last executing test programs: 2m19.422143141s ago: executing program 32 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000640)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) 2m15.581784158s ago: executing program 33 (id=1569): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r2, 0x1c, &(0x7f00000003c0)=""/28}) 1m48.381485732s ago: executing program 34 (id=1898): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.0 -4.1 -4.2\n', 0x18) 1m43.853649916s ago: executing program 35 (id=1975): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 1m40.16947916s ago: executing program 36 (id=2025): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) 1m22.160462716s ago: executing program 8 (id=2578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) 1m22.05834064s ago: executing program 8 (id=2580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000021c0)) 1m21.977602734s ago: executing program 8 (id=2581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 1m21.896836765s ago: executing program 8 (id=2594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1m21.838123874s ago: executing program 8 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./nfsd\x00', &(0x7f0000000580)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/export_features\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f0000000600)=""/54, 0x36) 1m21.72353357s ago: executing program 8 (id=2588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x40000) 1m17.50803224s ago: executing program 37 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 1m13.63397602s ago: executing program 0 (id=2701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) read$rfkill(r0, 0x0, 0x0) 1m13.507338659s ago: executing program 0 (id=2706): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2000009, @remote, 0x4}, 0x1c, 0x0}}], 0x1, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 1m12.634156536s ago: executing program 0 (id=2708): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @remote, {[@ssrr={0x89, 0x23, 0xd8, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @multicast2, @remote]}, @cipso={0x86, 0x5a, 0x2, [{0x2, 0xf, "1494252ae4b8a59441dfad4bb9"}, {0x7, 0xe, "36f2d9ae9bce2787c30387ba"}, {0x1, 0x12, "476b70b16545d0de1a94bec8b260163c"}, {0x6, 0xa, "f8fdbd0a72d3914f"}, {0x5, 0xc, "29e9adf9786259fffc3e"}, {0x7, 0xf, "ab8fac178c5d8dac5966ed6086"}]}]}}}}}}}, 0x0) 1m12.150528794s ago: executing program 0 (id=2720): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) 1m11.648549732s ago: executing program 0 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x15f) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000a40)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000ac0)='mydomain / 64\n', 0xe) 1m11.586761525s ago: executing program 0 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ec0)={r2, &(0x7f0000000380)='\a', &(0x7f0000000340)=@udp, 0x2}, 0x20) 1m6.703290586s ago: executing program 38 (id=2588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x40000) 56.419493577s ago: executing program 39 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ec0)={r2, &(0x7f0000000380)='\a', &(0x7f0000000340)=@udp, 0x2}, 0x20) 52.166113275s ago: executing program 2 (id=3089): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/kmsg\x00', 0x40c00, 0x21) read$FUSE(r0, 0x0, 0x0) 52.018116772s ago: executing program 2 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000704000091116f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072abd7000fcdbdf2534000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 51.95422477s ago: executing program 2 (id=3093): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @random="ce3500590a7f", @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x65, 0x0, 0x5, 0x21, 0x0, @private=0xa010101, @remote}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, "6ed1ec", 0x65, "8024fb"}}}}}}, 0x0) 51.788276365s ago: executing program 2 (id=3096): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=')!c', 0x3}], 0x1, 0x0, 0x0, 0x40}, 0x20008000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 51.681616593s ago: executing program 2 (id=3098): r0 = syz_io_uring_setup(0x5c8c, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x1a, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 50.96492107s ago: executing program 2 (id=3109): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 35.937597668s ago: executing program 40 (id=3109): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 31.560886707s ago: executing program 1 (id=3373): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0xf) 31.411233724s ago: executing program 1 (id=3445): r0 = syz_open_dev$loop(&(0x7f00000008c0), 0x554, 0x8c860) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/uevent_helper', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000bc0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 31.167516568s ago: executing program 1 (id=3448): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1}, &(0x7f0000000400)=0x8) 30.838503581s ago: executing program 1 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c0001800800010000000000080002000000000008000300a0b8250008000400409c0000080006"], 0x4c}}, 0x0) 30.742576706s ago: executing program 1 (id=3456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x18) 30.694619667s ago: executing program 1 (id=3458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='ud', 0x2) 30.051441853s ago: executing program 9 (id=3472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 29.86170703s ago: executing program 9 (id=3473): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000703000/0x2000)=nil, 0x400000, 0x1, 0x2}) 29.711127656s ago: executing program 9 (id=3474): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 29.653115116s ago: executing program 9 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x4) 29.449120043s ago: executing program 9 (id=3477): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14020840}, 0x4) 29.021693277s ago: executing program 9 (id=3482): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x40, 0x1, 0xb2, "148c869adea04f3c5869f1f9643f9f6eb78486c2dd99bbd459e21d1d2e79f3da4d371dcc6ee8053128e8ad9b36f925630f01117c80b551f37736eeab681fe4356bed0d9aeee72483fdbdbc4618db0d8605128709e02a40fb2a75f7c747adeb8b5660f47bcf44d0a2c5a006e1bb4240787f46711ec398987a977d9fa1f8da3d0100c4a4271fec00c1829a21d52a045f3ebd145d42f9a471d3d66374b3f028196ab8cdb9fac85a621b7aced6dbe4d77f7ad0e0"}, 0x0, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x226f}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0xb, 0x2, '>x'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xca}, 0x0, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000840)={0x40, 0x19, 0x2, "5b18"}, 0x0, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xad}, 0x0}) 28.802715242s ago: executing program 41 (id=3482): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x40, 0x1, 0xb2, "148c869adea04f3c5869f1f9643f9f6eb78486c2dd99bbd459e21d1d2e79f3da4d371dcc6ee8053128e8ad9b36f925630f01117c80b551f37736eeab681fe4356bed0d9aeee72483fdbdbc4618db0d8605128709e02a40fb2a75f7c747adeb8b5660f47bcf44d0a2c5a006e1bb4240787f46711ec398987a977d9fa1f8da3d0100c4a4271fec00c1829a21d52a045f3ebd145d42f9a471d3d66374b3f028196ab8cdb9fac85a621b7aced6dbe4d77f7ad0e0"}, 0x0, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x226f}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0xb, 0x2, '>x'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xca}, 0x0, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000840)={0x40, 0x19, 0x2, "5b18"}, 0x0, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xad}, 0x0}) 15.802236732s ago: executing program 3 (id=3597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 15.761525673s ago: executing program 3 (id=3599): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2567000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 15.708143548s ago: executing program 3 (id=3601): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000240)={{0x9, 0x5, 0x5, 0x25}, 'syz1\x00', 0x4f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) 15.622338694s ago: executing program 42 (id=3458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='ud', 0x2) 15.609325096s ago: executing program 3 (id=3604): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./gadget\x00', &(0x7f0000000580)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)="000000000902090001011d76e422cf706ba32505a0a400010000872a000000", 0x1f) 15.560780033s ago: executing program 3 (id=3605): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15.382595456s ago: executing program 3 (id=3608): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.49216571s ago: executing program 4 (id=3696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000010, 0x0, 0xffff}]}) 7.206050695s ago: executing program 4 (id=3698): mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setxattr$system_posix_acl(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 6.213835239s ago: executing program 4 (id=3705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x3ff}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 5.615594968s ago: executing program 4 (id=3709): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff8001}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.394325354s ago: executing program 4 (id=3711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / -4\n', 0xe) 5.225888149s ago: executing program 4 (id=3713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40440, 0x1c1) setrlimit(0x1, &(0x7f0000000140)={0xbfffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) finit_module(r0, 0x0, 0x1) 1.487945194s ago: executing program 6 (id=3753): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="ffff", 0x2, 0xd) 1.439642422s ago: executing program 6 (id=3754): r0 = io_uring_setup(0x7d1, &(0x7f0000000080)={0x0, 0xddf9, 0x400, 0xfffffffe, 0x360}) close_range(r0, r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x9f, 0xdf10) 1.133694199s ago: executing program 5 (id=3755): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xd7, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1.087144754s ago: executing program 5 (id=3756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) fchown(r0, 0x0, 0x0) 1.024094403s ago: executing program 5 (id=3757): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000001440)) 713.054082ms ago: executing program 5 (id=3761): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000040)=0xffffffdd) 657.411443ms ago: executing program 5 (id=3762): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 639.089131ms ago: executing program 7 (id=3763): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f00000003c0)={r2, 0x1000}, 0x8) 589.442491ms ago: executing program 5 (id=3764): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 530.969524ms ago: executing program 6 (id=3765): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000300)={0x0, 0x6, 0x61, 0x5}) 502.495051ms ago: executing program 7 (id=3766): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) 440.898097ms ago: executing program 7 (id=3767): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000340)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000380)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 404.270057ms ago: executing program 6 (id=3768): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget\x00', 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./gadget/dummy_udc\x00', &(0x7f0000000040), 0x10080, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 342.715892ms ago: executing program 7 (id=3769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='event', 0x5) 301.441459ms ago: executing program 43 (id=3608): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 272.085103ms ago: executing program 6 (id=3771): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x52) flock(r0, 0x2) r1 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r1, 0x6) 223.433597ms ago: executing program 7 (id=3772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="600100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000034010380300100800c00054000000000000001000800034000000003"], 0x160}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 95.997537ms ago: executing program 6 (id=3773): r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x82000) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000a40)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 0s ago: executing program 7 (id=3774): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) kernel console output (not intermixed with test programs): on. [ 214.695312][T11995] CIFS: VFS: cifs_mount failed w/return code = -111 [ 214.745660][ T30] audit: type=1326 audit(1792369454.247:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.6.2754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ff19e559 code=0x7ffc0000 [ 214.746048][ T30] audit: type=1326 audit(1792369454.247:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.6.2754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ff19e559 code=0x7ffc0000 [ 214.752972][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 214.909984][T12010] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 214.924949][T12010] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 214.925119][T12010] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 215.046474][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2762'. [ 215.048237][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.282760][T12031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.662925][ T5743] hid_parser_main: 113 callbacks suppressed [ 215.662946][ T5743] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 215.694697][ T5743] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.875290][T12055] usb usb7: usbfs: process 12055 (syz.9.2780) did not claim interface 0 before use [ 216.202333][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 216.202350][ T30] audit: type=1400 audit(1792369455.707:674): avc: denied { write } for pid=12070 comm="syz.9.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 216.202644][T12071] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2787'. [ 216.232158][ T5609] Bluetooth: hci10: command tx timeout [ 216.288715][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2789'. [ 216.557064][ T30] audit: type=1400 audit(1792369456.057:675): avc: denied { read } for pid=12094 comm="syz.9.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.609825][ T30] audit: type=1400 audit(1792369456.107:676): avc: denied { setopt } for pid=12094 comm="syz.9.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.751628][ T30] audit: type=1400 audit(1792369456.257:677): avc: denied { read } for pid=5268 comm="dhcpcd" name="n32" dev="tmpfs" ino=3823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.752769][ T30] audit: type=1400 audit(1792369456.257:678): avc: denied { open } for pid=5268 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=3823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.752811][ T30] audit: type=1400 audit(1792369456.257:679): avc: denied { getattr } for pid=5268 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=3823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.880491][ T30] audit: type=1400 audit(1792369456.377:680): avc: denied { accept } for pid=12114 comm="syz.9.