last executing test programs: 2m0.536780588s ago: executing program 1 (id=62): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m58.732665006s ago: executing program 2 (id=72): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000280)='A', 0x1, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m58.664576529s ago: executing program 1 (id=74): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 1m57.282574414s ago: executing program 0 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m57.121105653s ago: executing program 1 (id=81): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m57.020810466s ago: executing program 1 (id=83): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 1m56.815344647s ago: executing program 0 (id=85): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1m56.728478548s ago: executing program 0 (id=86): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 1m56.661626037s ago: executing program 0 (id=87): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m55.549849633s ago: executing program 4 (id=92): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0xc4) 1m55.447627558s ago: executing program 3 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 1m55.397334827s ago: executing program 4 (id=95): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x40601) ioctl$TIOCCONS(r1, 0x541d) close(r0) 1m55.327749026s ago: executing program 4 (id=96): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) 1m55.294587093s ago: executing program 2 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1m55.205935491s ago: executing program 4 (id=98): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r1}) 1m55.14610505s ago: executing program 4 (id=99): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x20, 0x2a534b2473011858, 0x4, "0191a971"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) 1m54.712076262s ago: executing program 3 (id=100): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m54.515639281s ago: executing program 0 (id=101): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x14, {0x14, 0x21, "c263138526792c3cbdeace918d0fb74237cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) 1m54.250478528s ago: executing program 3 (id=102): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 1m53.933346914s ago: executing program 1 (id=103): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r2}}]}) 1m53.740938382s ago: executing program 2 (id=104): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 1m53.7335634s ago: executing program 1 (id=105): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_clone(0x21215000, &(0x7f0000000100)="6464644879eadbc4776b79bde104678ddf6dfc63dda6173beecea10152d970eebec7250b1cdb261787fb5d14348d66c7afd6d77bac4ac8cbd99132262c295a76858026967bde3782502ee601e86415e767e37026281f3a8638fa84b1b78fdcded02edf32edecc84321b9547bc700800000859ffeef9bcbb9cfbd9f15", 0x7c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1m53.7316491s ago: executing program 3 (id=106): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x2c, 0x8, 0x75}, {@rand_addr=0x64010101, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m53.619663925s ago: executing program 2 (id=107): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) 1m53.555048488s ago: executing program 3 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 1m53.39820323s ago: executing program 3 (id=109): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "bafb4836"}]}}, 0x0}, 0x0) 1m53.185348818s ago: executing program 2 (id=110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r0, 0x0, 0x3) 1m53.003140438s ago: executing program 2 (id=111): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1m53.000150802s ago: executing program 4 (id=112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17.919723999s ago: executing program 0 (id=113): syz_usb_connect(0x1, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0xac877cbec12e8ed0, 0x5d, 0xb9, 0xa3, 0x8, 0xc2e, 0x720, 0xd429, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x40, 0x3, "", [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x78, 0x54, 0x99, 0x1}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 32 (id=105): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_clone(0x21215000, &(0x7f0000000100)="6464644879eadbc4776b79bde104678ddf6dfc63dda6173beecea10152d970eebec7250b1cdb261787fb5d14348d66c7afd6d77bac4ac8cbd99132262c295a76858026967bde3782502ee601e86415e767e37026281f3a8638fa84b1b78fdcded02edf32edecc84321b9547bc700800000859ffeef9bcbb9cfbd9f15", 0x7c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): [ 34.750591][ T29] audit: type=1400 audit(1781594349.055:111): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.786607][ T29] audit: type=1400 audit(1781594349.095:112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.143810][ T29] audit: type=1400 audit(1781594349.455:113): avc: denied { write } for pid=5472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.176981][ T29] audit: type=1400 audit(1781594349.485:114): avc: denied { write } for pid=5483 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.658707][ T29] audit: type=1400 audit(1781594349.965:115): avc: denied { write } for pid=5486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.689144][ T29] audit: type=1400 audit(1781594349.995:116): avc: denied { write } for pid=5497 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.219708][ T29] audit: type=1400 audit(1781594350.525:117): avc: denied { write } for pid=5500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.256336][ T29] audit: type=1400 audit(1781594350.565:118): avc: denied { write } for pid=5511 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.373759][ T29] audit: type=1400 audit(1781594350.685:119): avc: denied { write } for pid=5514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.407063][ T29] audit: type=1400 audit(1781594350.715:120): avc: denied { write } for pid=5525 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.511408][ T29] audit: type=1400 audit(1781594350.825:121): avc: denied { write } for pid=5528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.544057][ T29] audit: type=1400 audit(1781594350.855:122): avc: denied { write } for pid=5539 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 41.773128][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 41.773143][ T29] audit: type=1400 audit(1781594356.085:129): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.802354][ T29] audit: type=1400 audit(1781594356.115:130): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.803584][ T5592] cgroup: Unknown subsys name 'net' [ 41.830346][ T29] audit: type=1400 audit(1781594356.135:131): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.952280][ T5592] cgroup: Unknown subsys name 'cpuset' [ 41.959045][ T5592] cgroup: Unknown subsys name 'rlimit' [ 