last executing test programs: 6m15.375256556s ago: executing program 32 (id=6982): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m35.208970296s ago: executing program 1 (id=11105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) writev(r0, &(0x7f0000000040), 0x2) 2m35.023853324s ago: executing program 1 (id=11109): r0 = semget$private(0x0, 0x4000000009, 0x668) semop(r0, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) semop(r0, &(0x7f0000000200), 0x53) semctl$IPC_RMID(r0, 0x0, 0x0) 2m34.831483838s ago: executing program 1 (id=11113): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x100) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, [0x0, 0x800000]}) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0x1000006) 2m34.770454686s ago: executing program 1 (id=11115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000010c0)={0x7, 0x0, [{0x0, 0x9, 0x1, 0x8, 0x200000, 0xfffffffb, 0x1}, {0x80000007, 0x7, 0x6, 0x0, 0x7, 0xfffffffd, 0x7b87a9e1}, {0xa, 0xffffffff, 0x0, 0xfffffffd, 0x4, 0x80000001, 0x8}, {0x80000000, 0xffffffff, 0x7, 0x1007, 0x4, 0x2000110, 0xbf62}, {0x80000008, 0x5dd3, 0x5, 0xfc6b, 0x1000e231, 0x1, 0x7fff}, {0x7, 0x4, 0x5, 0x3, 0x6, 0x803, 0x9}, {0x40000001, 0x28, 0x7, 0x1, 0x4, 0x100, 0x2}]}) 2m34.514416879s ago: executing program 1 (id=11121): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f}, 0x14) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x5, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7, 0x0, 0x3f}, 0x20) 2m34.438326014s ago: executing program 1 (id=11124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m32.028152982s ago: executing program 3 (id=11155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10) 2m31.991748267s ago: executing program 3 (id=11156): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 2m31.945209187s ago: executing program 3 (id=11158): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m30.00735125s ago: executing program 3 (id=11191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x200}) 2m29.839048375s ago: executing program 3 (id=11196): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/27, 0x1b}, {&(0x7f0000000800)=""/192, 0xc0}, {0x0, 0x43}, {&(0x7f0000003ac0)=""/4097, 0x1001}], 0x6}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae", 0xc6}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0x0) 2m28.931226546s ago: executing program 3 (id=11214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) 2m18.92287901s ago: executing program 33 (id=11124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m13.770884969s ago: executing program 34 (id=11214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) 2m4.783928361s ago: executing program 2 (id=11474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f0000000100)=""/252) 2m3.851563352s ago: executing program 2 (id=11484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events'}, 0x1c) 2m3.697355637s ago: executing program 2 (id=11487): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0xa782}, 0xc) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2m2.652742745s ago: executing program 2 (id=11501): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"863094aeb0b2561800", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x81, 0x6}) 2m2.525903749s ago: executing program 2 (id=11503): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 2m2.273190184s ago: executing program 2 (id=11506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000470)='10', 0x2) 1m58.413384834s ago: executing program 6 (id=11548): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010000", 0x7) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="a2cf747f43d3") 1m58.333246559s ago: executing program 6 (id=11550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0x', 0x2) 1m58.234849375s ago: executing program 6 (id=11552): sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 1m58.085352862s ago: executing program 6 (id=11555): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 1m57.87680628s ago: executing program 6 (id=11559): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) 1m57.80993245s ago: executing program 6 (id=11561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) 1m47.186366948s ago: executing program 35 (id=11506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000470)='10', 0x2) 1m42.694636504s ago: executing program 36 (id=11561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) 1m10.307519075s ago: executing program 7 (id=11941): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) 1m10.071898317s ago: executing program 7 (id=11945): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 1m9.723318035s ago: executing program 7 (id=11949): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1m9.507023545s ago: executing program 7 (id=11951): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 1m9.312911174s ago: executing program 7 (id=11956): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m8.719822927s ago: executing program 7 (id=11961): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc8) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000020000000000000000000000060038000103"], 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m8.127450792s ago: executing program 37 (id=11961): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc8) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000020000000000000000000000060038000103"], 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 9.849322481s ago: executing program 8 (id=12187): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000008) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 9.596028852s ago: executing program 5 (id=12188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4054}, 0x40) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 8.084899022s ago: executing program 8 (id=12190): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="02", 0x1, 0x4) 7.832813452s ago: executing program 5 (id=12191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.11676257s ago: executing program 8 (id=12193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 7.081391876s ago: executing program 5 (id=12194): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/84, 0x54}, 0x6}], 0x2, 0x40002002, 0x0) 7.023030589s ago: executing program 9 (id=12195): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 6.155685294s ago: executing program 5 (id=12198): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007db000/0x400000)=nil) 6.061243471s ago: executing program 8 (id=12199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x601, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}}, 0x0) 5.548400327s ago: executing program 0 (id=12201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 5.508617125s ago: executing program 9 (id=12202): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x40) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4603100706000000000000000002003e00ff0100000e02000000000000f4e6546ea79e72cf8b00000000000000060000005042380001"], 0x78) close(r0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) 5.50765485s ago: executing program 8 (id=12203): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents(0xffffffffffffffff, 0x0, 0x0) 4.961361593s ago: executing program 0 (id=12205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567812345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8765432187654321}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc, 0x3, "0123456789abcdef"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de774fc79872f0b8fa15bf788c9914c00"}}]}]}, 0x60}}, 0x0) 4.922525622s ago: executing program 9 (id=12206): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x10000000}, 0x20000000) 4.407657088s ago: executing program 5 (id=12207): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000438000/0x3000)=nil, 0x400000, 0x2, 0x2}) 4.30477887s ago: executing program 4 (id=12208): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) 4.169130989s ago: executing program 9 (id=12209): r0 = syz_io_uring_setup(0x3eb1, &(0x7f00000034c0)={0x0, 0x764a, 0x0, 0x3, 0x70}, &(0x7f0000003540), &(0x7f0000003580), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0}], 0x1) 4.089291594s ago: executing program 0 (id=12210): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xd6a6, 0xfffffffb, 0x128, 0xd, 0xe7, 0xc, 0x4007fff, 0x3, 0xaa, 0x6, 0x0, 0x80000000, 0x4, 0x8, 0x2, 0x5, 0x2, 0x6, 0x5, 0x7ff, 0x43, 0x101, 0x600, 0x1ff, 0x9, 0x6, 0x3, 0xdd, 0x800, 0xf, 0x5, 0x2, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x7, 0x5805, 0x2, 0x8, 0x8, 0x1000, 0x0, 0x4, 0x32, 0x0, 0x4af, 0x10001, 0xfffffffc, 0x2, 0x1, 0x3b98, 0x6, 0x1, 0x1, 0x100, 0xd, 0x9, 0x7, 0x6, 0xfffffff8, 0x7, 0xe22, 0xff, 0xf, 0x2, 0x4, 0x0, 0x402, 0x80000001, 0x6, 0x7, 0x3ff, 0x2, 0x5, 0xc, 0x8, 0xe9, 0x3, 0x3ff, 0x4d4b, 0x1, 0x5, 0x3, 0xfffffff4, 0xb6a, 0x1, 0x8, 0x570c, 0x1, 0x4, 0x1, 0x1000, 0x3, 0x9, 0x4, 0x0, 0x80, 0xa0a2, 0x2a, 0x8, 0x1, 0x7fff, 0x3, 0x2, 0x10001, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7fff, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x47, 0x743fa18c, 0xbaa3, 0xe, 0x9, 0x226, 0x0, 0xfff, 0x9, 0x8, 0x4, 0x3ff, 0x6, 0x79e6, 0x0, 0xfffffffb, 0x4, 0x8, 0x9, 0x2, 0x10, 0x7, 0xd5, 0x2, 0x1, 0x6, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x6, 0xfffff001, 0x1, 0x6f62, 0x344, 0x2, 0x7, 0x0, 0x2, 0x7, 0x7, 0x8, 0x9, 0x2, 0x0, 0x0, 0x9, 0x401, 0x4, 0x1, 0x4, 0x6, 0x934, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x8000, 0xa9b, 0x80010, 0xfffffff2, 0x100, 0x7, 0xdb, 0x7fff, 0x3, 0xd5, 0x2, 0x0, 0x15, 0xffff, 0x7295, 0x4, 0x3dd, 0x0, 0x3, 0x9, 0x4, 0xb, 0x10001, 0xd01, 0x7, 0x6, 0xfffffff9, 0x7, 0x0, 0x2, 0x4564, 0x1, 0x5c6, 0x653b, 0x2, 0x0, 0xffffffb1, 0x7, 0xab3, 0x3, 0x3, 0x80000000, 0xffff, 0x7ff, 0xe339, 0x6, 0xe, 0x7, 0x7, 0xa, 0x9, 0x2, 0x8, 0x4, 0x6, 0x5, 0xfffffff4, 0x7, 0x80, 0x3, 0x1c000000, 0x7, 0x3, 0x5, 0x49c, 0x81, 0x80000000, 0xa, 0x4, 0x3, 0x14, 0x3, 0xff, 0x4, 0x9, 0x0, 0x9]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.844761028s ago: executing program 5 (id=12211): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setresuid(0x0, 0xffffffffffffffff, 0xee01) 3.499962583s ago: executing program 4 (id=12212): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.797278461s ago: executing program 9 (id=12213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.253836747s ago: executing program 0 (id=12214): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 2.223787349s ago: executing program 4 (id=12215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x4) 2.106650921s ago: executing program 8 (id=12216): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 1.911978346s ago: executing program 4 (id=12217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TDX_GET_CPUID(r2, 0xc008aeba, 0x0) 1.864304931s ago: executing program 0 (id=12218): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 498.971928ms ago: executing program 0 (id=12219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x4810) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000fb0400000a38000000200a05000000000000000000020001000c00054000000000001f74020900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 468.853661ms ago: executing program 9 (id=12220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r1, 0x5eae78d9c54e9d1f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 325.868309ms ago: executing program 4 (id=12221): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) 0s ago: executing program 4 (id=12222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) kernel console output (not intermixed with test programs): sb2: Invalid write control endpoint [ 721.144867][ T2363] pvrusb2: Invalid write control endpoint [ 721.150614][ T2363] pvrusb2: Invalid write control endpoint [ 721.156393][ T2363] pvrusb2: Invalid write control endpoint [ 721.162612][ T2363] pvrusb2: Invalid write control endpoint [ 721.168761][ T2363] pvrusb2: Invalid write control endpoint [ 721.175470][ T2363] pvrusb2: Invalid write control endpoint [ 721.181248][ T2363] pvrusb2: Invalid write control endpoint [ 721.186965][ T2363] pvrusb2: Invalid write control endpoint [ 721.194209][ T2363] pvrusb2: Invalid write control endpoint [ 721.212938][ T2363] pvrusb2: Invalid write control endpoint [ 721.218671][ T2363] pvrusb2: Invalid write control endpoint [ 721.231064][ T2363] pvrusb2: Invalid write control endpoint [ 721.236804][ T2363] pvrusb2: Invalid write control endpoint [ 721.248059][ T2363] pvrusb2: Invalid write control endpoint [ 721.257222][ T2363] pvrusb2: Invalid write control endpoint [ 721.262995][ T2363] pvrusb2: Invalid write control endpoint [ 721.276948][ T2363] pvrusb2: Invalid write control endpoint [ 721.283303][ T2363] pvrusb2: Invalid write control endpoint [ 721.310500][T30250] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 721.313280][ T2363] pvrusb2: Attached sub-driver cs53l32a [ 721.325978][T30250] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 721.336864][T30250] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 721.379005][ T2363] pvrusb2: Invalid write control endpoint [ 721.385895][ T2363] pvrusb2: Invalid write control endpoint [ 721.392628][ T2363] pvrusb2: Invalid write control endpoint [ 721.398357][ T2363] pvrusb2: Invalid write control endpoint [ 721.404981][ T2363] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 721.424125][ T2363] pvrusb2: Device being rendered inoperable [ 721.440402][ T2363] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 721.462361][ T2363] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 721.701347][T22378] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 721.831375][ T5719] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 721.852825][T22378] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 721.862778][T22378] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 721.874768][T22378] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 721.886379][T22378] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 721.895514][T22378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.903551][T22378] usb 3-1: Product: syz [ 721.907712][T22378] usb 3-1: Manufacturer: syz [ 721.912345][T22378] usb 3-1: SerialNumber: syz [ 721.918935][T22378] usb 3-1: config 0 descriptor?? [ 721.924673][T30255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.931479][ T5733] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 721.933018][T30255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.948405][T22378] usb 3-1: ucan: probing device on interface #0 [ 721.991409][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 721.997957][ T5719] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 722.006906][ T5719] usb 1-1: config 0 has no interface number 0 [ 722.013162][ T5719] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 722.023211][ T5719] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.033992][ T5719] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 722.044451][ T5719] usb 1-1: config 0 interface 196 has no altsetting 0 [ 722.052863][ T5719] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 722.062625][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.070607][ T5719] usb 1-1: Product: syz [ 722.074786][ T5719] usb 1-1: Manufacturer: syz [ 722.079377][ T5719] usb 1-1: SerialNumber: syz [ 722.084008][ T5733] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 722.084035][ T5733] usb 6-1: config 0 has no interface number 0 [ 722.084073][ T5733] usb 