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.098507][ T30] audit: type=1400 audit(1792369456.597:681): avc: denied { write } for pid=12127 comm="syz.3.2812" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 217.285769][ T30] audit: type=1400 audit(1792369456.787:682): avc: denied { write } for pid=12111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.285915][ T30] audit: type=1400 audit(1792369456.787:683): avc: denied { create } for pid=12111 comm="dhcpcd-run-hook" name="resolv.conf.geneve0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.480911][ T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 217.634344][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.635706][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 217.635747][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.635772][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.635794][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.635817][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.638039][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 217.638075][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.638099][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.638121][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.638143][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.639010][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 217.639044][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.639067][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.639087][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.639110][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.641688][ T10] usb 7-1: string descriptor 0 read error: -22 [ 217.641796][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.839849][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 218.270531][T12189] input: syz0 as /devices/virtual/input/input44 [ 218.397504][T12199] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2834'. [ 218.637218][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 218.639074][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 218.640615][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 218.668600][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 218.669501][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 218.821111][ T5711] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 218.840631][T12217] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.970927][ T5711] usb 10-1: Using ep0 maxpacket: 32 [ 218.971443][ T5711] usb 10-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 218.972325][ T5711] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.972363][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 218.972389][ T5711] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.972425][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.974714][ T5711] usb 10-1: config 0 descriptor?? [ 219.157410][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.157500][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.157589][T12217] bridge_slave_0: entered allmulticast mode [ 219.158679][T12217] bridge_slave_0: entered promiscuous mode [ 219.160423][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.160526][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.160814][T12217] bridge_slave_1: entered allmulticast mode [ 219.162356][T12217] bridge_slave_1: entered promiscuous mode [ 219.187571][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.189824][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.211300][T12217] team0: Port device team_slave_0 added [ 219.213642][T12217] team0: Port device team_slave_1 added [ 219.237312][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.237323][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.237342][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.238528][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.238537][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.238561][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.286319][T12217] hsr_slave_0: entered promiscuous mode [ 219.287012][T12217] hsr_slave_1: entered promiscuous mode [ 219.287476][T12217] debugfs: 'hsr0' already exists in 'hsr' [ 219.287491][T12217] Cannot create hsr debugfs directory [ 219.478710][T12217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.478744][T12217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.527755][ T5711] elecom 0003:056E:00FC.000E: hidraw0: USB HID v21.0a Device [HID 056e:00fc] on usb-dummy_hcd.9-1/input0 [ 219.590205][T12217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.590238][T12217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.629209][T12240] loop6: detected capacity change from 0 to 2640 [ 219.633226][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633254][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633276][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633297][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633319][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633350][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633379][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633399][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633410][T12240] ldm_validate_partition_table(): Disk read failed. [ 219.633429][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633449][T12240] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.633480][T12240] Dev loop6: unable to read RDB block 0 [ 219.633610][T12240] loop6: unable to read partition table [ 219.633741][T12240] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 219.677580][T12240] loop6: detected capacity change from 2640 to 524288000 [ 219.755545][ T9] usb 10-1: USB disconnect, device number 7 [ 219.827552][T12217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.827584][T12217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.906816][T12217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.906847][T12217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.059265][ T5727] usb 7-1: USB disconnect, device number 16 [ 220.100662][T12217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.114916][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.115367][T12217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.118384][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.119141][T12217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.135317][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.136073][T12217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.142052][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.237669][T12217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.247359][T12217] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.251129][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.251198][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.256695][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.256764][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.749420][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.771052][ T5609] Bluetooth: hci11: command tx timeout [ 220.847105][T12217] veth0_vlan: entered promiscuous mode [ 220.865015][T12217] veth1_vlan: entered promiscuous mode [ 220.885775][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2863'. [ 220.921042][T12217] veth0_macvtap: entered promiscuous mode [ 220.927708][T12217] veth1_macvtap: entered promiscuous mode [ 220.950668][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.966385][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.994081][ T166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.994115][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.994145][ T166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.994173][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.030609][ T970] IPVS: starting estimator thread 0... [ 221.032356][T12303] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 221.032410][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 221.128766][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.128782][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.142406][T12304] IPVS: using max 42 ests per chain, 100800 per kthread [ 221.178507][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.178523][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.817426][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2877'. [ 221.817456][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2877'. [ 221.897251][T12337] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 221.897270][T12337] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2880'. [ 221.963263][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 221.963279][ T30] audit: type=1400 audit(1792369461.467:693): avc: denied { watch } for pid=12338 comm="syz.2.2884" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.851262][ T5609] Bluetooth: hci11: command tx timeout [ 223.453570][T12380] hub 1-0:1.0: USB hub found [ 223.453801][T12380] hub 1-0:1.0: 1 port detected [ 223.503061][ T5339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.534482][T12382] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input46 [ 223.652634][ T5339] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 223.653506][ T5339] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 223.653547][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 223.653570][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.653592][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 223.653614][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 223.653635][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 223.653656][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 223.653677][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 223.653698][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 223.653718][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 223.653738][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 223.653759][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 223.653780][ T5339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 223.653802][ T5339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.653821][ T5339] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 223.655569][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.655621][ T5339] usb 4-1: Product: syz [ 223.655636][ T5339] usb 4-1: Manufacturer: syz [ 223.655649][ T5339] usb 4-1: SerialNumber: syz [ 223.658801][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.658843][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.658902][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.658936][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.658968][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659001][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659052][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659084][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659116][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659147][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659197][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.659229][T12376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.717604][ T5339] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 223.855680][ T5339] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 223.967594][ T5339] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 223.969063][ T5339] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 223.970553][ T5339] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 224.006632][ T5339] usb 4-1: USB disconnect, device number 8 [ 224.035276][ T5339] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 224.059933][ T5339] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 224.079007][ T5339] keyspan 4-1:1.0: device disconnected [ 224.835519][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2923'. [ 224.931072][ T5609] Bluetooth: hci11: command tx timeout [ 225.227185][T12471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.227260][T12471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.295545][T12460] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input47 [ 226.142572][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 226.292216][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 226.292714][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.293698][ T9] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 226.293721][ T9] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 226.293740][ T9] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 226.293759][ T9] usb 4-1: config 250 has no interface number 0 [ 226.293792][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 226.293816][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 226.293839][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.293859][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.293879][ T9] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 226.293903][ T9] usb 4-1: config 250 interface 228 has no altsetting 0 [ 226.296500][ T9] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.296523][ T9] usb 4-1: Product: syz [ 226.296539][ T9] usb 4-1: SerialNumber: syz [ 226.321550][ T9] hub 4-1:250.228: bad descriptor, ignoring hub [ 226.321569][ T9] hub 4-1:250.228: probe with driver hub failed with error -5 [ 226.513211][ T9] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 226.758205][ T30] audit: type=1400 audit(1792369466.257:694): avc: denied { write } for pid=12542 comm="syz.6.2970" name="core" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.758497][ T30] audit: type=1400 audit(1792369466.257:695): avc: denied { create } for pid=12542 comm="syz.6.2970" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 226.758582][T12543] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 226.812842][ T5339] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 226.835747][ T5727] usb 4-1: USB disconnect, device number 9 [ 226.844141][ T5727] usblp0: removed [ 226.970885][ T5339] usb 3-1: Using ep0 maxpacket: 8 [ 226.972680][ T5339] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 226.973670][ T5339] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 226.973692][ T5339] usb 3-1: config 0 has no interface number 0 [ 226.973722][ T5339] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.973742][ T5339] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.973761][ T5339] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 226.973783][ T5339] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 226.973806][ T5339] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.975929][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.975957][ T5339] usb 3-1: Product: syz [ 226.975970][ T5339] usb 3-1: Manufacturer: syz [ 226.975984][ T5339] usb 3-1: SerialNumber: syz [ 226.979403][ T5339] usb 3-1: config 0 descriptor?? [ 227.022564][ T5609] Bluetooth: hci11: command tx timeout [ 227.187908][ T5339] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 227.224292][T12558] phram: illegal start address [ 227.340028][T12566] usbip-vudc usbip-vudc.0: gadget not bound [ 227.437144][ T9] usb 3-1: USB disconnect, device number 7 [ 227.497189][ T5727] kernel read not supported for file /radio0 (pid: 5727 comm: kworker/0:5) [ 227.647370][ T5711] kernel write not supported for file /sg0 (pid: 5711 comm: kworker/1:4) [ 227.659816][T12591] sctp: [Deprecated]: syz.9.2989 (pid 12591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.659816][T12591] Use struct sctp_sack_info instead [ 227.760602][T12597] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 227.784767][ T970] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 227.807010][T12597] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 228.209201][ T30] audit: type=1400 audit(1792369467.707:696): avc: denied { write } for pid=12615 comm="syz.3.3001" name="dlm" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.210001][ T30] audit: type=1400 audit(1792369467.707:697): avc: denied { write } for pid=12615 comm="syz.3.3001" name="dlm" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.702432][ T5711] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 228.798870][ T30] audit: type=1400 audit(1792369468.297:698): avc: denied { write } for pid=12632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.857014][ T5711] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice= 1.02 [ 228.857933][ T5711] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 228.857961][ T5711] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.857994][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.907409][T12629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 228.910459][ T5711] mct_u232 7-1:1.0: MCT U232 converter detected [ 228.934263][ T5711] usb 7-1: MCT U232 converter now attached to ttyUSB0 [ 229.057359][ T30] audit: type=1400 audit(1792369468.557:699): avc: denied { write } for pid=12648 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.150156][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 229.156569][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 229.161460][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 229.178255][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 229.178965][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 229.222451][ T10] usb 7-1: USB disconnect, device number 17 [ 229.249957][ T10] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 229.250556][ T10] mct_u232 7-1:1.0: device disconnected [ 229.469538][T12675] misc userio: Invalid payload size [ 229.730439][ T30] audit: type=1400 audit(1792369469.227:700): avc: denied { write } for pid=12666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.782253][T12657] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.838861][ T30] audit: type=1400 audit(1792369469.337:701): avc: denied { write } for pid=12689 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.906200][ T30] audit: type=1400 audit(1792369469.407:702): avc: denied { write } for pid=12691 comm="syz.6.3021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 230.008988][T12700] netlink: 'syz.6.3023': attribute type 1 has an invalid length. [ 230.422078][ T5339] logitech-hidpp-device 0003:046D:C082.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 230.529401][T12731] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 230.560000][T12726] fido_id[12726]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.677969][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.679631][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.679987][T12657] bridge_slave_0: entered allmulticast mode [ 230.684037][T12657] bridge_slave_0: entered promiscuous mode [ 230.688435][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.690077][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.690164][T12657] bridge_slave_1: entered allmulticast mode [ 230.692736][T12657] bridge_slave_1: entered promiscuous mode [ 230.795028][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.804265][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.848699][T12750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3042'. [ 230.848856][T12750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3042'. [ 230.868417][T12657] team0: Port device team_slave_0 added [ 230.871696][ T13] bond0: (slave bond_slave_0): interface is now down [ 230.871710][ T13] bond0: (slave bond_slave_1): interface is now down [ 230.892889][T12751] sctp: [Deprecated]: syz.3.3043 (pid 12751) Use of int in max_burst socket option deprecated. [ 230.892889][T12751] Use struct sctp_assoc_value instead [ 230.902845][T12657] team0: Port device team_slave_1 added [ 230.905125][ T59] bond0: (slave bond_slave_0): interface is now down [ 230.905139][ T59] bond0: (slave bond_slave_1): interface is now down [ 230.931839][ T59] bond0: (slave bond_slave_0): interface is now down [ 230.931853][ T59] bond0: (slave bond_slave_1): interface is now down [ 230.935331][T12755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.951034][ T1016] bond0: (slave bond_slave_0): interface is now down [ 230.951050][ T1016] bond0: (slave bond_slave_1): interface is now down [ 230.961433][T12755] ip_tables: iptables: counters copy to user failed while replacing table [ 230.973860][ T146] bond0: (slave bond_slave_0): interface is now down [ 230.973874][ T146] bond0: (slave bond_slave_1): interface is now down [ 230.994338][ T59] bond0: (slave bond_slave_0): interface is now down [ 230.994352][ T59] bond0: (slave bond_slave_1): interface is now down [ 231.000552][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.000562][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.000581][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.008415][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.008425][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.008444][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.023120][ T13] bond0: (slave bond_slave_0): interface is now down [ 231.023135][ T13] bond0: (slave bond_slave_1): interface is now down [ 231.054843][ T13] bond0: (slave bond_slave_0): interface is now down [ 231.054860][ T13] bond0: (slave bond_slave_1): interface is now down [ 231.161843][ T13] bond0: now running without any active interface! [ 231.166267][T12761] netlink: 34 bytes leftover after parsing attributes in process `syz.6.3048'. [ 231.252830][ T5609] Bluetooth: hci12: command tx timeout [ 231.284199][T12657] hsr_slave_0: entered promiscuous mode [ 231.286605][T12657] hsr_slave_1: entered promiscuous mode [ 231.288746][T12657] debugfs: 'hsr0' already exists in 'hsr' [ 231.288764][T12657] Cannot create hsr debugfs directory [ 231.712008][T12657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.823103][T12802] binder: 12801:12802 ioctl c0306201 200000000640 returned -22 [ 231.842295][T12657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.887823][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 231.935228][ T30] audit: type=1400 audit(1792369471.437:703): avc: denied { load_policy } for pid=12803 comm="syz.9.3068" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 231.936009][T12657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.011957][T12804] SELinux: invalid class [ 232.053040][T12804] SELinux: failed to load policy [ 232.054355][T12657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.081138][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.231258][T12815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3073'. [ 232.242482][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.243289][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.243309][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 232.243323][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 232.243339][ T10] usb 3-1: config 220 has no interface number 2 [ 232.243380][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.243402][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 232.243417][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 232.243431][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 232.245193][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.245214][ T10] usb 3-1: Product: syz [ 232.245227][ T10] usb 3-1: Manufacturer: syz [ 232.245239][ T10] usb 3-1: SerialNumber: syz [ 232.396996][T12821] netlink: 'syz.9.3077': attribute type 7 has an invalid length. [ 232.397015][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3077'. [ 232.397040][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3077'. [ 232.474605][ T9276] udevd[9276]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 232.492943][ T10] uvcvideo 3-1:220.1: Unknown video format 656e6968-6863-6365-6b30-2f636865636b [ 232.493002][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 232.493026][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 232.493070][ T10] usb 3-1: selecting invalid altsetting 0 [ 232.493778][ T30] audit: type=1400 audit(1792369471.997:704): avc: denied { execute } for pid=12822 comm="syz.6.3076" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=46564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 232.509624][T12657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.518234][ T10] usb 3-1: selecting invalid altsetting 0 [ 232.518254][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 232.530640][ T10] usb 3-1: USB disconnect, device number 8 [ 232.535638][T12657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.538668][T12657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.569781][T12657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.570554][T12657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.608610][T12657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.612940][T12657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.638147][T12657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.756181][T12841] netlink: 'syz.6.3083': attribute type 1 has an invalid length. [ 232.756201][T12841] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3083'. [ 232.756214][T12841] netlink: 'syz.6.3083': attribute type 1 has an invalid length. [ 232.833218][T12657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.863898][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.874320][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.874392][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.898414][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.898528][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.188637][ T30] audit: type=1400 audit(1792369472.687:705): avc: denied { read append } for pid=12857 comm="syz.2.3089" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 233.331963][ T5609] Bluetooth: hci12: command tx timeout [ 233.677751][T12657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.959571][T12900] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3103'. [ 234.133053][T12657] veth0_vlan: entered promiscuous mode [ 234.150600][T12657] veth1_vlan: entered promiscuous mode [ 234.231301][T12657] veth0_macvtap: entered promiscuous mode [ 234.247364][T12657] veth1_macvtap: entered promiscuous mode [ 234.279274][T12657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.310072][T12657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.363610][ T970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.381939][ T970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.381974][ T970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.382003][ T970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.522325][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.522344][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.659034][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.659053][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.354410][T12970] bonding: no command found in bonding_masters - use +ifname or -ifname [ 235.411147][ T5609] Bluetooth: hci12: command tx timeout [ 235.482189][T12978] dyndbg: expected <4096 bytes into control [ 236.176532][T13013] ip_tables: iptables: counters copy to user failed while replacing table [ 236.229819][T13016] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3155'. [ 236.319154][T13021] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 236.456000][T13024] can0: slcan on ttyS3. [ 236.610746][T13024] can0 (unregistered): slcan off ttyS3. [ 236.874347][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.130315][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 237.130332][ T30] audit: type=1400 audit(1792369476.627:707): avc: denied { write } for pid=13028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.160524][ T30] audit: type=1400 audit(1792369476.637:708): avc: denied { write } for pid=13063 comm="syz.9.3172" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 237.232328][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 237.272841][ T30] audit: type=1400 audit(1792369476.777:709): avc: denied { write } for pid=13069 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.491736][ T5609] Bluetooth: hci12: command tx timeout [ 237.612279][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3181'. [ 237.762055][ T30] audit: type=1400 audit(1792369477.267:710): avc: denied { write } for pid=13078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.817283][ T30] audit: type=1807 audit(1792369477.317:711): action=appraise func=POLICY_CHECK res=1 [ 237.826003][T13100] ima: policy update completed [ 237.836256][ T30] audit: type=1802 audit(1792369477.327:712): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.6.3183" res=1 errno=0 [ 237.903439][ T30] audit: type=1400 audit(1792369477.407:713): avc: denied { write } for pid=13109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.030746][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3187'. [ 238.031386][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3187'. [ 238.301441][T13129] veth1_to_hsr: entered allmulticast mode [ 239.144336][ T190] kernel write not supported for file /snd/seq (pid: 190 comm: kworker/0:2) [ 239.378506][T13208] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 239.978682][ T30] audit: type=1400 audit(1792369479.477:714): avc: denied { write } for pid=13221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.064893][ T30] audit: type=1400 audit(1792369479.567:715): avc: denied { write } for pid=13251 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.571282][ T1678] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 240.588536][ T30] audit: type=1400 audit(1792369480.087:716): avc: denied { write } for pid=13262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.721628][ T1678] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.722538][ T1678] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.722567][ T1678] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.722624][ T1678] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.779655][T13265] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 240.793465][ T1678] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.024891][ T1678] usb 7-1: USB disconnect, device number 18 [ 241.502008][T13315] input: syz0 as /devices/virtual/input/input52 [ 241.765148][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3273'. [ 241.768481][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.973053][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 242.101196][ T190] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 242.250953][ T190] usb 10-1: Using ep0 maxpacket: 8 [ 242.252260][ T190] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 242.254793][ T190] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 242.254817][ T190] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 242.254836][ T190] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 242.254856][ T190] usb 10-1: config 250 has no interface number 0 [ 242.254888][ T190] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 242.254914][ T190] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 242.254937][ T190] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.254956][ T190] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 242.254977][ T190] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 242.255001][ T190] usb 10-1: config 250 interface 228 has no altsetting 0 [ 242.256522][ T190] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 242.256544][ T190] usb 10-1: Product: syz [ 242.256558][ T190] usb 10-1: SerialNumber: syz [ 242.263535][ T190] hub 10-1:250.228: bad descriptor, ignoring hub [ 242.263566][ T190] hub 10-1:250.228: probe with driver hub failed with error -5 [ 242.280890][ T1215] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 242.420941][ T5339] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.425393][ T1215] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 242.427891][ T1215] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 242.427923][ T1215] usb 7-1: can't read configurations, error -71 [ 242.487490][ T190] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 242.532705][ T5609] Bluetooth: hci10: Controller not accepting commands anymore: ncmd = 0 [ 242.532762][ T5609] Bluetooth: hci10: Injecting HCI hardware error event [ 242.534010][ T52] Bluetooth: hci10: hardware error 0x00 [ 242.580826][ T5339] usb 5-1: Using ep0 maxpacket: 16 [ 242.582147][ T5339] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 242.583048][ T5339] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.583077][ T5339] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.583097][ T5339] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 242.583121][ T5339] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.583148][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.588738][ T5339] usb 5-1: config 0 descriptor?? [ 242.771484][ T9] usb 10-1: USB disconnect, device number 8 [ 242.778637][ T9] usblp0: removed [ 242.980588][T13367] netlink: 'syz.6.3288': attribute type 6 has an invalid length. [ 243.003496][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.003915][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.224891][ T9] usb 5-1: USB disconnect, device number 8 [ 244.151086][ T5339] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 244.227163][T13395] sctp: [Deprecated]: syz.6.3301 (pid 13395) Use of int in max_burst socket option deprecated. [ 244.227163][T13395] Use struct sctp_assoc_value instead [ 244.301321][ T5339] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 244.302237][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.302266][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.302299][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.307423][ T5339] usb 4-1: config 0 descriptor?? [ 244.611299][ T52] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 244.718133][ T5339] pyra 0003:1E7D:2CF6.0011: report_id 0 is invalid [ 244.718156][ T5339] pyra 0003:1E7D:2CF6.0011: item 0 0 1 8 parsing failed [ 244.718662][ T5339] pyra 0003:1E7D:2CF6.0011: parse failed [ 244.718715][ T5339] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -22 [ 244.925555][ T9] usb 4-1: USB disconnect, device number 10 [ 245.020847][ T5339] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 245.172854][ T5339] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 245.172879][ T5339] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 245.173588][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.173612][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.173627][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.174315][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.174344][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.174358][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.175024][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.175051][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.175066][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.175743][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.175764][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.175778][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.179455][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.179496][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.179520][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.180304][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.180337][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.180351][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.206741][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.206774][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.206789][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.233940][ T5339] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.233965][ T5339] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.233979][ T5339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.352741][ T5339] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 245.352757][ T5339] usb 7-1: Product: syz [ 245.352765][ T5339] usb 7-1: Manufacturer: syz [ 245.352774][ T5339] usb 7-1: SerialNumber: syz [ 245.445943][ T5339] usb 7-1: config 0 descriptor?? [ 245.458467][ T5339] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 245.580155][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 245.604186][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 245.682536][T13419] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3322'. [ 245.744596][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 245.744972][ T5339] usb 7-1: USB disconnect, device number 21 [ 245.747871][ T5339] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 246.163921][ T1215] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 246.189314][T13442] xt_hashlimit: size too large, truncated to 1048576 [ 246.239810][T13446] xt_hashlimit: size too large, truncated to 1048576 [ 246.319142][T13449] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3324'. [ 246.322119][ T1215] usb 4-1: not running at top speed; connect to a high speed hub [ 246.322144][ T1215] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 246.324105][ T1215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 246.324131][ T1215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 246.325796][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.325817][ T1215] usb 4-1: Product: syz [ 246.325830][ T1215] usb 4-1: Manufacturer: syz [ 246.325842][ T1215] usb 4-1: SerialNumber: syz [ 246.340334][T13428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.345626][ T1215] oti6858 4-1:1.0: oti6858 converter detected [ 246.354247][ T1215] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 246.562720][T13462] jffs2: notice: (13462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 246.787623][ T1678] usb 4-1: USB disconnect, device number 11 [ 246.797658][ T1678] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 246.811825][ T1678] oti6858 4-1:1.0: device disconnected [ 246.860146][T13481] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3337'. [ 247.000843][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 247.150870][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 247.151391][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 247.152253][ T29] usb 7-1: config 32 has an invalid interface number: 85 but max is 0 [ 247.152275][ T29] usb 7-1: config 32 has no interface number 0 [ 247.152307][ T29] usb 7-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.152332][ T29] usb 7-1: config 32 interface 85 has no altsetting 0 [ 247.153909][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.153927][ T29] usb 7-1: Product: syz [ 247.153939][ T29] usb 7-1: Manufacturer: syz [ 247.153948][ T29] usb 7-1: SerialNumber: syz [ 247.260915][ T1215] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 247.411673][ T1215] usb 10-1: Using ep0 maxpacket: 32 [ 247.412842][ T1215] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 247.413737][ T1215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.415951][ T1215] usb 10-1: config 0 descriptor?? [ 247.458669][ T1215] as10x_usb: device has been detected [ 247.459260][ T1215] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 247.491723][ T1215] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 247.510378][ T52] Bluetooth: hci0: Zero size dump init pkt [ 247.618339][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 247.618357][ T30] audit: type=1400 audit(1792369487.117:718): avc: denied { firmware_load } for pid=1215 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 247.663411][ T1215] as10x_usb: error during firmware upload part1 [ 247.663837][ T1215] Registered device nBox DVB-T Dongle [ 247.668692][ T1215] usb 10-1: USB disconnect, device number 9 [ 247.697182][ T30] audit: type=1400 audit(1792369487.197:719): avc: denied { bind } for pid=13510 comm="syz.4.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.697666][ T30] audit: type=1400 audit(1792369487.197:720): avc: denied { connect } for pid=13510 comm="syz.4.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.753268][ T1215] Unregistered device nBox DVB-T Dongle [ 247.755036][ T1215] as10x_usb: device has been disconnected [ 247.768260][ T29] appletouch 7-1:32.85: Geyser mode initialized. [ 247.773666][ T29] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:32.85/input/input53 [ 247.805973][T13515] vhci_hcd vhci_hcd.0: failed to lookup sock [ 247.985927][ T5711] usb 7-1: USB disconnect, device number 22 [ 247.998014][ T190] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.015957][ T5711] appletouch 7-1:32.85: input: appletouch disconnected [ 248.153699][ T190] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 248.155162][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.155179][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.155199][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.156452][ T190] usb 4-1: config 0 descriptor?? [ 248.351743][ T1215] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 248.511129][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 248.511657][ T1215] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 248.513012][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.546053][ T1215] pvrusb2: Hardware description: Terratec Grabster AV400 [ 248.546067][ T1215] pvrusb2: ********** [ 248.546072][ T1215] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 248.546083][ T1215] pvrusb2: Important functionality might not be entirely working. [ 248.546090][ T1215] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 248.546099][ T1215] pvrusb2: ********** [ 248.584309][ T30] audit: type=1400 audit(1792369488.087:721): avc: denied { write } for pid=13536 comm="syz.6.3362" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.625974][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626008][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626049][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626068][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626087][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626105][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626124][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626143][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626182][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626202][ T190] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0 [ 248.626367][ T190] savu 0003:1E7D:2D5A.0012: item fetching failed at offset 30/34 [ 248.626946][ T190] savu 0003:1E7D:2D5A.0012: parse failed [ 248.627026][ T190] savu 0003:1E7D:2D5A.0012: probe with driver savu failed with error -22 [ 248.735401][ T2354] pvrusb2: Invalid write control endpoint [ 248.805499][ T2354] pvrusb2: Invalid write control endpoint [ 248.805512][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 248.805520][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 248.805527][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 248.805534][ T2354] pvrusb2: Device being rendered inoperable [ 248.809415][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 248.809467][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 248.822658][ T1678] usb 4-1: USB disconnect, device number 12 [ 248.879291][ T2354] pvrusb2: Attached sub-driver cx25840 [ 248.879304][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 248.879313][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 248.947189][ T29] usb 5-1: USB disconnect, device number 9 [ 249.111162][ T1678] kernel read not supported for file /dsp1 (pid: 1678 comm: kworker/1:2) [ 249.168783][T13551] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3368'. [ 249.168813][T13551] netlink: 'syz.6.3368': attribute type 8 has an invalid length. [ 249.397508][ T30] audit: type=1400 audit(1792369488.897:722): avc: denied { getopt } for pid=13564 comm="syz.9.3374" laddr=224.0.0.1 faddr=127.0.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.529671][ T5609] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 249.539221][ T5609] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 249.542146][ T5609] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 249.542731][ T5609] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 249.546033][ T5609] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 249.872118][ T30] audit: type=1400 audit(1792369489.377:723): avc: denied { open } for pid=13593 comm="syz.4.3385" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 249.950608][ T30] audit: type=1400 audit(1792369489.447:724): avc: denied { ioctl } for pid=13593 comm="syz.4.3385" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 250.021854][T13600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3388'. [ 250.021878][T13600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3388'. [ 250.021893][T13600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3388'. [ 250.140385][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.140434][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.288786][T13572] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.587864][T13633] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 250.894876][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3406'. [ 250.896313][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3406'. [ 251.037168][T13654] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3408'. [ 251.066016][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.066098][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.066206][T13572] bridge_slave_0: entered allmulticast mode [ 251.069619][T13572] bridge_slave_0: entered promiscuous mode [ 251.099168][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.099294][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.099392][T13572] bridge_slave_1: entered allmulticast mode [ 251.100688][T13572] bridge_slave_1: entered promiscuous mode [ 251.151978][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.154611][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.199407][T13572] team0: Port device team_slave_0 added [ 251.207353][T13572] team0: Port device team_slave_1 added [ 251.239579][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.239591][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.239611][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.288518][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.288531][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.288551][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.369135][T13572] hsr_slave_0: entered promiscuous mode [ 251.370395][T13572] hsr_slave_1: entered promiscuous mode [ 251.385378][T13572] debugfs: 'hsr0' already exists in 'hsr' [ 251.385397][T13572] Cannot create hsr debugfs directory [ 251.445880][ T30] audit: type=1400 audit(1792369490.947:725): avc: denied { setopt } for pid=13671 comm="syz.4.