42.073119][ T29] audit: type=1400 audit(1781594356.385:132): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.113863][ T29] audit: type=1400 audit(1781594356.385:133): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.135638][ T29] audit: type=1400 audit(1781594356.385:134): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.156325][ T29] audit: type=1400 audit(1781594356.385:135): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.170283][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.176894][ T29] audit: type=1400 audit(1781594356.385:136): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.210061][ T29] audit: type=1400 audit(1781594356.385:137): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.233452][ T29] audit: type=1400 audit(1781594356.495:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.013978][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.668973][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.676233][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.683380][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.691656][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.698724][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.705963][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.716672][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.724032][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.724061][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.731297][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.739360][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.749925][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.759329][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.759720][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.767065][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.774149][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.780448][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.788446][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.794970][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.801711][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.809648][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.815328][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.830198][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.838047][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.846315][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.441506][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.448632][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.456213][ T5611] bridge_slave_0: entered allmulticast mode [ 45.463015][ T5611] bridge_slave_0: entered promiscuous mode [ 45.476297][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.483391][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.490466][ T5611] bridge_slave_1: entered allmulticast mode [ 45.496884][ T5611] bridge_slave_1: entered promiscuous mode [ 45.543403][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.569734][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.627934][ T5611] team0: Port device team_slave_0 added [ 45.635185][ T5611] team0: Port device team_slave_1 added [ 45.646220][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.653414][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.660507][ T5613] bridge_slave_0: entered allmulticast mode [ 45.666950][ T5613] bridge_slave_0: entered promiscuous mode [ 45.686206][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.693376][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.700450][ T5613] bridge_slave_1: entered allmulticast mode [ 45.706851][ T5613] bridge_slave_1: entered promiscuous mode [ 45.730140][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.737139][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.763045][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.784911][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.791939][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.817950][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.830857][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.837927][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.845045][ T5605] bridge_slave_0: entered allmulticast mode [ 45.851365][ T5605] bridge_slave_0: entered promiscuous mode [ 45.859001][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.876025][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.883162][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.890296][ T5605] bridge_slave_1: entered allmulticast mode [ 45.896725][ T5605] bridge_slave_1: entered promiscuous mode [ 45.903791][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.932431][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.939535][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.946820][ T5615] bridge_slave_0: entered allmulticast mode [ 45.953142][ T5615] bridge_slave_0: entered promiscuous mode [ 45.959471][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.966670][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.973821][ T5607] bridge_slave_0: entered allmulticast mode [ 45.980107][ T5607] bridge_slave_0: entered promiscuous mode [ 45.996196][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.003333][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.010469][ T5615] bridge_slave_1: entered allmulticast mode [ 46.016965][ T5615] bridge_slave_1: entered promiscuous mode [ 46.023283][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030318][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.037605][ T5607] bridge_slave_1: entered allmulticast mode [ 46.043901][ T5607] bridge_slave_1: entered promiscuous mode [ 46.051122][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.061042][ T5613] team0: Port device team_slave_0 added [ 46.068663][ T5611] hsr_slave_0: entered promiscuous mode [ 46.074525][ T5611] hsr_slave_1: entered promiscuous mode [ 46.087726][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.097472][ T5613] team0: Port device team_slave_1 added [ 46.123583][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.133770][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.146921][ T5605] team0: Port device team_slave_0 added [ 46.152803][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.159739][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.185813][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.197373][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.207696][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.219819][ T5605] team0: Port device team_slave_1 added [ 46.225727][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.232698][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.258682][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.297454][ T5615] team0: Port device team_slave_0 added [ 