6-1: config 0 interface 41 has no altsetting 0 [ 722.086407][ T5733] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 722.095981][ T5719] usb 1-1: config 0 descriptor?? [ 722.099922][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.109414][T30248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 722.114574][ T5733] usb 6-1: Product: syz [ 722.138509][ T5733] usb 6-1: Manufacturer: syz [ 722.143458][ T5733] usb 6-1: SerialNumber: syz [ 722.151219][ T5733] usb 6-1: config 0 descriptor?? [ 722.578393][T22378] ucan 3-1:0.0 can0: registered device [ 722.710236][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 722.723103][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 722.731520][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 722.734966][ T5719] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 722.749882][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 722.758659][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 722.759922][ T5719] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 722.776404][T22378] ucan 3-1:0.0 can0: firmware string: unknown [ 722.824612][T22378] usb 3-1: USB disconnect, device number 41 [ 722.975700][ T5733] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 723.010146][ T5733] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 723.038915][ T5733] usb 6-1: USB disconnect, device number 43 [ 723.091653][ T5719] usb 1-1: USB disconnect, device number 28 [ 723.173163][ T5719] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 723.277026][T30262] vxcan1 speed is unknown, defaulting to 1000 [ 723.300343][ T29] audit: type=1400 audit(525267.280:2831): avc: denied { write } for pid=30268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.408918][ T29] audit: type=1400 audit(525267.390:2832): avc: denied { write } for pid=30284 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.440243][T30286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11330'. [ 723.471778][T30286] netlink: 59 bytes leftover after parsing attributes in process `syz.2.11330'. [ 723.492684][T30286] netlink: 59 bytes leftover after parsing attributes in process `syz.2.11330'. [ 724.013295][ T5719] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 724.114658][ T29] audit: type=1400 audit(525268.099:2833): avc: denied { write } for pid=30288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.195563][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 724.215736][ T5719] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 724.239541][ T5719] usb 1-1: config 0 has no interface number 0 [ 724.272067][ T5719] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.307808][T30262] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.314959][ T5719] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 724.328407][T30262] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.336117][T30262] bridge_slave_0: entered allmulticast mode [ 724.342120][ T5719] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 724.356633][T30262] bridge_slave_0: entered promiscuous mode [ 724.374429][ T5719] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 724.386347][T30262] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.393470][ T29] audit: type=1400 audit(525268.369:2834): avc: denied { write } for pid=30317 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.416330][T30262] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.423634][ T5719] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.436959][T30262] bridge_slave_1: entered allmulticast mode [ 724.445637][T30262] bridge_slave_1: entered promiscuous mode [ 724.454618][ T5719] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 724.467045][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.493787][ T5719] usb 1-1: Product: syz [ 724.506988][ T5719] usb 1-1: Manufacturer: syz [ 724.520687][ T5719] usb 1-1: SerialNumber: syz [ 724.539780][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 724.541123][ T5719] usb 1-1: config 0 descriptor?? [ 724.555181][T30262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.564488][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 724.565152][T30297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.580188][T30323] ALSA: mixer_oss: invalid OSS volume 'b"(CyVk߯ѡ=&' [ 724.581771][T30262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.609479][ T5719] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input80 [ 724.611137][T30323] ALSA: mixer_oss: invalid OSS volume 'L!\c=*' [ 724.640925][T30323] ALSA: mixer_oss: invalid OSS volume '6]}rg06uv`E]' [ 724.648997][ T4962] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 724.649681][T30323] ALSA: mixer_oss: invalid OSS volume '5yMv^L hU#' [ 724.672327][T30262] team0: Port device team_slave_0 added [ 724.690888][T30262] team0: Port device team_slave_1 added [ 724.698021][T30323] ALSA: mixer_oss: invalid OSS volume 'ah8g!{$Icl+2)ZC' [ 724.708744][T30326] UHID_CREATE from different security context by process 4582 (syz.2.11339), this is not allowed. [ 724.728455][T30323] ALSA: mixer_oss: invalid OSS volume 'BA>3w(*7' [ 724.737793][T30323] ALSA: mixer_oss: invalid OSS volume '/A/' [ 724.759796][T30323] ALSA: mixer_oss: invalid OSS volume '>7' [ 724.790507][T30323] ALSA: mixer_oss: invalid OSS volume 'o)[dLLUN.S4?' [ 724.815505][T30262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.839985][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.848575][T30323] ALSA: mixer_oss: invalid OSS volume 'b6ʽ83>!,[߉1\M' [ 724.878114][ T5627] Bluetooth: hci1: command tx timeout [ 724.900456][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 724.906578][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 724.912806][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 724.914481][ T5733] usb 1-1: USB disconnect, device number 29 [ 724.918629][T30262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.950293][T30262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.958054][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.985451][T30262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.048213][T30262] hsr_slave_0: entered promiscuous mode [ 725.056950][T30262] hsr_slave_1: entered promiscuous mode [ 725.063167][T30262] debugfs: 'hsr0' already exists in 'hsr' [ 725.068896][T30262] Cannot create hsr debugfs directory [ 725.098708][T30330] netlink: 200 bytes leftover after parsing attributes in process `syz.5.11341'. [ 725.126781][ T29] audit: type=1400 audit(525269.109:2835): avc: denied { execute } for pid=30331 comm="syz.2.11342" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 725.681241][T30345] blktrace: Concurrent blktraces are not allowed on loop5 [ 725.691185][T30262] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 725.714855][T30262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 725.731767][T30262] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 725.764790][T30262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.786251][T30262] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 725.834470][T30262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.845817][T30262] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 725.872502][T30262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.029336][T30262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.078779][T30355] loop4: detected capacity change from 0 to 7 [ 726.096719][T30262] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.112447][T30355] Dev loop4: unable to read RDB block 7 [ 726.119949][T30355] loop4: AHDI p1 p2 p3 [ 726.125265][T30355] loop4: partition table partially beyond EOD, truncated [ 726.140151][T26114] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.147337][T26114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.166474][T30355] loop4: p1 start 1601398130 is beyond EOD, truncated [ 726.186383][T26106] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.193636][T26106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.194847][T30355] loop4: p2 start 1702059890 is beyond EOD, truncated [ 726.622384][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11355'. [ 726.659334][T30368] bond7: option xmit_hash_policy: invalid value (6) [ 726.678994][T30370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11355'. [ 726.690202][T30368] bond7 (unregistering): Released all slaves [ 726.923753][ T5627] Bluetooth: hci1: command tx timeout [ 726.942931][T30380] gre0: Caught tx_queue_len zero misconfig [ 727.052514][T30386] netlink: 'syz.0.11358': attribute type 1 has an invalid length. [ 727.069182][T30262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.075136][T30386] netlink: 'syz.0.11358': attribute type 2 has an invalid length. [ 727.098145][T30386] netlink: 'syz.0.11358': attribute type 1 has an invalid length. [ 727.106301][T30386] netlink: 'syz.0.11358': attribute type 2 has an invalid length. [ 727.392110][ T29] audit: type=1400 audit(525271.378:2836): avc: denied { execute } for pid=30399 comm="syz.2.11362" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 727.545481][T30262] veth0_vlan: entered promiscuous mode [ 727.562679][T30262] veth1_vlan: entered promiscuous mode [ 727.622419][T30262] veth0_macvtap: entered promiscuous mode [ 727.640718][T30262] veth1_macvtap: entered promiscuous mode [ 727.720161][T30262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.777711][T30262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.905023][ T47] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.014349][ T47] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.095349][ T47] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.135130][ T24] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 728.201229][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 728.218378][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 728.227471][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.238619][T26106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.255551][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 728.262699][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.272773][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 728.282638][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 728.356559][ T24] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 728.373402][ T24] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 728.374064][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.385232][ T24] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.405959][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 728.412765][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.430355][ T24] usb 1-1: string descriptor 0 read error: -22 [ 728.438009][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.465181][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.503407][T30413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.522180][T30413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.558269][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 728.777626][ T5627] block nbd0: Receive control failed (result -32) [ 728.942264][ T9] usb 1-1: USB disconnect, device number 30 [ 729.004931][ T5627] Bluetooth: hci1: command tx timeout [ 729.144513][T30417] vxcan1 speed is unknown, defaulting to 1000 [ 730.045785][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 730.164465][ T29] audit: type=1400 audit(525274.147:2837): avc: denied { mounton } for pid=30488 comm="syz.0.11396" path="cgroup:[4026532804]" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 730.244837][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 730.280748][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.322963][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 730.345549][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.353649][ T24] usb 7-1: Product: syz [ 730.355706][T30417] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.359447][ T24] usb 7-1: Manufacturer: syz [ 730.370181][ T5627] Bluetooth: hci6: command tx timeout [ 730.380708][ T24] usb 7-1: SerialNumber: syz [ 730.390152][T30417] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.399482][T30417] bridge_slave_0: entered allmulticast mode [ 730.413884][ T24] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 730.424353][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 730.435605][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 730.444933][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 730.448309][T30417] bridge_slave_0: entered promiscuous mode [ 730.455633][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 730.481054][T30417] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.485367][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 730.489610][T30417] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.504987][T30417] bridge_slave_1: entered allmulticast mode [ 730.512021][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 730.514476][T30417] bridge_slave_1: entered promiscuous mode [ 730.538284][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 730.574290][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 730.586756][ T24] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 730.624124][T30417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.627947][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 730.669339][T30507] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 730.687082][T30417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.703206][T30507] CPU: 0 UID: 0 PID: 30507 Comm: syz.2.11402 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.703246][T30507] Tainted: [L]=SOFTLOCKUP [ 730.703256][T30507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 730.703275][T30507] Call Trace: [ 730.703284][T30507] [ 730.703294][T30507] dump_stack_lvl+0x100/0x190 [ 730.703332][T30507] sysfs_warn_dup.cold+0x1c/0x28 [ 730.703367][T30507] sysfs_create_dir_ns+0x24b/0x2b0 [ 730.703391][T30507] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 730.703414][T30507] ? find_held_lock+0x2b/0x80 [ 730.703437][T30507] ? kobject_add_internal+0x25f/0x930 [ 730.703470][T30507] ? kobject_add_internal+0x25f/0x930 [ 730.703510][T30507] ? class_dir_child_ns_type+0xd/0x60 [ 730.703546][T30507] kobject_add_internal+0x2c8/0x930 [ 730.703585][T30507] kobject_add+0x16a/0x1e0 [ 730.703627][T30507] ? __pfx_kobject_add+0x10/0x10 [ 730.703665][T30507] ? get_device_parent+0x1b3/0x4c0 [ 730.703695][T30507] ? kobject_put+0xb9/0x640 [ 730.703729][T30507] device_add+0x294/0x1970 [ 730.703758][T30507] ? lockdep_init_map_type+0x5c/0x250 [ 730.703786][T30507] ? __pfx_device_add+0x10/0x10 [ 730.703816][T30507] ? lockdep_init_map_type+0x5c/0x250 [ 730.703845][T30507] ? __init_waitqueue_head+0xca/0x150 [ 730.703884][T30507] tty_register_device_attr+0x388/0x7f0 [ 730.703914][T30507] ? lockdep_init_map_type+0x5c/0x250 [ 730.703943][T30507] ? __pfx_tty_register_device_attr+0x10/0x10 [ 730.703978][T30507] ? tty_port_init+0x156/0x1c0 [ 730.704012][T30507] gsm_activate_mux+0x155/0x2a0 [ 730.704043][T30507] gsmld_ioctl+0xbbc/0x15c0 [ 730.704079][T30507] ? kasan_quarantine_put+0x104/0x240 [ 730.704104][T30507] ? __pfx_gsmld_ioctl+0x10/0x10 [ 730.704140][T30507] ? __ldsem_down_read_nested+0xf3/0x890 [ 730.704183][T30507] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 730.704221][T30507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.704246][T30507] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 730.704273][T30507] ? __pfx_gsmld_ioctl+0x10/0x10 [ 730.704302][T30507] tty_ioctl+0x11b4/0x1640 [ 