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.646045][ T30] audit: type=1400 audit(1792369491.147:726): avc: denied { write } for pid=13659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.651611][ T52] Bluetooth: hci13: command tx timeout [ 251.752442][ T30] audit: type=1400 audit(1792369491.257:727): avc: denied { write } for pid=13687 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.810004][T13572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.840479][T13692] xt_limit: Overflow, try lower: 0/0 [ 251.846220][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 251.966532][T13572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.000829][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 252.001399][ T29] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 252.002419][ T29] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.002447][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 252.002475][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.007429][ T29] usb 7-1: config 0 descriptor?? [ 252.149926][T13572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.232987][T13572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.488014][ T29] hid_mf 0003:0079:1846.0013: collection stack underflow [ 252.492585][ T29] hid_mf 0003:0079:1846.0013: item 0 0 0 12 parsing failed [ 252.493102][ T29] hid_mf 0003:0079:1846.0013: HID parse failed. [ 252.493156][ T29] hid_mf 0003:0079:1846.0013: probe with driver hid_mf failed with error -22 [ 252.571446][T13572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.594169][T13572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.597617][T13572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.611695][T13572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.614460][T13572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.636000][T13572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.640735][T13572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.665881][T13572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.689309][ T1215] usb 7-1: USB disconnect, device number 23 [ 252.809515][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.815794][ T30] audit: type=1400 audit(1792369492.317:728): avc: denied { setopt } for pid=13726 comm="syz.4.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.837074][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.846443][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.846522][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.869257][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.869340][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.921019][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 252.957273][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 252.958246][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 253.024608][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3436'. [ 253.070893][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 253.071387][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.072876][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.072902][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.072931][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.072955][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.072990][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.285000][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 253.285041][ T9] usbtmc 10-1:16.0: can't read capabilities [ 253.350042][T13572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.396784][T13572] veth0_vlan: entered promiscuous mode [ 253.407930][T13572] veth1_vlan: entered promiscuous mode [ 253.421888][ T5339] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.450690][T13572] veth0_macvtap: entered promiscuous mode [ 253.460639][T13572] veth1_macvtap: entered promiscuous mode [ 253.478998][T13572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.494728][T13572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.504129][ T29] usb 10-1: USB disconnect, device number 10 [ 253.556157][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.558545][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.558759][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.558788][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.571374][ T5339] usb 5-1: Using ep0 maxpacket: 32 [ 253.572647][ T5339] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 253.576929][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.582177][ T5339] usb 5-1: config 0 descriptor?? [ 253.624843][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.624859][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.667380][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.667397][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.731176][ T52] Bluetooth: hci13: command tx timeout [ 253.767543][T13762] Bluetooth: hci14: Frame reassembly failed (-84) [ 253.769491][ T5609] Bluetooth: hci14: sending frame failed (-49) [ 253.773313][ T52] Bluetooth: hci14: Entering manufacturer mode failed (-49) [ 253.802332][ T5339] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 253.809488][ T5339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.814060][ T5339] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 253.814096][ T5339] usb 5-1: media controller created [ 253.868960][ T5339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.020265][ T5339] az6027: usb out operation failed. (-71) [ 254.021583][ T5339] az6027: usb out operation failed. (-71) [ 254.021597][ T5339] stb0899_attach: Driver disabled by Kconfig [ 254.021607][ T5339] az6027: no front-end attached [ 254.021607][ T5339] [ 254.025271][ T5339] az6027: usb out operation failed. (-71) [ 254.025285][ T5339] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 254.032551][ T5339] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 254.046005][ T5339] dvb-usb: schedule remote query interval to 400 msecs. [ 254.046020][ T5339] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 254.066631][ T5339] usb 5-1: USB disconnect, device number 10 [ 254.253201][ T30] audit: type=1400 audit(1792369493.757:729): avc: denied { write } for pid=13766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.306003][ T5339] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 254.372982][ T30] audit: type=1400 audit(1792369493.877:730): avc: denied { write } for pid=13791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.493742][T13800] cfg80211: Invalid regulatory domain detected: BB [ 254.584267][ T30] audit: type=1400 audit(1792369494.087:731): avc: denied { ioctl } for pid=13803 comm="syz.3.3455" path="socket:[51078]" dev="sockfs" ino=51078 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.748812][ T30] audit: type=1400 audit(1792369494.247:732): avc: denied { write } for pid=5339 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51097 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 255.127847][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.221503][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.329352][ T5609] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 255.333556][ T5609] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 255.343998][ T5609] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 255.355145][ T5609] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 255.357504][ T5609] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 255.457643][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.564293][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.576521][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3474'. [ 255.673658][ T5609] block nbd0: Receive control failed (result -32) [ 255.674021][ T52] block nbd0: Receive control failed (result -32) [ 255.786446][ T970] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.791453][ T4105] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.812281][ T5609] Bluetooth: hci13: command tx timeout [ 255.975343][ T166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.984281][ T166] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.111600][ T12] bridge_slave_1: left allmulticast mode [ 256.111637][ T12] bridge_slave_1: left promiscuous mode [ 256.112840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.153675][ T12] bridge_slave_0: left allmulticast mode [ 256.153696][ T12] bridge_slave_0: left promiscuous mode [ 256.153849][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.413209][ T30] audit: type=1400 audit(1792369495.897:733): avc: denied { write } for pid=13854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.587907][ T30] audit: type=1400 audit(1792369496.087:734): avc: denied { write } for pid=13875 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.688460][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 256.705324][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 256.709048][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 256.726197][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 256.726657][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.728455][T13886] openvswitch: netlink: ct_state flags 00000180 unsupported [ 256.784989][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.787571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.794979][ T12] bond0 (unregistering): Released all slaves [ 256.800914][ T5339] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 256.818825][T13835] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.823682][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 256.961066][ T5339] usb 7-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 256.964909][ T5339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.964932][ T5339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.966679][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.966701][ T5339] usb 7-1: Product: syz [ 256.966715][ T5339] usb 7-1: Manufacturer: syz [ 256.966729][ T5339] usb 7-1: SerialNumber: syz [ 257.472859][ T9] usb 7-1: USB disconnect, device number 24 [ 257.474304][ T52] Bluetooth: hci14: CSR: Local version failed (-71) [ 257.493433][ T52] Bluetooth: hci10: command tx timeout [ 257.605764][ T30] audit: type=1400 audit(1792369497.107:735): avc: denied { write } for pid=13895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.767818][ T30] audit: type=1400 audit(1792369497.267:736): avc: denied { write } for pid=13923 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.779195][T13925] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 257.780532][ T30] audit: type=1400 audit(1792369497.277:737): avc: denied { map } for pid=13924 comm="syz.4.3495" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 257.782150][T13883] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.889734][ T970] IPVS: starting estimator thread 0... [ 257.892839][ T52] Bluetooth: hci13: command tx timeout [ 257.949517][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 257.973601][T13929] IPVS: using max 42 ests per chain, 100800 per kthread [ 257.995421][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 258.108879][ T12] hsr_slave_0: left promiscuous mode [ 258.109780][ T12] hsr_slave_1: left promiscuous mode [ 258.110533][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.110559][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.136893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.136911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.151666][T13935] i2c i2c-0: new_device: Extra parameters [ 258.164467][ T12] veth1_macvtap: left promiscuous mode [ 258.164520][ T12] veth0_macvtap: left promiscuous mode [ 258.164649][ T12] veth1_vlan: left promiscuous mode [ 258.164725][ T12] veth0_vlan: left promiscuous mode [ 258.274361][T13941] jffs2: notice: (13941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 258.277184][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 258.277200][ T30] audit: type=1400 audit(1792369497.777:739): avc: denied { write } for pid=13940 comm="syz.6.3501" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.277539][ T30] audit: type=1400 audit(1792369497.777:740): avc: denied { create } for pid=13940 comm="syz.6.3501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.510195][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.524102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.731733][ T1215] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 258.771845][ T52] Bluetooth: hci9: command tx timeout [ 258.779403][T13956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.880940][ T1215] usb 7-1: Using ep0 maxpacket: 16 [ 258.881425][ T1215] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 258.882287][ T1215] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.882325][ T1215] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.882354][ T1215] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.882374][ T1215] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 258.882397][ T1215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.882425][ T1215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.887131][ T1215] usb 7-1: config 0 descriptor?? [ 259.039481][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.039567][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.039657][T13835] bridge_slave_0: entered allmulticast mode [ 259.041718][T13835] bridge_slave_0: entered promiscuous mode [ 259.061875][ T12] IPVS: stop unused estimator thread 0... [ 259.080051][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.080125][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.080218][T13835] bridge_slave_1: entered allmulticast mode [ 259.087337][T13835] bridge_slave_1: entered promiscuous mode [ 259.218358][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.233837][ T30] audit: type=1400 audit(1792369498.737:741): avc: denied { write } for pid=13954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.234991][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.316359][ T30] audit: type=1400 audit(1792369498.817:742): avc: denied { write } for pid=13979 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.357515][T13835] team0: Port device team_slave_0 added [ 259.396702][ T1215] logitech-djreceiver 0003:046D:C53A.0014: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 259.419555][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.447440][T13835] team0: Port device team_slave_1 added [ 259.448773][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 259.449584][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.449657][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.449752][T13883] bridge_slave_0: entered allmulticast mode [ 259.452096][T13883] bridge_slave_0: entered promiscuous mode [ 259.464352][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.464416][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.464500][T13883] bridge_slave_1: entered allmulticast mode [ 259.465642][T13883] bridge_slave_1: entered promiscuous mode [ 259.530596][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.530611][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.530633][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.555016][ T29] usb 7-1: USB disconnect, device number 25 [ 259.560303][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.571658][ T52] Bluetooth: hci10: command tx timeout [ 259.600200][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.624674][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.624698][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.624804][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.663194][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.706344][ T5743] kernel read not supported for file /dsp (pid: 5743 comm: kworker/1:7) [ 259.746892][T13835] hsr_slave_0: entered promiscuous mode [ 259.747641][T13835] hsr_slave_1: entered promiscuous mode [ 259.748679][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 259.748695][T13835] Cannot create hsr debugfs directory [ 259.796592][T13988] sd 0:0:1:0: PR command failed: 1026 [ 259.796632][T13988] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 259.796670][T13988] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 259.819273][T13883] team0: Port device team_slave_0 added [ 259.858092][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.936847][T13883] team0: Port device team_slave_1 added [ 260.050402][T13883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.050417][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.050439][T13883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.073612][ T30] audit: type=1400 audit(1792369499.577:743): avc: denied { write } for pid=13983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.158147][ T9276] udevd[9276]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 260.184029][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.204932][T13883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.204945][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.204966][T13883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.282646][ T30] audit: type=1400 audit(1792369499.787:744): avc: denied { write } for pid=14005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.387416][ T30] audit: type=1400 audit(1792369499.887:745): avc: denied { read } for pid=14007 comm="syz.6.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.471251][T13883] hsr_slave_0: entered promiscuous mode [ 260.472289][T13883] hsr_slave_1: entered promiscuous mode [ 260.477041][T13883] debugfs: 'hsr0' already exists in 'hsr' [ 260.477060][T13883] Cannot create hsr debugfs directory [ 260.478310][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.521979][T14012] binder: BC_ACQUIRE_RESULT not supported [ 260.521994][T14012] binder: 14011:14012 ioctl c0306201 200000000140 returned -22 [ 260.710634][T14018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.756624][ T1016] netdevsim netdevsim9 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.756701][ T1016] netdevsim netdevsim9 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.819561][T13835] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.851489][ T52] Bluetooth: hci9: command tx timeout [ 260.979294][T14024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.998018][T13835] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.100687][ T970] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.195331][ T12] bridge_slave_1: left allmulticast mode [ 261.195359][ T12] bridge_slave_1: left promiscuous mode [ 261.195514][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.198542][ T12] bridge_slave_0: left allmulticast mode [ 261.198559][ T12] bridge_slave_0: left promiscuous mode [ 261.198705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.311234][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 261.398728][ T30] audit: type=1400 audit(1792369500.897:746): avc: denied { write } for pid=14022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.456595][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.472354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.479166][ T12] bond0 (unregistering): Released all slaves [ 261.480474][ T30] audit: type=1400 audit(1792369500.977:747): avc: denied { write } for pid=14043 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.483755][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 261.484959][ T9] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 261.485798][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 261.485823][ T9] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.485845][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 261.485869][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.532149][ T9] usb 7-1: config 0 descriptor?? [ 261.532556][T14027] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 261.562389][ T146] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.611763][T13835] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.636846][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 261.656210][ T52] Bluetooth: hci10: command tx timeout [ 261.747167][T13835] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.796617][T14047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3524'. [ 261.926934][T14050] binder: 14049:14050 ioctl c0306201 200000000640 returned -22 [ 261.953142][ T9] hid_parser_main: 388 callbacks suppressed [ 261.953162][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953183][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953201][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953219][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953235][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953253][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953271][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953288][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953306][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.953324][ T9] samsung 0003:0419:0001.0015: unknown main item tag 0x0 [ 261.955294][ T9] samsung 0003:0419:0001.0015: unexpected long global item [ 261.955831][ T9] samsung 0003:0419:0001.0015: parse failed [ 261.955886][ T9] samsung 0003:0419:0001.0015: probe with driver samsung failed with error -22 [ 262.101187][T13883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.198316][ T5339] usb 7-1: USB disconnect, device number 26 [ 262.280657][T13883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.316561][ T12] hsr_slave_0: left promiscuous mode [ 262.317078][ T12] hsr_slave_1: left promiscuous mode [ 262.317704][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.317721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.319294][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.319308][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.379326][ T12] veth1_macvtap: left promiscuous mode [ 262.379356][ T12] veth0_macvtap: left promiscuous mode [ 262.379433][ T12] veth1_vlan: left promiscuous mode [ 262.379487][ T12] veth0_vlan: left promiscuous mode [ 262.430701][ T30] audit: type=1400 audit(1792369501.927:748): avc: denied { write } for pid=14051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.829289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 262.838871][ T12] team0 (unregistering): Port device team_slave_0 removed [ 262.931563][ T52] Bluetooth: hci9: command tx timeout [ 262.980679][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.020905][ T1215] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 263.044333][T13883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.165766][T13883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.201324][ T1215] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 263.202216][ T1215] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.202240][ T1215] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 263.202273][ T1215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.206598][ T1215] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 263.255210][ T1215] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 263.391532][ T12] IPVS: stop unused estimator thread 0... [ 263.422757][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 263.422770][ T30] audit: type=1400 audit(1792369502.927:751): avc: denied { write } for pid=14084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.525716][T13883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.543926][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.547409][T13883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.580652][ T1215] usb 7-1: USB disconnect, device number 27 [ 263.587521][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.589790][T13883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.615773][ T30] audit: type=1400 audit(1792369503.117:752): avc: denied { write } for pid=14104 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.616595][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.617185][T13883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.659015][ T1215] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 263.659583][ T1215] spcp8x5 7-1:1.0: device disconnected [ 263.680794][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.735007][ T52] Bluetooth: hci10: command tx timeout [ 263.878455][T13835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.886361][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.892443][T13835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.902216][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.904394][T13835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.918499][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.919075][T13835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.927260][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.955509][ T30] audit: type=1400 audit(1792369503.457:753): avc: denied { read write } for pid=14121 comm="syz.4.3542" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 264.038002][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.049154][ T30] audit: type=1400 audit(1792369503.547:754): avc: denied { setopt } for pid=14128 comm="syz.4.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.050367][ T30] audit: type=1400 audit(1792369503.547:755): avc: denied { bind } for pid=14128 comm="syz.4.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.075304][ T30] audit: type=1400 audit(1792369503.577:756): avc: denied { getopt } for pid=14128 comm="syz.4.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.092657][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.106455][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.106539][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.142350][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.142431][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.254199][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.345399][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.363744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.363849][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.406185][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.406273][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.514391][ T30] audit: type=1400 audit(1792369504.017:757): avc: denied { write } for pid=14127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.716264][ T30] audit: type=1400 audit(1792369504.207:758): avc: denied { write } for pid=14156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.909364][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 265.012301][ T52] Bluetooth: hci9: command tx timeout [ 265.074003][T13883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.295076][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.394928][T13835] veth0_vlan: entered promiscuous mode [ 265.424329][T13835] veth1_vlan: entered promiscuous mode [ 265.534738][T13835] veth0_macvtap: entered promiscuous mode [ 265.553589][T13835] veth1_macvtap: entered promiscuous mode [ 265.560405][ T30] audit: type=1400 audit(1792369505.057:759): avc: denied { write } for pid=14170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.635096][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.679296][ T30] audit: type=1400 audit(1792369505.177:760): avc: denied { write } for pid=14202 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.680270][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.860860][ T1016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.860977][ T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.862746][ T1016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.878599][T13883] veth0_vlan: entered promiscuous mode [ 265.895345][ T1016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.900479][T13883] veth1_vlan: entered promiscuous mode [ 266.027411][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.027431][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.160147][T13883] veth0_macvtap: entered promiscuous mode [ 266.185724][T13883] veth1_macvtap: entered promiscuous mode [ 266.185832][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.185846][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.244515][T13883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.256465][T13883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.363985][ T970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.364031][ T970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.364055][ T970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.364080][ T970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.593507][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.593529][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.600095][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.686873][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.686893][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.995084][T14251] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 267.061100][ T5781] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 267.213257][ T5781] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice= 1.02 [ 267.214316][ T5781] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 267.214345][ T5781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.214382][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.219195][T14238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.222562][T14265] netlink: 'syz.3.3566': attribute type 6 has an invalid length. [ 267.225498][ T5781] mct_u232 5-1:1.0: MCT U232 converter detected [ 267.273903][ T5781] usb 5-1: MCT U232 converter now attached to ttyUSB0 [ 267.448451][ T5339] usb 5-1: USB disconnect, device number 11 [ 267.458482][ T5339] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 267.459868][ T5339] mct_u232 5-1:1.0: device disconnected [ 267.865867][T14297] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 268.181373][ T5781] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 268.324125][ T5743] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 