46.304026][ T5607] team0: Port device team_slave_0 added [ 46.312198][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.319191][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.345449][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.356906][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.363945][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.389833][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.401300][ T5615] team0: Port device team_slave_1 added [ 46.407593][ T5607] team0: Port device team_slave_1 added [ 46.446680][ T5613] hsr_slave_0: entered promiscuous mode [ 46.452598][ T5613] hsr_slave_1: entered promiscuous mode [ 46.458315][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 46.464062][ T5613] Cannot create hsr debugfs directory [ 46.473667][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.480645][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.506813][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.517793][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.524837][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.550729][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.570426][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.577703][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.603730][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.614685][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.621771][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.647716][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.666330][ T5605] hsr_slave_0: entered promiscuous mode [ 46.672304][ T5605] hsr_slave_1: entered promiscuous mode [ 46.678011][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 46.683788][ T5605] Cannot create hsr debugfs directory [ 46.735148][ T5615] hsr_slave_0: entered promiscuous mode [ 46.741128][ T5615] hsr_slave_1: entered promiscuous mode [ 46.746857][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 46.752747][ T5615] Cannot create hsr debugfs directory [ 46.767237][ T5607] hsr_slave_0: entered promiscuous mode [ 46.773224][ T5607] hsr_slave_1: entered promiscuous mode [ 46.778945][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 46.784736][ T5607] Cannot create hsr debugfs directory [ 46.880209][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.888334][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.895412][ T5612] Bluetooth: hci3: command tx timeout [ 46.895475][ T50] Bluetooth: hci0: command tx timeout [ 46.901334][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.906395][ T5612] Bluetooth: hci1: command tx timeout [ 46.913048][ T5609] Bluetooth: hci4: command tx timeout [ 46.918337][ T50] Bluetooth: hci2: command tx timeout [ 46.930107][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.937926][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.945712][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.964135][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.971878][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.015281][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.023239][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.031195][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.039070][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.047158][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.055039][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.067430][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.075789][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.108005][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.115952][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.123653][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.132466][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.139897][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.147799][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.155703][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.163396][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.196974][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.205196][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.213517][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.222280][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.229800][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.237860][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.245499][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.253230][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.286236][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.313344][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.321877][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.329570][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.337764][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.345723][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.353919][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.362062][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.369740][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.378705][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.389204][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.406211][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.413290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.421734][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.428763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.461724][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.475405][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.482506][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.499761][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.506830][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.521857][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.529515][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.565006][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.574262][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.589310][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.596478][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.605798][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.612875][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.626875][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.634000][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.643238][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.650335][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.685536][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.734273][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.759791][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.766905][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.805508][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.812625][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.953464][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.182991][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.211792][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.268704][ T5613] veth0_vlan: entered promiscuous mode [ 48.276150][ T5607] veth0_vlan: entered promiscuous mode [ 48.285307][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.298520][ T5607] veth1_vlan: entered promiscuous mode [ 48.312335][ T5613] veth1_vlan: entered promiscuous mode [ 48.324920][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.350074][ T5613] veth0_macvtap: entered promiscuous mode [ 48.358281][ T5613] veth1_macvtap: entered promiscuous mode [ 48.371054][ T5607] veth0_macvtap: entered promiscuous mode [ 48.385024][ T5607] veth1_macvtap: entered promiscuous mode [ 48.396577][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.414384][ T5611] veth0_vlan: entered promiscuous mode [ 48.423309][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.431700][ T5615] veth0_vlan: entered promiscuous mode [ 48.440663][ T5605] veth0_vlan: entered promiscuous mode [ 48.450215][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.458586][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.467928][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.482014][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.489759][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.498851][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.510432][ T5605] veth1_vlan: entered promiscuous mode [ 48.517002][ T5611] veth1_vlan: entered promiscuous mode [ 48.524791][ T5615] veth1_vlan: entered promiscuous mode [ 48.536750][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.545561][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.559913][ T450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.569149][ T450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.612662][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.620541][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.639908][ T5611] veth0_macvtap: entered promiscuous mode [ 48.649980][ T5615] veth0_macvtap: entered promiscuous mode [ 48.660537][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.666571][ T5605] veth0_macvtap: entered promiscuous mode [ 48.670528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.677581][ T5615] veth1_macvtap: entered promiscuous mode [ 48.688171][ T5611] veth1_macvtap: entered promiscuous mode [ 48.699840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.708468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.718913][ T5605] veth1_macvtap: entered promiscuous mode [ 48.732434][ T450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.739057][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.740642][ T450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.755291][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 48.755306][ T29] audit: type=1400 audit(1781594363.055:152): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.qFKrF7/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.758462][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.762369][ T29] audit: type=1400 audit(1781594363.055:153): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.809882][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.819367][ T29] audit: type=1400 audit(1781594363.055:154): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.qFKrF7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.826462][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.855748][ T29] audit: type=1400 audit(1781594363.055:155): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.879309][ T29] audit: type=1400 audit(1781594363.065:156): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.qFKrF7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.879847][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.909008][ T29] audit: type=1400 audit(1781594363.065:157): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.qFKrF7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.923784][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.948547][ T29] audit: type=1400 audit(1781594363.065:158): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.971792][ T50] Bluetooth: hci1: command tx timeout [ 48.980313][ T50] Bluetooth: hci4: command tx timeout [ 48.986197][ T5612] Bluetooth: hci0: command tx timeout [ 48.986293][ T5609] Bluetooth: hci2: command tx timeout [ 48.991834][ T5612] Bluetooth: hci3: command tx timeout [ 48.997893][ T29] audit: type=1400 audit(1781594363.095:159): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.025685][ T29] audit: type=1400 audit(1781594363.095:160): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=6969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.030143][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.052092][ T29] audit: type=1400 audit(1781594363.095:161): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.096204][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.111772][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.120965][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.136468][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.151944][ T5794] vlan2: entered promiscuous mode [ 49.157017][ T5794] bond0: entered promiscuous mode [ 49.162562][ T5794] bond_slave_0: entered promiscuous mode [ 49.168333][ T5794] bond_slave_1: entered promiscuous mode [ 49.175492][ T5796] process 'syz.0.1' launched './file2' with NULL argv: empty string added [ 49.197206][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.199137][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.225771][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.234809][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.260626][ T5798] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 49.276806][ T5794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.287921][ T5794] bond_slave_0: left promiscuous mode [ 49.297419][ T5794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.311072][ T5794] bond_slave_1: left promiscuous mode [ 49.313333][ T5800] vivid-000: ================= START STATUS ================= [ 49.319719][ T5794] bond0 (unregistering): Released all slaves [ 49.324458][ T5800] vivid-000: Radio HW Seek Mode: Bounded [ 49.336397][ T5800] vivid-000: Radio Programmable HW Seek: false [ 49.343183][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.344288][ T5800] vivid-000: RDS Rx I/O Mode: Block I/O [ 49.353309][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.357873][ T5800] vivid-000: Generate RBDS Instead of RDS: false [ 49.374676][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.383282][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.390625][ T5800] vivid-000: RDS Reception: true [ 49.395877][ T5800] vivid-000: RDS Program Type: 0 inactive [ 49.401794][ T5800] vivid-000: RDS PS Name: inactive [ 49.407076][ T5800] vivid-000: RDS Radio Text: inactive [ 49.413835][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.415332][ T5800] vivid-000: RDS Traffic Announcement: [ 49.423102][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.423297][ T5800] false inactive [ 49.445693][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.447163][ T5800] vivid-000: RDS Traffic Program: false inactive [ 49.461871][ T5800] vivid-000: RDS Music: false inactive [ 49.464004][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.467390][ T5800] vivid-000: ================== END STATUS ================== [ 49.483329][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.494895][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.496302][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.539294][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.542913][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.556902][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.566795][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.622690][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.642200][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.672314][ T5806] macsec1: entered allmulticast mode [ 49.679549][ T5806] veth1_macvtap: entered allmulticast mode [ 49.754329][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.804740][ T5806] veth1_macvtap (unregistering): left allmulticast mode [ 51.051003][ T5612] Bluetooth: hci3: command tx timeout [ 51.051077][ T5622] Bluetooth: hci2: command tx timeout [ 51.056426][ T5612] Bluetooth: hci0: command tx timeout [ 51.061893][ T5609] Bluetooth: hci1: command tx timeout [ 51.073767][ T50] Bluetooth: hci4: command tx timeout [ 51.081270][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.252848][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.279287][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.298287][ T5850] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 51.312674][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.344656][ T5720] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.353926][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.374990][ T5720] usb 1-1: config 0 descriptor?? [ 51.821736][ T5720] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 51.846871][ T5720] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.112939][ T5720] usb 1-1: USB disconnect, device number 2 [ 52.341149][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 52.349942][ T5907] netlink: 'syz.2.42': attribute type 20 has an invalid length. [ 52.357938][ T5907] netlink: 'syz.2.42': attribute type 22 has an invalid length. [ 52.365860][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 52.377197][ T5907] Zero length message leads to an empty skb [ 52.662053][ T807] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.132942][ T50] Bluetooth: hci0: command tx timeout [ 53.138964][ T50] Bluetooth: hci3: command tx timeout [ 53.144516][ T50] Bluetooth: hci4: command tx timeout [ 53.150082][ T50] Bluetooth: hci2: command tx timeout [ 53.155843][ T50] Bluetooth: hci1: command tx timeout [ 53.172072][ T807] usb 3-1: Using ep0 maxpacket: 16 [ 53.278891][ T5934] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 53.509993][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.541828][ T807] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 53.612655][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.880814][ T5700] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.900756][ T5720] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.043924][ T5700] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.070210][ T5700] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 54.085815][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 54.097463][ T5720] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 54.115942][ T5700] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.124321][ T807] usb 3-1: config 0 descriptor?? [ 54.135163][ T5720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 54.145906][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 54.163814][ T5720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.177558][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 54.193028][ T5720] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.209507][ T5720] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.229102][ T5700] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.239676][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.249752][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.259054][ T5700] usb 4-1: Product: syz [ 54.263550][ T5700] usb 4-1: Manufacturer: syz [ 54.283830][ T5700] cdc_wdm 4-1:1.0: skipping garbage [ 54.290241][ T5700] cdc_wdm 4-1:1.0: skipping garbage [ 54.298779][ T5700] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 54.306017][ T5700] cdc_wdm 4-1:1.0: Unknown control protocol [ 54.370795][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 54.488655][ T5720] usb 5-1: GET_CAPABILITIES returned 0 [ 54.503719][ T5720] usbtmc 5-1:16.0: can't read capabilities [ 54.525370][ T808] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 54.548358][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 54.548374][ T29] audit: type=1400 audit(1781594368.855:240): avc: denied { read write } for pid=5946 comm="syz.3.59" name="cdc-wdm0" dev="devtmpfs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 54.589455][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.602018][ T808] usb 2-1: Product: syz [ 54.607024][ T5720] usb 4-1: USB disconnect, device number 2 [ 54.613892][ T808] usb 2-1: Manufacturer: syz [ 54.619554][ T808] usb 2-1: SerialNumber: syz [ 54.634907][ T808] usb 2-1: config 0 descriptor?? [ 54.645115][ T29] audit: type=1400 audit(1781594368.855:241): avc: denied { open } for pid=5946 comm="syz.3.59" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 54.705764][ T24] usb 5-1: USB disconnect, device number 2 [ 54.747524][ T807] hid-led 0003:0FC5:B080.0002: reserved main item tag 0xd [ 54.762034][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 54.769112][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 54.805339][ T29] audit: type=1400 audit(1781594369.115:242): avc: denied { ioctl } for pid=5958 comm="syz.0.63" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.081856][ T808] usb 2-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114) [ 55.136051][ T29] audit: type=1400 audit(1781594369.445:243): avc: denied { read } for pid=5963 comm="syz.3.65" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.166076][ T29] audit: type=1400 audit(1781594369.465:244): avc: denied { open } for pid=5963 comm="syz.3.65" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.200133][ T29] audit: type=1400 audit(1781594369.475:245): avc: denied { ioctl } for pid=5963 comm="syz.3.65" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.263881][ T29] audit: type=1400 audit(1781594369.565:246): avc: denied { name_bind } for pid=5966 comm="syz.3.66" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.285774][ T29] audit: type=1400 audit(1781594369.565:247): avc: denied { node_bind } for pid=5966 comm="syz.3.66" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.320242][ T808] usb 2-1: failed to fetch extended address, random address set [ 55.335011][ T808] usb 2-1: atusb_probe: initialization failed, error = -524 [ 55.360839][ T808] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 55.388200][ T808] usb 2-1: USB disconnect, device number 2 [ 55.396281][ T29] audit: type=1400 audit(1781594369.705:248): avc: denied { create } for pid=5969 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.492651][ T29] audit: type=1400 audit(1781594369.735:249): avc: denied { setopt } for pid=5969 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.791277][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.945447][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 55.973940][ T5986] netlink: 'syz.0.73': attribute type 5 has an invalid length. [ 55.981627][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 55.987089][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 55.997198][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.013723][ T5986] geneve2: entered promiscuous mode [ 56.019054][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.029748][ T5986] geneve2: entered allmulticast mode [ 56.035258][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.045374][ T450] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 56.063172][ T24] usb 5-1: config 0 descriptor?? [ 56.072654][ T450] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 56.099747][ T450] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 56.128875][ T450] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 56.200761][ T808] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 56.316346][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 56.353390][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.363601][ T808] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.374472][ T808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.389969][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 56.399426][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 56.407840][ T808] usb 2-1: Product: syz [ 56.415004][ T808] usb 2-1: Manufacturer: syz [ 56.419661][ T808] usb 2-1: SerialNumber: syz [ 56.561272][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 56.574711][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 56.640539][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 56.642357][ T808] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 56.667711][ T807] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 56.706359][ T807] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71 [ 56.823148][ T807] usb 3-1: USB disconnect, device number 2 [ 56.908677][ T24] usb 2-1: USB disconnect, device number 3 [ 56.924412][ T24] usblp1: removed [ 57.303965][ T807] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 57.640582][ T807] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 57.666269][ T807] usb 3-1: config 0 has no interface number 0 [ 57.770003][ T807] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.850865][ T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 57.873530][ T807] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 57.885413][ T6016] SELinux: ebitmap: map size 1919247470 does not match my size 64 (high bit was 29542) [ 57.885836][ T6016] SELinux: failed to load policy [ 57.966827][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.003541][ T807] usb 3-1: Product: syz [ 58.015343][ T807] usb 3-1: Manufacturer: syz [ 58.022624][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 58.023809][ T808] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 58.023842][ T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.023863][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.023887][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.023907][ T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.023937][ T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.023957][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.160781][ T5720] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.272975][ T807] usb 3-1: SerialNumber: syz [ 58.309822][ T807] usb 3-1: config 0 descriptor?? [ 58.322737][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.333850][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.344780][ T5720] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 58.353922][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.370541][ T5720] usb 1-1: config 0 descriptor?? [ 58.379322][ T807] yurex 3-1:0.50: USB YUREX device now attached to Yurex #2 [ 58.553855][ T24] usb 5-1: USB disconnect, device number 3 [ 58.722382][ T808] usb 3-1: USB disconnect, device number 3 [ 58.741004][ T808] yurex 3-1:0.50: USB YUREX #2 now disconnected [ 58.857657][ T5720] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 58.879842][ T5720] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 58.911657][ T5720] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 58.927546][ T5720] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 58.945733][ T5720] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 59.332007][ T6040] netlink: 'syz.2.97': attribute type 39 has an invalid length. [ 59.496892][ T5720] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 59.508798][ T5720] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 59.518341][ T5720] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 59.539993][ T5720] usb 1-1: USB disconnect, device number 3 [ 59.700755][ T5700] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.850951][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 59.865054][ T5700] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 59.894438][ T5700] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.905482][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.916835][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.927314][ T5700] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.944002][ T5700] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.953557][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.176147][ T5700] usb 5-1: GET_CAPABILITIES returned 0 [ 60.187411][ T5700] usbtmc 5-1:16.0: can't read capabilities [ 60.360887][ T808] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 60.522912][ T808] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 60.554655][ T808] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 