730.704329][T30507] ? __pfx_tty_ioctl+0x10/0x10 [ 730.704356][T30507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 730.704403][T30507] ? __fget_files+0x215/0x3d0 [ 730.704427][T30507] ? hook_file_ioctl_common+0x140/0x440 [ 730.704464][T30507] ? selinux_file_ioctl+0x13b/0x290 [ 730.704495][T30507] ? selinux_file_ioctl+0xb6/0x290 [ 730.704530][T30507] ? __pfx_tty_ioctl+0x10/0x10 [ 730.704558][T30507] __x64_sys_ioctl+0x18e/0x210 [ 730.704601][T30507] do_syscall_64+0x115/0x870 [ 730.704631][T30507] ? clear_bhb_loop+0x40/0x90 [ 730.704660][T30507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.704685][T30507] RIP: 0033:0x7fa2f6b9e019 [ 730.704714][T30507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.704738][T30507] RSP: 002b:00007fa2f799a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.704765][T30507] RAX: ffffffffffffffda RBX: 00007fa2f6e26090 RCX: 00007fa2f6b9e019 [ 730.704781][T30507] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 730.704795][T30507] RBP: 00007fa2f6c3500c R08: 0000000000000000 R09: 0000000000000000 [ 730.704810][T30507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.704822][T30507] R13: 00007fa2f6e26128 R14: 00007fa2f6e26090 R15: 00007ffc0b53cae8 [ 730.704853][T30507] [ 730.752201][T30417] team0: Port device team_slave_0 added [ 730.855195][ T9] usb 7-1: USB disconnect, device number 2 [ 730.880237][T30507] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 731.074844][T30417] team0: Port device team_slave_1 added [ 731.096225][ T5627] Bluetooth: hci1: command tx timeout [ 731.171321][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 731.210040][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 731.278488][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 731.305145][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 731.306745][T30417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.328882][ T9] keyspan 7-1:1.0: device disconnected [ 731.332647][T30417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.365237][T30417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.468203][T30417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.479339][T30417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.510178][T30417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.635727][ T5726] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 731.672728][T30417] hsr_slave_0: entered promiscuous mode [ 731.708955][T30417] hsr_slave_1: entered promiscuous mode [ 731.729578][T30417] debugfs: 'hsr0' already exists in 'hsr' [ 731.748568][T30417] Cannot create hsr debugfs directory [ 731.763486][T30515] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 731.792431][ T5726] usb 6-1: too many configurations: 75, using maximum allowed: 8 [ 731.812739][ T5726] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 731.824332][ T5726] usb 6-1: can't read configurations, error -71 [ 732.447422][ T5627] Bluetooth: hci6: command tx timeout [ 732.449685][T30417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 732.460867][ T86] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 732.493908][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.521006][T30417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 732.580144][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.594602][T30417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.613101][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.632099][T30417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.638962][ T86] usb 7-1: Using ep0 maxpacket: 8 [ 732.645944][ T86] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 732.671769][ T86] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 732.679884][T30543] nbd: couldn't find device at index 54253 [ 732.691822][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.710245][ T86] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.758037][ T86] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.809532][ T86] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.823864][ T86] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.969479][T30417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.021415][T30417] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.052421][ T86] usb 7-1: GET_CAPABILITIES returned 0 [ 733.053323][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.065151][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.069838][ T86] usbtmc 7-1:16.0: can't read capabilities [ 733.122336][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.129533][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.310463][ T5726] usb 7-1: USB disconnect, device number 3 [ 733.316539][T22378] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 733.424221][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11425'. [ 733.480314][T22378] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 733.505648][T22378] usb 1-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 733.521579][T22378] usb 1-1: Product: syz [ 733.532513][T22378] usb 1-1: Manufacturer: syz [ 733.543144][T22378] usb 1-1: SerialNumber: syz [ 733.568952][T22378] usb 1-1: config 0 descriptor?? [ 733.609680][T22378] usb 1-1: selecting invalid altsetting 3 [ 733.622322][T22378] comedi comedi5: could not set alternate setting 3 in high speed [ 733.630503][T22378] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 733.645677][T22378] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 733.859611][T22378] usb 1-1: USB disconnect, device number 31 [ 733.889408][T30417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.926591][T30590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11432'. [ 734.102392][T30599] bad cache= option: none [ 734.102392][T30599] nr_mlock 0 [ 734.102392][T30599] nr_zspages 149 [ 734.102392][T30599] nr_free_cma 0 [ 734.102392][T30599] numa_hit 2928308 [ 734.102392][T30599] numa_miss 1 [ 734.102392][T30599] numa_foreign 1 [ 734.102392][T30599] numa_interleave 11472 [ 734.102392][T30599] numa_local 2922688 [ 734.102392][T30599] numa_other 5621 [ 734.102392][T30599] nr_inactive_anon 18 [ 734.102392][T30599] nr_active_anon 14034 [ 734.102392][T30599] nr_inactive_file 24448 [ 734.102392][T30599] nr_active_file 97 [ 734.102392][T30599] nr_unevictable 768 [ 734.102392][T30599] nr_slab_reclaimable 8683 [ 734.102392][T30599] nr_slab_unreclaimable 138125 [ 734.102392][T30599] nr_isolated_anon 0 [ 734.102392][T30599] nr_isolated_file 0 [ 734.102392][T30599] workingset_nodes 29 [ 734.102392][T30599] workingset_refault_anon 6176 [ 734.102392][T30599] workingset_refault_file 24866 [ 734.102392][T30599] workingset_activate_anon 129 [ 734.102392][T30599] workingset_activate_file 21 [ 734.102392][T30599] workingset_restore_anon 129 [ 734.102392][T30599] workingset_restore_file 21 [ 734.102392][T30599] workingset_nodereclaim 117 [ 734.102392][T30599] nr_anon_pages 13499 [ 734.102392][T30599] nr_mapped 40940 [ 734.102392][T30599] nr_file_pages 25866 [ 734.102392][T30599] nr_dirty 539 [ 734.102392][T30599] nr_writeback 0 [ 734.102392][T30599] nr_shmem 1314 [ 734.102392][T30599] nr_shmem_hugepages 0 [ 734.102392][T30599] nr_shmem_pmdmapped 0 [ 734.102392][T30599] nr_file_hugepages 0 [ 734.102392][T30599] nr_file_pmdmapped 0 [ 734.102392][T30599] nr_anon_transparent_hugepages 0 [ 734.102392][T30599] nr_vmscan_write 10978 [ 734.102392][T30599] nr_vmscan_immediate_reclaim 5077 [ 734.102392][T30599] nr_dirtied 21931 [ 734.102392][T30599] nr_written 21392 [ 734.102392][T30599] nr_throttled_written 2125 [ 734.102392][T30599] nr_kernel_misc_reclaimable 0 [ 734.102392][T30599] nr_foll_pin_acquired 10865 [ 734.102392][T30599] nr_foll_pin_released 10865 [ 734.102931][T30599] CIFS: VFS: bad cache= option: none [ 734.102931][T30599] nr_mlock 0 [ 734.102931][T30599] nr_zspages 149 [ 734.102931][T30599] nr_free_cma 0 [ 734.102931][T30599] numa_hit 2928308 [ 734.102931][T30599] numa_miss 1 [ 734.102931][T30599] numa_foreign 1 [ 734.102931][T30599] numa_interleave 11472 [ 734.102931][T30599] numa_local 2922688 [ 734.102931][T30599] numa_other 5621 [ 734.102931][T30599] nr_inactive_anon 18 [ 734.102931][T30599] nr_active_anon 14034 [ 734.102931][T30599] nr_inactive_file 24448 [ 734.102931][T30599] nr_active_file 97 [ 734.102931][T30599] nr_unevictable 768 [ 734.102931][T30599] nr_slab_reclaimable 8683 [ 734.102931][T30599] nr_slab_unreclaimable 138125 [ 734.102931][T30599] nr_isolated_anon 0 [ 734.102931][T30599] nr_isolated_file 0 [ 734.102931][T30599] workingset_nodes 29 [ 734.102931][T30599] workingset_refault_anon 6176 [ 734.102931][T30599] workingset_refault_file 24866 [ 734.102931][T30599] workingset_activate_anon 129 [ 734.102931][T30599] workingset_activate_file 21 [ 734.102931][T30599] workingset_restore_anon 129 [ 734.102931][T30599] workingset_restore_file 21 [ 734.102931][T30599] workingset_nodereclaim 117 [ 734.102931][T30599] nr_anon_pages 13499 [ 734.102931][T30599] nr_mapped 40940 [ 734.102931][T30599] nr_file_pages 25866 [ 734.102931][T30599] nr_dirty 539 [ 734.102931][T30599] nr_writeback 0 [ 734.102931][T30599] nr_shmem 1314 [ 734.102931][T30599] nr_shmem_hugepages 0 [ 734.102931][T30599] nr_shmem_pmdmapped 0 [ 734.102931][T30599] nr_file_hugepages 0 [ 734.102931][T30599] nr_file_pmdmapped 0 [ 734.102931][T30599] nr_anon_transparent_hugepages 0 [ 734.102931][T30599] nr_vmscan_write 10978 [ 734.102931][T30599] nr_vmscan_immediate_reclaim 5077 [ 734.102931][T30599] nr_dirtied 21931 [ 734.102931][T30599] nr_written 21392 [ 734.102931][T30599] nr_throttled_written 2125 [ 734.102931][T30599] nr_kernel_misc_reclaimable 0 [ 734.102931][T30599] nr_foll_pin_acquired 10865 [ 734.529637][ T5627] Bluetooth: hci6: command tx timeout [ 734.780990][T30614] netlink: 'syz.0.11442': attribute type 1 has an invalid length. [ 734.799011][T30618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11443'. [ 734.899148][T30417] veth0_vlan: entered promiscuous mode [ 734.915930][T30417] veth1_vlan: entered promiscuous mode [ 734.959971][T30417] veth0_macvtap: entered promiscuous mode [ 735.025331][ T29] audit: type=1400 audit(525279.004:2838): avc: denied { write } for pid=30624 comm="syz.2.11446" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 735.044248][T30417] veth1_macvtap: entered promiscuous mode [ 735.103554][T30627] erspan0: entered promiscuous mode [ 735.182274][T30417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.246429][T30417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.337833][ T113] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.350166][ T113] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.419271][T30641] team0: Device gtp0 is of different type [ 735.528203][T26106] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.575424][T26106] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.706646][T30653] openvswitch: netlink: IP tunnel dst address not specified [ 735.748209][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.775190][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.782948][T30653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.919857][T26106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.944279][T26106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.095544][T30665] xt_hashlimit: size too large, truncated to 1048576 [ 736.452596][T30677] input: syz1 as /devices/virtual/input/input85 [ 736.463516][T30680] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11470'. [ 736.768224][ T5627] Bluetooth: hci6: command tx timeout [ 737.324607][T30692] SELinux: context truncated [ 737.329441][T30692] SELinux: invalid ocon [ 737.739723][T30692] SELinux: failed to load policy [ 738.208060][T30723] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.476530][T30723] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.547466][ T29] audit: type=1400 audit(525282.523:2839): avc: denied { getopt } for pid=30742 comm="syz.5.11498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 738.682514][T30723] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.803324][T30754] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 738.811191][T30754] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 738.884794][T30723] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.005616][T30760] netlink: 'syz.0.11504': attribute type 2 has an invalid length. [ 739.047716][T30760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11504'. [ 739.136717][T30762] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.306652][T30762] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.400367][T26106] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.416339][T26106] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.464930][ T29] audit: type=1400 audit(525283.443:2840): avc: denied { mounton } for pid=30769 comm="syz.0.11509" path="/proc/4779/net/netfilter" dev="proc" ino=4026533094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 739.544023][T30762] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.619534][T26114] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.642209][T26114] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.756433][T30762] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.091729][T26106] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.108584][T26106] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.211589][T26114] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.232973][T26114] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.494220][T30803] Invalid option length (997081) for dns_resolver key [ 741.162002][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11528'. [ 742.316573][T30835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11537'. [ 742.394945][ T29] audit: type=1400 audit(525286.371:2841): avc: denied { read } for pid=30836 comm="syz.6.