2400.096535][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 2400.096577][ C0] hrtimer_interrupt+0x31b/0x800 [ 2400.096612][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 2400.096654][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 2400.096685][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2400.096727][ C0] RIP: 0010:queue_work_on+0x98/0x140 [ 2400.096755][ C0] Code: e8 6d 3b 35 00 48 85 ed 75 44 e8 33 40 35 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 51 3b 35 00 48 85 db 0f 85 8d 00 00 00 13 40 35 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 2400.096780][ C0] RSP: 0018:ffffc900000077c0 EFLAGS: 00000246 [ 2400.096800][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8158a4b8 [ 2400.096817][ C0] RDX: ffff8880256b0000 RSI: ffffffff8158a4c2 RDI: 0000000000000007 [ 2400.096834][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 2400.096851][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 2400.096867][ C0] R13: 0000000000000008 R14: ffff888015489000 R15: ffffc90000007d20 [ 2400.096886][ C0] ? queue_work_on+0xd8/0x140 [ 2400.096912][ C0] ? queue_work_on+0xe2/0x140 [ 2400.096939][ C0] ieee80211_rx_handlers+0x6a1d/0x9a50 [ 2400.096982][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2400.097019][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2400.097057][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2400.097094][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2400.097124][ C0] ? sched_clock+0x38/0x60 [ 2400.097157][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 2400.097196][ C0] ? tick_program_event+0xb0/0x140 [ 2400.097229][ C0] ? hlock_class+0x4e/0x130 [ 2400.097259][ C0] ? __lock_acquire+0xc5d/0x3b30 [ 2400.097299][ C0] ieee80211_prepare_and_rx_handle+0x2b6a/0x6ec0 [ 2400.097345][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 2400.097392][ C0] ? sta_info_get_bss+0x18b/0x3a0 [ 2400.097418][ C0] ? __pfx_lock_release+0x10/0x10 [ 2400.097461][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 2400.097502][ C0] ieee80211_rx_list+0x10e2/0x2e90 [ 2400.097545][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2400.097582][ C0] ? lock_acquire+0x1b1/0x560 [ 2400.097625][ C0] ? skb_dequeue+0x126/0x180 [ 2400.097652][ C0] ieee80211_rx_napi+0xdd/0x400 [ 2400.097691][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2400.097730][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2400.097761][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2400.097790][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 2400.097828][ C0] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 2400.097865][ C0] handle_softirqs+0x216/0x8f0 [ 2400.097896][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2400.097928][ C0] irq_exit_rcu+0xbb/0x120 [ 2400.097957][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 2400.097988][ C0] [ 2400.097996][ C0] [ 2400.098004][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2400.098046][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2400.098075][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 c7 80 f6 48 89 df e8 ce 44 81 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 86 72 f6 65 8b 05 b6 d3 18 75 85 c0 74 16 5b [ 2400.098100][ C0] RSP: 0018:ffffc900034ff5f0 EFLAGS: 00000246 [ 2400.098119][ C0] RAX: 0000000000000006 RBX: ffffffff8dbbc640 RCX: 1ffffffff284f468 [ 2400.098138][ C0] RDX: 0000000000000000 RSI: ffffffff8b2caf00 RDI: ffffffff8b8ff680 [ 2400.098155][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff284ce5e [ 2400.098172][ C0] R10: ffffffff942672f7 R11: 1ffffffff1b778e1 R12: 0000000000000001 [ 2400.098189][ C0] R13: ffffffff8dbbc718 R14: ffff8880256b0450 R15: ffffffff8dbbc640 [ 2400.098213][ C0] rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 2400.098250][ C0] ? rcu_is_watching+0x12/0xc0 [ 2400.098275][ C0] __rcu_read_unlock+0x2b4/0x580 [ 2400.098307][ C0] page_ext_put+0x48/0xd0 [ 2400.098333][ C0] __reset_page_owner+0x28d/0x400 [ 2400.098364][ C0] free_unref_page+0x64a/0xe40 [ 2400.098402][ C0] __put_partials+0x14c/0x170 [ 2400.098441][ C0] qlist_free_all+0x4e/0x140 [ 2400.098477][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 2400.098514][ C0] __kasan_slab_alloc+0x69/0x90 [ 2400.098553][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 2400.098596][ C0] ? __alloc_skb+0x2b1/0x380 [ 2400.098624][ C0] __alloc_skb+0x2b1/0x380 [ 2400.098651][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 2400.098678][ C0] ? kfree_skb_reason+0x50/0x210 [ 2400.098715][ C0] ? mgmt_send_event_skb+0x2f0/0x460 [ 2400.098748][ C0] mgmt_send_event+0x44/0x180 [ 2400.098778][ C0] mgmt_index_removed+0x1fc/0x2e0 [ 2400.098818][ C0] ? __pfx_mgmt_index_removed+0x10/0x10 [ 2400.098857][ C0] ? up_write+0x191/0x520 [ 2400.098881][ C0] ? rcu_is_watching+0x12/0xc0 [ 2400.098906][ C0] hci_unregister_dev+0x49a/0x620 [ 2400.098942][ C0] ? __pfx_vhci_release+0x10/0x10 [ 2400.098967][ C0] vhci_release+0x7f/0x100 [ 2400.098991][ C0] __fput+0x408/0xbb0 [ 2400.099018][ C0] task_work_run+0x14e/0x250 [ 2400.099043][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2400.099066][ C0] ? switch_task_namespaces+0xe0/0x110 [ 2400.099099][ C0] do_exit+0xa9b/0x2ba0 [ 2400.099168][ C0] ? get_signal+0x8f2/0x2710 [ 2400.099217][ C0] ? __pfx_do_exit+0x10/0x10 [ 2400.099254][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 2400.099281][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2400.099313][ C0] do_group_exit+0xd3/0x2a0 [ 2400.099355][ C0] get_signal+0x2616/0x2710 [ 2400.099395][ C0] ? __pfx_get_signal+0x10/0x10 [ 2400.099426][ C0] ? find_held_lock+0x2d/0x110 [ 2400.099458][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 2400.099493][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2400.099528][ C0] ? kcov_ioctl+0x268/0x730 [ 2400.099555][ C0] syscall_exit_to_user_mode+0x14a/0x2a0 [ 2400.099591][ C0] do_syscall_64+0xda/0x250 [ 2400.099627][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.099669][ C0] RIP: 0033:0x7f2c33f757db [ 2400.099688][ C0] Code: Unable to access opcode bytes at 0x7f2c33f757b1. [ 2400.099700][ C0] RSP: 002b:00007f2c34c93070 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.099724][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2c33f757db [ 2400.099741][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000da [ 2400.099759][ C0] RBP: 00007f2c34104110 R08: 0000000000000000 R09: 00007ffdbbcec297 [ 2400.099776][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffa8 [ 2400.099794][ C0] R13: 000000000000006e R14: 00007ffdbbcec1b0 R15: 00007ffdbbcec298 [ 2400.099816][ C0] [ 2401.270203][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2401.277124][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2401.287069][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2401.297173][ T31] Call Trace: [ 2401.300481][ T31] [ 2401.303530][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2401.308177][ T31] panic+0x6f5/0x7a0 [ 2401.312130][ T31] ? __pfx_panic+0x10/0x10 [ 2401.316603][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 2401.322021][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2401.328053][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 2401.333466][ T31] ? watchdog+0xd3d/0x1240 [ 2401.337923][ T31] ? watchdog+0xd30/0x1240 [ 2401.342379][ T31] watchdog+0xd4e/0x1240 [ 2401.346683][ T31] ? __pfx_watchdog+0x10/0x10 [ 2401.351399][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2401.356643][ T31] ? __kthread_parkme+0x148/0x220 [ 2401.361720][ T31] ? __pfx_watchdog+0x10/0x10 [ 2401.366439][ T31] kthread+0x2c1/0x3a0 [ 2401.370556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.375796][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.380435][ T31] ret_from_fork+0x45/0x80 [ 2401.384911][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.389555][ T31] ret_from_fork_asm+0x1a/0x30 [ 2401.394379][ T31] [ 2401.399268][ T31] Kernel Offset: disabled [ 2401.403635][ T31] Rebooting in 86400 seconds..