60.582369][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.596668][ T808] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 60.623709][ T5700] usb 2-1: USB disconnect, device number 4 [ 60.645566][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.689845][ T808] usb 1-1: config 0 descriptor?? [ 60.726152][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 60.726167][ T29] audit: type=1400 audit(1781594375.035:273): avc: denied { mounton } for pid=6055 comm="syz.1.103" path="/15/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 60.755520][ T6056] bpf: Bad value for 'uid' [ 60.773458][ T6057] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 60.907792][ T29] audit: type=1400 audit(1781594375.155:274): avc: denied { create } for pid=6058 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.966482][ T5720] IPVS: starting estimator thread 0... [ 60.994758][ T5720] usb 5-1: USB disconnect, device number 4 [ 61.034964][ T29] audit: type=1400 audit(1781594375.175:275): avc: denied { connect } for pid=6058 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.090968][ T6064] IPVS: using max 58 ests per chain, 139200 per kthread [ 61.120018][ T29] audit: type=1400 audit(1781594375.175:276): avc: denied { ioctl } for pid=6058 comm="syz.2.104" path="socket:[10237]" dev="sockfs" ino=10237 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.190451][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 61.211277][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 61.225490][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.259853][ T29] audit: type=1400 audit(1781594375.185:277): avc: denied { write } for pid=6058 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.297084][ T808] usb 1-1: USB disconnect, device number 4 [ 61.344158][ T29] audit: type=1400 audit(1781594375.185:278): avc: denied { read } for pid=6058 comm="syz.2.104" path="socket:[10237]" dev="sockfs" ino=10237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.390908][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 61.403325][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.423754][ T29] audit: type=1400 audit(1781594375.465:279): avc: denied { sqpoll } for pid=6049 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.453123][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.479906][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.494894][ T29] audit: type=1400 audit(1781594375.785:280): avc: denied { create } for pid=6074 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.515027][ T5720] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 61.540301][ T5700] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.593964][ T5700] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.614889][ T29] audit: type=1400 audit(1781594375.785:281): avc: denied { write } for pid=6074 comm="syz.2.110" path="socket:[10282]" dev="sockfs" ino=10282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.903032][ T5700] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 62.693392][ T5700] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 65.401754][ T5700] usb 2-1: Manufacturer: syz [ 66.030691][ C0] sched: DL replenish lagged too much [ 66.534535][ T29] audit: type=1400 audit(1781594375.965:282): avc: denied { name_bind } for pid=6078 comm="syz.4.112" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 66.751920][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.761756][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.864811][ T998] cfg80211: failed to load regulatory.db [ 103.082020][ T5720] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 103.089641][ T5720] usb 4-1: can't read configurations, error -71 [ 131.283743][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.295453][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.190160][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 174.205181][ T5612] Bluetooth: hci1: command tx timeout [ 174.296432][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 174.311422][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 189.692454][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.703929][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.424350][ T30] INFO: task kworker/0:3:998 blocked for more than 146 seconds. [ 234.644637][ T30] Not tainted syzkaller #0 [ 236.958465][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.186872][ T30] task:kworker/0:3 state:D stack:25912 pid:998 tgid:998 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 237.558087][ T30] Workqueue: events request_firmware_work_func [ 237.721480][ T30] Call Trace: [ 237.809083][ T30] [ 237.903936][ T30] __schedule+0x125c/0x6730 [ 238.029631][ T30] ? do_raw_spin_lock+0x128/0x260 [ 238.155692][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 238.299216][ T30] ? debug_mutex_add_waiter+0x122/0x200 [ 238.452618][ T30] ? rcu_is_watching+0x12/0xc0 [ 238.590354][ T30] ? __pfx___schedule+0x10/0x10 [ 238.718461][ T30] ? rcu_is_watching+0x12/0xc0 [ 238.837046][ T30] ? schedule+0x2bf/0x390 [ 238.952020][ T30] ? lock_release+0x24d/0x310 [ 239.030759][ T30] schedule+0xdd/0x390 [ 239.100675][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.192132][ T30] __mutex_lock+0xccc/0x1bd0 [ 239.269884][ T30] ? regdb_fw_cb.cold+0x22/0x7a [ 239.346408][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.427091][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 239.505218][ T30] ? __pfx__printk+0x10/0x10 [ 239.589615][ T30] ? __pfx__request_firmware+0x10/0x10 [ 239.678482][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 239.752396][ T30] ? regdb_fw_cb.cold+0x22/0x7a [ 239.757327][ T30] ? rtnl_lock+0x9/0x20 [ 239.761544][ T30] regdb_fw_cb.cold+0x22/0x7a [ 239.766239][ T30] request_firmware_work_func+0x13c/0x250 [ 239.772188][ T30] ? rcu_is_watching+0x12/0xc0 [ 239.776985][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 239.783274][ T30] ? rcu_is_watching+0x12/0xc0 [ 239.788049][ T30] ? rcu_is_watching+0x12/0xc0 [ 239.792897][ T30] process_one_work+0xa23/0x1940 [ 239.797871][ T30] ? __pfx_process_one_work+0x10/0x10 [ 239.820361][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 239.826852][ T30] worker_thread+0x5ef/0xe50 [ 239.831490][ T30] ? __pfx_worker_thread+0x10/0x10 [ 239.836672][ T30] ? kthread+0x13a/0x450 [ 239.840956][ T30] ? __pfx_worker_thread+0x10/0x10 [ 239.846564][ T30] kthread+0x370/0x450 [ 239.850730][ T30] ? __pfx_kthread+0x10/0x10 [ 239.855347][ T30] ret_from_fork+0x72b/0xd50 [ 239.859963][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 239.865137][ T30] ? __switch_to+0x800/0x10f0 [ 239.869831][ T30] ? __pfx_kthread+0x10/0x10 [ 239.874476][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.879256][ T30] [ 239.891480][ T30] INFO: lockdep is turned off. [ 240.433992][ T30] NMI backtrace for cpu 0 [ 