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 743.138838][T30860] i2c i2c-0: delete_device: Extra parameters [ 743.454182][ T29] audit: type=1400 audit(525287.431:2842): avc: denied { listen } for pid=30874 comm="syz.0.11556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 743.553041][ T29] audit: type=1400 audit(525287.531:2843): avc: denied { getopt } for pid=30879 comm="syz.0.11558" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.768805][T30892] webusb: landingPage URL too long [ 743.836528][T30894] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 745.211921][T30418] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 745.374563][T30418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.392875][T30418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.412100][T30418] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 745.422455][T30418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.434612][T30418] usb 1-1: config 0 descriptor?? [ 745.508811][ T29] audit: type=1400 audit(525289.480:2844): avc: denied { lock } for pid=30948 comm="syz.7.11588" path="socket:[99483]" dev="sockfs" ino=99483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 745.551847][ T29] audit: type=1400 audit(525289.520:2845): avc: denied { mount } for pid=30950 comm="syz.5.11590" name="/" dev="pstore" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 745.724862][ T29] audit: type=1400 audit(525289.700:2846): avc: denied { getopt } for pid=30956 comm="syz.5.11594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.867136][T30418] hid-steam 0003:28DE:1142.005F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 745.919281][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11597'. [ 745.942224][T30418] hid-steam 0003:28DE:1142.005F: Steam wireless receiver connected [ 745.981148][T30418] hid-steam 0003:28DE:1142.0060: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 746.057194][ T29] audit: type=1400 audit(525290.030:2847): avc: denied { ioctl } for pid=30968 comm="syz.7.11598" path="/33/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 746.082962][T30969] MTRR 1 not used [ 746.145849][T30418] usb 1-1: USB disconnect, device number 32 [ 746.201040][T30418] hid-steam 0003:28DE:1142.005F: Steam wireless receiver disconnected [ 746.281681][T30967] fido_id[30967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 747.280182][T31003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.568181][T31038] input: syz0 as /devices/virtual/input/input86 [ 749.265652][T31051] kvm: kvm [31050]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 751.132377][T22378] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 751.190500][T31082] cgroup: noprefix used incorrectly [ 751.302721][T22378] usb 6-1: Using ep0 maxpacket: 16 [ 751.313400][T22378] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.333499][T22378] usb 6-1: config 0 interface 0 has no altsetting 0 [ 751.356324][T22378] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 751.378716][T22378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.410289][T22378] usb 6-1: config 0 descriptor?? [ 751.472140][ T29] audit: type=1400 audit(2000000005.129:2848): avc: denied { unmount } for pid=5623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 751.533746][ T29] audit: type=1400 audit(2000000005.189:2849): avc: denied { mounton } for pid=31089 comm="syz.0.11650" path="/2359/file0" dev="tmpfs" ino=11907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 751.874753][T22378] mcp2221 0003:04D8:00DD.0061: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 752.340037][T22378] usb 6-1: USB disconnect, device number 46 [ 752.883433][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 753.054298][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 753.071271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 753.096437][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 753.115841][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.139485][ T9] usb 1-1: config 0 descriptor?? [ 753.571479][ T9] playstation 0003:054C:0BA0.0062: unknown main item tag 0x4 [ 753.601661][ T9] playstation 0003:054C:0BA0.0062: reserved main item tag 0xd [ 753.628028][ T9] playstation 0003:054C:0BA0.0062: hidraw0: USB HID v9.42 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 753.769432][ T9] playstation 0003:054C:0BA0.0062: Failed to retrieve feature with reportID 18: -71 [ 753.796918][ T9] playstation 0003:054C:0BA0.0062: Failed to retrieve DualShock4 pairing info: -71 [ 753.820234][ T9] playstation 0003:054C:0BA0.0062: Failed to get MAC address from DualShock4 [ 753.841800][ T9] playstation 0003:054C:0BA0.0062: Failed to create dualshock4. [ 753.873110][ T9] playstation 0003:054C:0BA0.0062: probe with driver playstation failed with error -71 [ 753.947502][T26106] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 753.951513][ T9] usb 1-1: USB disconnect, device number 33 [ 753.964108][T31118] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 753.986317][T26106] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 754.552284][ T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 754.566172][ T29] audit: type=1400 audit(2000000008.219:2850): avc: denied { ioctl } for pid=31127 comm="syz.7.11668" path="socket:[100905]" dev="sockfs" ino=100905 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 754.660944][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 754.671890][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 754.681302][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 754.695028][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 754.708918][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 754.757992][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 754.791658][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.851959][ T9] usb 6-1: config 0 descriptor?? [ 754.895852][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 755.106663][ T9] gp8psk: usb in 128 operation failed. [ 755.327092][ T9] gp8psk: FW Version = 144.122.77 (0x907a4d) Build 2085/175/85 [ 755.540093][ T9] gp8psk: usb in 149 operation failed. [ 755.555643][ T29] audit: type=1400 audit(2000000009.199:2851): avc: denied { write } for pid=31132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.592892][ T9] gp8psk: failed to get FPGA version [ 755.610715][ T9] gp8psk: usb in 138 operation failed. [ 755.630292][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 755.662149][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 755.670017][T31129] vxcan1 speed is unknown, defaulting to 1000 [ 755.708014][ T9] usb 6-1: USB disconnect, device number 47 [ 755.809505][ T29] audit: type=1400 audit(2000000009.469:2852): avc: denied { write } for pid=31162 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.282983][T31171] tipc: Enabling of bearer rejected, failed to enable media [ 756.428073][T31174] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 756.436991][T31177] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 756.772158][ T5627] Bluetooth: hci7: command tx timeout [ 756.931047][T31129] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.962664][T31129] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.983646][T31129] bridge_slave_0: entered allmulticast mode [ 757.003547][T31129] bridge_slave_0: entered promiscuous mode [ 757.042012][T31129] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.073599][T31129] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.083787][T31129] bridge_slave_1: entered allmulticast mode [ 757.098672][T31129] bridge_slave_1: entered promiscuous mode [ 757.187373][T31129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.223875][T31129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.359548][T31129] team0: Port device team_slave_0 added [ 757.396857][T31129] team0: Port device team_slave_1 added [ 757.455340][T31129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.462649][T31129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.490730][T31129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.530009][T31129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.553196][T31129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.589409][T31129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.700168][T31129] hsr_slave_0: entered promiscuous mode [ 757.710157][T31129] hsr_slave_1: entered promiscuous mode [ 757.716757][T31129] debugfs: 'hsr0' already exists in 'hsr' [ 757.722772][T31129] Cannot create hsr debugfs directory [ 758.625708][T31129] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 758.701590][T31129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.753478][T31129] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 758.815270][T31129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.853809][ T5627] Bluetooth: hci7: command tx timeout [ 758.875892][T31129] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 758.927878][T31129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.977592][T31129] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 759.005227][T31129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.148761][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 759.171761][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.180986][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.208849][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.226756][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.608831][T31129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.696293][T31129] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.749896][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.757050][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.840018][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.848030][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.258290][T31233] vxcan1 speed is unknown, defaulting to 1000 [ 760.663478][T31282] netlink: 'syz.5.11713': attribute type 10 has an invalid length. [ 760.716102][T31284] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11713'. [ 760.918929][T31284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.932718][ T5627] Bluetooth: hci7: command tx timeout [ 760.986856][T31284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.061960][T31284] bond0 (unregistering): Released all slaves [ 761.236782][T31287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.332573][ T5627] Bluetooth: hci8: command tx timeout [ 761.416133][T31129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.505896][T31287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.969205][T31287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.034360][ T29] audit: type=1400 audit(2000000015.700:2853): avc: denied { read append } for pid=31306 comm="syz.5.11719" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 762.106808][ T29] audit: type=1400 audit(2000000015.700:2854): avc: denied { open } for pid=31306 comm="syz.5.11719" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 762.276592][T31308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 762.296677][T31308] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 762.303326][T31287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.378574][T31308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 762.392820][T31308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 762.414436][T31308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 762.447198][T31308] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 762.455061][T31129] veth0_vlan: entered promiscuous mode [ 762.470861][T31308] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 762.510502][T31308] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 762.532962][T31308] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 762.551390][T31308] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 762.587898][T31308] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 762.651305][T31308] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 762.675130][T31308] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 762.718040][T31308] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 762.883239][ T146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.931263][T31129] veth1_vlan: entered promiscuous mode [ 763.116831][T31233] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.133068][T31233] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.147210][T31233] bridge_slave_0: entered allmulticast mode [ 763.161288][T31233] bridge_slave_0: entered promiscuous mode [ 763.192828][ T146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.218729][ T146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.242421][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 763.253226][T31233] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.274586][T31233] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.296028][T31233] bridge_slave_1: entered allmulticast mode [ 763.305133][T31233] bridge_slave_1: entered promiscuous mode [ 763.383081][T31233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.421406][T31233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.444944][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 763.469200][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 763.501390][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 763.518731][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.529437][ T9] usb 6-1: Product: syz [ 763.537824][ T9] usb 6-1: Manufacturer: syz [ 763.552605][ T9] usb 6-1: SerialNumber: syz [ 763.595354][T31233] team0: Port device team_slave_0 added [ 763.620116][T31233] team0: Port device team_slave_1 added [ 763.783659][T31233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.805098][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.834831][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 763.862459][T31233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.887398][T31233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.907399][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.981295][T31233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.004819][ T9] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 764.018475][ T9] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 764.044251][T31129] veth0_macvtap: entered promiscuous mode [ 764.059496][ T29] audit: type=1400 audit(2000000017.720:2855): avc: denied { append } for pid=31329 comm="syz.7.11725" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 764.084066][ T113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.145934][T31129] veth1_macvtap: entered promiscuous mode [ 764.287452][T31233] hsr_slave_0: entered promiscuous mode [ 764.293834][ T5609] Bluetooth: hci5: command 0x0405 tx timeout [ 764.317034][T31233] hsr_slave_1: entered promiscuous mode [ 764.331188][T31233] debugfs: 'hsr0' already exists in 'hsr' [ 764.347863][T31233] Cannot create hsr debugfs directory [ 764.407163][ T9] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 764.442518][T31129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.454687][T31334] tmpfs: Invalid uid '0x00000000ffffffff' [ 764.462177][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 764.469227][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 764.486812][T31129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.514570][ T9] usb 6-1: USB disconnect, device number 48 [ 764.613090][ T5609] Bluetooth: hci7: command 0x0c1a tx timeout [ 764.623107][ T6246] udevd[6246]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.639878][T26106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.692246][ T5609] Bluetooth: hci8: command 0x040f tx timeout [ 764.873756][T26106] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.118945][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.128156][ T113] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.156516][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.163654][ T113] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.352450][T26114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.394285][T26114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.706205][T31345] block nbd1: Unsupported socket: should be TCP or UNIX. [ 766.164637][T31233] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 766.235631][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.261332][T31233] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 766.284645][ T5719] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 766.297819][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.331811][T31233] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 766.372216][ T5609] Bluetooth: hci5: command 0x0405 tx timeout [ 766.381086][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.400873][T31233] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 766.417609][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.452270][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 766.492903][ T5719] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 766.523516][ T5719] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 766.532568][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 766.538936][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 766.550977][ T5719] usb 1-1: config 0 has no interface number 0 [ 