last executing test programs: 46.109971404s ago: executing program 2 (id=1284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000300)) 45.98328107s ago: executing program 2 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 45.753948782s ago: executing program 2 (id=1289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b000100627269646765"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8bfca89f4f48aeb0}, 0x41) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 45.544415201s ago: executing program 2 (id=1291): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00060000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 44.932255836s ago: executing program 2 (id=1297): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 44.718587505s ago: executing program 2 (id=1300): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 29.558050514s ago: executing program 32 (id=1300): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 23.500538466s ago: executing program 1 (id=1594): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x400c885) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4004801) 22.487413375s ago: executing program 1 (id=1603): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) 22.351325616s ago: executing program 1 (id=1604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee00, 0xffffffffffffffff, 0xffffffffffffffff) 21.106223451s ago: executing program 1 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 21.006537104s ago: executing program 1 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 20.630005765s ago: executing program 1 (id=1628): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 20.437401842s ago: executing program 33 (id=1628): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 18.676325213s ago: executing program 0 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfffe}]}]}, 0x28}}, 0x0) 18.531835873s ago: executing program 0 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x4004) 18.364748772s ago: executing program 0 (id=1660): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 18.226776607s ago: executing program 0 (id=1662): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x4c}}, 0x0) 18.016557701s ago: executing program 0 (id=1663): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 17.868945668s ago: executing program 0 (id=1664): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.793074399s ago: executing program 34 (id=1664): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.9465022s ago: executing program 4 (id=1799): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000064000/0x1000)=nil, 0x3) 1.129651406s ago: executing program 4 (id=1810): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) 1.108124042s ago: executing program 6 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000180100409a0519f699"]) 1.070990201s ago: executing program 5 (id=1812): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000008500000023000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, 0x0, 0x0) 959.829279ms ago: executing program 4 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 944.194235ms ago: executing program 5 (id=1814): r0 = eventfd(0x20000) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) read$eventfd(r0, &(0x7f00000001c0), 0x8) 859.036007ms ago: executing program 3 (id=1815): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 840.719366ms ago: executing program 6 (id=1816): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000004b40)={0x7, 0x8, 0xfa00, {r1, 0xffff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 803.410983ms ago: executing program 4 (id=1817): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 713.290645ms ago: executing program 5 (id=1818): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) 712.804234ms ago: executing program 3 (id=1819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x0, 0x2}, 0xc) 607.490766ms ago: executing program 6 (id=1820): mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x184}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x127c, &(0x7f0000001080)) 548.519229ms ago: executing program 3 (id=1821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='ecryptfs\x00', 0x2000080, 0x0) 448.787392ms ago: executing program 6 (id=1822): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x0) lseek(r0, 0x0, 0x0) 441.541402ms ago: executing program 4 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, &(0x7f0000000500)) 437.546885ms ago: executing program 5 (id=1824): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) 312.911565ms ago: executing program 3 (id=1825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) 244.040033ms ago: executing program 6 (id=1826): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002380)) 231.467773ms ago: executing program 4 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 186.406875ms ago: executing program 5 (id=1828): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000009c0)={0x1f, 0xffff}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff00", 0x5}]) 61.900595ms ago: executing program 3 (id=1829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6594, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef7}}], 0x1, 0x0, 0x0) 51.034806ms ago: executing program 6 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 36.392469ms ago: executing program 3 (id=1831): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\b', 0x1}]) 0s ago: executing program 5 (id=1832): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) kernel console output (not intermixed with test programs): 971] usb 2-1: Using ep0 maxpacket: 32 [ 92.478264][ T971] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 92.486728][ T971] usb 2-1: config 0 has no interface number 0 [ 92.510942][ T971] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 92.533671][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.554491][ T971] usb 2-1: Product: syz [ 92.558686][ T971] usb 2-1: Manufacturer: syz [ 92.583593][ T971] usb 2-1: SerialNumber: syz [ 92.599985][ T971] usb 2-1: config 0 descriptor?? [ 92.825733][ T971] radio-si470x 2-1:0.35: this is not a si470x device. [ 92.866703][ T971] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 92.884169][ T7281] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 92.929868][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.989399][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.996755][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.080219][ T971] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 93.099226][ T5867] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.109251][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.126919][ T5867] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 93.146207][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.164454][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 93.173971][ T5867] usb 5-1: config 0 descriptor?? [ 93.280834][ T25] usb 2-1: USB disconnect, device number 9 [ 93.293148][ T25] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 93.361671][ T51] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.530788][ T51] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.548997][ T51] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.571856][ T51] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.590684][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.601080][ T5867] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x4 [ 93.608572][ T5867] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x3 [ 93.620537][ T7292] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.632068][ T51] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.658809][ T5867] holtek_mouse 0003:04D9:A072.0006: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.4-1/input0 [ 93.846335][ T5867] usb 5-1: USB disconnect, device number 10 [ 93.875597][ T7320] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 93.885230][ T7320] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 93.907128][ T5906] usb 1-1: USB disconnect, device number 8 [ 94.007046][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 94.007061][ T29] audit: type=1400 audit(1740707261.944:451): avc: denied { setopt } for pid=7325 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.033766][ T51] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.082886][ T7328] raw_sendmsg: syz.1.619 forgot to set AF_INET. Fix it! [ 94.189992][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 94.203609][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.214682][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.227239][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.251233][ T51] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.265990][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.285519][ T51] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.295780][ T51] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.309330][ T51] usb 4-1: Manufacturer: syz [ 94.316815][ T51] usb 4-1: config 0 descriptor?? [ 94.386550][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 94.463946][ T29] audit: type=1400 audit(1740707262.404:452): avc: denied { mount } for pid=7340 comm="syz.1.623" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 94.534386][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.543592][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.939614][ T51] rc_core: IR keymap rc-hauppauge not found [ 94.945542][ T51] Registered IR keymap rc-empty [ 94.951047][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.969535][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.991959][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 95.011800][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 95.041503][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.066916][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.099680][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.139563][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.159553][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.179560][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.204310][ T29] audit: type=1400 audit(1740707263.134:453): avc: denied { getopt } for pid=7354 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.223499][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.247065][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.277188][ T7359] netlink: 60 bytes leftover after parsing attributes in process `syz.1.632'. [ 95.379561][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.382467][ T29] audit: type=1400 audit(1740707263.324:454): avc: denied { write } for pid=7362 comm="syz.0.634" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.409719][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.418975][ T7363] input: syz1 as /devices/virtual/input/input10 [ 95.429598][ T51] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.457082][ T51] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.485099][ T51] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.515364][ T29] audit: type=1804 audit(1740707263.454:455): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm=6C2586CE36DB0CCF197CC94F7FCE8F name="/newroot/122/file0" dev="tmpfs" ino=636 res=1 errno=0 [ 95.546234][ T51] usb 4-1: USB disconnect, device number 4 [ 95.682601][ T7373] nbd: nbd1 already in use [ 96.609156][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 96.931019][ T7416] input: syz0 as /devices/virtual/input/input11 [ 97.399602][ T5867] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 97.551026][ T5867] usb 1-1: No LPM exit latency info found, disabling LPM. [ 97.558214][ T5822] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 97.564974][ T5822] Bluetooth: Wrong link type (-22) [ 97.600192][ T5867] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 97.610266][ T5867] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x82 is Bulk; changing to Interrupt [ 97.621591][ T5867] usb 1-1: config 1 interface 0 has no altsetting 0 [ 97.635648][ T5867] usb 1-1: string descriptor 0 read error: -22 [ 97.641963][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.655218][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.675800][ T7428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.690087][ T7428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.804356][ T7447] veth1_to_team: entered promiscuous mode [ 97.833493][ T7447] veth1_to_team: left promiscuous mode [ 97.985843][ T29] audit: type=1400 audit(1740707265.914:456): avc: denied { read } for pid=7452 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.025641][ T5906] usb 1-1: USB disconnect, device number 9 [ 98.589678][ T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.607200][ T29] audit: type=1400 audit(1740707266.544:457): avc: denied { ioctl } for pid=7488 comm="syz.2.692" path="mnt:[4026532804]" dev="nsfs" ino=4026532804 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.785035][ T7500] netlink: 'syz.1.698': attribute type 9 has an invalid length. [ 98.804757][ T51] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 98.824714][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.853615][ T51] usb 5-1: Product: syz [ 98.857803][ T51] usb 5-1: Manufacturer: syz [ 98.883898][ T51] usb 5-1: SerialNumber: syz [ 98.898571][ T51] usb 5-1: config 0 descriptor?? [ 99.014449][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.040244][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.053719][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.067337][ T7509] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.103430][ T29] audit: type=1400 audit(1740707267.044:458): avc: denied { read } for pid=7508 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.131693][ T7509] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.184137][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.202978][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.225843][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.233685][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.252421][ T7509] virt_wifi0 speed is unknown, defaulting to 1000 [ 99.316821][ T51] usb 5-1: Firmware: major: 0, minor: 4, hardware type: ATUSB (0) [ 99.518512][ T51] usb 5-1: failed to fetch extended address, random address set [ 99.585084][ T51] usb 5-1: USB disconnect, device number 11 [ 99.764437][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.842153][ T7554] netlink: 284 bytes leftover after parsing attributes in process `syz.2.721'. [ 100.243478][ T29] audit: type=1400 audit(1740707268.184:459): avc: denied { append } for pid=7578 comm="syz.0.732" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.601087][ T29] audit: type=1400 audit(1740707268.544:460): avc: denied { append } for pid=7594 comm="syz.1.740" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.624501][ T7595] random: crng reseeded on system resumption [ 100.691830][ T29] audit: type=1400 audit(1740707268.574:461): avc: denied { open } for pid=7594 comm="syz.1.740" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.064291][ T29] audit: type=1400 audit(1740707269.004:462): avc: denied { accept } for pid=7617 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.239635][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.260613][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.341486][ T29] audit: type=1400 audit(1740707269.274:463): avc: denied { ioctl } for pid=7628 comm="syz.4.755" path="socket:[16000]" dev="sockfs" ino=16000 ioctlcmd=0x8b20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.391480][ T5869] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.407028][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.419896][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 101.422820][ T5869] usb 3-1: config 0 descriptor?? [ 101.430486][ T5867] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.430508][ T5867] usb 4-1: config 0 has no interface number 0 [ 101.430535][ T5867] usb 4-1: config 0 interface 184 has no altsetting 0 [ 101.432021][ T5867] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.442445][ T5869] cp210x 3-1:0.0: cp210x converter detected [ 101.460845][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.460867][ T5867] usb 4-1: Product: syz [ 101.460880][ T5867] usb 4-1: Manufacturer: syz [ 101.460894][ T5867] usb 4-1: SerialNumber: syz [ 101.471843][ T29] audit: type=1400 audit(1740707269.404:464): avc: denied { map } for pid=7630 comm="syz.4.756" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 101.512910][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.530294][ T5867] usb 4-1: config 0 descriptor?? [ 101.549637][ T5867] smsc75xx v1.0.0 [ 101.657194][ T29] audit: type=1400 audit(1740707269.424:465): avc: denied { setopt } for pid=7630 