268.338628][ T5781] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 268.340080][ T5781] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 268.340104][ T5781] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 268.345277][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.345298][ T5781] usb 7-1: Product: syz [ 268.345311][ T5781] usb 7-1: Manufacturer: syz [ 268.345323][ T5781] usb 7-1: SerialNumber: syz [ 268.348011][ T5781] usb 7-1: config 0 descriptor?? [ 268.348667][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.348698][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.471212][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 268.471697][ T5743] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 268.472936][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.477810][ T5743] usb 5-1: config 0 descriptor?? [ 268.564863][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.564903][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.686231][ T5743] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 268.698533][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.700002][ T5743] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 268.700042][ T5743] usb 5-1: media controller created [ 268.733703][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.888756][ T5743] az6027: usb out operation failed. (-71) [ 268.889110][ T5743] az6027: usb out operation failed. (-71) [ 268.889123][ T5743] stb0899_attach: Driver disabled by Kconfig [ 268.889132][ T5743] az6027: no front-end attached [ 268.889132][ T5743] [ 268.891365][ T5743] az6027: usb out operation failed. (-71) [ 268.891400][ T5743] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 268.896521][ T5743] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 268.907619][ T5743] dvb-usb: schedule remote query interval to 400 msecs. [ 268.907634][ T5743] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 268.915726][ T5743] usb 5-1: USB disconnect, device number 12 [ 268.974443][ T5781] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 269.047131][ T5743] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 269.173555][ T5781] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 269.186629][ T5781] usb 7-1: USB disconnect, device number 28 [ 269.320132][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 269.320149][ T30] audit: type=1400 audit(1792369508.817:771): avc: denied { mounton } for pid=14361 comm="syz.5.3592" path="/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 269.531234][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3599'. [ 269.584464][T14378] input: syz1 as /devices/virtual/input/input58 [ 269.655363][ T5743] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 269.795732][ T5781] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0004.0016/input/input59 [ 269.801249][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 269.804564][ T5743] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 269.806530][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.806556][ T5743] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.806587][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.826829][ T5743] usb 6-1: config 0 descriptor?? [ 269.882712][ T30] audit: type=1400 audit(1792369509.387:772): avc: denied { setattr } for pid=13835 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.903563][ T5781] hid-generic 0005:057E:0004.0016: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 269.912478][ T5609] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 269.916328][ T5609] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 269.917075][ T5609] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 269.918250][ T5609] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 269.919096][ T5609] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 270.070882][ T5728] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 270.236091][ T5728] usb 5-1: New USB device found, idVendor=0064, idProduct=0000, bcdDevice= 0.00 [ 270.236129][ T5728] usb 5-1: no configurations [ 270.236141][ T5728] usb 5-1: can't read configurations, error -22 [ 270.328697][ T5743] uclogic 0003:5543:0005.0017: hidraw0: USB HID v0.02 Device [HID 5543:0005] on usb-dummy_hcd.5-1/input0 [ 270.510494][ T5743] usb 6-1: USB disconnect, device number 3 [ 270.755015][T14393] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.285304][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3626'. [ 271.302867][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'. [ 271.302901][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 271.355287][T14428] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input60 [ 271.718949][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.719078][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.719419][T14393] bridge_slave_0: entered allmulticast mode [ 271.744535][T14393] bridge_slave_0: entered promiscuous mode [ 271.752494][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.752616][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.752715][T14393] bridge_slave_1: entered allmulticast mode [ 271.754028][T14393] bridge_slave_1: entered promiscuous mode [ 271.809664][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.822275][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.854086][T14393] team0: Port device team_slave_0 added [ 271.856165][T14393] team0: Port device team_slave_1 added [ 271.888359][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.888372][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.888392][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.889877][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.889888][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.889909][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.972140][ T5609] Bluetooth: hci14: command tx timeout [ 272.030341][T14393] hsr_slave_0: entered promiscuous mode [ 272.036967][T14393] hsr_slave_1: entered promiscuous mode [ 272.037492][T14393] debugfs: 'hsr0' already exists in 'hsr' [ 272.037509][T14393] Cannot create hsr debugfs directory [ 272.215993][T14393] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.367723][T14456] synth uevent: /bus/acpi: unknown uevent action string [ 272.400733][T14393] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.577591][T14393] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.606999][T14464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.691533][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 272.752930][T14393] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.757013][ T30] audit: type=1400 audit(1792369512.257:773): avc: denied { wake_alarm } for pid=14474 comm="syz.5.3636" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.058325][T14393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 273.063217][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.063917][T14393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.075314][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.076439][T14393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.089227][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.090108][T14393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 273.103785][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.110848][ T1215] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 273.212382][ T190] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 273.256588][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.263182][ T1215] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 273.264038][ T1215] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.264058][ T1215] usb 7-1: config 1 has no interface number 0 [ 273.265708][ T1215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.265726][ T1215] usb 7-1: Product: syz [ 273.265738][ T1215] usb 7-1: Manufacturer: syz [ 273.265752][ T1215] usb 7-1: SerialNumber: syz [ 273.298778][ T1215] usb 7-1: 3:1 : does not exist [ 273.298795][ T1215] usb 7-1: 3:2 : does not exist [ 273.303560][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.315742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.315814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.327229][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.327299][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.376329][ T190] usb 6-1: not running at top speed; connect to a high speed hub [ 273.376358][ T190] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 273.379223][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.379246][ T190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.379287][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.395694][ T190] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 273.627211][ T9] usb 7-1: USB disconnect, device number 29 [ 273.808471][ T190] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 273.808867][ T190] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 273.808930][ T190] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 273.820505][ T190] usb 6-1: USB disconnect, device number 4 [ 274.051998][ T52] Bluetooth: hci14: command tx timeout [ 274.262151][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.685588][ T30] audit: type=1400 audit(1792369515.182:774): avc: denied { map } for pid=14537 comm="syz.4.3656" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 274.753332][T14393] veth0_vlan: entered promiscuous mode [ 274.775752][T14393] veth1_vlan: entered promiscuous mode [ 274.863179][T14393] veth0_macvtap: entered promiscuous mode [ 274.878261][T14393] veth1_macvtap: entered promiscuous mode [ 274.919117][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.943180][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.538713][ T9276] udevd[9276]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 275.675015][ T166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.684767][ T970] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.686787][ T970] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.686838][ T970] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.863700][T14562] ima: signed policy file (specified as an absolute pathname) required [ 275.863897][ T30] audit: type=1802 audit(1792369516.362:775): pid=14562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.6.3664" res=0 errno=0 [ 275.864135][T14561] ima: policy update failed [ 275.864263][ T30] audit: type=1802 audit(1792369516.362:776): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.3664" res=0 errno=0 [ 275.924140][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.924158][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.028290][ T1823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.028310][ T1823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.069167][ T30] audit: type=1400 audit(1792369516.562:777): avc: denied { getattr } for pid=14563 comm="syz.5.3666" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.131125][ T52] Bluetooth: hci14: command tx timeout [ 277.150165][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 277.412905][ T5700] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 277.539361][ T30] audit: type=1400 audit(1792369518.032:778): avc: denied { ioctl } for pid=14618 comm="syz.7.3690" path="socket:[56118]" dev="sockfs" ino=56118 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 277.584407][ T5700] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 277.596169][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.596190][ T5700] usb 7-1: Product: syz [ 277.596203][ T5700] usb 7-1: Manufacturer: syz [ 277.596216][ T5700] usb 7-1: SerialNumber: syz [ 277.598208][ T5700] usb 7-1: config 0 descriptor?? [ 277.605708][ T5700] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 030 [ 277.709550][T14626] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3694'. [ 278.035909][ T5700] (null): failure reading functionality [ 278.045461][ T5700] i2c i2c-1: connected i2c-tiny-usb device [ 278.211072][ T52] Bluetooth: hci14: command tx timeout [ 278.260736][ T5700] usb 7-1: USB disconnect, device number 30 [ 278.890493][ T30] audit: type=1400 audit(1792369519.382:779): avc: denied { ioctl } for pid=14645 comm="syz.6.3700" path="socket:[56815]" dev="sockfs" ino=56815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.950257][T14648] netlink: 'syz.7.3701': attribute type 14 has an invalid length. [ 278.983554][ T5727] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 279.018217][T14652] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3703'. [ 279.133778][ T5727] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.135254][ T5727] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.135285][ T5727] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.135320][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.148404][T14641] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 279.196613][ T5727] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.404770][ T30] audit: type=1400 audit(1792369519.902:780): avc: denied { write } for pid=14639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.464200][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3707'. [ 279.517550][ T5727] usb 6-1: USB disconnect, device number 5 [ 279.617639][ T30] audit: type=1400 audit(1792369520.112:781): avc: denied { write } for pid=14669 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.695484][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.920872][ T190] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 280.080622][ T190] usb 7-1: Using ep0 maxpacket: 8 [ 280.083118][ T190] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 280.085089][ T190] usb 7-1: config 0 has no interfaces? [ 280.085114][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.087045][ T190] usb 7-1: config 0 descriptor?? [ 280.322584][ T5727] usb 7-1: USB disconnect, device number 31 [ 280.357069][ T30] audit: type=1400 audit(1792369520.852:782): avc: denied { write } for pid=14679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.567639][ T30] audit: type=1400 audit(1792369521.062:783): avc: denied { write } for pid=14702 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.702255][ T190] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 280.859861][ T190] usb 8-1: Using ep0 maxpacket: 16 [ 280.868575][ T190] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 280.877616][ T190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.877638][ T190] usb 8-1: Product: syz [ 280.877650][ T190] usb 8-1: Manufacturer: syz [ 280.877663][ T190] usb 8-1: SerialNumber: syz [ 280.956641][ T30] audit: type=1400 audit(1792369521.452:784): avc: denied { write } for pid=14705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.060097][ T30] audit: type=1400 audit(1792369521.552:785): avc: denied { write } for pid=14719 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.105270][ T190] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 281.113365][ T190] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.118561][ T190] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 281.118598][ T190] usb 8-1: media controller created [ 281.147777][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.427143][ T190] zl10353_read_register: readreg error (reg=127, ret==-110) [ 281.525422][ T190] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 281.537723][ T190] usb 8-1: USB disconnect, device number 4 [ 281.550392][ T30] audit: type=1400 audit(1792369522.042:786): avc: denied { write } for pid=14734 comm="syz.6.