766.601644][T31233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.614597][ T5719] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.621662][T31233] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.692270][ T5609] Bluetooth: hci7: command 0x0c1a tx timeout [ 766.704558][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.711662][ T5719] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 766.711744][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.760540][ T5719] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 766.774884][ T5609] Bluetooth: hci8: command 0x040f tx timeout [ 766.823738][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.830876][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.974268][ T5719] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 766.992268][ T5719] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 767.012068][ T5719] usb 1-1: Product: syz [ 767.018361][ T5719] usb 1-1: Manufacturer: syz [ 767.035196][ T5719] usb 1-1: config 0 descriptor?? [ 767.052843][T31347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 767.804217][ T5719] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input87 [ 767.997440][T31391] SELinux: invalid class [ 768.042818][ T9] usb 1-1: USB disconnect, device number 34 [ 768.042910][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 768.290445][T31391] SELinux: failed to load policy [ 768.612386][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 768.618436][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 768.685093][T31233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.775170][ T5609] Bluetooth: hci7: command 0x0c1a tx timeout [ 768.852744][ T5609] Bluetooth: hci8: command 0x040f tx timeout [ 768.924327][ T9] kernel write not supported for file /sequencer2 (pid: 9 comm: kworker/0:0) [ 769.261051][ T9] IPVS: starting estimator thread 0... [ 769.403146][T31421] IPVS: using max 36 ests per chain, 86400 per kthread [ 769.537797][T31233] veth0_vlan: entered promiscuous mode [ 769.590115][T31233] veth1_vlan: entered promiscuous mode [ 769.642300][ T86] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 769.662723][T31233] veth0_macvtap: entered promiscuous mode [ 769.689734][T31233] veth1_macvtap: entered promiscuous mode [ 769.756064][T31233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.790926][T31233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.834596][ T86] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 769.857447][ T86] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 769.930467][ T86] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 769.963980][ T146] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.992098][ T86] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 770.053322][ T47] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.080234][ T86] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 770.114413][ T86] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 770.132074][ T86] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 770.145275][ T86] usb 9-1: Product: syz [ 770.146475][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.162365][ T146] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.164041][ T86] usb 9-1: Manufacturer: syz [ 770.196112][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.238890][ T86] cdc_wdm 9-1:1.0: skipping garbage [ 770.257837][ T86] cdc_wdm 9-1:1.0: skipping garbage [ 770.282482][ T86] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 770.301260][ T86] cdc_wdm 9-1:1.0: Unknown control protocol [ 770.309494][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.322969][ T47] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.343376][T30419] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 770.350509][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.526489][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.533352][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.542527][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.549141][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.555516][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.562122][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.569203][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.575799][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.582067][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.588664][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.596386][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.602988][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.609777][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.616377][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.623709][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.630307][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.636565][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.643169][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.649435][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 770.656033][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 770.664393][T30419] usb 6-1: Using ep0 maxpacket: 32 [ 770.671281][ T86] usb 9-1: USB disconnect, device number 2 [ 770.677168][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 770.689264][T30419] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 770.717118][T30419] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 770.752072][T30419] usb 6-1: config 0 interface 0 has no altsetting 0 [ 770.771185][T30419] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 770.792067][T30419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.814876][T30419] usb 6-1: config 0 descriptor?? [ 770.932338][ T5609] Bluetooth: hci8: command 0x040f tx timeout [ 771.235503][T30419] wacom 0003:056A:00C5.0063: ignoring exceeding usage max [ 771.266777][T30419] wacom 0003:056A:00C5.0063: unknown main item tag 0x6 [ 771.289647][T30419] wacom 0003:056A:00C5.0063: unknown main item tag 0x0 [ 771.314501][T30419] wacom 0003:056A:00C5.0063: unknown main item tag 0x0 [ 771.332117][T30419] wacom 0003:056A:00C5.0063: unknown main item tag 0x0 [ 771.360072][T30419] wacom 0003:056A:00C5.0063: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0 [ 771.568072][ T5726] usb 6-1: USB disconnect, device number 49 [ 771.943411][T31468] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 771.987020][T31468] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 772.238301][T31475] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11772'. [ 772.305601][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11773'. [ 773.012183][ T5609] Bluetooth: hci8: command 0x040f tx timeout [ 773.610765][T31502] dyndbg: expected <4096 bytes into control [ 774.243302][T31525] tipc: Enabling of bearer rejected, failed to enable media [ 774.320989][ T29] audit: type=1400 audit(2000000027.980:2856): avc: denied { read } for pid=31527 comm="syz.7.11795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.688241][T31542] netlink: 'syz.0.11801': attribute type 10 has an invalid length. [ 774.732825][T31542] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11801'. [ 774.749671][T31544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11802'. [ 774.941481][T31542] bond0 (unregistering): Released all slaves [ 775.072065][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11806'. [ 775.301196][ T29] audit: type=1400 audit(2000000028.960:2857): avc: denied { read } for pid=31556 comm="syz.7.11808" lport=40235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 775.534693][ T29] audit: type=1400 audit(2000000029.200:2858): avc: denied { accept } for pid=31568 comm="syz.7.11814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 775.921977][T31587] netlink: 'syz.7.11820': attribute type 10 has an invalid length. [ 776.006152][T31587] netlink: 14 bytes leftover after parsing attributes in process `syz.7.11820'. [ 776.807726][T31587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.964202][T31587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.064177][T31587] bond0 (unregistering): Released all slaves [ 777.155902][T31598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11825'. [ 777.679959][T31611] loop5: detected capacity change from 0 to 7 [ 777.753074][T30418] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 777.942152][T30418] usb 6-1: Using ep0 maxpacket: 16 [ 777.976133][T30418] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.053114][T30418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 778.087965][T30418] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 778.106671][T30418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.126820][T30418] usb 6-1: config 0 descriptor?? [ 778.420004][T31611] Dev loop5: unable to read RDB block 7 [ 778.457637][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 778.467985][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 778.513344][T31611] loop5: unable to read partition table [ 778.542609][T31611] loop5: partition table beyond EOD, truncated [ 778.566872][T31611] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 778.659152][T30418] nzxt-smart2 0003:1E71:2009.0064: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 779.149773][ T9] usb 6-1: USB disconnect, device number 50 [ 779.321119][T31629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11840'. [ 779.396173][T31629] veth0_macvtap: left promiscuous mode [ 781.326683][T31661] SELinux: invalid class [ 781.644422][T31661] SELinux: failed to load policy [ 781.751961][T31675] hpfs: Bad magic ... probably not HPFS [ 781.794597][T31676] hpfs: Bad magic ... probably not HPFS [ 781.832697][T30418] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 781.867624][T31678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.874865][T31678] IPv6: NLM_F_CREATE should be set when creating new route [ 781.882278][T31678] IPv6: NLM_F_CREATE should be set when creating new route [ 781.889495][T31678] IPv6: NLM_F_CREATE should be set when creating new route [ 782.005485][T30418] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 782.025644][T30418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.065156][T30418] usb 6-1: Product: syz [ 782.087489][T30418] usb 6-1: Manufacturer: syz [ 782.112881][T30418] usb 6-1: SerialNumber: syz [ 782.918364][T30418] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 782.966467][T30418] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 783.005475][T30418] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 783.036076][T30418] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 783.072230][T30418] usb 6-1: USB disconnect, device number 51 [ 783.671647][ T29] audit: type=1400 audit(2000000037.330:2859): avc: denied { bind } for pid=31711 comm="syz.8.11879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 783.699105][ T5609] Bluetooth: hci8: ACL packet for unknown connection handle 201 [ 783.797777][T31709] vxcan1 speed is unknown, defaulting to 1000 [ 784.023103][T22378] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 784.193912][T22378] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 784.214291][T30418] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 784.228079][T22378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.258184][T22378] usb 6-1: config 0 has no interface number 0 [ 784.277807][T22378] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.314122][T22378] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.339161][T22378] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.379905][T22378] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 784.412396][T30418] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 784.422693][T22378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.436943][T30418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.456961][T22378] usb 6-1: config 0 descriptor?? [ 784.464053][T30418] usb 9-1: Product: syz [ 784.482661][T30418] usb 9-1: Manufacturer: syz [ 784.497912][T30418] usb 9-1: SerialNumber: syz [ 784.806806][T31723] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11883'. [ 784.926291][T31716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.977683][T31716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.046131][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.071016][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.097129][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.115684][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.142442][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.160181][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.178284][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.197948][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.215979][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.232855][T22378] holtek_mouse 0003:04D9:A04A.0065: unknown main item tag 0x0 [ 785.261754][T22378] holtek_mouse 0003:04D9:A04A.0065: unexpected long global item [ 785.280289][T22378] holtek_mouse 0003:04D9:A04A.0065: hid parse failed: -22 [ 785.298836][T22378] holtek_mouse 0003:04D9:A04A.0065: probe with driver holtek_mouse failed with error -22 [ 785.325975][T30418] rtl8150 9-1:1.0: eth5: rtl8150 is detected [ 785.371794][T22378] usb 6-1: USB disconnect, device number 52 [ 785.420557][T30418] usb 9-1: USB disconnect, device number 3 [ 786.273961][T31735] openvswitch: netlink: IP tunnel dst address not specified [ 786.336522][T31735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.564819][T30418] memory length for this resource is wrong [ 786.668003][T31739] isp1760 0000:00:06.0: probe with driver isp1760 failed with error -12 [ 786.853213][T30419] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 787.142728][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 787.243894][T30419] usb 10-1: unable to get BOS descriptor or descriptor too short [ 787.263800][T30419] usb 10-1: not running at top speed; connect to a high speed hub [ 787.282931][T30419] usb 10-1: config 8 has an invalid interface number: 29 but max is 0 [ 787.302073][T30419] usb 10-1: config 8 has no interface number 0 [ 787.305123][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.309271][T30419] usb 10-1: config 8 interface 29 has no altsetting 0 [ 787.341519][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.353228][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 787.354548][T30419] usb 10-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=da.52 [ 787.365790][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 787.384588][ T9] usb 6-1: SerialNumber: syz [ 787.384677][T30419] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.400490][T31756] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 787.412061][T30419] usb 10-1: Product: syz [ 787.422064][T30419] usb 10-1: Manufacturer: syz [ 787.432361][T30419] usb 10-1: SerialNumber: syz [ 787.618610][ T9] usb 6-1: 0:2 : does not exist [ 787.706324][T30419] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.710109][ T9] usb 6-1: USB disconnect, device number 53 [ 787.858900][T30419] snd-usb-audio 10-1:8.29: probe with driver snd-usb-audio failed with error -2 [ 787.914480][T30419] usb 10-1: USB disconnect, device number 2 [ 787.977381][ T6246] udevd[6246]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:8.29/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 788.129497][T31763] netlink: 'syz.8.11901': attribute type 39 has an invalid length. [ 788.590598][ T9] hid-generic 0006:0004:0009.0066: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 788.723650][T30419] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 