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.676675][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.726743][ T29] audit: type=1400 audit(1740707269.564:466): avc: denied { read } for pid=7634 comm="syz.4.758" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.813929][ T29] audit: type=1400 audit(1740707269.564:467): avc: denied { open } for pid=7634 comm="syz.4.758" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.848727][ T5869] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 101.878366][ T5869] usb 3-1: cp210x converter now attached to ttyUSB0 [ 102.117928][ T25] usb 3-1: USB disconnect, device number 5 [ 102.128261][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.162654][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 102.173900][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 102.197609][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 102.197744][ T25] cp210x 3-1:0.0: device disconnected [ 102.228699][ T5867] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.256129][ T5867] usb 4-1: USB disconnect, device number 5 [ 102.283924][ T5869] kernel write not supported for file /vcs (pid: 5869 comm: kworker/1:6) [ 102.309643][ T971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.476435][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.500067][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.526469][ T971] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.539961][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.568447][ T971] usb 2-1: config 0 descriptor?? [ 102.839566][ T7685] block device autoloading is deprecated and will be removed. [ 103.198269][ T971] usb 2-1: string descriptor 0 read error: -71 [ 103.214734][ T971] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 103.233237][ T971] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 103.259360][ T971] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 103.281707][ T971] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 103.289220][ T971] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 103.360498][ T971] usb 2-1: USB disconnect, device number 10 [ 103.480414][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 104.174760][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 104.174774][ T29] audit: type=1400 audit(1740707272.114:475): avc: denied { create } for pid=7756 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.212884][ T29] audit: type=1400 audit(1740707272.154:476): avc: denied { ioctl } for pid=7756 comm="syz.1.814" path="socket:[16297]" dev="sockfs" ino=16297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.220726][ T7757] bridge1: entered promiscuous mode [ 104.267702][ T7757] bridge1: entered allmulticast mode [ 104.279385][ T7757] team0: Port device bridge1 added [ 104.317318][ T7761] openvswitch: netlink: Actions may not be safe on all matching packets [ 104.470307][ T7768] input: syz1 as /devices/virtual/input/input12 [ 104.481360][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 104.526329][ T29] audit: type=1400 audit(1740707272.464:477): avc: denied { create } for pid=7772 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.585576][ T29] audit: type=1400 audit(1740707272.494:478): avc: denied { write } for pid=7772 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.635936][ T7776] netlink: 84 bytes leftover after parsing attributes in process `syz.2.825'. [ 104.781796][ T7785] netlink: 'syz.1.828': attribute type 3 has an invalid length. [ 104.798555][ T7787] capability: warning: `syz.2.830' uses 32-bit capabilities (legacy support in use) [ 104.851763][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.869650][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.973663][ T29] audit: type=1400 audit(1740707272.904:479): avc: denied { write } for pid=7795 comm="syz.1.834" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.170893][ T7809] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 105.342962][ T29] audit: type=1400 audit(1740707273.284:480): avc: denied { ioctl } for pid=7818 comm="syz.0.844" path="socket:[17481]" dev="sockfs" ino=17481 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.519526][ T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.536327][ T7827] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 105.544147][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 105.683320][ T29] audit: type=1400 audit(1740707273.624:481): avc: denied { remount } for pid=7837 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.719676][ T971] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 105.735285][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.760357][ T971] usb 2-1: Product: syz [ 105.764520][ T971] usb 2-1: Manufacturer: syz [ 105.769111][ T971] usb 2-1: SerialNumber: syz [ 105.793254][ T971] usb 2-1: config 0 descriptor?? [ 106.060248][ T7851] vivid-007: disconnect [ 106.069821][ T7850] vivid-007: reconnect [ 106.212644][ T971] usb 2-1: Firmware: major: 0, minor: 4, hardware type: ATUSB (0) [ 106.240562][ T7862] team0: entered allmulticast mode [ 106.259638][ T7862] team_slave_0: entered allmulticast mode [ 106.265378][ T7862] team_slave_1: entered allmulticast mode [ 106.414459][ T971] usb 2-1: failed to fetch extended address, random address set [ 106.464622][ T971] usb 2-1: USB disconnect, device number 11 [ 106.717414][ T7877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.812942][ T29] audit: type=1400 audit(1740707274.744:482): avc: denied { read } for pid=7880 comm="syz.0.873" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.850983][ T29] audit: type=1400 audit(1740707274.744:483): avc: denied { open } for pid=7880 comm="syz.0.873" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.916324][ T7884] kvm: kvm [7882]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x0 [ 107.149378][ T29] audit: type=1400 audit(1740707275.084:484): avc: denied { ioctl } for pid=7896 comm="syz.4.882" path="socket:[16931]" dev="sockfs" ino=16931 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.191972][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.231978][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.262927][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.276624][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.287065][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.303446][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.316361][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.327319][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.362072][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.372838][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.080783][ T5869] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.096315][ T7906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.229597][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 108.241424][ T5869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.249839][ T5869] usb 5-1: config 0 has no interface number 0 [ 108.257068][ T5869] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.268484][ T5869] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.279300][ T5869] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 108.289055][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.324378][ T5869] usb 5-1: config 0 descriptor?? [ 108.387674][ T7952] o2cb: This node has not been configured. [ 108.396509][ T7952] o2cb: Cluster check failed. Fix errors before retrying. [ 108.405938][ T7952] (syz.2.907,7952,1):user_dlm_register:674 ERROR: status = -22 [ 108.416661][ T7952] (syz.2.907,7952,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 108.952691][ T5869] uclogic 0003:28BD:0071.0008: pen parameters not found [ 108.962573][ T5869] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 109.061314][ T7972] overlayfs: failed to resolve 'fkill [ 109.061314][ T7972] N': -2 [ 109.125165][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.918'. [ 109.192316][ T25] usb 5-1: USB disconnect, device number 12 [ 109.299764][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.330683][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'. [ 109.409310][ T7989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.435384][ T7989] bond0: (slave bond1): Enslaving as an active interface with an up link [ 109.814581][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 109.814595][ T29] audit: type=1400 audit(1740707277.754:496): avc: denied { write } for pid=8004 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.091518][ T8025] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 110.278421][ T8033] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 110.463791][ T29] audit: type=1400 audit(1740707278.404:497): avc: denied { setopt } for pid=8041 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.685105][ T29] audit: type=1400 audit(1740707278.624:498): avc: denied { watch watch_reads } for pid=8051 comm="syz.0.951" path="pipe:[18000]" dev="pipefs" ino=18000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 110.727210][ T8057] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 110.737211][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.791721][ T8059] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 110.805344][ T8059] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.955'. [ 110.832946][ T8063] input: syz1 as /devices/virtual/input/input13 [ 111.055385][ T29] audit: type=1400 audit(1740707278.994:499): avc: denied { create } for pid=8071 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.074802][ T29] audit: type=1400 audit(1740707278.994:500): avc: denied { connect } for pid=8071 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.117051][ T29] audit: type=1400 audit(1740707278.994:501): avc: denied { bind } for pid=8071 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.164756][ T29] audit: type=1400 audit(1740707278.994:502): avc: denied { write } for pid=8071 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.191110][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.389632][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.393894][ T8086] bridge: RTM_NEWNEIGH with invalid state 0x1c [ 111.416969][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.457159][ T5898] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 111.489208][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.531290][ T5898] usb 5-1: config 0 descriptor?? [ 111.553442][ T29] audit: type=1400 audit(1740707279.484:503): avc: denied { bind } for pid=8089 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.760258][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.842684][ T8107] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 111.937298][ T5906] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 111.951877][ T5898] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 111.953615][ T29] audit: type=1400 audit(1740707279.894:504): avc: denied { wake_alarm } for pid=8114 comm="syz.1.982" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.969431][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.989241][ T5898] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 112.010796][ T5898] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 112.018196][ T5898] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 112.033401][ T5906] usb 4-1: config 0 descriptor?? [ 112.047860][ T5898] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 112.060919][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 112.081785][ T5898] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 112.190711][ T5898] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 9 got 167 [ 112.200148][ T5898] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 112.209392][ T5898] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 112.225669][ T5898] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 112.246480][ T5898] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 112.382196][ T8129] ax25_connect(): syz.0.988 uses autobind, please contact jreuter@yaina.de [ 112.396316][ T5898] usb 5-1: USB disconnect, device number 13 [ 112.439844][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.519615][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.601386][ T5866] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 112.619163][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.640737][ T5866] usb 3-1: config 0 descriptor?? [ 112.653726][ T5866] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 112.681045][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.696986][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.707002][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.730542][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 112.744875][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.755340][ T25] usb 2-1: config 0 descriptor?? [ 112.854103][ T5906] gspca_sunplus: reg_w_riv err -71 [ 112.859398][ T5906] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 112.880848][ T5906] usb 4-1: USB disconnect, device number 6 [ 112.987715][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 113.000315][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 113.020920][ T25] usb 2-1: USB disconnect, device number 12 [ 113.054224][ T5866] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 113.422734][ T29] audit: type=1326 audit(1740707281.364:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 113.455833][ T5866] gspca_cpia1: usb_control_msg 02, error -71 [ 113.496728][ T5866] gspca_cpia1: usb_control_msg 05, error -71 [ 113.509728][ T5866] cpia1 3-1:0.0: unexpected systemstate: 00 [ 113.535330][ T5866] usb 3-1: USB disconnect, device number 6 [ 113.909847][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.093096][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 114.122412][ T8193] team0: No ports can be present during mode change [ 114.139835][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.168139][ T5898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.189111][ T5898] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 114.215069][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.230009][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.254961][ T5898] usb 1-1: Product: syz [ 114.272195][ T5898] usb 1-1: Manufacturer: syz [ 114.294187][ T5898] usb 1-1: SerialNumber: syz [ 114.521889][ T5898] cdc_ncm 1-1:1.0: bind() failure [ 114.530808][ T5898] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 114.537663][ T5898] cdc_ncm 1-1:1.1: bind() failure [ 114.549862][ T5898] usb 1-1: USB disconnect, device number 10 [ 114.649597][ T5866] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.668946][ T8219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8219 comm=syz.3.1031 [ 114.813952][ T5866] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 114.830903][ T5866] usb 5-1: config 0 has no interface number 0 [ 114.837065][ T5866] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.858368][ T5866] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.888518][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 114.918089][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.949847][ T5866] usb 5-1: config 0 descriptor?? [ 115.382488][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.409524][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 115.409539][ T29] audit: type=1400 audit(1740707283.344:527): avc: denied { read } for pid=8235 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.409607][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.448668][ T29] audit: type=1400 audit(1740707283.384:528): avc: denied { open } for pid=8235 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.539656][ T29] audit: type=1400 audit(1740707283.384:529): avc: denied { getattr } for pid=8235 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.546465][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.588135][ T8239] netlink: 'syz.2.1037': attribute type 14 has an invalid length. [ 115.671999][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.698583][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.736627][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.758383][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 115.790935][ T29] audit: type=1400 audit(1740707283.734:530): avc: denied { setopt } for pid=8249 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.804325][ T5866] logitech-djreceiver 0003:046D:C71B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 115.843807][ T5866] usb 5-1: USB disconnect, device number 14 [ 115.889559][ T29] audit: type=1400 audit(1740707283.734:531): avc: denied { getopt } for pid=8249 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.939414][ T971] kernel read not supported for file /usbmon0 (pid: 971 comm: kworker/1:2) [ 115.963635][ T29] audit: type=1400 audit(1740707283.814:532): avc: denied { write } for pid=8234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.977122][ T8256] cgroup: fork rejected by pids controller in /syz1 [ 116.041156][ T8260] netlink: 'syz.2.1043': attribute type 5 has an invalid length. [ 116.060744][ T29] audit: type=1400 audit(1740707283.814:533): avc: denied { add_name } for pid=8234 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.156965][ T29] audit: type=1400 audit(1740707283.814:534): avc: denied { create } for pid=8234 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.237066][ T29] audit: type=1400 audit(1740707283.814:535): avc: denied { write } for pid=8234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=5409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.340402][ T29] audit: type=1400 audit(1740707283.824:536): avc: denied { append } for pid=8234 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=5409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.527990][ T8273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.582478][ T8272] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.032146][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.065840][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.119326][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.168684][ T6657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.184313][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.217926][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 117.420646][ T6657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.479635][ T8307] syz.2.1059 (8307) used greatest stack depth: 21488 bytes left [ 117.660248][ T6657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.680106][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.689426][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.701142][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.716906][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.724499][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.731749][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.778117][ T8325] virt_wifi0 speed is unknown, defaulting to 1000 [ 117.917996][ T6657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.175682][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 118.405420][ T6657] bridge_slave_1: left allmulticast mode [ 118.422544][ T6657] bridge_slave_1: left promiscuous mode [ 118.430159][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.491341][ T6657] bridge_slave_0: left allmulticast mode [ 118.497007][ T6657] bridge_slave_0: left promiscuous mode [ 118.539910][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.743518][ T8380] input: syz0 as /devices/virtual/input/input14 [ 118.776786][ T8381] delete_channel: no stack [ 119.076567][ T8394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.142697][ T6657] team0: Port device bridge1 removed [ 119.266694][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 119.281854][ T8401] netlink: 'syz.2.1090': attribute type 21 has an invalid length. [ 119.424799][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.438050][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.469142][ T6657] bond0 (unregistering): (slave bond1): Releasing backup interface [ 119.485105][ T6657] bond0 (unregistering): Released all slaves [ 119.630759][ T6657] bond1 (unregistering): Released all slaves [ 119.780185][ T5822] Bluetooth: hci0: command tx timeout [ 119.803294][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.831180][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.847264][ T8325] bridge_slave_0: entered allmulticast mode [ 119.861766][ T8424] sg_write: process 553 (syz.2.1097) changed security contexts after opening file descriptor, this is not allowed. [ 119.880223][ T8325] bridge_slave_0: entered promiscuous mode [ 119.892285][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.899341][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.942863][ T8325] bridge_slave_1: entered allmulticast mode [ 119.944194][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.962467][ T8325] bridge_slave_1: entered promiscuous mode [ 120.084667][ T8434] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1098'. [ 120.130304][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 120.160718][ T5898] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.168822][ T5898] usb 4-1: config 0 has no interface number 0 [ 120.201586][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.217283][ T5898] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 120.236688][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.257195][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.269327][ T5898] usb 4-1: Product: syz [ 120.274127][ T5898] usb 4-1: Manufacturer: syz [ 120.279488][ T5898] usb 4-1: SerialNumber: syz [ 120.290404][ T5898] usb 4-1: config 0 descriptor?? [ 120.301172][ T5898] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 120.368381][ T8325] team0: Port device team_slave_0 added [ 120.385022][ T8325] team0: Port device team_slave_1 added [ 120.468348][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.482838][ T5867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.505288][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.544832][ T5898] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 120.579925][ T5898] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 120.600626][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.632583][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.648002][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.699669][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.712132][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 120.730865][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.747112][ C1] hrtimer: interrupt took 43082 ns [ 120.752427][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.752564][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 120.782640][ T6657] hsr_slave_0: left promiscuous mode [ 120.799687][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.809384][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.820826][ T6657] hsr_slave_1: left promiscuous mode [ 120.826640][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.848023][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.862828][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.880921][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.895038][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.914027][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.922587][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.933110][ T9] usb 4-1: USB disconnect, device number 7 [ 120.945721][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.949512][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.964053][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.974135][ T5867] usb 3-1: Manufacturer: syz [ 120.985436][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.989331][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.012973][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.015729][ T6657] veth1_macvtap: left promiscuous mode [ 121.031716][ T5867] usb 3-1: config 0 descriptor?? [ 121.040532][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.055011][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.059845][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 121.083922][ T6657] veth0_macvtap: left promiscuous mode [ 121.088258][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.098044][ T6657] veth1_vlan: left promiscuous mode [ 121.104566][ T9] quatech2 4-1:0.51: device disconnected [ 121.114932][ T6657] veth0_vlan: left promiscuous mode [ 121.127198][ T25] usb 5-1: config 0 descriptor?? [ 121.142846][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 121.301952][ T5867] rc_core: IR keymap rc-hauppauge not found [ 121.308614][ T5867] Registered IR keymap rc-empty [ 121.317316][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.350701][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.393354][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.412121][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 121.421443][ T25] usb 5-1: USB disconnect, device number 15 [ 121.432656][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.480057][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.524757][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.552802][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.580312][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.617412][ T6657] team0 (unregistering): Port device team_slave_1 removed [ 121.630771][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.659628][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.680559][ T6657] team0 (unregistering): Port device team_slave_0 removed [ 121.680835][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.720184][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.760222][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.801425][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.843437][ T5867] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 92 [ 121.860223][ T5822] Bluetooth: hci0: command tx timeout [ 121.867941][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.879947][ T5867] usb 3-1: USB disconnect, device number 7 [ 122.080161][ T5906] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 122.256363][ T8325] hsr_slave_0: entered promiscuous mode [ 122.278427][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.289330][ T8325] hsr_slave_1: entered promiscuous mode [ 122.297248][ T5906] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 122.319546][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.327572][ T5906] usb 4-1: Product: syz [ 122.341709][ T5906] usb 4-1: Manufacturer: syz [ 122.346335][ T5906] usb 4-1: SerialNumber: syz [ 122.372851][ T5906] usb 4-1: config 0 descriptor?? [ 122.381511][ T5906] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 122.389248][ T5906] imon 4-1:0.0: unable to initialize intf0, err -19 [ 122.417224][ T5906] imon:imon_probe: failed to initialize context! [ 122.424799][ T5906] imon 4-1:0.0: unable to register, err -19 [ 122.603711][ T971] usb 4-1: USB disconnect, device number 8 [ 122.639541][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.791156][ T5906] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.800235][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 122.811249][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.827703][ T8325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.837590][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 122.852615][ T8325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.855434][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.871456][ T8325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.882406][ T8325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.889966][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.897982][ T25] usb 5-1: Product: syz [ 122.905956][ T25] usb 5-1: Manufacturer: syz [ 122.917103][ T25] usb 5-1: SerialNumber: syz [ 122.949684][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 122.962608][ T5906] usb 1-1: config 0 has no interfaces? [ 122.973622][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.985975][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 123.002518][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.013859][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.021303][ T5906] usb 1-1: Product: syz [ 123.028620][ T5906] usb 1-1: Manufacturer: syz [ 123.030891][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.036761][ T5906] usb 1-1: SerialNumber: syz [ 123.040671][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.054198][ T5906] usb 1-1: config 0 descriptor?? [ 123.077653][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.084712][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.162958][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 123.162972][ T29] audit: type=1400 audit(1740707291.104:552): avc: denied { module_request } for pid=8325 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 123.200297][ T25] cdc_ncm 5-1:1.0: bind() failure [ 123.207825][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 123.226770][ T25] cdc_ncm 5-1:1.1: bind() failure [ 123.236079][ T25] usb 5-1: USB disconnect, device number 16 [ 123.336715][ T5906] usb 1-1: USB disconnect, device number 11 [ 123.434803][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.531209][ T8325] veth0_vlan: entered promiscuous mode [ 123.581648][ T8325] veth1_vlan: entered promiscuous mode [ 123.607863][ T8551] 9pnet_rdma: rdma_create_trans (8551): problem binding to privport: 13 [ 123.619469][ T8325] veth0_macvtap: entered promiscuous mode [ 123.640418][ T8325] veth1_macvtap: entered promiscuous mode [ 123.660842][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.697406][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.716626][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.752023][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.762326][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.773091][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.783869][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.817707][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.833529][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.940596][ T5822] Bluetooth: hci0: command tx timeout [ 123.963759][ T8559] /dev/nbd3: Can't open blockdev [ 124.043456][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1129'. [ 124.068112][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.081001][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.099568][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.136759][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.152929][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.167751][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.179410][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.203325][ T5906] IPVS: starting estimator thread 0... [ 124.244951][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.276621][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.310035][ T8325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.312470][ T8573] IPVS: using max 32 ests per chain, 76800 per kthread [ 124.353279][ T8325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.376515][ T8325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.385757][ T8325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.551007][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.552493][ T8581] SELinux: ebitmap: truncated map [ 124.573107][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.588800][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 124.593824][ T8581] SELinux: failed to load policy [ 124.624556][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.646596][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.689558][ T29] audit: type=1400 audit(1740707292.624:553): avc: denied { mounton } for pid=8325 comm="syz-executor" path="/root/syzkaller.IT1NdI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.712207][ T8588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 124.786691][ T8590] netlink: 'syz.4.1141': attribute type 10 has an invalid length. [ 124.824531][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.851212][ T8590] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.073301][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 125.334364][ T8622] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 126.030084][ T5822] Bluetooth: hci0: command tx timeout [ 126.458866][ T8653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.940041][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.100804][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.111150][ T5866] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.124794][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.155669][ T5866] usb 1-1: config 0 descriptor?? [ 127.175831][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 127.580653][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.808048][ T5866] pwc: recv_control_msg error -71 req 02 val 2c00 [ 127.831714][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 127.848611][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 127.871239][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 127.877916][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 127.888676][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.902807][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.910517][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.917216][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.927600][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.945633][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.960284][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.977010][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.008542][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.039792][ T5866] pwc: Registered as video103. [ 128.046229][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 128.077555][ T29] audit: type=1400 audit(1740707296.014:554): avc: denied { create } for pid=8710 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.078747][ T8711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8711 comm=syz.4.1191 [ 128.098722][ T5866] usb 1-1: USB disconnect, device number 12 [ 128.165865][ T8715] input: syz1 as /devices/virtual/input/input18 [ 128.174783][ T29] audit: type=1400 audit(1740707296.014:555): avc: denied { write } for pid=8710 comm="syz.4.1191" path="socket:[21449]" dev="sockfs" ino=21449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.218174][ T29] audit: type=1400 audit(1740707296.014:556): avc: denied { nlmsg_read } for pid=8710 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.240296][ T29] audit: type=1400 audit(1740707296.094:557): avc: denied { read } for pid=8710 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.516092][ T8730] use of bytesused == 0 is deprecated and will be removed in the future, [ 128.536540][ T8730] use the actual size instead. [ 128.609608][ T5869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.761751][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.776745][ T5869] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.789148][ T5869] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.809996][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.818307][ T5869] usb 2-1: SerialNumber: syz [ 128.971647][ T8741] batman_adv: batadv0: Adding interface: dummy0 [ 128.987182][ T8741] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.018999][ T8741] batman_adv: batadv0: Interface activated: dummy0 [ 129.048454][ T5869] usb 2-1: 0:2 : does not exist [ 129.073151][ T5869] usb 2-1: USB disconnect, device number 13 [ 129.273390][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.438444][ T8763] futex_wake_op: syz.2.1213 tries to shift op by -1; fix this program [ 129.526209][ T8767] Bluetooth: MGMT ver 1.23 [ 129.654043][ T8773] SELinux: failed to load policy [ 130.483832][ T8755] syz.0.1210 (8755): drop_caches: 2 [ 130.627455][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.870970][ T8864] virt_wifi0 speed is unknown, defaulting to 1000 [ 131.896432][ T8868] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1261'. [ 131.934640][ T8868] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 131.969850][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.157716][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.190545][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.207451][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.235273][ T8880] batadv_slave_1: entered promiscuous mode [ 132.242778][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.253354][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.256351][ T8881] overlayfs: missing 'lowerdir' [ 132.261525][ T8878] batadv_slave_1: left promiscuous mode [ 132.272344][ T9] usb 1-1: Product: syz [ 132.276554][ T9] usb 1-1: Manufacturer: syz [ 132.322674][ T9] usb 1-1: SerialNumber: syz [ 132.432690][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.439226][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.486585][ T29] audit: type=1400 audit(1740707300.424:558): avc: denied { bind } for pid=8884 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.836756][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 132.911919][ T8901] macsec0: entered promiscuous mode [ 133.138796][ T29] audit: type=1400 audit(1740707301.074:559): avc: denied { write } for pid=8914 comm="syz.4.1283" path="socket:[22909]" dev="sockfs" ino=22909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.176620][ T9] cdc_mbim 1-1:1.0: bind() failure [ 133.204580][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 133.231266][ T9] cdc_ncm 1-1:1.1: bind() failure [ 133.259615][ T9] usb 1-1: USB disconnect, device number 13 [ 133.350876][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.530104][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 133.546637][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 133.555745][ T5867] usb 2-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.566283][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.593781][ T5867] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 133.603256][ T8929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1289'. [ 133.626684][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.647093][ T5867] usb 2-1: config 0 descriptor?? [ 133.801699][ T8937] virt_wifi0 speed is unknown, defaulting to 1000 [ 133.850828][ T8941] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1291'. [ 133.960803][ T8941] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 134.094873][ T5867] cypress 0003:04B4:0001.000B: hidraw0: USB HID v20.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 134.308596][ T5867] usb 2-1: USB disconnect, device number 14 [ 134.970242][ T29] audit: type=1400 audit(1740707302.904:560): avc: denied { accept } for pid=8969 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.945589][ T29] audit: type=1400 audit(1740707303.884:561): avc: denied { shutdown } for pid=9000 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.609592][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.759700][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 136.774269][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.790658][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.816537][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.831820][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.844228][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.864491][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.877264][ T5869] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.885568][ T5869] usb 1-1: Manufacturer: syz [ 136.896051][ T5869] usb 1-1: config 0 descriptor?? [ 137.161506][ T9038] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1334'. [ 137.200302][ T5869] rc_core: IR keymap rc-hauppauge not found [ 137.216419][ T5869] Registered IR keymap rc-empty [ 137.240103][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.279557][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.320070][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 137.340479][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 137.392320][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.423836][ C1] rc rc0: IR event FIFO is full! [ 137.428941][ C1] rc rc0: IR event FIFO is full! [ 137.433885][ C1] rc rc0: IR event FIFO is full! [ 137.438827][ C1] rc rc0: IR event FIFO is full! [ 137.443770][ C1] rc rc0: IR event FIFO is full! [ 137.448712][ C1] rc rc0: IR event FIFO is full! [ 137.453642][ C1] rc rc0: IR event FIFO is full! [ 137.458573][ C1] rc rc0: IR event FIFO is full! [ 137.463921][ C1] rc rc0: IR event FIFO is full! [ 137.469092][ T9047] rc rc0: two consecutive events of type space [ 137.494620][ T29] audit: type=1400 audit(1740707305.424:562): avc: denied { read } for pid=9048 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.500149][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.534694][ T29] audit: type=1326 audit(1740707305.474:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.1340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb281b8d169 code=0x0 [ 137.605515][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.639639][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.679625][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.721418][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.749586][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.769600][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.811400][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.850648][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.871959][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.911105][ T5869] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 92 [ 137.939641][ T5869] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.976480][ T5869] usb 1-1: USB disconnect, device number 14 [ 138.019661][ T5822] Bluetooth: hci0: command tx timeout [ 138.459538][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.630081][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 138.644879][ T5869] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.675419][ T5869] usb 4-1: config 0 has no interface number 0 [ 138.683617][ T5869] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.696543][ T5869] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.717607][ T5869] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 138.727003][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.735017][ T5906] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 138.747579][ T5869] usb 4-1: Product: syz [ 138.752381][ T5869] usb 4-1: Manufacturer: syz [ 138.757077][ T5869] usb 4-1: SerialNumber: syz [ 138.773018][ T5869] usb 4-1: config 0 descriptor?? [ 138.778583][ T9068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.797823][ T9068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.890758][ T5906] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 138.910101][ T5906] usb 1-1: config 0 has no interface number 0 [ 138.917193][ T5906] usb 1-1: config 0 interface 22 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.968894][ T5906] usb 1-1: config 0 interface 22 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.989500][ T5906] usb 1-1: config 0 interface 22 has no altsetting 0 [ 139.006351][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 139.013851][ T9068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.027919][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.036158][ T9068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.061803][ T5906] usb 1-1: config 0 descriptor?? [ 139.077376][ T9074] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.674821][ T5869] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.690371][ T5869] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 139.725934][ T5869] asix 4-1:0.251: probe with driver asix failed with error -71 [ 139.756251][ T5906] usb 1-1: USB disconnect, device number 15 [ 139.783304][ T5869] usb 4-1: USB disconnect, device number 9 [ 139.984996][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 140.780056][ T29] audit: type=1400 audit(1740707308.714:564): avc: denied { execute } for pid=9125 comm="syz.4.1374" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 140.886263][ T29] audit: type=1400 audit(1740707308.824:565): avc: denied { read } for pid=9129 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.941807][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 141.527319][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 141.538697][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 141.835649][ T25] IPVS: starting estimator thread 0... [ 141.837487][ T9165] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 141.929617][ T9168] IPVS: using max 29 ests per chain, 69600 per kthread [ 142.373052][ T29] audit: type=1400 audit(1740707310.304:566): avc: denied { ioctl } for pid=9184 comm="syz.0.1400" path="socket:[23738]" dev="sockfs" ino=23738 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.520446][ T9190] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1401'. [ 142.740311][ T5906] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.931379][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 142.949643][ T5867] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.960882][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.979469][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.989387][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 143.019897][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.040609][ T5906] usb 2-1: config 0 descriptor?? [ 143.064532][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 143.106682][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.130477][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.160718][ T5867] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 143.179830][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.200331][ T5867] usb 1-1: config 0 descriptor?? [ 143.375548][ T9206] overlay: ./file0 is not a directory [ 143.452948][ T9208] netlink: 912 bytes leftover after parsing attributes in process `syz.3.1411'. [ 143.474272][ T5906] hid-picolcd 0003:04D8:F002.000D: item fetching failed at offset 10/11 [ 143.493234][ T5906] hid-picolcd 0003:04D8:F002.000D: device report parse failed [ 143.513460][ T5906] hid-picolcd 0003:04D8:F002.000D: probe with driver hid-picolcd failed with error -22 [ 143.618302][ T5867] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 143.636588][ T5867] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 143.646684][ T5867] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 143.665731][ T5867] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 143.683545][ T5867] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 143.701060][ T5867] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 143.707534][ T25] usb 2-1: USB disconnect, device number 15 [ 143.816939][ T5867] playstation 0003:054C:0DF2.000E: Invalid reportID received, expected 9 got 167 [ 143.827422][ T5867] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22 [ 143.847876][ T5867] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 143.867770][ T5867] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 143.887680][ T5867] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 144.037268][ T5867] usb 1-1: USB disconnect, device number 16 [ 144.041371][ T9224] misc userio: Can't change port type on an already running userio instance [ 144.602645][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 145.990334][ T9281] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1445'. [ 146.032210][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1445'. [ 146.227299][ T9289] team0: Port device team_slave_0 removed [ 146.280298][ T29] audit: type=1400 audit(1740707314.224:567): avc: denied { append } for pid=9296 comm="syz.3.1453" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.302884][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.351825][ T29] audit: type=1400 audit(1740707314.284:568): avc: denied { bind } for pid=9298 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.294547][ T9331] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1469'. [ 147.699907][ T29] audit: type=1400 audit(1740707315.644:569): avc: denied { getopt } for pid=9344 comm="syz.1.