240.434013][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 240.434033][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.434042][ T30] Call Trace: [ 240.434048][ T30] [ 240.434055][ T30] dump_stack_lvl+0x100/0x190 [ 240.434079][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 240.434099][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 240.434119][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 240.434145][ T30] sys_info+0x141/0x190 [ 240.434164][ T30] watchdog+0xcb1/0x1030 [ 240.434182][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 240.434201][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.434216][ T30] ? __kthread_parkme+0x18c/0x230 [ 240.434237][ T30] ? kthread+0x13a/0x450 [ 240.434258][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.434271][ T30] kthread+0x370/0x450 [ 240.434292][ T30] ? __pfx_kthread+0x10/0x10 [ 240.434315][ T30] ret_from_fork+0x72b/0xd50 [ 240.434335][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 240.434354][ T30] ? __switch_to+0x800/0x10f0 [ 240.434383][ T30] ? __pfx_kthread+0x10/0x10 [ 240.434406][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.434434][ T30] [ 240.434439][ T30] Sending NMI from CPU 0 to CPUs 1: [ 240.624670][ C1] NMI backtrace for cpu 1 [ 240.624688][ C1] CPU: 1 UID: 0 PID: 4965 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 240.624705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.624713][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 240.624742][ C1] Code: 01 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 11 5c 85 09 8b 82 1c 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 <83> f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 48 [ 240.624755][ C1] RSP: 0018:ffffc9000557f6d0 EFLAGS: 00000246 [ 240.624767][ C1] RAX: 0000000000000000 RBX: 000000000000002d RCX: ffffffff82836d0e [ 240.624775][ C1] RDX: ffff888039840000 RSI: ffffffff82836d48 RDI: ffff888039840000 [ 240.624784][ C1] RBP: ffff88823ffe3000 R08: 0000000000000006 R09: 0000000000001000 [ 240.624792][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 240.624799][ C1] R13: 00000000013601e9 R14: 0000000000000002 R15: 00000000027e02e6 [ 240.624808][ C1] FS: 00007f3f4317ac80(0000) GS:ffff888124475000(0000) knlGS:0000000000000000 [ 240.624822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.624830][ C1] CR2: 0000555571fc1a48 CR3: 0000000026cb6000 CR4: 00000000003526f0 [ 240.624838][ C1] Call Trace: [ 240.624842][ C1] [ 240.624847][ C1] __nr_to_section+0x78/0x100 [ 240.624868][ C1] lookup_page_ext+0x46/0x100 [ 240.624885][ C1] __update_page_owner_free_handle.isra.0+0xa4/0x4d0 [ 240.624911][ C1] ? page_ext_put+0x3e/0xd0 [ 240.624929][ C1] __reset_page_owner+0x93/0x190 [ 240.624948][ C1] __free_frozen_pages+0x794/0x10a0 [ 240.624965][ C1] qlist_free_all+0x47/0xf0 [ 240.624983][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 240.625000][ C1] __kasan_slab_alloc+0x69/0x90 [ 240.625020][ C1] __kmalloc_node_track_caller_noprof+0x2d5/0x890 [ 240.625039][ C1] ? __alloc_skb+0x185/0x710 [ 240.625057][ C1] kmalloc_reserve+0xe8/0x350 [ 240.625069][ C1] __alloc_skb+0x185/0x710 [ 240.625083][ C1] ? __alloc_skb+0x5b7/0x710 [ 240.625097][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 240.625111][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 240.625129][ C1] ? __schedule+0x126e/0x6730 [ 240.625149][ C1] alloc_skb_with_frags+0xdd/0x760 [ 240.625167][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.625183][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 240.625198][ C1] sock_alloc_send_pskb+0x801/0x980 [ 240.625216][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 240.625230][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 240.625246][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 240.625263][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.625280][ C1] unix_dgram_sendmsg+0x3c7/0x1810 [ 240.625297][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 240.625317][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 240.625333][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 240.625348][ C1] __sys_sendto+0x452/0x4a0 [ 240.625362][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 240.625377][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 240.625393][ C1] ? do_syslog+0x18c/0x6d0 [ 240.625411][ C1] ? xfd_validate_state+0x129/0x190 [ 240.625427][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 240.625442][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 240.625457][ C1] do_syscall_64+0x115/0x870 [ 240.625469][ C1] ? clear_bhb_loop+0x40/0x90 [ 240.625484][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.625496][ C1] RIP: 0033:0x7f3f432ca407 [ 240.625508][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 240.625519][ C1] RSP: 002b:00007ffd7c9e4a50 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 240.625531][ C1] RAX: ffffffffffffffda RBX: 00007f3f4317ac80 RCX: 00007f3f432ca407 [ 240.625539][ C1] RDX: 000000000000003d RSI: 00007ffd7c9e4b90 RDI: 0000000000000003 [ 240.625547][ C1] RBP: 00007ffd7c9e4fc0 R08: 0000000000000000 R09: 0000000000000000 [ 240.625555][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7c9e4fd8 [ 240.625563][ C1] R13: 00007ffd7c9e4b90 R14: 0000000000000022 R15: 00007ffd7c9e4b90 [ 240.625575][ C1] [ 242.831322][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 242.838230][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 242.847340][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.857400][ T30] Call Trace: [ 242.860677][ T30] [ 242.863636][ T30] dump_stack_lvl+0x100/0x190 [ 242.868329][ T30] vpanic+0x552/0x970 [ 242.872303][ T30] ? __pfx_vpanic+0x10/0x10 [ 242.876798][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 242.882952][ T30] panic+0xd1/0xe0 [ 242.886667][ T30] ? __pfx_panic+0x10/0x10 [ 242.891073][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 242.897237][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 242.903432][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 242.909595][ T30] ? watchdog.cold+0x1ec/0x234 [ 242.914363][ T30] ? watchdog+0xcc1/0x1030 [ 242.918782][ T30] watchdog.cold+0x1fd/0x234 [ 242.923381][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 242.929450][ T30] ? __pfx_watchdog+0x10/0x10 [ 242.934130][ T30] ? __kthread_parkme+0x18c/0x230 [ 242.939163][ T30] ? kthread+0x13a/0x450 [ 242.943408][ T30] ? __pfx_watchdog+0x10/0x10 [ 242.948078][ T30] kthread+0x370/0x450 [ 242.952156][ T30] ? __pfx_kthread+0x10/0x10 [ 242.956744][ T30] ret_from_fork+0x72b/0xd50 [ 242.961331][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 242.966438][ T30] ? __switch_to+0x800/0x10f0 [ 242.971116][ T30] ? __pfx_kthread+0x10/0x10 [ 242.975719][ T30] ret_from_fork_asm+0x1a/0x30 [ 242.980505][ T30] [ 242.983736][ T30] Kernel Offset: disabled [ 242.988046][ T30] Rebooting in 86400 seconds..