788.835583][T31780] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11909'. [ 788.906557][T30419] usb 6-1: Using ep0 maxpacket: 16 [ 788.939256][T30419] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 788.957244][T31778] fido_id[31778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 788.971093][T30419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.012061][T30419] usb 6-1: Product: syz [ 789.042910][T30419] usb 6-1: Manufacturer: syz [ 789.068742][T30419] usb 6-1: SerialNumber: syz [ 789.099875][T30419] usb 6-1: config 0 descriptor?? [ 789.224403][T31792] i2c i2c-0: new_device: Extra parameters [ 789.532016][T30419] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 789.584875][T30419] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.648242][T30419] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 789.683422][T30419] usb 6-1: media controller created [ 789.714111][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11921'. [ 789.742339][T30419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.971302][T30419] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 789.989368][T30419] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 790.198146][T31819] scsi_dev_info_list_add_str: bad dev info string 'e' '' '' [ 790.269891][ T4990] usb 6-1: USB disconnect, device number 54 [ 790.407921][ T4990] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 790.726326][T31835] udc dummy_udc.0: soft-connect without a gadget driver [ 790.939072][T31837] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 792.221315][T31877] hpfs: Bad magic ... probably not HPFS [ 792.259964][T31880] hpfs: Bad magic ... probably not HPFS [ 792.462301][T22378] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 792.602192][T31884] vlan2: entered promiscuous mode [ 792.619059][T31884] macvlan0: entered promiscuous mode [ 792.657104][T22378] usb 10-1: unable to get BOS descriptor or descriptor too short [ 792.709885][T22378] usb 10-1: config 66 has an invalid interface number: 187 but max is 1 [ 792.758923][T22378] usb 10-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 792.828345][T22378] usb 10-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 792.889344][T22378] usb 10-1: config 66 has no interface number 0 [ 792.938285][T22378] usb 10-1: config 66 interface 187 has no altsetting 0 [ 792.989142][T22378] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 793.038729][T22378] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.067831][ T35] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.081792][T22378] usb 10-1: Product: syz [ 793.105619][T22378] usb 10-1: Manufacturer: syz [ 793.133200][T22378] usb 10-1: SerialNumber: syz [ 793.264818][ T35] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.413974][T22378] usb 10-1: USB disconnect, device number 3 [ 793.447679][ T35] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.653483][ T35] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.712816][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 793.747780][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 793.760415][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 793.779295][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 793.787622][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 795.312456][ T35] bridge_slave_1: left allmulticast mode [ 795.356935][ T35] bridge_slave_1: left promiscuous mode [ 795.408084][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.509454][ T29] audit: type=1400 audit(2000000049.170:2860): avc: denied { write } for pid=31931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.584396][ T35] bridge_slave_0: left allmulticast mode [ 795.630703][ T35] bridge_slave_0: left promiscuous mode [ 795.654757][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.681469][T31951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11979'. [ 795.701436][T31950] input: syz1 as /devices/virtual/input/input93 [ 795.723415][T30418] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 795.892934][ T5627] Bluetooth: hci6: command tx timeout [ 795.905265][T30418] usb 10-1: Using ep0 maxpacket: 32 [ 795.940397][T30418] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.997813][T30418] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.014144][ T29] audit: type=1400 audit(2000000049.680:2861): avc: denied { write } for pid=31953 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.077067][T30418] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 796.123174][T30418] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.227338][T30418] usb 10-1: config 0 descriptor?? [ 796.654239][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 796.689836][T30418] hid_parser_main: 64 callbacks suppressed [ 796.689861][T30418] ft260 0003:0403:6030.0067: unknown main item tag 0x0 [ 796.759920][T30418] ft260 0003:0403:6030.0067: unknown main item tag 0x0 [ 796.791868][T31902] vxcan1 speed is unknown, defaulting to 1000 [ 796.876193][T30418] ft260 0003:0403:6030.0067: chip code: 0000 0000 [ 797.079062][T30418] ft260 0003:0403:6030.0067: failed to retrieve system status [ 797.105365][T30418] ft260 0003:0403:6030.0067: probe with driver ft260 failed with error -71 [ 797.224578][T30418] usb 10-1: USB disconnect, device number 4 [ 797.572230][ T4990] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 797.744940][ T4990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.757166][ T4990] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 797.778200][ T4990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 797.795107][ T4990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 224, setting to 64 [ 797.798228][ T29] audit: type=1400 audit(2000000051.460:2862): avc: denied { write } for pid=31969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.806032][ T4990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 797.858888][ T4990] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 797.889735][ T4990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 797.950116][ T4990] usb 1-1: Product: syz [ 797.972469][ T5627] Bluetooth: hci6: command tx timeout [ 797.977976][ T4990] usb 1-1: Manufacturer: syz [ 798.001046][ T4990] usb 1-1: SerialNumber: syz [ 798.012319][T30418] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 798.038943][ T4990] usb 1-1: config 0 descriptor?? [ 798.091150][T31980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 798.152158][ T29] audit: type=1400 audit(2000000051.810:2863): avc: denied { write } for pid=31997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.248651][T30418] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 798.275166][T30418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.319332][T30418] usb 6-1: Product: syz [ 798.340686][T30418] usb 6-1: Manufacturer: syz [ 798.359204][ T4990] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 798.369695][T30418] usb 6-1: SerialNumber: syz [ 798.379921][ T4990] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 798.384120][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 798.488520][ T29] audit: type=1400 audit(2000000052.150:2864): avc: denied { map } for pid=32004 comm="syz.9.11996" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 798.521974][T32005] binder: binder_mmap: 32004 0-1000 bad vm_flags failed -1 [ 798.570290][ T4990] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 798.600013][ T4990] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 798.666787][ T4990] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 798.771248][T30418] rtl8150 6-1:1.0: couldn't reset the device [ 798.792191][ T4990] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 798.806466][T30418] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 798.825726][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.832533][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.839397][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.847163][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.854608][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.861565][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.868589][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.876169][ T4990] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 798.884683][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.891815][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.898886][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.906573][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.913362][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.919880][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.926500][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.933094][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.939631][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.946314][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.952908][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.961202][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.967901][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.974559][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.981196][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.988084][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 798.994737][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.001356][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.008002][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.014663][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.021282][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.027915][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.034556][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.041164][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.048090][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.057849][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.064838][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.071501][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.080923][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.087547][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.094616][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.101244][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.107906][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.114570][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.121204][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.127877][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.134672][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.141296][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.147936][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.155133][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.162156][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.168815][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.175406][ T35] hsr_slave_0: left promiscuous mode [ 799.175581][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.187526][ T5733] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 799.195276][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.201768][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.208285][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.214797][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.221270][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.227879][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.234410][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.240875][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.247397][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.254134][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.261242][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.267780][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.274289][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.280762][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.287320][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.293810][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.300278][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.306771][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.313312][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.319788][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.326295][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.332888][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.339350][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.345862][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.352350][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.358817][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.365989][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.372616][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.379140][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.385657][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.392182][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.398661][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.405214][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.411695][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.419221][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.426126][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.432697][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.439188][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.445714][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.452217][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.458686][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.465560][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.472324][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.478824][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.485351][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.491815][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.498508][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.505120][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.511621][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.518172][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.524773][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.531270][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.537816][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.544350][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.550844][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.557479][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.563998][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.571153][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.577815][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.584514][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.591102][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.597706][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.604320][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.610923][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.617602][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.624223][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.630920][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.637514][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.644105][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.650698][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.657306][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.664375][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.671228][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.677831][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.684563][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.691153][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.697841][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.704446][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.711049][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.717661][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.724291][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.730898][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.737745][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.744361][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.750963][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.757594][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.764250][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.771379][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.778016][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.784627][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.791627][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.798285][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.804950][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.811590][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.818338][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.824959][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.831561][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.838219][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.842794][ T86] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 799.844847][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.859044][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.865681][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.865770][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 799.872668][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.886127][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.893003][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.899619][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.906249][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.912878][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.919495][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.926109][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.932731][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.939355][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.946045][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.953562][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.960170][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.966778][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.973778][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.980501][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.987153][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 799.993785][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.000257][T30418] usb 6-1: USB disconnect, device number 55 [ 800.006243][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.012799][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.019274][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.025793][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.032309][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.038802][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.045308][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.051783][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.059455][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.066567][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.073128][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.079980][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.086826][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.093489][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.099989][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.106545][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.113077][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.119568][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.126193][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.132774][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.139266][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.145792][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.152351][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.158827][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.165345][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.171812][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.178343][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.185496][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.191970][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.198469][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.204965][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.211426][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.218176][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.225339][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.231826][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.238369][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.244958][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.251439][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.257997][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.264508][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.270980][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.277576][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.282819][ T5627] Bluetooth: hci6: command tx timeout [ 800.284096][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 800.306569][ T4990] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 800.321496][ T35] hsr_slave_1: left promiscuous mode [ 800.354633][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.374848][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.422432][ T86] usb 9-1: device descriptor read/64, error -32 [ 800.443196][ T4990] usb 1-1: USB disconnect, device number 35 [ 800.450799][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.611973][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.813247][ T86] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 800.973267][ T86] usb 9-1: Using ep0 maxpacket: 8 [ 800.996543][ T86] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.050085][ T86] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 801.072654][ T5733] usb 10-1: Using ep0 maxpacket: 32 [ 801.083977][ T86] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.084237][ T5733] usb 10-1: config 9 has an invalid interface number: 124 but max is 0 [ 801.106831][ T29] audit: type=1400 audit(2000000054.760:2865): avc: denied { write } for pid=32013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.139921][ T35] veth1_macvtap: left promiscuous mode [ 801.146274][ T86] usb 9-1: config 0 descriptor?? [ 801.158357][ T5733] usb 10-1: config 9 has no interface number 0 [ 801.209144][ T5733] usb 10-1: config 9 interface 124 has no altsetting 0 [ 801.221179][ T35] veth0_macvtap: left promiscuous mode [ 801.230362][ T5733] usb 10-1: New USB device found, idVendor=12d1, idProduct=1001, bcdDevice= 0.00 [ 801.249853][ T5733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.259984][ T35] veth1_vlan: left promiscuous mode [ 801.269033][ T35] veth0_vlan: left promiscuous mode [ 801.277610][ T5733] usb 10-1: Product: syz [ 801.292478][ T5733] usb 10-1: Manufacturer: syz [ 801.331098][ T5733] usb 10-1: SerialNumber: syz [ 801.385789][ T86] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 801.466606][ T29] audit: type=1400 audit(2000000055.130:2866): avc: denied { write } for pid=32037 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.589951][ T5733] usb-storage 10-1:9.124: USB Mass Storage device detected [ 801.778418][ T5733] uvcvideo 10-1:9.124: Found multiple Units with ID 1 [ 801.796231][ T4990] usb 9-1: USB disconnect, device number 5 [ 801.842561][ T5733] uvcvideo 10-1:9.124: Found UVC 66.42 device syz (12d1:1001) [ 801.868936][ T5733] uvcvideo 10-1:9.124: No valid video chain found. [ 801.897397][ T5733] usb 10-1: USB disconnect, device number 5 [ 802.292474][ T5609] Bluetooth: hci6: command tx timeout [ 802.547886][ T35] team0 (unregistering): Port device team_slave_1 removed [ 802.586236][ T35] team0 (unregistering): Port device team_slave_0 removed [ 802.830407][T32053] netlink: 'syz.5.12008': attribute type 39 has an invalid length. [ 803.225884][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 803.750934][T31902] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.805323][T31902] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.858796][T31902] bridge_slave_0: entered allmulticast mode [ 803.958548][T31902] bridge_slave_0: entered promiscuous mode [ 804.017345][T31902] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.066648][T31902] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.142407][T31902] bridge_slave_1: entered allmulticast mode [ 804.204578][T31902] bridge_slave_1: entered promiscuous mode [ 804.421850][T31902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.523057][T31902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.691339][T31902] team0: Port device team_slave_0 added [ 804.729355][T31902] team0: Port device team_slave_1 added [ 804.848236][T31902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.873883][T31902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.024425][T31902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.106981][T31902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.133729][T31902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.206810][ T29] audit: type=1400 audit(2000000058.860:2867): avc: denied { write } for pid=32072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.234685][T31902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.638275][T31902] hsr_slave_0: entered promiscuous mode [ 805.679492][T31902] hsr_slave_1: entered promiscuous mode [ 805.723585][ T29] audit: type=1400 audit(2000000059.380:2868): avc: denied { write } for pid=32100 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.756993][T31902] debugfs: 'hsr0' already exists in 'hsr' [ 805.789929][T31902] Cannot create hsr debugfs directory [ 805.978565][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 807.650623][ T29] audit: type=1400 audit(2000000061.310:2869): avc: denied { ioctl } for pid=32145 comm="syz.9.12041" path="socket:[105442]" dev="sockfs" ino=105442 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.945298][ T29] audit: type=1400 audit(2000000061.580:2870): avc: denied { write } for pid=32153 comm="syz.0.12044" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 808.067152][T32157] bond1: invalid ARP target 0.0.0.0 specified for addition [ 808.108567][T32157] bond1: option arp_ip_target: invalid value (0) [ 808.161294][T32157] bond1 (unregistering): Released all slaves [ 809.004361][T32194] netlink: Unknown nat attribute (0) [ 809.012012][T32194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.171034][ T29] audit: type=1400 audit(2000000062.830:2871): avc: denied { write } for pid=32166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.350515][T32207] IPv6: NLM_F_CREATE should be specified when creating new route [ 809.412938][ T29] audit: type=1400 audit(2000000063.080:2872): avc: denied { write } for pid=32205 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.912212][T30418] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 810.086786][T30418] usb 1-1: Using ep0 maxpacket: 8 [ 810.135790][T30418] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 810.222424][T30418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.424679][T30418] pvrusb2: Hardware description: Terratec Grabster AV400 [ 810.498249][T30418] pvrusb2: ********** [ 810.543587][T30418] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 810.607305][T30418] pvrusb2: Important functionality might not be entirely working. [ 810.648668][T30418] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 810.722567][T30418] pvrusb2: ********** [ 810.739892][ T2363] pvrusb2: Invalid write control endpoint [ 810.777500][ T29] audit: type=1400 audit(2000000064.440:2873): avc: denied { write } for pid=32217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.995329][ T2363] pvrusb2: Invalid write control endpoint [ 811.043186][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 811.119009][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 811.124470][ T29] audit: type=1400 audit(2000000064.780:2874): avc: denied { write } for pid=32248 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.149874][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 811.181070][ T2363] pvrusb2: Device being rendered inoperable [ 811.239144][T32210] pvrusb2: Killing an I2C write to 5 that is too large (desired=8192 limit=61) [ 811.261114][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 811.270292][ T5733] usb 1-1: USB disconnect, device number 36 [ 811.299775][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 811.367036][ T2363] pvrusb2: Attached sub-driver cx25840 [ 811.384992][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 811.422074][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 811.709926][T32259] smpboot: CPU 1 is now offline [ 812.178344][T31902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 812.495905][T31902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.611487][T31902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 812.787539][T31902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.998568][T31902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.192945][T31902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.608506][T31902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.225181][ T29] audit: type=1400 audit(2000000067.860:2875): avc: denied { write } for pid=32257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.565945][T31902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.790151][ T29] audit: type=1400 audit(2000000069.440:2876): avc: denied { write } for pid=32308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.730606][T31902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.991444][T31902] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.110855][T26116] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.117977][T26116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.319521][T26116] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.326666][T26116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.072803][T31902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.972221][ T29] audit: type=1400 audit(2000000076.630:2877): avc: denied { write } for pid=32339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.596307][ T29] audit: type=1400 audit(2000000077.260:2878): avc: denied { write } for pid=32386 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.785893][T32399] ima: rule for LSM 'unco' is undefined [ 824.110501][ T29] audit: type=1807 audit(2000000077.450:2879): action=measure func=FILE_CHECK obj_type=unco res=0 [ 824.168823][T32398] ima: policy update failed [ 824.251049][ T29] audit: type=1802 audit(2000000077.820:2880): pid=32399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.12115" res=0 errno=0 [ 825.747534][ T29] audit: type=1802 