last executing test programs: 4.443255434s ago: executing program 3 (id=280): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0xa30, 0x0, 0x40000, 0x198, 0x8e0, 0x198, 0x998, 0x358, 0x358, 0x998, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'vcan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x878, 0x8e0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x6, 0x1}, {0x6, 0x2}, {0x200}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0xffff}, {0x4, 0x1}, {0xff, 0x3}, {0x100}], [{0x5, 0x9}, {0x10001, 0x1}, {0x5, 0x216}, {0x6, 0x8000}, {0x5}, {0x9, 0x9}, {0x7fffffff, 0x3}, {0x80000001, 0x7c}, {0x7, 0xffff}, {0xefd4, 0x5}, {0x0, 0x800008}], 0x8, 0x8}, {[{0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x80000003, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x3}, {0x800, 0x3}, {0x1000, 0x3}, {0xf6, 0x2}, {0x4}], [{0xfffffff8, 0x5}, {0x8, 0x4}, {0x9, 0x1}, {0x4, 0xfffffffe}, {0x57, 0x100}, {0xd1fc, 0x8}, {0xe51, 0xffff}, {0x81, 0xe4e}, {0x1}, {0x80000001, 0xffffffff}, {0x3, 0x7}], 0x1, 0x6}, {[{0x6}, {0x400, 0xc3a7df4efad16460}, {0x6, 0x3}, {0xd, 0x3}, {0x7, 0x1}, {0x10001, 0x1}, {0xd3, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0xa}, {0x7fffffff, 0x3}], [{0x7ff, 0xfffffffb}, {0xffff, 0x9}, {0x61b, 0x9}, {0x90000000, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x212, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x8, 0x1ff0}], 0x1, 0x9}, {[{0x4}, {0x2}, {0x6}, {0xfffff001, 0x2}, {}, {0x0, 0x3}, {0x5cb, 0x1}, {0xa, 0x1}, {0x7a3b38ac, 0x2}, {0x2b1f}, {0x800, 0x2}], [{0x0, 0x9}, {0xadc, 0xffffffff}, {0x5cc}, {0x5a}, {0x8, 0x1}, {0x1, 0x3ff}, {0x100, 0xfffeffff}, {0x7, 0x8}, {0x1, 0x9}, {0xbffffe01, 0xd6f}, {0x5, 0x1}], 0xa, 0x9}, {[{0xfff, 0x2}, {0x3c5}, {0x1000, 0x3}, {}, {0x1, 0x2}, {0x2}, {0xb, 0x2}, {0xffffffff, 0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0x2}], [{0xa, 0x36}, {0x200, 0x4}, {0x9, 0x7}, {0xfffffffc, 0x800}, {0xa, 0x8}, {0x2, 0x8}, {0x9, 0x8}, {0x10}, {0x2, 0x9}, {0x7, 0x5}, {0xfffffffb}], 0x2, 0x3}, {[{0x9, 0x3}, {0x8, 0x3}, {0xfffffff9, 0x2}, {0x9}, {0x700, 0x2}, {0x7fffffff, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x401, 0x3}, {0x2}, {0xd}], [{0x7, 0x8}, {0x101, 0x10001}, {0x8, 0x2}, {0x4, 0x8001}, {0x1000, 0x6}, {0x400, 0x8e4}, {0x0, 0x4}, {0x8df1, 0x4}, {0xdcb, 0x9}, {0xff, 0x8}, {0x1, 0xed}], 0x6, 0xa}, {[{0x3, 0x1}, {0xc9, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x7f, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x2, 0x2}, {0x2, 0x3}], [{0x8, 0x40}, {0x0, 0x1}, {0x7, 0x7f}, {0x2, 0x5}, {0x3, 0x975c}, {0x1, 0x3}, {0x8f30, 0x2}, {0x4, 0x5}, {0x8000, 0xffff423b}, {0x6, 0xa3}, {0xffffffff, 0x6}], 0xa, 0xb}, {[{0x1ff, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x5a, 0x3}, {0x2}, {0x7fff}, {0x3e}, {0xc52c, 0x1}, {0x9, 0x3}, {0x8, 0x1}, {0x400, 0x2}], [{0x8, 0x40}, {0x8, 0xe}, {0x5, 0x1}, {0x8}, {0xffffffff, 0x6}, {0x5, 0x9}, {0x2, 0x7ff}, {0x9, 0xffffffff}, {0x8, 0xfbd}, {0xfffffffd, 0xffffffc5}, {0x7, 0x4}], 0x4, 0x8}, {[{0x4, 0x3}, {0x4}, {0x1, 0x3}, {0xffffff8c, 0x3}, {0x1000, 0x1}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x40, 0x3}, {0x0, 0x2}, {0xd}, {0x4, 0x3}], [{0x7, 0x800}, {0x4, 0x101}, {0x4, 0x5}, {0x9, 0x2}, {0x4, 0x4}, {0x1000008, 0xffffffff}, {0x3, 0x8}, {0x3, 0xb}, {0x3, 0x6}, {0x5, 0x2}, {0x523, 0x9}], 0x1}, {[{0x5, 0x2}, {0x3374, 0x3}, {0x4, 0x2}, {0x101}, {0x7, 0x3}, {0x4}, {0x3}, {0x6, 0x2}, {0x9, 0x1}, {0x9, 0x1}, {0x3, 0x3}], [{0x1, 0x9}, {0xa000, 0x1dfa}, {0x5, 0xfffffffb}, {0x2fd, 0x7}, {0x7fff, 0x1}, {0xd, 0x6}, {0x8001, 0xfffffff8}, {0x400, 0x3}, {0x100, 0x7}, {0x5, 0xa}, {0x2, 0x9}], 0xb, 0x4}, {[{0x6, 0x2}, {0xf339, 0x2}, {0x1, 0x3}, {0xc}, {0xd066, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x7}, {0x7, 0x2}, {0x10001}, {0xfff, 0x2}], [{0xfffffff6, 0xe}, {0x9, 0xfffff001}, {0x80000001, 0x80}, {0xfffffffb, 0x7}, {0x5, 0x4}, {0x4, 0xfffffff8}, {0x1, 0x4}, {0x1ff, 0x1c2d80dd}, {0x6, 0x4}, {0x10, 0x7240}, {0x2}], 0xa}], 0x1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x19}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x401, {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xad3) 4.412552551s ago: executing program 0 (id=282): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32, @ANYBLOB="83040500000000002800128008000100677470"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 3.994713367s ago: executing program 0 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0\x00') 3.994555605s ago: executing program 0 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000600)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) recvfrom$inet6(r0, &(0x7f00000006c0)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0xa51feab4831942cb, 0x0, 0x0) 3.614416317s ago: executing program 3 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 3.534617762s ago: executing program 3 (id=288): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000640)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x2, 0x400000000000009, 0xfffffffffffffff9, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000780)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.534458325s ago: executing program 2 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xffff9047, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0xffff9047, 0x2, r2}) 3.334431528s ago: executing program 2 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, 0x0) socket(0xa, 0x3, 0x3a) 3.334342426s ago: executing program 1 (id=292): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.164507846s ago: executing program 1 (id=293): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x6, r0, 0x0}]) 3.064513426s ago: executing program 0 (id=294): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x8942) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) 3.064377846s ago: executing program 1 (id=295): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) 2.65423136s ago: executing program 2 (id=296): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0xa, @pix_mp={0x3b, 0x1, 0x2036315a, 0x5, 0x4, [{0x3, 0x40}, {0x6, 0x8}, {0x8000000, 0x2}, {0x5, 0xaea}, {0x1000, 0x2}, {0x7f, 0x6}, {0x1, 0x6}, {0x2, 0x7fff}], 0x6, 0x9, 0x1, 0x2, 0x2}}) 2.654045409s ago: executing program 2 (id=297): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000011c0)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) 2.564021648s ago: executing program 2 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf4, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.453746673s ago: executing program 2 (id=299): mremap(&(0x7f00006b9000/0x12000)=nil, 0x12000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f00000000c0)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.254603716s ago: executing program 3 (id=300): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000002b40)={0x40000004}) 1.014764082s ago: executing program 1 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880), 0xf504, r0}, 0x38) 874.182471ms ago: executing program 1 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002bc0), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000002cc0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 694.619838ms ago: executing program 3 (id=303): listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72b43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b80247"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) eventfd2(0xa, 0x0) 694.494275ms ago: executing program 3 