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.719219][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.783066][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 147.783853][ T9350] IPv6: Can't replace route, no match found [ 147.809542][ T9348] netlink: 'syz.3.1478': attribute type 30 has an invalid length. [ 147.824930][ T29] audit: type=1400 audit(1740707315.764:570): avc: denied { read append } for pid=9351 comm="syz.4.1479" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.917722][ T29] audit: type=1400 audit(1740707315.764:571): avc: denied { open } for pid=9351 comm="syz.4.1479" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.009616][ T29] audit: type=1400 audit(1740707315.784:572): avc: denied { append } for pid=9351 comm="syz.4.1479" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.359800][ T29] audit: type=1400 audit(1740707316.294:573): avc: denied { setopt } for pid=9373 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.614775][ T29] audit: type=1400 audit(1740707316.554:574): avc: denied { remount } for pid=9383 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 148.634505][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.110078][ T8] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 149.247293][ T9403] macvlan0: entered allmulticast mode [ 149.258325][ T9403] veth1_vlan: entered allmulticast mode [ 149.281165][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.289397][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 149.307574][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 149.320815][ T9403] macvlan0: left allmulticast mode [ 149.325950][ T9403] veth1_vlan: left allmulticast mode [ 149.333729][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 149.361109][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.384177][ T8] usb 5-1: Product: syz [ 149.388354][ T8] usb 5-1: SerialNumber: syz [ 149.403308][ T29] audit: type=1400 audit(1740707317.344:575): avc: denied { read write } for pid=9406 comm="syz.0.1502" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.422740][ T5866] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 149.447447][ T5866] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 149.457459][ T29] audit: type=1400 audit(1740707317.344:576): avc: denied { open } for pid=9406 comm="syz.0.1502" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.509393][ T9410] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 149.511270][ T5866] hid-generic 0000:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 149.522338][ T9410] netlink: 'syz.3.1504': attribute type 4 has an invalid length. [ 149.545040][ T9410] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1504'. [ 149.557061][ T9410] NCSI netlink: No device for ifindex 0 [ 149.680971][ T8] usbhid 5-1:1.0: can't add hid device: -71 [ 149.709613][ T8] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 149.748190][ T8] usb 5-1: USB disconnect, device number 17 [ 150.158907][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.173517][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.185631][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.203494][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.213940][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.229599][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.305822][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 150.361268][ T9431] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.456412][ T4620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.554209][ T4620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.564188][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 150.663219][ T4620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.680709][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.708454][ T9456] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1524'. [ 150.839531][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 150.856453][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.864685][ T8] usb 4-1: config 0 has no interface number 0 [ 150.872072][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.884393][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.895116][ T4620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.895470][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 150.931906][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 150.951228][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.993471][ T8] usb 4-1: config 0 descriptor?? [ 151.110850][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.117938][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.155834][ T9431] bridge_slave_0: entered allmulticast mode [ 151.180405][ T9431] bridge_slave_0: entered promiscuous mode [ 151.197265][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.212106][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.238759][ T9431] bridge_slave_1: entered allmulticast mode [ 151.261738][ T9431] bridge_slave_1: entered promiscuous mode [ 151.422052][ T4620] bridge_slave_1: left allmulticast mode [ 151.428258][ T4620] bridge_slave_1: left promiscuous mode [ 151.434977][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.451885][ T4620] bridge_slave_0: left allmulticast mode [ 151.457633][ T4620] bridge_slave_0: left promiscuous mode [ 151.468257][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.629091][ T8] uclogic 0003:28BD:0094.0010: pen parameters not found [ 151.654097][ T8] uclogic 0003:28BD:0094.0010: interface is invalid, ignoring [ 151.825973][ T971] kernel write not supported for file [eventfd] (pid: 971 comm: kworker/1:2) [ 151.869956][ T971] usb 4-1: USB disconnect, device number 10 [ 151.909602][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.925257][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.942443][ T4620] bond0 (unregistering): Released all slaves [ 151.971121][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.983926][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.082072][ T4620] IPVS: stopping master sync thread 7809 ... [ 152.104361][ T9431] team0: Port device team_slave_0 added [ 152.186750][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 152.216420][ T9431] team0: Port device team_slave_1 added [ 152.304467][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.339022][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.385257][ T5820] Bluetooth: hci2: command tx timeout [ 152.408855][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.478666][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.498682][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.569743][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.731680][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'. [ 152.776899][ T9522] bridge0: port 3(veth3) entered blocking state [ 152.799784][ T9522] bridge0: port 3(veth3) entered disabled state [ 152.816376][ T9522] veth3: entered allmulticast mode [ 152.832945][ T9522] veth3: entered promiscuous mode [ 152.870053][ T9532] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 153.002853][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 153.002868][ T29] audit: type=1400 audit(1740707320.944:580): avc: denied { mount } for pid=9535 comm="syz.0.1553" name="/" dev="pstore" ino=3466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 153.041930][ T9536] Invalid source name [ 153.061662][ T4620] hsr_slave_0: left promiscuous mode [ 153.072809][ T4620] hsr_slave_1: left promiscuous mode [ 153.083105][ T29] audit: type=1400 audit(1740707320.974:581): avc: denied { mounton } for pid=9535 comm="syz.0.1553" path="/328/file0" dev="pstore" ino=3466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 153.092571][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.124878][ T29] audit: type=1400 audit(1740707321.064:582): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 153.174254][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.218354][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.247714][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.271460][ T9544] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.324225][ T4620] veth1_macvtap: left promiscuous mode [ 153.359511][ T4620] veth0_macvtap: left promiscuous mode [ 153.365042][ T4620] veth1_vlan: left promiscuous mode [ 153.413561][ T4620] veth0_vlan: left promiscuous mode [ 153.674114][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 154.090620][ T4620] team_slave_1 (unregistering): left allmulticast mode [ 154.101492][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 154.144363][ T4620] team_slave_0 (unregistering): left allmulticast mode [ 154.159779][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 154.334348][ T4620] team0 (unregistering): left allmulticast mode [ 154.381222][ T9431] hsr_slave_0: entered promiscuous mode [ 154.387283][ T9431] hsr_slave_1: entered promiscuous mode [ 154.395480][ T9431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.408196][ T9431] Cannot create hsr debugfs directory [ 154.419619][ T5820] Bluetooth: hci2: command tx timeout [ 154.661657][ T29] audit: type=1400 audit(1740707322.584:583): avc: denied { read } for pid=9593 comm="syz.4.1580" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.733266][ T29] audit: type=1400 audit(1740707322.584:584): avc: denied { open } for pid=9593 comm="syz.4.1580" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.845439][ T29] audit: type=1400 audit(1740707322.594:585): avc: denied { append } for pid=9593 comm="syz.4.1580" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.933192][ T9431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.019519][ T9431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.043424][ T9616] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 155.078496][ T9431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.171136][ T9431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.343194][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.400818][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.469038][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.476261][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.485949][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.493142][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.670347][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 155.787824][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.855993][ T8] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 155.881893][ T8] usb 5-1: config 0 has no interface number 0 [ 155.904881][ T8] usb 5-1: config 0 interface 191 has no altsetting 0 [ 155.936113][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=7f.b1 [ 155.974947][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.003872][ T8] usb 5-1: Product: syz [ 156.008054][ T8] usb 5-1: Manufacturer: syz [ 156.024576][ T8] usb 5-1: SerialNumber: syz [ 156.042872][ T8] usb 5-1: config 0 descriptor?? [ 156.075148][ T8] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 156.239326][ T9670] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 156.262741][ T9431] veth0_vlan: entered promiscuous mode [ 156.285121][ T29] audit: type=1400 audit(1740707324.224:586): avc: denied { mount } for pid=9669 comm="syz.3.1596" name="/" dev="rpc_pipefs" ino=26123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 156.288501][ T9431] veth1_vlan: entered promiscuous mode [ 156.333248][ T8] usb 5-1: USB disconnect, device number 18 [ 156.373970][ T9431] veth0_macvtap: entered promiscuous mode [ 156.412632][ T9431] veth1_macvtap: entered promiscuous mode [ 156.445372][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.466402][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.476793][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.492213][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.499606][ T5820] Bluetooth: hci2: command tx timeout [ 156.504320][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.563203][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.588707][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.599333][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.614478][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.653502][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.699321][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.709423][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.724685][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.759422][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.810924][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.880418][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.900419][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.945312][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.986467][ T29] audit: type=1400 audit(1740707324.914:587): avc: denied { lock } for pid=9701 comm="syz.4.1605" path="socket:[26261]" dev="sockfs" ino=26261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 157.022054][ T9431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.049345][ T9431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.080019][ T9431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.088727][ T9431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.301410][ T29] audit: type=1400 audit(1740707325.244:588): avc: denied { name_connect } for pid=9715 comm="syz.3.1610" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 157.332186][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.348376][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.465308][ T9720] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1611'. [ 157.474534][ T29] audit: type=1400 audit(1740707325.404:589): avc: denied { ioctl } for pid=9719 comm="syz.4.1611" path="socket:[27006]" dev="sockfs" ino=27006 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.502729][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.513367][ T9720] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 157.527981][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.709517][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.895229][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.916325][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.946533][ T25] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 157.972215][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.030308][ T25] usb 1-1: config 0 descriptor?? [ 158.398432][ T9766] netlink: 'syz.3.1625': attribute type 64 has an invalid length. [ 158.422905][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 158.447272][ T25] petalynx 0003:18B1:0037.0011: item fetching failed at offset 0/5 [ 158.456237][ T25] petalynx 0003:18B1:0037.0011: parse failed [ 158.463250][ T25] petalynx 0003:18B1:0037.0011: probe with driver petalynx failed with error -22 [ 158.580239][ T5820] Bluetooth: hci2: command tx timeout [ 158.700801][ T8] usb 1-1: USB disconnect, device number 17 [ 158.753327][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.850302][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 158.850317][ T29] audit: type=1326 audit(1740707326.784:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 158.881111][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.963195][ T29] audit: type=1326 audit(1740707326.784:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.038931][ T29] audit: type=1326 audit(1740707326.824:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.088515][ T29] audit: type=1326 audit(1740707326.824:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.115846][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.117527][ T29] audit: type=1326 audit(1740707326.824:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.153865][ T29] audit: type=1326 audit(1740707326.824:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.177990][ T29] audit: type=1326 audit(1740707326.824:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.316309][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.317146][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.338558][ T29] audit: type=1326 audit(1740707326.824:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.362970][ T29] audit: type=1326 audit(1740707326.824:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.387667][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.395529][ T29] audit: type=1326 audit(1740707326.824:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb281b8d169 code=0x7ffc0000 [ 159.420168][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.428282][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.435998][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.443648][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.486255][ T9802] virt_wifi0 speed is unknown, defaulting to 1000 [ 159.495804][ T9807] netlink: 'syz.5.1638': attribute type 1 has an invalid length. [ 159.565839][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'. [ 159.950234][ T62] bridge_slave_1: left allmulticast mode [ 159.979933][ T62] bridge_slave_1: left promiscuous mode [ 160.006277][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.055863][ T62] bridge_slave_0: left allmulticast mode [ 160.075869][ T62] bridge_slave_0: left promiscuous mode [ 160.089969][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.565115][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.577671][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.587891][ T62] bond0 (unregistering): Released all slaves [ 160.619348][ T9802] chnl_net:caif_netlink_parms(): no params data found [ 160.744705][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 160.959919][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.987600][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.004490][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.017245][ T9802] bridge_slave_0: entered allmulticast mode [ 161.044191][ T9802] bridge_slave_0: entered promiscuous mode [ 161.087056][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.094305][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.106365][ T9802] bridge_slave_1: entered allmulticast mode [ 161.113427][ T9802] bridge_slave_1: entered promiscuous mode [ 161.139682][ T9881] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 161.168055][ T5869] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 161.187102][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.207746][ T5869] usb 4-1: Product: syz [ 161.212329][ T5869] usb 4-1: Manufacturer: syz [ 161.228177][ T5869] usb 4-1: SerialNumber: syz [ 161.238527][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.251266][ T5869] usb 4-1: config 0 descriptor?? [ 161.262892][ T62] hsr_slave_0: left promiscuous mode [ 161.274561][ T5869] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 011 [ 161.282868][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.300272][ T62] hsr_slave_1: left promiscuous mode [ 161.306037][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.321107][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.328997][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.336672][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.375452][ T62] veth1_macvtap: left promiscuous mode [ 161.391675][ T62] veth0_macvtap: left promiscuous mode [ 161.398601][ T62] veth1_vlan: left promiscuous mode [ 161.407105][ T62] veth0_vlan: left promiscuous mode [ 161.432386][ T5866] kernel read not supported for file /dsp (pid: 5866 comm: kworker/1:4) [ 161.464995][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.485677][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 161.509511][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.526387][ T25] usb 5-1: config 0 descriptor?? [ 161.540066][ T5822] Bluetooth: hci0: command tx timeout [ 161.831707][ T62] team0 (unregistering): Port device team_slave_1 removed [ 161.876442][ T62] team0 (unregistering): Port device team_slave_0 removed [ 161.916419][ T5869] i2c i2c-1: connected i2c-tiny-usb device [ 161.956711][ T25] hid-steam 0003:28DE:1205.0012: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 162.041214][ T25] hid-steam 0003:28DE:1205.0012: Steam Controller 'XXXXXXXXXX' connected [ 162.075055][ T25] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0012/input/input21 [ 162.104340][ T971] usb 4-1: USB disconnect, device number 11 [ 162.132589][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0012/input/input22 [ 162.176323][ T25] hid-steam 0003:28DE:1205.0013: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 162.212717][ T25] usb 5-1: USB disconnect, device number 19 [ 162.331494][ T25] hid-steam 0003:28DE:1205.