audit(2000000077.870:2881): pid=32398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.12115" res=0 errno=0 [ 825.818939][T31902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.357905][T32412] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12119'. [ 827.972427][T22378] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 828.494629][T32434] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 828.530864][ T29] audit: type=1400 audit(2000000082.180:2882): avc: denied { write } for pid=32403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.688217][T22378] usb 10-1: Using ep0 maxpacket: 16 [ 828.741935][T22378] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.931289][T22378] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.963054][T31902] veth0_vlan: entered promiscuous mode [ 829.226943][T22378] usb 10-1: config 0 interface 0 has no altsetting 0 [ 829.307737][ T29] audit: type=1400 audit(2000000082.970:2883): avc: denied { write } for pid=32442 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.335520][T31902] veth1_vlan: entered promiscuous mode [ 829.343016][T22378] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 829.445298][T22378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.897957][T31902] veth0_macvtap: entered promiscuous mode [ 830.060602][T22378] usb 10-1: config 0 descriptor?? [ 830.395387][T31902] veth1_macvtap: entered promiscuous mode [ 830.698639][T22378] hid (null): unknown global tag 0xd [ 831.240835][T22378] hid (null): unknown global tag 0xe [ 831.536249][T22378] hid (null): unknown global tag 0xe [ 831.541572][T22378] hid (null): unknown global tag 0xc [ 831.835964][T31902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.611380][T31902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.637321][T22378] hid (null): global environment stack underflow [ 833.529473][T22378] usb 10-1: USB disconnect, device number 6 [ 833.772790][T26106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.150127][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.734087][T26106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.868352][T26106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.033080][T32472] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.203798][T32487] netlink: 'syz.9.12139': attribute type 13 has an invalid length. [ 835.383332][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.448842][T32486] rdma_rxe: rxe_newlink: failed to add lo [ 835.491380][ T29] audit: type=1400 audit(2000000089.150:2884): avc: denied { write } for pid=32451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.531995][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.332874][T32487] gretap0: refused to change device tx_queue_len [ 836.339882][T32487] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 837.050121][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.062172][ T29] audit: type=1400 audit(2000000090.730:2885): avc: denied { write } for pid=32499 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.305015][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.686660][ T29] audit: type=1400 audit(2000000097.350:2886): avc: denied { write } for pid=32516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.605163][T32574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.640177][ T29] audit: type=1400 audit(2000000098.300:2887): avc: denied { write } for pid=32565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.362297][ T4990] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 845.462114][ T29] audit: type=1400 audit(2000000099.120:2888): avc: denied { write } for pid=32585 comm="syz.4.12172" name="usb_gadget" dev="configfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 845.658192][ T4990] usb 1-1: Using ep0 maxpacket: 32 [ 845.692727][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 845.722812][ T4990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.938694][ T29] audit: type=1400 audit(2000000099.220:2889): avc: denied { remove_name } for pid=32585 comm="syz.4.12172" name="g1" dev="configfs" ino=90743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 846.007461][ T4990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.143417][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 846.335943][ T9] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 846.349074][ T4990] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 846.422354][T22378] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 846.599261][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 846.638493][ T29] audit: type=1400 audit(2000000099.220:2890): avc: denied { rmdir } for pid=32585 comm="syz.4.12172" name="g1" dev="configfs" ino=90743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 846.677665][ T4990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.935897][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 846.978191][T22378] usb 9-1: Using ep0 maxpacket: 16 [ 847.008562][ T4990] usb 1-1: config 0 descriptor?? [ 847.058363][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 847.071714][T22378] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 847.725600][T22378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.931367][ T4990] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 847.959260][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 847.995776][T22378] usb 9-1: Product: syz [ 848.020261][ T4990] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 848.062108][T22378] usb 9-1: Manufacturer: syz [ 848.078089][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.114218][ T4990] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 848.128007][T22378] usb 9-1: SerialNumber: syz [ 848.354866][T32609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32609 comm=syz.9.12179 [ 848.393070][ T4990] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 848.421586][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.501042][ T4990] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 848.739435][T22378] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 848.756776][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.800759][ T4990] koneplus 0003:1E7D:2D51.0069: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 848.862524][T32613] tipc: Started in network mode [ 848.909834][T22378] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 848.929540][ T9] usb 6-1: can't set config #16, error -71 [ 848.986901][ T29] audit: type=1400 audit(2000000102.630:2891): avc: denied { write } for pid=32583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.022940][T32613] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 849.482123][ T9] usb 6-1: USB disconnect, device number 56 [ 849.826959][T22378] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 849.860414][ T4990] koneplus 0003:1E7D:2D51.0069: couldn't init struct koneplus_device [ 850.464631][T22378] usb 9-1: media controller created [ 850.473006][ T4990] koneplus 0003:1E7D:2D51.0069: couldn't install mouse [ 850.740527][ T4990] koneplus 0003:1E7D:2D51.0069: probe with driver koneplus failed with error -71 [ 850.754880][T22378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.163521][ T29] audit: type=1400 audit(2000000104.810:2892): avc: denied { write } for pid=32623 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.252644][ T4990] usb 1-1: USB disconnect, device number 37 [ 851.526388][T22378] zl10353_read_register: readreg error (reg=127, ret==-71) [ 853.140812][T22378] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 853.586982][T32641] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 853.646342][T22378] usb 9-1: USB disconnect, device number 6 [ 855.016272][ T29] audit: type=1400 audit(2000000108.670:2893): avc: denied { read } for pid=32650 comm="syz.5.12194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 856.071673][ T29] audit: type=1400 audit(2000000109.730:2894): avc: denied { write } for pid=32639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.071898][T32690] tipc: Cannot configure node identity twice [ 857.246711][ T29] audit: type=1400 audit(2000000110.910:2895): avc: denied { write } for pid=32688 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.892257][T22378] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 860.301040][T22378] usb 9-1: Using ep0 maxpacket: 32 [ 860.870177][T22378] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 861.091519][T22378] usb 9-1: config 0 has no interface number 0 [ 861.203626][T22378] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 861.227441][T32728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12219'. [ 861.306519][T22378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.398441][T22378] usb 9-1: Product: syz [ 861.493566][ T30] INFO: task syz.3.11214:29994 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 861.562982][ T29] audit: type=1400 audit(2000000115.220:2896): avc: denied { write } for pid=5595 comm="syz-executor" path="pipe:[5406]" dev="pipefs" ino=5406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 861.683432][T22378] usb 9-1: Manufacturer: syz [ 861.703309][ T30] Tainted: G L syzkaller #0 [ 861.774776][T22378] usb 9-1: SerialNumber: syz [ 862.251563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.446562][T22378] usb 9-1: config 0 descriptor?? [ 862.527089][ T30] task:syz.3.11214 state:D stack:28776 pid:29994 tgid:29993 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 862.794386][ T29] audit: type=1400 audit(2000000116.270:2897): avc: denied { write } for pid=32709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.198361][ T30] Call Trace: [ 863.212443][ T30] [ 863.221850][ T30] __schedule+0x125c/0x6730 [ 863.581882][ T30] ? do_raw_spin_lock+0x128/0x260 [ 863.604309][ T30] ? __pfx___schedule+0x10/0x10 [ 863.627329][ T30] ? find_held_lock+0x2b/0x80 [ 863.646515][ T30] ? schedule+0x225/0x2c0 [ 863.691225][ T30] schedule+0xdd/0x2c0 [ 863.709820][ T30] schedule_preempt_disabled+0x13/0x30 [ 863.722197][ T29] audit: type=1400 audit(2000000117.390:2898): avc: denied { write } for pid=32744 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.926771][ T30] __mutex_lock+0xccc/0x1bd0 [ 863.931388][ T30] ? write_versions+0x9d/0xba0 [ 864.394873][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 864.399930][ T30] ? __lock_acquire+0x49f/0x1a40 [ 864.431120][ T30] ? write_versions+0x9d/0xba0 [ 864.452457][ T30] write_versions+0x9d/0xba0 [ 864.479812][ T30] ? find_held_lock+0x2b/0x80 [ 864.511766][ T30] ? __pfx_write_versions+0x10/0x10 [ 864.536764][ T30] ? __pfx_write_versions+0x10/0x10 [ 864.552794][ T30] ? _copy_from_user+0x59/0xd0 [ 864.568327][ T30] ? __pfx_write_versions+0x10/0x10 [ 864.595702][ T30] nfsctl_transaction_write+0x106/0x1a0 [ 864.637887][ T30] vfs_write+0x2aa/0x1050 [ 864.653627][ T30] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 864.672786][ T30] ? __pfx_vfs_write+0x10/0x10 [ 864.689546][ T30] ? __fget_files+0x215/0x3d0 [ 865.215737][ T30] ? __fget_files+0x21f/0x3d0 [ 865.492677][ T30] ksys_write+0x12a/0x250 [ 865.497037][ T30] ? __pfx_ksys_write+0x10/0x10 [ 865.517294][ T30] do_syscall_64+0x115/0x870 [ 865.533102][ T30] ? clear_bhb_loop+0x40/0x90 [ 865.552056][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.575020][ T30] RIP: 0033:0x7f3c4bd9e019 [ 865.605203][ T30] RSP: 002b:00007f3c4cb9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 865.638394][ T30] RAX: ffffffffffffffda RBX: 00007f3c4c025fa0 RCX: 00007f3c4bd9e019 [ 865.683409][ T30] RDX: 0000000000000009 RSI: 0000200000000180 RDI: 0000000000000003 [ 865.728422][ T30] RBP: 00007f3c4be3500c R08: 0000000000000000 R09: 0000000000000000 [ 865.760755][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.780010][ T29] audit: type=1400 audit(2000000119.440:2899): avc: denied { write } for pid=32746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.822125][ T30] R13: 00007f3c4c026038 R14: 00007f3c4c025fa0 R15: 00007ffcaa7ff118 [ 865.860040][ T30] [ 865.871671][ T30] [ 865.871671][ T30] Showing all locks held in the system: [ 866.187020][ T30] 1 lock held by khungtaskd/30: [ 866.287529][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 866.402675][ T30] 3 locks held by kworker/0:3/4990: [ 866.456138][ T30] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 866.509337][ T29] audit: type=1400 audit(2000000120.170:2900): avc: denied { write } for pid=32757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.626202][ T30] #1: ffffc900050cfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 866.962803][ T30] #2: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 867.460055][ T30] 2 locks held by getty/5365: [ 867.509819][ T30] #0: ffff888035de70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 867.575126][T22378] usb 9-1: can't set config #0, error -110 [ 867.620939][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 867.750855][ T30] 2 locks held by kworker/0:6/5726: [ 867.811355][ T30] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 868.372134][ T30] #1: ffffc90004637d08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 868.411738][ T30] 1 lock held by syz.0.6606/19772: [ 868.430457][ T30] #0: ffff88805e6f8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 868.778877][ T30] 2 locks held by dhcpcd/21476: [ 868.802208][ T30] #0: ffff88802449d2c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 868.834552][ T30] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 868.906502][ T30] 1 lock held by syz.5.10090/27484: [ 868.924005][ T30] #0: ffff8880525d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 868.955762][ T30] 3 locks held by syz.1.11124/29799: [ 868.998316][ T30] #0: ffff88807afa9970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 869.462260][ T30] #1: ffff88802eb02450 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 869.471330][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 869.718575][ T29] audit: type=1400 audit(2000000123.380:2901): avc: denied { write } for pid=32759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.746338][ T30] 3 locks held by syz.3.11214/29994: [ 869.763710][ T30] #0: ffff88807de0d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 869.808230][ T30] #1: ffff88807afec450 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 869.866599][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 869.925017][ T30] 3 locks held by syz.2.11506/30764: [ 869.946694][ T30] #0: ffff88807b481270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 869.960499][ T29] audit: type=1400 audit(2000000123.630:2902): avc: denied { write } for pid=302 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.001129][ T30] #1: ffff888053f10450 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 870.049712][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_gracetime+0xa3/0x110 [ 870.092065][ T30] 3 locks held by syz.6.11561/30887: [ 870.099136][ T30] #0: ffff88807e46b0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 870.161499][ T30] #1: ffff88802ab4e450 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 870.191796][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_maxblksize+0x252/0x600 [ 870.714514][ T30] 1 lock held by syz-executor/31233: [ 870.727728][ T30] #0: ffff88807d85cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 870.864244][ T30] 1 lock held by syz.8.12216/32719: [ 870.981949][ T30] #0: ffff888033ffcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 871.069607][ T30] 1 lock held by syz.4.12222/32741: [ 871.086957][ T30] #0: ffff88803bcc4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0