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.636423][ T30] audit: type=1400 audit(1792369522.132:787): avc: denied { write } for pid=14723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.764311][ T30] audit: type=1400 audit(1792369522.262:788): avc: denied { write } for pid=14745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.388703][ T30] audit: type=1400 audit(1792369522.882:789): avc: denied { mount } for pid=14771 comm="syz.5.3736" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 282.553467][ T5727] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 282.598861][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3740'. [ 282.711315][ T5727] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 282.712182][ T5727] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 282.712223][ T5727] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.712245][ T5727] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.712267][ T5727] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.713111][ T5727] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 282.713150][ T5727] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.713171][ T5727] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.713192][ T5727] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.714925][ T5727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.714948][ T5727] usb 8-1: Product: syz [ 282.714963][ T5727] usb 8-1: Manufacturer: syz [ 282.714995][ T5727] usb 8-1: SerialNumber: syz [ 282.728930][ T5727] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 282.742575][ T5727] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 282.747891][ T5727] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 282.940629][ T5609] Bluetooth: hci6: command 0x0406 tx timeout [ 283.008500][T14768] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 283.012431][ T5727] usb 8-1: USB disconnect, device number 5 [ 283.028360][ T5727] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 283.034352][ T5727] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 283.034973][ T5727] ti_usb_3410_5052 8-1:2.0: device disconnected [ 283.163732][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0018/input/input62 [ 283.195493][ T9] hid-generic 0005:FFFD057E:0305.0018: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 283.400934][ T190] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 283.559417][ T190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.560271][ T190] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 283.560305][ T190] usb 6-1: no configurations [ 283.560317][ T190] usb 6-1: can't read configurations, error -22 [ 283.697814][ T30] audit: type=1400 audit(1792369524.192:790): avc: denied { write } for pid=14804 comm="syz.6.3751" name="core" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.699308][ T30] audit: type=1400 audit(1792369524.192:791): avc: denied { write } for pid=14804 comm="syz.6.3751" name="core" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.948626][ T5728] kernel read not supported for file /dummy_udc (pid: 5728 comm: kworker/1:6) [ 285.003386][T14843] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 285.129375][ T5609] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 285.138329][ T5609] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 285.139040][ T5609] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 285.139720][ T5609] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 285.149087][ T5609] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 285.178017][T14850] netlink: 280 bytes leftover after parsing attributes in process `syz.7.3772'. [ 285.178035][T14850] netlink: 280 bytes leftover after parsing attributes in process `syz.7.3772'. [ 285.332387][ T32] INFO: task syz-executor:5601 blocked for more than 143 seconds. [ 285.332411][ T32] Tainted: G L syzkaller #0 [ 285.332422][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.332430][ T32] task:syz-executor state:D stack:22984 pid:5601 tgid:5601 ppid:1 task_flags:0x400140 flags:0x00080002 [ 285.332490][ T32] Call Trace: [ 285.332496][ T32] [ 285.332508][ T32] __schedule+0x1259/0x6920 [ 285.332538][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 285.332568][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 285.332598][ T32] ? lock_acquire+0x1d1/0x380 [ 285.332621][ T32] ? __pfx___schedule+0x10/0x10 [ 285.332649][ T32] ? find_held_lock+0x2b/0x80 [ 285.332677][ T32] ? schedule+0x225/0x2c0 [ 285.332706][ T32] schedule+0xdd/0x2c0 [ 285.332731][ T32] schedule_preempt_disabled+0x13/0x30 [ 285.332755][ T32] __mutex_lock+0xccb/0x1bd0 [ 285.332783][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 285.332815][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 285.332840][ T32] ? net_generic+0x25/0x2a0 [ 285.332862][ T32] ? net_generic+0xea/0x2a0 [ 285.332884][ T32] ? net_generic+0xea/0x2a0 [ 285.332912][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 285.332938][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 285.332964][ T32] nfsd_umount+0x3b/0x60 [ 285.332991][ T32] deactivate_locked_super+0xbd/0x130 [ 285.333015][ T32] deactivate_super+0xea/0x110 [ 285.333039][ T32] cleanup_mnt+0xb7/0x160 [ 285.333060][ T32] task_work_run+0x150/0x240 [ 285.333090][ T32] ? __pfx_task_work_run+0x10/0x10 [ 285.333127][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 285.333152][ T32] ? rcu_is_watching+0x13/0xc0 [ 285.333182][ T32] do_syscall_64+0x661/0x790 [ 285.333211][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.333230][ T32] RIP: 0033:0x7fd5b999f797 [ 285.333245][ T32] RSP: 002b:00007ffc4a12e8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 285.333264][ T32] RAX: 0000000000000000 RBX: 00007fd5b9a34efb RCX: 00007fd5b999f797 [ 285.333276][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4a12e980 [ 285.333287][ T32] RBP: 00007ffc4a12e980 R08: 00007ffc4a12f980 R09: 00000000ffffffff [ 285.333300][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4a12fa10 [ 285.333312][ T32] R13: 00007fd5b9a34efb R14: 0000000000020db4 R15: 00007ffc4a12fa50 [ 285.333339][ T32] [ 285.333425][ T32] [ 285.333425][ T32] Showing all locks held in the system: [ 285.333435][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 285.333448][ T32] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 285.333510][ T32] locks held by kworker/u8:7/970: 4, last CPU#0: [ 285.333524][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 285.333567][ T32] #1: ffffc9000455fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 285.333610][ T32] #2: ffff88807d45a258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 285.333663][ T32] #3: ffff8880761dd8e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1c7/0xd20 [ 285.333731][ T32] locks held by kworker/u8:9/1823: 2, on CPU#0: [ 285.333744][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 285.333786][ T32] #1: ffffc900069e7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 285.333842][ T32] locks held by syz-executor/5601: 2, on CPU#1: [ 285.333855][ T32] #0: ffff88802b94c0e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.333906][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.333957][ T32] locks held by syz-executor/5607: 2, on CPU#0: [ 285.333970][ T32] #0: ffff88807abe00e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334019][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334069][ T32] locks held by syz-executor/5612: 2, on CPU#0: [ 285.334082][ T32] #0: ffff88807e4cc0e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334132][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334188][ T32] locks held by syz.3.1454/8939: 3, on CPU#1: [ 285.334201][ T32] #0: ffff888075859eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 285.334241][ T32] #1: ffff888038ace460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.334291][ T32] #2: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 285.334332][ T32] locks held by syz-executor/9274: 2, on CPU#1: [ 285.334345][ T32] #0: ffff88807f5480e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334395][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334448][ T32] locks held by syz.4.1898/9982: 3, on CPU#0: [ 285.334461][ T32] #0: ffff88807dcfd430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 285.334508][ T32] #1: ffff88807dc50460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.334558][ T32] #2: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 285.334600][ T32] locks held by syz-executor/10473: 2, on CPU#0: [ 285.334613][ T32] #0: ffff8880798260e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334664][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334727][ T32] locks held by syz-executor/10656: 2, on CPU#0: [ 285.334740][ T32] #0: ffff88804ef8c0e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334790][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334842][ T32] locks held by syz-executor/12657: 2, on CPU#0: [ 285.334855][ T32] #0: ffff88802d6a40e8 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 285.334905][ T32] #1: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 285.334957][ T32] locks held by syz.2.3109/12918: 1, on CPU#1: [ 285.334970][ T32] #0: ffff88802b94c0e8 (&type->s_umount_key#82){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 285.335018][ T32] locks held by syz.1.3458/13808: 3, on CPU#0: [ 285.335031][ T32] #0: ffff888079bbf970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 285.335072][ T32] #1: ffff888038dba460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.335122][ T32] #2: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 285.335162][ T32] locks held by syz-executor/13835: 1, last CPU#1: [ 285.335175][ T32] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 285.335229][ T32] locks held by syz-executor/14393: 4, last CPU#0: [ 285.335242][ T32] #0: ffffffff8ff3df90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x5079/0x8430 [ 285.335287][ T32] #1: ffff888034bd7180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 285.335337][ T32] #2: ffff88802793c080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 285.335391][ T32] #3: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 285.335440][ T32] [ 285.335445][ T32] ============================================= [ 285.335445][ T32] [ 285.335452][ T32] NMI backtrace for cpu 1 [ 285.335465][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 285.335494][ T32] Tainted: [L]=SOFTLOCKUP [ 285.335501][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.335510][ T32] Call Trace: [ 285.335516][ T32] [ 285.335523][ T32] dump_stack_lvl+0x100/0x190 [ 285.335551][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 285.335586][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.335608][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 285.335635][ T32] sys_info+0x141/0x190 [ 285.335654][ T32] watchdog+0xcb1/0x1030 [ 285.335684][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.335709][ T32] ? __pfx_watchdog+0x10/0x10 [ 285.335733][ T32] ? __kthread_parkme+0x18f/0x230 [ 285.335759][ T32] ? kthread+0x13a/0x450 [ 285.335792][ T32] ? __pfx_watchdog+0x10/0x10 [ 285.335813][ T32] kthread+0x373/0x450 [ 285.335838][ T32] ? __pfx_kthread+0x10/0x10 [ 285.335866][ T32] ret_from_fork+0x730/0xd60 [ 285.335889][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 285.335911][ T32] ? __switch_to+0x800/0x10f0 [ 285.335938][ T32] ? __pfx_kthread+0x10/0x10 [ 285.335966][ T32] ret_from_fork_asm+0x1a/0x30 [ 285.335998][ T32] [ 285.336005][ T32] Sending NMI from CPU 1 to CPUs 0: [ 285.336027][ C0] NMI backtrace for cpu 0 [ 285.336040][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.336059][ C0] Tainted: [L]=SOFTLOCKUP [ 285.336064][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.336072][ C0] Workqueue: bat_events batadv_dat_purge [ 285.336090][ C0] RIP: 0010:do_raw_spin_lock+0x158/0x260 [ 285.336110][ C0] Code: 00 00 00 89 44 24 04 f0 0f b1 13 0f 85 93 00 00 00 48 89 ea 65 44 8b 35 de c4 a5 13 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 aa [ 285.336123][ C0] RSP: 0018:ffffc9000201fb10 EFLAGS: 00000a06 [ 285.336134][ C0] RAX: dffffc0000000000 RBX: ffff88808087cb80 RCX: ffffffff81e7db38 [ 285.336144][ C0] RDX: 1ffff1101010f971 RSI: 0000000000000004 RDI: ffffc9000201fb38 [ 285.336153][ C0] RBP: ffff88808087cb88 R08: 0000000000000001 R09: fffff52000403f67 [ 285.336162][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000403f63 [ 285.336170][ C0] R13: ffff88808087cb90 R14: 0000000000000000 R15: ffffffff8b9dbd10 [ 285.336180][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 285.336196][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.336205][ C0] CR2: 00007fc0e2842e9c CR3: 000000005b7ed000 CR4: 00000000003526f0 [ 285.336215][ C0] Call Trace: [ 285.336219][ C0] [ 285.336225][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.336246][ C0] __batadv_dat_purge.part.0+0xf6/0x3c0 [ 285.336263][ C0] ? process_one_work+0x906/0x1b10 [ 285.336278][ C0] batadv_dat_purge+0x4b/0xa0 [ 285.336293][ C0] process_one_work+0xac7/0x1b10 [ 285.336309][ C0] ? __pfx_process_one_work+0x10/0x10 [ 285.336329][ C0] ? lock_acquire+0x1d1/0x380 [ 285.336347][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 285.336364][ C0] worker_thread+0x5ef/0xe50 [ 285.336379][ C0] ? __pfx_worker_thread+0x10/0x10 [ 285.336392][ C0] ? kthread+0x13a/0x450 [ 285.336409][ C0] ? __pfx_worker_thread+0x10/0x10 [ 285.336420][ C0] kthread+0x373/0x450 [ 285.336438][ C0] ? __pfx_kthread+0x10/0x10 [ 285.336456][ C0] ret_from_fork+0x730/0xd60 [ 285.336472][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 285.336488][ C0] ? __switch_to+0x800/0x10f0 [ 285.336506][ C0] ? __pfx_kthread+0x10/0x10 [ 285.336524][ C0] ret_from_fork_asm+0x1a/0x30 [ 285.336544][ C0] [ 285.337025][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 286.402793][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 286.413447][ T32] Tainted: [L]=SOFTLOCKUP [ 286.417747][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.427780][ T32] Call Trace: [ 286.431043][ T32] [ 286.433955][ T32] dump_stack_lvl+0x100/0x190 [ 286.438622][ T32] vpanic+0x553/0x970 [ 286.442584][ T32] ? __pfx_vpanic+0x10/0x10 [ 286.447071][ T32] panic+0xd1/0xe0 [ 286.450771][ T32] ? __pfx_panic+0x10/0x10 [ 286.455172][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 286.460186][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 286.466321][ T32] ? watchdog.cold+0x1ec/0x234 [ 286.471069][ T32] watchdog.cold+0x1fd/0x234 [ 286.475653][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.481441][ T32] ? __pfx_watchdog+0x10/0x10 [ 286.486100][ T32] ? __kthread_parkme+0x18f/0x230 [ 286.491110][ T32] ? kthread+0x13a/0x450 [ 286.495345][ T32] ? __pfx_watchdog+0x10/0x10 [ 286.500002][ T32] kthread+0x373/0x450 [ 286.504053][ T32] ? __pfx_kthread+0x10/0x10 [ 286.508626][ T32] ret_from_fork+0x730/0xd60 [ 286.513196][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 286.518286][ T32] ? __switch_to+0x800/0x10f0 [ 286.522947][ T32] ? __pfx_kthread+0x10/0x10 [ 286.527522][ T32] ret_from_fork_asm+0x1a/0x30 [ 286.532273][ T32] [ 286.535465][ T32] Kernel Offset: disabled [ 286.539776][ T32] Rebooting in 86400 seconds..