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 162.471779][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.549163][ T9802] team0: Port device team_slave_0 added [ 162.574946][ T9802] team0: Port device team_slave_1 added [ 162.687815][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.695706][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.729394][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.802237][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.838086][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.880228][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.997714][ T9802] hsr_slave_0: entered promiscuous mode [ 163.006818][ T9802] hsr_slave_1: entered promiscuous mode [ 163.013125][ T9910] C: renamed from team_slave_0 (while UP) [ 163.023768][ T9910] netlink: 'syz.5.1670': attribute type 1 has an invalid length. [ 163.050706][ T9910] netlink: 'syz.5.1670': attribute type 2 has an invalid length. [ 163.058440][ T9910] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1670'. [ 163.075012][ T9910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.089489][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 163.248322][ T62] IPVS: stop unused estimator thread 0... [ 163.254603][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 163.282536][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 163.299754][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 163.319230][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.364065][ T25] usb 5-1: config 0 descriptor?? [ 163.526684][ T9802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.556800][ T9802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.581409][ T9802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.617247][ T9802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.624709][ T5822] Bluetooth: hci0: command tx timeout [ 163.702122][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.718591][ T9802] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.732550][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.739650][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.762899][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.769994][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.814628][ T25] logitech 0003:046D:C294.0014: unknown global tag 0xe [ 163.836848][ T9802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.849357][ T25] logitech 0003:046D:C294.0014: item 0 2 1 14 parsing failed [ 163.872927][ T25] logitech 0003:046D:C294.0014: parse failed [ 163.888958][ T25] logitech 0003:046D:C294.0014: probe with driver logitech failed with error -22 [ 163.898437][ T9802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.009749][ T25] usb 5-1: USB disconnect, device number 20 [ 164.100013][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 164.100028][ T29] audit: type=1400 audit(1740707332.034:603): avc: denied { write } for pid=9949 comm="syz.3.1679" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 164.192699][ T8] IPVS: starting estimator thread 0... [ 164.224611][ T9802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.300772][ T9958] IPVS: using max 35 ests per chain, 84000 per kthread [ 164.404699][ T29] audit: type=1400 audit(1740707332.334:604): avc: denied { setopt } for pid=9968 comm="syz.5.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.793964][ T29] audit: type=1400 audit(1740707332.734:605): avc: denied { open } for pid=9987 comm="syz.3.1686" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.826685][ T9802] veth0_vlan: entered promiscuous mode [ 164.855480][ T9802] veth1_vlan: entered promiscuous mode [ 164.902005][ T29] audit: type=1400 audit(1740707332.734:606): avc: denied { ioctl } for pid=9987 comm="syz.3.1686" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.936456][ T9802] veth0_macvtap: entered promiscuous mode [ 164.970233][ T9802] veth1_macvtap: entered promiscuous mode [ 165.007511][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.049484][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.085820][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.116633][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.144439][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.194066][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.219548][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.274331][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.294507][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.321276][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.356667][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.381934][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.412734][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.451229][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.470006][ T5867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.482378][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.512515][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.543238][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.575123][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.628772][ T9802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.642075][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 165.678062][ T9802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.678659][ T5867] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.699746][ T5822] Bluetooth: hci0: command tx timeout [ 165.724067][ T9802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.729462][ T5867] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.743309][ T5867] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 165.750267][ T9802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.770265][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.795521][ T5867] usb 6-1: config 0 descriptor?? [ 165.972792][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.005681][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.097338][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.109463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.243302][ T29] audit: type=1400 audit(1740707334.174:607): avc: denied { watch } for pid=10030 comm="syz.4.1694" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 166.260261][ T5867] cougar 0003:060B:500A.0015: unexpected long global item [ 166.317747][ T5867] cougar 0003:060B:500A.0015: parse failed [ 166.334089][ T5867] cougar 0003:060B:500A.0015: probe with driver cougar failed with error -22 [ 166.547110][ T5867] usb 6-1: USB disconnect, device number 2 [ 167.394449][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 167.611424][ T29] audit: type=1326 audit(1740707335.554:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.5.1711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff60a58d169 code=0x0 [ 167.784930][ T5822] Bluetooth: hci0: command tx timeout [ 167.908362][ T29] audit: type=1400 audit(1740707335.844:609): avc: denied { write } for pid=10104 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.928808][T10108] hsr0: entered promiscuous mode [ 168.087658][ T29] audit: type=1400 audit(1740707336.024:610): avc: denied { ioctl } for pid=10114 comm="syz.3.1718" path="socket:[29086]" dev="sockfs" ino=29086 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 168.457678][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 168.483700][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 168.529953][T10138] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1725'. [ 169.460013][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 169.631501][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 169.670184][ T5898] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 169.681714][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.710146][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.749508][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 169.758590][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.777451][ T29] audit: type=1400 audit(1740707337.714:611): avc: denied { listen } for pid=10170 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.804386][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 169.811745][ T5898] usb 5-1: config 0 descriptor?? [ 169.816984][ T29] audit: type=1400 audit(1740707337.714:612): avc: denied { accept } for pid=10170 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.999888][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 170.007536][ T25] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 170.018398][ T25] usb 7-1: config 1 has no interface number 1 [ 170.030006][ T25] usb 7-1: too many endpoints for config 1 interface 3 altsetting 1: 136, using maximum allowed: 30 [ 170.044268][ T25] usb 7-1: config 1 interface 3 altsetting 1 endpoint 0x1 has an invalid bInterval 126, changing to 7 [ 170.056232][ T25] usb 7-1: config 1 interface 3 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 136 [ 170.069896][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 170.072872][ T25] usb 7-1: config 1 interface 3 has no altsetting 0 [ 170.095237][ T25] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.105569][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.125025][ T25] usb 7-1: Product: syz [ 170.129556][ T25] usb 7-1: Manufacturer: syz [ 170.139749][ T25] usb 7-1: SerialNumber: syz [ 170.229509][ T5898] logitech 0003:046D:C29C.0016: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 170.242196][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 170.252099][ T8] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 170.264609][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.278928][ T8] usb 6-1: Product: syz [ 170.294191][ T8] usb 6-1: Manufacturer: syz [ 170.298825][ T8] usb 6-1: SerialNumber: syz [ 170.322390][ T8] usb 6-1: config 0 descriptor?? [ 170.340159][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 170.365418][ T25] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 170.417019][ T25] usb 7-1: USB disconnect, device number 2 [ 170.628065][ T5898] logitech 0003:046D:C29C.0016: no inputs found [ 170.632597][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.644086][ T5898] usb 5-1: USB disconnect, device number 21 [ 170.675430][ T29] audit: type=1400 audit(1740707338.614:613): avc: denied { create } for pid=10195 comm="syz.3.1733" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 171.157171][ T8] gspca_ov534_9: reg_w failed -71 [ 171.460425][ T8] gspca_ov534_9: Unknown sensor 0000 [ 171.460479][ T8] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 171.505684][ T8] usb 6-1: USB disconnect, device number 3 [ 172.038037][T10244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'. [ 172.986285][T10284] random: crng reseeded on system resumption [ 173.568222][ T29] audit: type=1400 audit(1740707341.504:614): avc: denied { bind } for pid=10299 comm="syz.3.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.806296][ T29] audit: type=1400 audit(1740707341.744:615): avc: denied { setopt } for pid=10305 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.981852][ T5869] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.165081][ T5869] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 174.174418][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.204675][ T5869] usb 6-1: Product: syz [ 174.208874][ T5869] usb 6-1: Manufacturer: syz [ 174.239478][ T5869] usb 6-1: SerialNumber: syz [ 174.274525][ T5869] usb 6-1: config 0 descriptor?? [ 174.304134][ T5869] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 004 [ 174.733676][ T5869] (null): failure reading functionality [ 174.759534][ T5869] i2c i2c-1: failure reading functionality [ 174.780411][ T5869] i2c i2c-1: connected i2c-tiny-usb device [ 174.789190][ T5869] usb 6-1: USB disconnect, device number 4 [ 174.938368][T10324] netlink: 'syz.4.1769': attribute type 40 has an invalid length. [ 175.414446][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 175.462444][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 175.462453][ T5141] Bluetooth: hci1: command 0x0419 tx timeout [ 175.487633][T10339] veth1: entered promiscuous mode [ 175.580811][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 175.604158][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.615207][ T8] usb 7-1: config 0 has no interface number 0 [ 175.633235][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.659706][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.675814][ T8] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 175.684964][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.711092][ T8] usb 7-1: config 0 descriptor?? [ 175.993952][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 176.010255][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1783'. [ 176.349901][ T8] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.0017/input/input23 [ 176.389523][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.406222][ T8] uclogic 0003:28BD:0094.0017: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 176.583714][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 176.631218][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.653638][ T9] usb 7-1: USB disconnect, device number 3 [ 176.665815][ T5867] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 176.685537][ T5867] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 176.732454][ T5867] usb 4-1: config 255 has no interface number 0 [ 176.753917][ T5867] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 176.783772][ T5867] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.808732][ T5867] usb 4-1: config 255 interface 81 has no altsetting 0 [ 176.834099][ T5867] usb 4-1: string descriptor 0 read error: -22 [ 176.841405][ T5867] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 176.873241][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.921512][ T5867] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input24 [ 177.010297][ C0] usbtouchscreen 4-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 177.090099][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.116539][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.130299][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.159773][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.182824][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.196630][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.303920][ T29] audit: type=1400 audit(1740707345.244:616): avc: denied { read } for pid=10406 comm="syz.5.1796" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.340569][ T9] usb 4-1: USB disconnect, device number 12 [ 177.378405][T10400] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.388333][ T29] audit: type=1400 audit(1740707345.244:617): avc: denied { open } for pid=10406 comm="syz.5.1796" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.437855][ T29] audit: type=1400 audit(1740707345.244:618): avc: denied { ioctl } for pid=10406 comm="syz.5.1796" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.575403][ T6657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.780028][ T6657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.958749][ T6657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.002545][T10441] input: syz1 as /devices/virtual/input/input25 [ 178.028944][T10400] chnl_net:caif_netlink_parms(): no params data found [ 178.156592][ T6657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.497646][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.539134][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.567388][T10400] bridge_slave_0: entered allmulticast mode [ 178.576206][T10400] bridge_slave_0: entered promiscuous mode [ 178.600951][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.608833][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.624452][T10474] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 178.644237][T10474] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.1818'. [ 178.666055][T10400] bridge_slave_1: entered allmulticast mode [ 178.694439][T10400] bridge_slave_1: entered promiscuous mode [ 178.729599][ T29] audit: type=1400 audit(1740707346.654:619): avc: denied { read } for pid=10479 comm="syz.6.1820" name="file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.821653][T10483] Device name cannot be null; rc = [-22] [ 178.834509][ T29] audit: type=1400 audit(1740707346.654:620): avc: denied { ioctl } for pid=10479 comm="syz.6.1820" path="/26/file0" dev="tmpfs" ino=150 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.945439][ T29] audit: type=1400 audit(1740707346.824:621): avc: denied { mount } for pid=10485 comm="syz.6.1822" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 178.984809][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.984969][ T29] audit: type=1400 audit(1740707346.924:622): avc: denied { unmount } for pid=9802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 179.016753][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.146109][T10400] team0: Port device team_slave_0 added [ 179.159904][ T6657] veth3: left allmulticast mode [ 179.164784][ T6657] veth3: left promiscuous mode [ 179.171187][ T6657] bridge0: port 3(veth3) entered disabled state [ 179.213334][ T6657] bridge_slave_1: left allmulticast mode [ 179.227012][ T6657] bridge_slave_1: left promiscuous mode [ 179.238608][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.262120][ T6657] bridge_slave_0: left allmulticast mode [ 179.277891][ T6657] bridge_slave_0: left promiscuous mode [ 284.299396][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 284.299415][ C1] rcu: 0-...!: (1 GPs behind) idle=8d2c/1/0x4000000000000000 softirq=39897/39902 fqs=0 [ 284.300007][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10505/1:b..l [ 284.300036][ C1] rcu: (detected by 1, t=10502 jiffies, g=30273, q=312 ncpus=2) [ 284.300052][ C1] Sending NMI from CPU 1 to CPUs 0: [ 284.300075][ C0] NMI backtrace for cpu 0 [ 284.300085][ C0] CPU: 0 UID: 0 PID: 6657 Comm: kworker/u8:9 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 284.300100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.300109][ C0] Workqueue: netns cleanup_net [ 284.300125][ C0] RIP: 0010:_raw_spin_lock_irq+0x9/0x50 [ 284.300141][ C0] Code: bd f1 3c f6 48 89 df 58 5b e9 a3 59 3d f6 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb 9c <58> fa f6 c4 02 75 30 bf 01 00 00 00 e8 76 88 2e f6 45 31 c9 41 b8 [ 284.300153][ C0] RSP: 0018:ffffc90000007e18 EFLAGS: 00000046 [ 284.300163][ C0] RAX: 0000000000010001 RBX: ffff8880b862c680 RCX: ffffffff81a71533 [ 284.300172][ C0] RDX: ffff888062a50000 RSI: ffffffff81a70f76 RDI: ffff8880b862c680 [ 284.300181][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 284.300189][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffff888061d3c340 [ 284.300197][ C0] R13: ffff8880b862c780 R14: ffff8880b862c680 R15: ffffffff896a8b90 [ 284.300206][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 284.300220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.300229][ C0] CR2: 00007ff60b2d56c0 CR3: 0000000012fc4000 CR4: 00000000003526f0 [ 284.300237][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.300244][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.300252][ C0] Call Trace: [ 284.300256][ C0] [ 284.300272][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 284.300292][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 284.300309][ C0] ? nmi_handle+0x1ac/0x5d0 [ 284.300326][ C0] ? _raw_spin_lock_irq+0x9/0x50 [ 284.300339][ C0] ? default_do_nmi+0x6a/0x160 [ 284.300357][ C0] ? exc_nmi+0x170/0x1e0 [ 284.300374][ C0] ? end_repeat_nmi+0xf/0x53 [ 284.300390][ C0] ? __pfx_advance_sched+0x10/0x10 [ 284.300415][ C0] ? __hrtimer_run_queues+0x873/0xae0 [ 284.300428][ C0] ? __hrtimer_run_queues+0x2b6/0xae0 [ 284.300441][ C0] ? _raw_spin_lock_irq+0x9/0x50 [ 284.300454][ C0] ? _raw_spin_lock_irq+0x9/0x50 [ 284.300467][ C0] ? _raw_spin_lock_irq+0x9/0x50 [ 284.300479][ C0] [ 284.300484][ C0] [ 284.300488][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 284.300503][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 284.300516][ C0] ? read_tsc+0x9/0x20 [ 284.300531][ C0] hrtimer_interrupt+0x392/0x8e0 [ 284.300548][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 284.300568][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 284.300582][ C0] [ 284.300586][ C0] [ 284.300590][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.300607][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 284.300622][ C0] Code: 00 e8 70 01 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9e 44 20 00 48 85 db 0f 85 55 01 00 00 e8 60 49 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 45 5e 83 [ 284.300634][ C0] RSP: 0018:ffffc9001bde7588 EFLAGS: 00000293 [ 284.300644][ C0] RAX: ffffffff8eeac1b8 RBX: 0000000000000000 RCX: ffffffff819996f2 [ 284.300652][ C0] RDX: ffff888062a50000 RSI: ffffffff81999700 RDI: 0000000000000007 [ 284.300660][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 284.300668][ C0] R10: 0000000000000000 R11: 0000000000000007 R12: ffffffff8eeac1b8 [ 284.300675][ C0] R13: ffffffff8eeac160 R14: ffffc9001bde7618 R15: dffffc0000000000 [ 284.300687][ C0] ? console_flush_all+0x992/0xc60 [ 284.300699][ C0] ? console_flush_all+0x9a0/0xc60 [ 284.300713][ C0] ? console_flush_all+0x9a0/0xc60 [ 284.300727][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 284.300743][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 284.300759][ C0] console_unlock+0xd9/0x210 [ 284.300771][ C0] ? __pfx_console_unlock+0x10/0x10 [ 284.300783][ C0] ? lock_acquire+0x2f/0xb0 [ 284.300800][ C0] ? _printk+0xc8/0x100 [ 284.300816][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 284.300835][ C0] vprintk_emit+0x424/0x6f0 [ 284.300847][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 284.300861][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 284.300873][ C0] ? kernfs_put+0x47/0x50 [ 284.300892][ C0] _printk+0xc8/0x100 [ 284.300908][ C0] ? __pfx__printk+0x10/0x10 [ 284.300928][ C0] __netdev_printk+0x376/0x500 [ 284.300945][ C0] ? __pfx_mark_lock+0x10/0x10 [ 284.300962][ C0] netdev_info+0xe5/0x120 [ 284.300979][ C0] ? __pfx_netdev_info+0x10/0x10 [ 284.300995][ C0] ? find_held_lock+0x2d/0x110 [ 284.301009][ C0] ? __dev_notify_flags+0x18f/0x2e0 [ 284.301024][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 284.301042][ C0] ? __dev_set_promiscuity+0x145/0x590 [ 284.301058][ C0] __dev_set_promiscuity+0x170/0x590 [ 284.301076][ C0] dev_set_promiscuity+0x52/0x150 [ 284.301091][ C0] del_nbp+0x11f/0xd30 [ 284.301111][ C0] br_dev_delete+0x99/0x1a0 [ 284.301130][ C0] br_net_exit_batch_rtnl+0x116/0x1f0 [ 284.301143][ C0] ? __pfx_br_net_exit_batch_rtnl+0x10/0x10 [ 284.301157][ C0] cleanup_net+0x557/0xb30 [ 284.301169][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 284.301182][ C0] ? lock_acquire+0x2f/0xb0 [ 284.301198][ C0] ? process_one_work+0x921/0x1ba0 [ 284.301215][ C0] process_one_work+0x9c5/0x1ba0 [ 284.301234][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 284.301251][ C0] ? __pfx_process_one_work+0x10/0x10 [ 284.301270][ C0] ? assign_work+0x1a0/0x250 [ 284.301285][ C0] worker_thread+0x6c8/0xf00 [ 284.301304][ C0] ? __pfx_worker_thread+0x10/0x10 [ 284.301320][ C0] kthread+0x3af/0x750 [ 284.301335][ C0] ? __pfx_kthread+0x10/0x10 [ 284.301349][ C0] ? lock_acquire+0x2f/0xb0 [ 284.301366][ C0] ? __pfx_kthread+0x10/0x10 [ 284.301381][ C0] ret_from_fork+0x45/0x80 [ 284.301401][ C0] ? __pfx_kthread+0x10/0x10 [ 284.301415][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.301433][ C0] [ 284.302071][ C1] task:syz.5.1832 state:R running task stack:27936 pid:10505 tgid:10505 ppid:9431 task_flags:0x40004c flags:0x00004000 [ 284.302133][ C1] Call Trace: [ 284.302138][ C1] [ 284.302149][ C1] __schedule+0xf43/0x5890 [ 284.302169][ C1] ? hlock_class+0x4e/0x130 [ 284.302187][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 284.302212][ C1] ? __pfx_mark_lock+0x10/0x10 [ 284.302237][ C1] ? __pfx___schedule+0x10/0x10 [ 284.302254][ C1] ? find_held_lock+0x2d/0x110 [ 284.302282][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 284.302304][ C1] preempt_schedule_common+0x44/0xc0 [ 284.302325][ C1] preempt_schedule_thunk+0x1a/0x30 [ 284.302351][ C1] _raw_spin_unlock+0x3e/0x50 [ 284.302368][ C1] unmap_page_range+0xee3/0x4390 [ 284.302410][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 284.302435][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 284.302459][ C1] ? uprobe_munmap+0x20/0x5c0 [ 284.302487][ C1] unmap_single_vma+0x194/0x2b0 [ 284.302515][ C1] unmap_vmas+0x22f/0x490 [ 284.302542][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 284.302568][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 284.302603][ C1] exit_mmap+0x1c1/0xba0 [ 284.302631][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 284.302665][ C1] ? __pfx_mark_lock+0x10/0x10 [ 284.302706][ C1] __mmput+0x12a/0x410 [ 284.302731][ C1] mmput+0x62/0x70 [ 284.302755][ C1] do_exit+0x9ba/0x2d70 [ 284.302778][ C1] ? __pfx_do_exit+0x10/0x10 [ 284.302795][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 284.302823][ C1] do_group_exit+0xd3/0x2a0 [ 284.302843][ C1] __x64_sys_exit_group+0x3e/0x50 [ 284.302861][ C1] x64_sys_call+0x151f/0x1720 [ 284.302878][ C1] do_syscall_64+0xcd/0x250 [ 284.302901][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.302922][ C1] RIP: 0033:0x7ff60a58d169 [ 284.302936][ C1] RSP: 002b:00007ffe48f664a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 284.302953][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff60a58d169 [ 284.302964][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.302975][ C1] RBP: 00007ffe48f6650c R08: 0000000448f6659f R09: 00000000000927c0 [ 284.302986][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000034 [ 284.302997][ C1] R13: 00000000000927c0 R14: 000000000002bbad R15: 00007ffe48f66560 [ 284.303021][ C1] [ 284.303029][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g30273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 284.303047][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 284.303055][ C1] rcu: RCU grace-period kthread stack dump: [ 284.303062][ C1] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 284.303116][ C1] Call Trace: [ 284.303121][ C1] [ 284.303132][ C1] __schedule+0xf43/0x5890 [ 284.303149][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 284.303183][ C1] ? __pfx___schedule+0x10/0x10 [ 284.303201][ C1] ? schedule+0x298/0x350 [ 284.303218][ C1] ? __pfx_lock_release+0x10/0x10 [ 284.303245][ C1] ? lock_acquire+0x2f/0xb0 [ 284.303265][ C1] ? schedule+0x1fd/0x350 [ 284.303285][ C1] schedule+0xe7/0x350 [ 284.303304][ C1] schedule_timeout+0x124/0x280 [ 284.303328][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 284.303354][ C1] ? __pfx_process_timeout+0x10/0x10 [ 284.303376][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.303395][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 284.303421][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 284.303448][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 284.303470][ C1] ? rcu_gp_init+0xc82/0x1630 [ 284.303495][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 284.303518][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.303540][ C1] rcu_gp_kthread+0x271/0x380 [ 284.303563][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.303588][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.303608][ C1] ? __kthread_parkme+0x148/0x220 [ 284.303626][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.303655][ C1] kthread+0x3af/0x750 [ 284.303675][ C1] ? __pfx_kthread+0x10/0x10 [ 284.303699][ C1] ? __pfx_kthread+0x10/0x10 [ 284.303720][ C1] ret_from_fork+0x45/0x80 [ 284.303740][ C1] ? __pfx_kthread+0x10/0x10 [ 284.303759][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.303789][ C1] [ 284.303795][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 284.303802][ C1] CPU: 1 UID: 0 PID: 10502 Comm: syz.6.1830 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 284.303820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.303829][ C1] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 [ 284.303848][ C1] Code: a2 09 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 [ 284.303863][ C1] RSP: 0018:ffffc9000bbd7a48 EFLAGS: 00000293 [ 284.303877][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add20a [ 284.303888][ C1] RDX: ffff888070c92440 RSI: ffffffff81add1e4 RDI: 0000000000000005 [ 284.303899][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 284.303909][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170c8d41 [ 284.303919][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 284.303931][ C1] FS: 000055558b7db500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 284.303948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.303959][ C1] CR2: 0000001b2f716ff8 CR3: 000000005e8da000 CR4: 00000000003526f0 [ 284.303970][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.303980][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.303990][ C1] Call Trace: [ 284.303996][ C1] [ 284.304003][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 284.304021][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 284.304040][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 284.304065][ C1] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 284.304092][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 284.304110][ C1] ? tmigr_requires_handle_remote+0x140/0x310 [ 284.304128][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 284.304147][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 284.304172][ C1] ? hrtimer_run_queues+0x97/0x500 [ 284.304192][ C1] ? update_process_times+0x178/0x2d0 [ 284.304216][ C1] ? __pfx_update_process_times+0x10/0x10 [ 284.304239][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 284.304256][ C1] ? update_wall_time+0x1c/0x40 [ 284.304279][ C1] ? tick_nohz_handler+0x376/0x530 [ 284.304299][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 284.304316][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 284.304339][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 284.304355][ C1] ? read_tsc+0x9/0x20 [ 284.304379][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 284.304406][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 284.304432][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 284.304449][ C1] [ 284.304456][ C1] [ 284.304463][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.304492][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 284.304508][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 284.304526][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 284.304544][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 284.304569][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 284.304586][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 284.304605][ C1] text_poke_bp_batch+0x22b/0x760 [ 284.304626][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 284.304651][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 284.304669][ C1] ? text_poke_queue+0xef/0x180 [ 284.304695][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 284.304721][ C1] text_poke_finish+0x30/0x40 [ 284.304738][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 284.304758][ C1] jump_label_update+0x1d7/0x400 [ 284.304780][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 284.304801][ C1] static_key_disable+0x1a/0x20 [ 284.304820][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 284.304847][ C1] ? bpf_link_free+0x95/0x390 [ 284.304869][ C1] ? __pfx_lock_release+0x10/0x10 [ 284.304890][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 284.304921][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 284.304944][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 284.304964][ C1] bpf_link_free+0xe9/0x390 [ 284.304986][ C1] bpf_link_release+0x5d/0x80 [ 284.305008][ C1] __fput+0x3ff/0xb70 [ 284.305030][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.305049][ C1] task_work_run+0x14e/0x250 [ 284.305072][ C1] ? __pfx_task_work_run+0x10/0x10 [ 284.305092][ C1] ? __might_fault+0xe3/0x190 [ 284.305118][ C1] syscall_exit_to_user_mode+0x27b/0x2a0 [ 284.305138][ C1] do_syscall_64+0xda/0x250 [ 284.305160][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.305181][ C1] RIP: 0033:0x7fccb2b8d169 [ 284.305194][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.305209][ C1] RSP: 002b:00007fff260059d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 284.305226][ C1] RAX: 0000000000000000 RBX: 000000000002bc10 RCX: 00007fccb2b8d169 [ 284.305236][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 284.305246][ C1] RBP: 00007fccb2da7ba0 R08: 0000000000000001 R09: 0000000426005ccf [ 284.305257][ C1] R10: 00007fccb2a00000 R11: 0000000000000246 R12: 00007fccb2da5fac [ 284.305268][ C1] R13: 00007fccb2da5fa0 R14: ffffffffffffffff R15: 00007fff26005af0 [ 284.305291][ C1] [ 419.904741][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz.6.1830:10502] [ 419.904763][ C1] Modules linked in: [ 419.904771][ C1] irq event stamp: 611406 [ 419.904776][ C1] hardirqs last enabled at (611405): [] irqentry_exit+0x3b/0x90 [ 419.904802][ C1] hardirqs last disabled at (611406): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 419.904822][ C1] softirqs last enabled at (611400): [] handle_softirqs+0x5bb/0x8f0 [ 419.904847][ C1] softirqs last disabled at (611395): [] __irq_exit_rcu+0x109/0x170 [ 419.904873][ C1] CPU: 1 UID: 0 PID: 10502 Comm: syz.6.1830 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 419.904890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.904899][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 419.904918][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 419.904932][ C1] RSP: 0018:ffffc9000bbd7a48 EFLAGS: 00000293 [ 419.904945][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add20a [ 419.904955][ C1] RDX: ffff888070c92440 RSI: ffffffff81add1e4 RDI: 0000000000000005 [ 419.904965][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 419.904978][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170c8d41 [ 419.904988][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 419.904998][ C1] FS: 000055558b7db500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 419.905013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.905023][ C1] CR2: 0000001b2f716ff8 CR3: 000000005e8da000 CR4: 00000000003526f0 [ 419.905033][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.905042][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.905052][ C1] Call Trace: [ 419.905056][ C1] [ 419.905063][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 419.905081][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 419.905095][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 419.905118][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 419.905132][ C1] ? read_tsc+0x9/0x20 [ 419.905156][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 419.905182][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 419.905208][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 419.905225][ C1] [ 419.905230][ C1] [ 419.905236][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.905264][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 419.905280][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 419.905296][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 419.905313][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 419.905338][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 419.905353][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 419.905370][ C1] text_poke_bp_batch+0x22b/0x760 [ 419.905390][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 419.905410][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 419.905427][ C1] ? text_poke_queue+0xef/0x180 [ 419.905451][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 419.905477][ C1] text_poke_finish+0x30/0x40 [ 419.905493][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 419.905510][ C1] jump_label_update+0x1d7/0x400 [ 419.905532][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 419.905552][ C1] static_key_disable+0x1a/0x20 [ 419.905570][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 419.905595][ C1] ? bpf_link_free+0x95/0x390 [ 419.905616][ C1] ? __pfx_lock_release+0x10/0x10 [ 419.905638][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 419.905668][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 419.905689][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 419.905709][ C1] bpf_link_free+0xe9/0x390 [ 419.905729][ C1] bpf_link_release+0x5d/0x80 [ 419.905750][ C1] __fput+0x3ff/0xb70 [ 419.905771][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.905789][ C1] task_work_run+0x14e/0x250 [ 419.905811][ C1] ? __pfx_task_work_run+0x10/0x10 [ 419.905830][ C1] ? __might_fault+0xe3/0x190 [ 419.905856][ C1] syscall_exit_to_user_mode+0x27b/0x2a0 [ 419.905876][ C1] do_syscall_64+0xda/0x250 [ 419.905896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.905916][ C1] RIP: 0033:0x7fccb2b8d169 [ 419.905930][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.905943][ C1] RSP: 002b:00007fff260059d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 419.905958][ C1] RAX: 0000000000000000 RBX: 000000000002bc10 RCX: 00007fccb2b8d169 [ 419.905968][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 419.905982][ C1] RBP: 00007fccb2da7ba0 R08: 0000000000000001 R09: 0000000426005ccf [ 419.905991][ C1] R10: 00007fccb2a00000 R11: 0000000000000246 R12: 00007fccb2da5fac [ 419.906001][ C1] R13: 00007fccb2da5fa0 R14: ffffffffffffffff R15: 00007fff26005af0 [ 419.906023][ C1] [ 419.906029][ C1] Sending NMI from CPU 1 to CPUs 0: [ 419.906051][ C0] NMI backtrace for cpu 0 [ 419.906058][ C0] CPU: 0 UID: 0 PID: 6657 Comm: kworker/u8:9 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 419.906071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.906079][ C0] Workqueue: netns cleanup_net [ 419.906091][ C0] RIP: 0010:kasan_check_range+0x105/0x1a0 [ 419.906108][ C0] Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 c1 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b2 41 bc 08 00 00 00 [ 419.906119][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00000046 [ 419.906128][ C0] RAX: fffffbfff2dd85cb RBX: fffffbfff2dd85cc RCX: ffffffff8195b64e [ 419.906136][ C0] RDX: fffffbfff2dd85cc RSI: 0000000000000008 RDI: ffffffff96ec2e58 [ 419.906144][ C0] RBP: fffffbfff2dd85cb R08: 0000000000000000 R09: fffffbfff2dd85cb [ 419.906152][ C0] R10: ffffffff96ec2e5f R11: 0000000000000007 R12: ffff888062a50000 [ 419.906160][ C0] R13: 0000000000000100 R14: 0000000000000008 R15: 1ffff92000000f44 [ 419.906168][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 419.906181][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.906189][ C0] CR2: 00007ff60b2d56c0 CR3: 0000000012fc4000 CR4: 00000000003526f0 [ 419.906197][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.906204][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.906211][ C0] Call Trace: [ 419.906215][ C0] [ 419.906220][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 419.906239][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 419.906255][ C0] ? nmi_handle+0x1ac/0x5d0 [ 419.906272][ C0] ? kasan_check_range+0x105/0x1a0 [ 419.906287][ C0] ? default_do_nmi+0x6a/0x160 [ 419.906304][ C0] ? exc_nmi+0x170/0x1e0 [ 419.906321][ C0] ? end_repeat_nmi+0xf/0x53 [ 419.906338][ C0] ? hlock_class+0x4e/0x130 [ 419.906351][ C0] ? kasan_check_range+0x105/0x1a0 [ 419.906367][ C0] ? kasan_check_range+0x105/0x1a0 [ 419.906382][ C0] ? kasan_check_range+0x105/0x1a0 [ 419.906397][ C0] [ 419.906401][ C0] [ 419.906405][ C0] hlock_class+0x4e/0x130 [ 419.906418][ C0] mark_lock+0xb5/0xc60 [ 419.906433][ C0] ? mark_lock+0xb5/0xc60 [ 419.906447][ C0] ? hlock_class+0x4e/0x130 [ 419.906459][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 419.906475][ C0] ? __pfx_mark_lock+0x10/0x10 [ 419.906490][ C0] ? __pfx_mark_lock+0x10/0x10 [ 419.906507][ C0] ? hlock_class+0x4e/0x130 [ 419.906520][ C0] ? hlock_class+0x4e/0x130 [ 419.906532][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 419.906548][ C0] __lock_acquire+0x9f1/0x3c40 [ 419.906566][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 419.906583][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 419.906599][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 419.906617][ C0] lock_acquire.part.0+0x11b/0x380 [ 419.906633][ C0] ? advance_sched+0xd8/0xc60 [ 419.906651][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 419.906667][ C0] ? rcu_is_watching+0x12/0xc0 [ 419.906680][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 419.906693][ C0] ? advance_sched+0xd8/0xc60 [ 419.906710][ C0] ? lock_acquire+0x2f/0xb0 [ 419.906729][ C0] ? advance_sched+0xd8/0xc60 [ 419.906746][ C0] ? __pfx_advance_sched+0x10/0x10 [ 419.906763][ C0] _raw_spin_lock+0x2e/0x40 [ 419.906774][ C0] ? advance_sched+0xd8/0xc60 [ 419.906791][ C0] advance_sched+0xd8/0xc60 [ 419.906810][ C0] ? timerqueue_del+0x83/0x150 [ 419.906827][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 419.906839][ C0] ? __pfx_advance_sched+0x10/0x10 [ 419.906855][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 419.906870][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 419.906882][ C0] ? read_tsc+0x9/0x20 [ 419.906897][ C0] hrtimer_interrupt+0x392/0x8e0 [ 419.906914][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 419.906933][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 419.906946][ C0] [ 419.906950][ C0] [ 419.906954][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.906971][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 419.906984][ C0] Code: 00 e8 70 01 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9e 44 20 00 48 85 db 0f 85 55 01 00 00 e8 60 49 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 45 5e 83 [ 419.906995][ C0] RSP: 0018:ffffc9001bde7588 EFLAGS: 00000293 [ 419.907005][ C0] RAX: ffffffff8eeac1b8 RBX: 0000000000000000 RCX: ffffffff819996f2 [ 419.907013][ C0] RDX: ffff888062a50000 RSI: ffffffff81999700 RDI: 0000000000000007 [ 419.907021][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 419.907028][ C0] R10: 0000000000000000 R11: 0000000000000007 R12: ffffffff8eeac1b8 [ 419.907036][ C0] R13: ffffffff8eeac160 R14: ffffc9001bde7618 R15: dffffc0000000000 [ 419.907047][ C0] ? console_flush_all+0x992/0xc60 [ 419.907059][ C0] ? console_flush_all+0x9a0/0xc60 [ 419.907072][ C0] ? console_flush_all+0x9a0/0xc60 [ 419.907087][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 419.907102][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 419.907118][ C0] console_unlock+0xd9/0x210 [ 419.907129][ C0] ? __pfx_console_unlock+0x10/0x10 [ 419.907142][ C0] ? lock_acquire+0x2f/0xb0 [ 419.907157][ C0] ? _printk+0xc8/0x100 [ 419.907173][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 419.907191][ C0] vprintk_emit+0x424/0x6f0 [ 419.907204][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 419.907217][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 419.907228][ C0] ? kernfs_put+0x47/0x50 [ 419.907248][ C0] _printk+0xc8/0x100 [ 419.907263][ C0] ? __pfx__printk+0x10/0x10 [ 419.907283][ C0] __netdev_printk+0x376/0x500 [ 419.907300][ C0] ? __pfx_mark_lock+0x10/0x10 [ 419.907316][ C0] netdev_info+0xe5/0x120 [ 419.907333][ C0] ? __pfx_netdev_info+0x10/0x10 [ 419.907348][ C0] ? find_held_lock+0x2d/0x110 [ 419.907361][ C0] ? __dev_notify_flags+0x18f/0x2e0 [ 419.907376][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 419.907393][ C0] ? __dev_set_promiscuity+0x145/0x590 [ 419.907408][ C0] __dev_set_promiscuity+0x170/0x590 [ 419.907425][ C0] dev_set_promiscuity+0x52/0x150 [ 419.907441][ C0] del_nbp+0x11f/0xd30 [ 419.907460][ C0] br_dev_delete+0x99/0x1a0 [ 419.907478][ C0] br_net_exit_batch_rtnl+0x116/0x1f0 [ 419.907491][ C0] ? __pfx_br_net_exit_batch_rtnl+0x10/0x10 [ 419.907505][ C0] cleanup_net+0x557/0xb30 [ 419.907517][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 419.907530][ C0] ? lock_acquire+0x2f/0xb0 [ 419.907545][ C0] ? process_one_work+0x921/0x1ba0 [ 419.907561][ C0] process_one_work+0x9c5/0x1ba0 [ 419.907580][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 419.907596][ C0] ? __pfx_process_one_work+0x10/0x10 [ 419.907615][ C0] ? assign_work+0x1a0/0x250 [ 419.907630][ C0] worker_thread+0x6c8/0xf00 [ 419.907649][ C0] ? __pfx_worker_thread+0x10/0x10 [ 419.907664][ C0] kthread+0x3af/0x750 [ 419.907679][ C0] ? __pfx_kthread+0x10/0x10 [ 419.907693][ C0] ? lock_acquire+0x2f/0xb0 [ 419.907709][ C0] ? __pfx_kthread+0x10/0x10 [ 419.907727][ C0] ret_from_fork+0x45/0x80 [ 419.907742][ C0] ? __pfx_kthread+0x10/0x10 [ 419.907756][ C0] ret_from_fork_asm+0x1a/0x30 [ 419.907774][ C0] [ 419.908048][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 419.908059][ C1] CPU: 1 UID: 0 PID: 10502 Comm: syz.6.1830 Tainted: G L 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 419.908080][ C1] Tainted: [L]=SOFTLOCKUP [ 419.908086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.908095][ C1] Call Trace: [ 419.908101][ C1] [ 419.908108][ C1] dump_stack_lvl+0x3d/0x1f0 [ 419.908129][ C1] panic+0x71d/0x800 [ 419.908147][ C1] ? __pfx_panic+0x10/0x10 [ 419.908162][ C1] ? __pfx__printk+0x10/0x10 [ 419.908187][ C1] ? irq_work_claim+0x76/0xa0 [ 419.908210][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.908231][ C1] ? irq_work_queue+0x2a/0x80 [ 419.908253][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 419.908268][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 419.908287][ C1] watchdog_timer_fn+0x603/0x7d0 [ 419.908304][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 419.908319][ C1] __hrtimer_run_queues+0x5fb/0xae0 [ 419.908342][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 419.908357][ C1] ? read_tsc+0x9/0x20 [ 419.908381][ C1] hrtimer_interrupt+0x392/0x8e0 [ 419.908408][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 419.908434][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 419.908452][ C1] [ 419.908458][ C1] [ 419.908465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.908487][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 419.908504][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 419.908519][ C1] RSP: 0018:ffffc9000bbd7a48 EFLAGS: 00000293 [ 419.908531][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add20a [ 419.908542][ C1] RDX: ffff888070c92440 RSI: ffffffff81add1e4 RDI: 0000000000000005 [ 419.908553][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 419.908562][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170c8d41 [ 419.908572][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 419.908589][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 419.908606][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 419.908626][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 419.908651][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 419.908667][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 419.908686][ C1] text_poke_bp_batch+0x22b/0x760 [ 419.908706][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 419.908725][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 419.908743][ C1] ? text_poke_queue+0xef/0x180 [ 419.908768][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 419.908794][ C1] text_poke_finish+0x30/0x40 [ 419.908811][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 419.908830][ C1] jump_label_update+0x1d7/0x400 [ 419.908851][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 419.908872][ C1] static_key_disable+0x1a/0x20 [ 419.908891][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 419.908917][ C1] ? bpf_link_free+0x95/0x390 [ 419.908938][ C1] ? __pfx_lock_release+0x10/0x10 [ 419.908959][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 419.908994][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 419.909016][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 419.909036][ C1] bpf_link_free+0xe9/0x390 [ 419.909058][ C1] bpf_link_release+0x5d/0x80 [ 419.909080][ C1] __fput+0x3ff/0xb70 [ 419.909100][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.909119][ C1] task_work_run+0x14e/0x250 [ 419.909142][ C1] ? __pfx_task_work_run+0x10/0x10 [ 419.909162][ C1] ? __might_fault+0xe3/0x190 [ 419.909187][ C1] syscall_exit_to_user_mode+0x27b/0x2a0 [ 419.909208][ C1] do_syscall_64+0xda/0x250 [ 419.909229][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.909249][ C1] RIP: 0033:0x7fccb2b8d169 [ 419.909262][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.909276][ C1] RSP: 002b:00007fff260059d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 419.909291][ C1] RAX: 0000000000000000 RBX: 000000000002bc10 RCX: 00007fccb2b8d169 [ 419.909301][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 419.909311][ C1] RBP: 00007fccb2da7ba0 R08: 0000000000000001 R09: 0000000426005ccf [ 419.909322][ C1] R10: 00007fccb2a00000 R11: 0000000000000246 R12: 00007fccb2da5fac [ 419.909333][ C1] R13: 00007fccb2da5fa0 R14: ffffffffffffffff R15: 00007fff26005af0 [ 419.909355][ C1] [ 420.993253][ C1] Shutting down cpus with NMI [ 420.993443][ C1] Kernel Offset: disabled