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000380)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) 432.605073ms ago: executing program 1 (id=305): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 14.574861ms ago: executing program 0 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 0s ago: executing program 0 (id=307): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000540)={0xf400, 0x1000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 28.898773][ T42] audit: type=1400 audit(1792437357.343:114): avc: denied { rlimitinh } for pid=5635 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.898888][ T42] audit: type=1400 audit(1792437357.343:115): avc: denied { siginh } for pid=5635 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:6731' (ED25519) to the list of known hosts. [ 30.683531][ T42] audit: type=1400 audit(1792437359.133:116): avc: denied { name_bind } for pid=5644 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.577604][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 31.577618][ T42] audit: type=1400 audit(1792437360.023:119): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.637314][ T42] audit: type=1400 audit(1792437360.083:120): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.854509][ T42] audit: type=1400 audit(1792437360.303:121): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.925176][ T42] audit: type=1400 audit(1792437360.373:122): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.846951][ T42] audit: type=1400 audit(1792437361.293:123): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.906194][ T42] audit: type=1400 audit(1792437361.353:124): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.993538][ T42] audit: type=1400 audit(1792437361.443:125): avc: denied { write } for pid=5665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.010069][ T42] audit: type=1400 audit(1792437361.453:126): avc: denied { mounton } for pid=5645 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.020465][ T42] audit: type=1400 audit(1792437361.463:127): avc: denied { mount } for pid=5645 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.023914][ T5645] cgroup: Unknown subsys name 'net' [ 33.025686][ T42] audit: type=1400 audit(1792437361.473:128): avc: denied { unmount } for pid=5645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.164109][ T5645] cgroup: Unknown subsys name 'cpuset' [ 33.167374][ T5645] cgroup: Unknown subsys name 'rlimit' [ 33.386749][ T5683] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.148250][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.754941][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 37.754954][ T42] audit: type=1400 audit(1792437366.203:154): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.956782][ T42] audit: type=1400 audit(1792437366.403:155): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.956814][ T42] audit: type=1400 audit(1792437366.403:156): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.956832][ T42] audit: type=1400 audit(1792437366.403:157): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.956853][ T42] audit: type=1400 audit(1792437366.403:158): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.957113][ T42] audit: type=1400 audit(1792437366.403:159): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.963659][ T42] audit: type=1400 audit(1792437366.413:160): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[2544]" dev="sockfs" ino=2544 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.983164][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.987101][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.987422][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.989118][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.989437][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.989738][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.990736][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.990923][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.991087][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.991619][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.991943][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.992880][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.994193][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.994397][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.994457][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.994904][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.995618][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.995818][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.996052][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.996544][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.001485][ T42] audit: type=1400 audit(1792437366.453:161): avc: denied { read } for pid=5729 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.008157][ T42] audit: type=1400 audit(1792437366.453:162): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.008187][ T42] audit: type=1400 audit(1792437366.453:163): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.213877][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.214519][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.216040][ T5731] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.217030][ T5739] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.235836][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.286173][ T5730] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.334689][ T5729] infiniband rxe0: set active [ 38.337329][ T5729] infiniband rxe0: added rxe_eth0 [ 38.347059][ T5729] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.347080][ T5729] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.347101][ T5729] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.364260][ T5522] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.370047][ T5729] RDS/IB: rxe0: added [ 38.370215][ T5729] smc: adding ib device rxe0 with port count 1 [ 38.370249][ T5729] smc: ib device rxe0 port 1 has no pnetid [ 38.391348][ T5522] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.413518][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.425072][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.448226][ T5736] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.549996][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.586950][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.587016][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.587074][ T5731] bridge_slave_0: entered allmulticast mode [ 38.587864][ T5731] bridge_slave_0: entered promiscuous mode [ 38.591576][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.591950][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.592009][ T5731] bridge_slave_1: entered allmulticast mode [ 38.593840][ T5731] bridge_slave_1: entered promiscuous mode [ 38.651216][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.664084][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.700252][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.762560][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.762641][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.762922][ T5739] bridge_slave_0: entered allmulticast mode [ 38.764225][ T5739] bridge_slave_0: entered promiscuous mode [ 38.767132][ T5731] team0: Port device team_slave_0 added [ 38.767297][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.767370][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.767628][ T5739] bridge_slave_1: entered allmulticast mode [ 38.769270][ T5739] bridge_slave_1: entered promiscuous mode [ 38.777419][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.777492][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.777568][ T5730] bridge_slave_0: entered allmulticast mode [ 38.778705][ T5730] bridge_slave_0: entered promiscuous mode [ 38.780863][ T5731] team0: Port device team_slave_1 added [ 38.795948][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.796002][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.796057][ T5730] bridge_slave_1: entered allmulticast mode [ 38.796732][ T5730] bridge_slave_1: entered promiscuous mode [ 38.816670][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.816715][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.820684][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.828718][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.829243][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.829252][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.829264][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.837783][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.844092][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.844101][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.844113][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.855719][ T5739] team0: Port device team_slave_0 added [ 38.864165][ T5739] team0: Port device team_slave_1 added [ 38.888425][ T5730] team0: Port device team_slave_0 added [ 38.889949][ T5730] team0: Port device team_slave_1 added [ 38.890268][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.890276][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.890288][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.891549][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.891557][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.891569][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.902007][ T5731] hsr_slave_0: entered promiscuous mode [ 38.902593][ T5731] hsr_slave_1: entered promiscuous mode [ 38.924382][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.924392][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.924404][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.940872][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.940882][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.940894][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.978733][ T5739] hsr_slave_0: entered promiscuous mode [ 38.979709][ T5739] hsr_slave_1: entered promiscuous mode [ 38.980281][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 38.980353][ T5739] Cannot create hsr debugfs directory [ 39.010210][ T5730] hsr_slave_0: entered promiscuous mode [ 39.010664][ T5730] hsr_slave_1: entered promiscuous mode [ 39.010971][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 39.010985][ T5730] Cannot create hsr debugfs directory [ 39.288479][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.288561][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.288708][ T5729] bridge_slave_0: entered allmulticast mode [ 39.289533][ T5729] bridge_slave_0: entered promiscuous mode [ 39.292219][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.292278][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.292334][ T5729] bridge_slave_1: entered allmulticast mode [ 39.293359][ T5729] bridge_slave_1: entered promiscuous mode [ 39.305959][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.312405][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.313952][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.321411][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.332065][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.334008][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.344118][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.346130][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.346167][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.350132][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.376781][ T5729] team0: Port device team_slave_0 added [ 39.378951][ T5729] team0: Port device team_slave_1 added [ 39.402497][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.402508][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.402521][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.409029][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.409042][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.409058][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.426943][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.436151][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.436699][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.440064][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.440825][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.444029][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.445378][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.445553][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.445840][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.445885][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.452044][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.455031][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.475336][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.475870][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.489498][ T5729] hsr_slave_0: entered promiscuous mode [ 39.489957][ T5729] hsr_slave_1: entered promiscuous mode [ 39.490261][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 39.490273][ T5729] Cannot create hsr debugfs directory [ 39.583738][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.586002][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.603037][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.604925][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.605975][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.609264][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.622260][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.624814][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.652473][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.705610][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.724501][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.732425][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.732509][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.735886][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.742787][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.750391][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.752730][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.754676][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.754761][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.764421][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.771751][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.775689][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.779689][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.783370][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.793518][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.793594][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.818214][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.818260][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.869779][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.897212][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.912260][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.912340][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.929446][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.929491][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.944785][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.969610][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.977898][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.977976][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.996413][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.996478][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.012651][ T5740] Bluetooth: hci3: command tx timeout [ 40.012778][ T5740] Bluetooth: hci0: command tx timeout [ 40.092297][ T5732] Bluetooth: hci2: command tx timeout [ 40.092476][ T5732] Bluetooth: hci1: command tx timeout [ 40.162624][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.202358][ T5731] veth0_vlan: entered promiscuous mode [ 40.206591][ T5731] veth1_vlan: entered promiscuous mode [ 40.225661][ T5731] veth0_macvtap: entered promiscuous mode [ 40.227727][ T5731] veth1_macvtap: entered promiscuous mode [ 40.238830][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.240759][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.253649][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.255320][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.258530][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.336383][ T5739] veth0_vlan: entered promiscuous mode [ 40.339294][ T5729] veth0_vlan: entered promiscuous mode [ 40.360397][ T5739] veth1_vlan: entered promiscuous mode [ 40.365593][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.365616][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.374069][ T5729] veth1_vlan: entered promiscuous mode [ 40.376073][ T5730] veth0_vlan: entered promiscuous mode [ 40.396077][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.396090][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.397266][ T5730] veth1_vlan: entered promiscuous mode [ 40.411712][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.411868][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.411903][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.411936][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.422400][ T5739] veth0_macvtap: entered promiscuous mode [ 40.425623][ T5739] veth1_macvtap: entered promiscuous mode [ 40.428466][ T5729] veth0_macvtap: entered promiscuous mode [ 40.435434][ T5729] veth1_macvtap: entered promiscuous mode [ 40.438961][ T5730] veth0_macvtap: entered promiscuous mode [ 40.447183][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.448942][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.455078][ T5730] veth1_macvtap: entered promiscuous mode [ 40.460267][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.477016][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.479089][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.489744][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.492361][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.501604][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.501772][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.501888][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.502040][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.538722][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.538736][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.583415][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.583427][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.608571][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.608583][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.625854][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.625866][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.640618][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.640631][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.651476][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651533][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651665][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651695][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651724][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651753][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651783][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.651811][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.667173][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.667190][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.714151][ T5895] Bluetooth: MGMT ver 1.23 [ 40.765886][ T5900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 40.778581][ T5901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.809823][ T5904] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 40.809841][ T5904] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.810255][ T5904] vhci_hcd vhci_hcd.0: Device attached [ 40.823618][ T5904] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 40.824603][ T5904] FAULT_INJECTION: forcing a failure. [ 40.824603][ T5904] name failslab, interval 1, probability 0, space 0, times 1 [ 40.824633][ T5904] CPU: 3 UID: 0 PID: 5904 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 40.824647][ T5904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.824660][ T5904] Call Trace: [ 40.824674][ T5904] [ 40.824679][ T5904] dump_stack_lvl+0x100/0x190 [ 40.824701][ T5904] should_fail_ex.cold+0x5/0xa [ 40.824718][ T5904] should_failslab+0xc2/0x120 [ 40.824737][ T5904] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 40.824754][ T5904] ? __kthread_create_on_node+0x186/0x3f0 [ 40.824773][ T5904] kvasprintf+0xbc/0x150 [ 40.824790][ T5904] ? __pfx_kvasprintf+0x10/0x10 [ 40.824807][ T5904] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 40.824820][ T5904] ? __kthread_create_on_node+0xce/0x3f0 [ 40.824837][ T5904] ? __pfx_vhci_rx_loop+0x10/0x10 [ 40.824848][ T5904] __kthread_create_on_node+0x186/0x3f0 [ 40.824864][ T5904] ? __pfx___kthread_create_on_node+0x10/0x10 [ 40.824882][ T5904] ? mcba_usb_probe+0x2e0/0xf30 [ 40.824898][ T5904] ? lock_acquire+0x1d1/0x380 [ 40.824911][ T5904] ? __pfx_vhci_rx_loop+0x10/0x10 [ 40.824922][ T5904] kthread_create_on_node+0xc7/0x100 [ 40.824937][ T5904] ? __pfx_kthread_create_on_node+0x10/0x10 [ 40.824956][ T5904] ? __fget_files+0x21f/0x3d0 [ 40.824979][ T5904] attach_store+0x3c2/0x8f0 [ 40.824999][ T5904] ? __pfx_attach_store+0x10/0x10 [ 40.825019][ T5904] ? find_held_lock+0x2b/0x80 [ 40.825035][ T5904] ? sysfs_file_kobj+0xe4/0x290 [ 40.825051][ T5904] ? sysfs_file_kobj+0xe4/0x290 [ 40.825068][ T5904] ? __pfx_attach_store+0x10/0x10 [ 40.825084][ T5904] dev_attr_store+0x58/0x80 [ 40.825097][ T5904] ? __pfx_dev_attr_store+0x10/0x10 [ 40.825109][ T5904] sysfs_kf_write+0xf2/0x150 [ 40.825126][ T5904] kernfs_fop_write_iter+0x3e0/0x5f0 [ 40.825140][ T5904] ? __pfx_sysfs_kf_write+0x10/0x10 [ 40.825158][ T5904] vfs_write+0x6af/0x1050 [ 40.825172][ T5904] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 40.825189][ T5904] ? __pfx_vfs_write+0x10/0x10 [ 40.825201][ T5904] ? find_held_lock+0x2b/0x80 [ 40.825228][ T5904] ksys_write+0x12a/0x250 [ 40.825242][ T5904] ? __pfx_ksys_write+0x10/0x10 [ 40.825261][ T5904] do_syscall_64+0x123/0x790 [ 40.825280][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.825292][ T5904] RIP: 0033:0x7f71a1f5ed8e [ 40.825301][ T5904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.825312][ T5904] RSP: 002b:00007f71a2da2a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.825323][ T5904] RAX: ffffffffffffffda RBX: 00007f71a2da36c0 RCX: 00007f71a1f5ed8e [ 40.825331][ T5904] RDX: 0000000000000007 RSI: 00007f71a2da2a90 RDI: 0000000000000008 [ 40.825338][ T5904] RBP: 00007f71a20090a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.825345][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 40.825352][ T5904] R13: 00007f71a2da2a90 R14: 00007f71a2225fa0 R15: 00007ffd4df7f748 [ 40.825368][ T5904] [ 40.832360][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.832551][ T5897] bridge_slave_1: left allmulticast mode [ 40.832570][ T5897] bridge_slave_1: left promiscuous mode [ 40.832747][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.840925][ T5897] bridge_slave_0: left allmulticast mode [ 40.840944][ T5897] bridge_slave_0: left promiscuous mode [ 40.842780][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.850085][ T5910] ip_tables: iptables: counters copy to user failed while replacing table [ 40.860007][ T5908] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 40.884554][ T5905] vhci_hcd: connection closed [ 40.886341][ T12] vhci_hcd vhci_hcd.0: stop threads [ 40.886520][ T12] vhci_hcd vhci_hcd.0: release socket [ 40.886543][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 41.104259][ T5924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'. [ 41.149596][ T5932] loop5: detected capacity change from 0 to 7 [ 41.152090][ T5932] Dev loop5: unable to read RDB block 7 [ 41.152111][ T5932] loop5: unable to read partition table [ 41.152194][ T5932] loop5: partition table beyond EOD, truncated [ 41.152203][ T5932] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 41.203204][ T5932] Dev loop5: unable to read RDB block 7 [ 41.203228][ T5932] loop5: unable to read partition table [ 41.203317][ T5932] loop5: partition table beyond EOD, truncated [ 41.203326][ T5932] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 41.207190][ T5932] Cannot find set identified by id 0 to match [ 41.216303][ T5932] ======================================================= [ 41.216303][ T5932] WARNING: The mand mount option has been deprecated and [ 41.216303][ T5932] and is ignored by this kernel. Remove the mand [ 41.216303][ T5932] option from the mount to silence this warning. [ 41.216303][ T5932] ======================================================= [ 41.252785][ T5936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.259425][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.260603][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 42.091239][ T5740] Bluetooth: hci0: command tx timeout [ 42.101245][ T5740] Bluetooth: hci3: command tx timeout [ 42.175081][ T5740] Bluetooth: hci1: command tx timeout [ 42.175113][ T5740] Bluetooth: hci2: command tx timeout [ 42.191589][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.236190][ T5970] syzkaller1: entered promiscuous mode [ 42.236203][ T5970] syzkaller1: entered allmulticast mode [ 42.451982][ T5974] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 42.453766][ T5974] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.631325][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 42.634265][ T5846] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 42.642525][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.642577][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.644251][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.644263][ T5846] usb 5-1: Product: syz [ 42.644270][ T5846] usb 5-1: Manufacturer: syz [ 42.644277][ T5846] usb 5-1: SerialNumber: syz [ 42.646093][ T5846] usb 5-1: config 0 descriptor?? [ 42.856091][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 42.861903][ T5846] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 42.868279][ T5846] imon:send_packet: packet tx failed (-71) [ 42.881195][ T5846] imon 5-1:0.0: panel buttons/knobs setup failed [ 42.931920][ T5846] rc_core: IR keymap rc-imon-pad not found [ 42.931933][ T5846] Registered IR keymap rc-empty [ 42.931970][ T5846] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 42.931979][ T5846] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 42.933205][ T5846] imon:send_packet: packet tx failed (-71) [ 42.952172][ T5846] imon 5-1:0.0: remote input dev register failed [ 42.952241][ T5846] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 42.974747][ T5846] imon 5-1:0.0: unable to initialize intf0, err 0 [ 42.974760][ T5846] imon:imon_probe: failed to initialize context! [ 42.974766][ T5846] imon 5-1:0.0: unable to register, err -19 [ 42.984940][ T5846] usb 5-1: USB disconnect, device number 2 [ 43.145073][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 43.145085][ T42] audit: type=1400 audit(1792437371.593:269): avc: denied { setopt } for pid=5977 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.227424][ T42] audit: type=1400 audit(1792437371.673:270): avc: denied { create } for pid=5938 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 43.420961][ T42] audit: type=1400 audit(1792437371.863:271): avc: denied { mount } for pid=5985 comm="syz.0.35" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.431505][ T1821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.449865][ T42] audit: type=1400 audit(1792437371.893:272): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.475186][ T36] IPVS: starting estimator thread 0... [ 43.479318][ T42] audit: type=1400 audit(1792437371.923:273): avc: denied { create } for pid=5990 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.485320][ T42] audit: type=1400 audit(1792437371.933:274): avc: denied { bind } for pid=5990 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.542396][ T42] audit: type=1400 audit(1792437371.993:275): avc: denied { setopt } for pid=5990 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.543616][ T42] audit: type=1400 audit(1792437371.993:276): avc: denied { accept } for pid=5990 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.561996][ T5989] IPVS: using max 42 ests per chain, 100800 per kthread [ 43.582630][ T1821] usb 6-1: Using ep0 maxpacket: 8 [ 43.585189][ T1821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 43.585228][ T1821] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 43.588584][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 43.588608][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 43.588626][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 43.588644][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 43.588665][ T1821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 43.588684][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 43.588703][ T1821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 43.588720][ T1821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 43.590622][ T1821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.590640][ T1821] usb 6-1: Product: syz [ 43.590653][ T1821] usb 6-1: Manufacturer: syz [ 43.590665][ T1821] usb 6-1: SerialNumber: syz [ 43.603156][ T1821] usb 6-1: config 0 descriptor?? [ 43.606666][ T5984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.629408][ T1821] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 43.721721][ T42] audit: type=1400 audit(1792437372.173:277): avc: denied { create } for pid=6000 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.729422][ T42] audit: type=1400 audit(1792437372.173:278): avc: denied { bind } for pid=6000 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.775981][ T5736] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.830260][ T1821] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 43.839887][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 43.842014][ T1821] usb 6-1: USB disconnect, device number 2 [ 43.923567][ T5736] usb 8-1: Using ep0 maxpacket: 32 [ 43.924325][ T5736] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 43.925329][ T5736] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 43.925350][ T5736] usb 8-1: config 0 has no interface number 0 [ 43.925407][ T5736] usb 8-1: config 0 interface 184 has no altsetting 0 [ 43.927393][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.927414][ T5736] usb 8-1: Product: syz [ 43.927427][ T5736] usb 8-1: Manufacturer: syz [ 43.927440][ T5736] usb 8-1: SerialNumber: syz [ 43.932538][ T5736] usb 8-1: config 0 descriptor?? [ 44.172835][ T5740] Bluetooth: hci3: command tx timeout [ 44.172857][ T5740] Bluetooth: hci0: command tx timeout [ 44.251878][ T5740] Bluetooth: hci1: command tx timeout [ 44.251935][ T5732] Bluetooth: hci2: command tx timeout [ 44.351962][ T5736] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 44.351982][ T5736] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 44.351992][ T5736] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 44.352471][ T5736] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 44.362644][ T5736] usb 8-1: USB disconnect, device number 2 [ 44.383646][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 44.386819][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 44.386835][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 44.966892][ T6042] ip_tables: iptables: counters copy to user failed while replacing table [ 45.853006][ T5736] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.001262][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 46.001949][ T5736] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 46.002882][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.005481][ T5736] usb 5-1: config 0 descriptor?? [ 46.213915][ T5736] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 46.218389][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 46.219132][ T5736] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 46.219157][ T5736] usb 5-1: media controller created [ 46.225597][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 46.261658][ T5732] Bluetooth: hci0: command tx timeout [ 46.261680][ T5732] Bluetooth: hci3: command tx timeout [ 46.342179][ T5740] Bluetooth: hci2: command tx timeout [ 46.342202][ T5740] Bluetooth: hci1: command tx timeout [ 46.619548][ T5736] az6027: usb out operation failed. (-71) [ 46.619559][ T5736] stb0899_attach: Driver disabled by Kconfig [ 46.619563][ T5736] az6027: no front-end attached [ 46.619563][ T5736] [ 46.620710][ T5736] az6027: usb out operation failed. (-71) [ 46.620719][ T5736] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 46.623826][ T5736] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7 [ 46.630936][ T5736] dvb-usb: schedule remote query interval to 400 msecs. [ 46.630954][ T5736] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 46.637498][ T5736] usb 5-1: USB disconnect, device number 3 [ 46.687032][ T5736] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 47.160373][ T6084] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 47.163412][ T6084] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 47.401276][ T5736] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.551160][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 47.552484][ T5736] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 47.558317][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.558337][ T5736] usb 5-1: Product: syz [ 47.558347][ T5736] usb 5-1: Manufacturer: syz [ 47.558358][ T5736] usb 5-1: SerialNumber: syz [ 47.564402][ T5736] usb 5-1: config 0 descriptor?? [ 47.568023][ T5736] usb 5-1: selecting invalid altsetting 1 [ 47.568047][ T5736] technisat-usb2: could not set alternate setting to 0 [ 47.591552][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.761804][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 47.762732][ T29] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 47.762751][ T29] usb 6-1: config 0 has no interface number 0 [ 47.762779][ T29] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.764556][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.764572][ T29] usb 6-1: Product: syz [ 47.764585][ T29] usb 6-1: Manufacturer: syz [ 47.764596][ T29] usb 6-1: SerialNumber: syz [ 47.766961][ T29] usb 6-1: config 0 descriptor?? [ 47.770025][ T5736] technisat-usb2: firmware version: 0.0 [ 47.770054][ T5736] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 47.774567][ T1165] IPVS: starting estimator thread 0... [ 47.780105][ T29] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 47.881340][ T6098] IPVS: using max 41 ests per chain, 98400 per kthread [ 48.177064][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 48.178026][ T5736] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 48.178078][ T5736] usb 5-1: media controller created [ 48.178606][ T5736] technisat-usb2: i2c-error: out failed 53 = -22 [ 48.178702][ T5736] dvb-usb: MAC address reading failed. [ 48.187278][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 48.223218][ T5736] DVB: Unable to find symbol stv090x_attach() [ 48.379543][ T5736] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 48.431749][ T5736] rc_core: IR keymap rc-technisat-usb2 not found [ 48.431767][ T5736] Registered IR keymap rc-empty [ 48.434121][ T5736] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 48.435640][ T5736] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8 [ 48.438441][ T5736] dvb-usb: schedule remote query interval to 100 msecs. [ 48.439088][ T5736] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 48.443344][ T5736] usb 5-1: USB disconnect, device number 4 [ 48.500336][ T5736] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 48.675955][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 48.676024][ T42] audit: type=1400 audit(1792437377.123:301): avc: denied { read } for pid=6109 comm="syz.2.79" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.676051][ T42] audit: type=1400 audit(1792437377.123:302): avc: denied { open } for pid=6109 comm="syz.2.79" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.733451][ T42] audit: type=1400 audit(1792437377.183:303): avc: denied { connect } for pid=6109 comm="syz.2.79" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.734137][ T42] audit: type=1400 audit(1792437377.183:304): avc: denied { write } for pid=6109 comm="syz.2.79" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.027101][ T42] audit: type=1400 audit(1792437377.473:305): avc: denied { create } for pid=6116 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.029381][ T42] audit: type=1400 audit(1792437377.473:306): avc: denied { bind } for pid=6116 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.126198][ T42] audit: type=1400 audit(1792437377.573:307): avc: denied { mount } for pid=6119 comm="syz.0.83" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.129288][ T42] audit: type=1800 audit(1792437377.573:308): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.83" name=08 dev="sda1" ino=2038 res=0 errno=0 [ 49.260270][ T42] audit: type=1400 audit(1792437377.703:309): avc: denied { write } for pid=6123 comm="syz.3.84" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.274448][ T6124] sg_write: process 48 (syz.3.84) changed security contexts after opening file descriptor, this is not allowed. [ 49.606365][ T42] audit: type=1400 audit(1792437378.053:310): avc: denied { bind } for pid=6129 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.657958][ T6130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.725961][ T6130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.797691][ T6130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.854992][ T6130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.021737][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 50.024651][ T5818] usb 6-1: USB disconnect, device number 3 [ 50.026410][ T5818] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 50.073904][ T5846] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.871305][ T5522] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.021158][ T5522] usb 8-1: Using ep0 maxpacket: 16 [ 51.021901][ T5522] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 51.023804][ T5522] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 51.023839][ T5522] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.026564][ T5522] usb 8-1: config 0 descriptor?? [ 51.291501][ T6193] Zero length message leads to an empty skb [ 51.434132][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434159][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434171][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434182][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434193][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434205][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434216][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434227][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434238][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.434249][ T5522] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 51.438874][ T5522] lua 0003:1E7D:2C2E.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 51.691972][ T5522] usb 8-1: USB disconnect, device number 3 [ 52.178908][ T6212] binder_alloc: binder_alloc_mmap_handler: 6211 200000ffc000-200001000000 already mapped failed -16 [ 52.200674][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 52.200742][ T6214] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 52.248517][ T6218] binder: 6217:6218 ioctl c0306201 0 returned -14 [ 52.321143][ T5522] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.771151][ T5522] usb 7-1: Using ep0 maxpacket: 16 [ 52.771724][ T5522] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.772846][ T5522] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.772861][ T5522] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.772871][ T5522] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.772889][ T5522] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.774210][ T5522] usb 7-1: config 0 descriptor?? [ 53.191325][ T5522] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0003/input/input9 [ 53.197168][ T6239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.197839][ T5522] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 53.341128][ T1358] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 53.384572][ T1035] usb 7-1: USB disconnect, device number 2 [ 53.491639][ T1358] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 53.492494][ T1358] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.492517][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 53.492530][ T1358] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.492542][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.492554][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 53.493306][ T1358] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.493358][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 53.493378][ T1358] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.493394][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.493411][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 53.494747][ T1358] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.494767][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 53.494779][ T1358] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.494790][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.494802][ T1358] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 53.497018][ T1358] usb 5-1: string descriptor 0 read error: -22 [ 53.497076][ T1358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.510096][ T1358] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 53.802677][ T6185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.819564][ T5522] usb 5-1: USB disconnect, device number 5 [ 53.837193][ T6249] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.960299][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 53.960338][ T42] audit: type=1400 audit(1792437382.403:324): avc: denied { map_create } for pid=6257 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.963616][ T42] audit: type=1400 audit(1792437382.413:325): avc: denied { map_read map_write } for pid=6257 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.193891][ T42] audit: type=1400 audit(1792437382.643:326): avc: denied { module_load } for pid=6257 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 54.194249][ T6261] Invalid ELF header magic: != ELF [ 54.210205][ T42] audit: type=1400 audit(1792437382.653:327): avc: denied { prog_load } for pid=6257 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.292728][ T42] audit: type=1400 audit(1792437382.743:328): avc: denied { prog_run } for pid=6257 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.452485][ T6263] netlink: 'syz.0.134': attribute type 16 has an invalid length. [ 54.452501][ T6263] netlink: 'syz.0.134': attribute type 17 has an invalid length. [ 54.475346][ T6263] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 54.508468][ T42] audit: type=1400 audit(1792437382.953:329): avc: denied { write } for pid=6265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.548320][ T42] audit: type=1400 audit(1792437382.993:330): avc: denied { setopt } for pid=6271 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.553593][ T42] audit: type=1400 audit(1792437383.003:331): avc: denied { read write } for pid=6273 comm="syz.3.136" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.553779][ T42] audit: type=1400 audit(1792437383.003:332): avc: denied { open } for pid=6273 comm="syz.3.136" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.555457][ T42] audit: type=1400 audit(1792437383.003:333): avc: denied { ioctl } for pid=6273 comm="syz.3.136" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.347508][ T6371] syzkaller1: entered promiscuous mode [ 56.347558][ T6371] syzkaller1: entered allmulticast mode [ 56.496083][ T6383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6383 comm=syz.2.155 [ 56.507198][ T6379] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.639164][ T6389] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [99] [ 56.639179][ T6389] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 56.639195][ T6389] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 56.639201][ T6389] One or more global auth toks could not properly register; rc = [-22] [ 56.639223][ T6389] Error validating options; rc = [-22] [ 57.391197][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.556585][ T6431] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 57.564662][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 57.565122][ T5887] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.565916][ T5887] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.565928][ T5887] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.565937][ T5887] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.565983][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.565996][ T5887] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.566007][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.566026][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.574021][ T5887] usb 6-1: config 0 descriptor?? [ 57.808616][ T5887] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.818111][ T5887] usb 6-1: USB disconnect, device number 4 [ 57.822866][ T6438] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 57.826034][ T6438] syzkaller0: entered promiscuous mode [ 57.826049][ T6438] syzkaller0: entered allmulticast mode [ 57.827643][ T5887] usblp0: removed [ 57.992279][ T6449] input: syz0 as /devices/virtual/input/input11 [ 58.453203][ T6473] jffs2: notice: (6473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.517557][ T6482] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 58.962065][ T5732] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 59.424725][ T6501] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 59.426195][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 59.426216][ T42] audit: type=1400 audit(1792437387.873:395): avc: denied { map } for pid=6499 comm="syz.1.201" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.426477][ T42] audit: type=1400 audit(1792437387.873:396): avc: denied { execute } for pid=6499 comm="syz.1.201" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.522950][ T42] audit: type=1800 audit(1792437387.973:397): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.203" name=08 dev="sda1" ino=2038 res=0 errno=0 [ 59.537003][ T42] audit: type=1400 audit(1792437387.983:398): avc: denied { read write } for pid=6506 comm="syz.1.204" name="video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.537059][ T42] audit: type=1400 audit(1792437387.983:399): avc: denied { open } for pid=6506 comm="syz.1.204" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.544446][ T42] audit: type=1400 audit(1792437387.993:400): avc: denied { allowed } for pid=6506 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.638862][ T1180] nvmet: connect request for invalid subsystem t! [ 59.639621][ T6510] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 59.934079][ T6522] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.014470][ T42] audit: type=1400 audit(1792437388.463:401): avc: denied { read append } for pid=6521 comm="syz.0.209" name="usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.014504][ T42] audit: type=1400 audit(1792437388.463:402): avc: denied { open } for pid=6521 comm="syz.0.209" path="/dev/usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.079881][ T6526] ip_tables: iptables: counters copy to user failed while replacing table [ 60.095074][ T42] audit: type=1400 audit(1792437388.543:403): avc: denied { name_bind } for pid=6527 comm="syz.3.212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 60.231454][ T42] audit: type=1400 audit(1792437388.683:404): avc: denied { create } for pid=6529 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.259842][ T6537] ip_tables: iptables: counters copy to user failed while replacing table [ 60.271811][ T6537] syzkaller1: entered promiscuous mode [ 60.271825][ T6537] syzkaller1: entered allmulticast mode [ 60.457620][ T6543] batman_adv: batadv0: Adding interface: syzkaller0 [ 60.457654][ T6543] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.457676][ T6543] batman_adv: batadv0: Interface activated: syzkaller0 [ 60.458861][ T6542] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 60.472431][ T6542] batman_adv: batadv0: Removing interface: syzkaller0 [ 61.261176][ T5736] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.421862][ T5736] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.426859][ T5736] usb 7-1: config 0 has no interfaces? [ 61.430014][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.430027][ T5736] usb 7-1: Product: syz [ 61.430076][ T5736] usb 7-1: Manufacturer: syz [ 61.430084][ T5736] usb 7-1: SerialNumber: syz [ 61.461321][ T5736] usb 7-1: config 0 descriptor?? [ 61.486895][ T6568] binder: 6567:6568 ioctl c0306201 0 returned -14 [ 62.191417][ T5818] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 62.351882][ T5818] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 62.352985][ T5818] usb 8-1: config 69 has too many interfaces: 50, using maximum allowed: 32 [ 62.353020][ T5818] usb 8-1: config 69 has an invalid interface number: 82 but max is 49 [ 62.353031][ T5818] usb 8-1: config 69 has 1 interface, different from the descriptor's value: 50 [ 62.353064][ T5818] usb 8-1: config 69 has no interface number 0 [ 62.353119][ T5818] usb 8-1: config 69 interface 82 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 62.353133][ T5818] usb 8-1: config 69 interface 82 has no altsetting 0 [ 62.355248][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.355282][ T5818] usb 8-1: Product: syz [ 62.355312][ T5818] usb 8-1: Manufacturer: syz [ 62.355320][ T5818] usb 8-1: SerialNumber: syz [ 62.596203][ T5818] hub 8-1:69.82: bad descriptor, ignoring hub [ 62.596227][ T5818] hub 8-1:69.82: probe with driver hub failed with error -5 [ 62.598973][ T5818] sierra 8-1:69.82: Sierra USB modem converter detected [ 62.610706][ T5818] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 62.632357][ T5818] usb 8-1: USB disconnect, device number 4 [ 62.639407][ T5818] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 62.647450][ T5818] sierra 8-1:69.82: device disconnected [ 64.021236][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 64.639777][ T1035] usb 7-1: USB disconnect, device number 3 [ 64.642599][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 64.642618][ T42] audit: type=1400 audit(1792437393.093:418): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 64.702497][ T42] audit: type=1400 audit(1792437393.153:419): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.729023][ T42] audit: type=1400 audit(1792437393.173:420): avc: denied { create } for pid=6619 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.729677][ T42] audit: type=1400 audit(1792437393.173:421): avc: denied { ioctl } for pid=6619 comm="syz.2.248" path="socket:[11958]" dev="sockfs" ino=11958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.730000][ T42] audit: type=1400 audit(1792437393.173:422): avc: denied { setopt } for pid=6619 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.730413][ T42] audit: type=1400 audit(1792437393.173:423): avc: denied { bind } for pid=6619 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.730654][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 65.211138][ C3] net_ratelimit: 35 callbacks suppressed [ 65.272107][ T42] audit: type=1400 audit(1792437393.723:424): avc: denied { write } for pid=6639 comm="syz.1.256" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.274576][ T6640] loop6: detected capacity change from 0 to 1 [ 65.281425][ C3] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 65.351289][ T1035] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.501125][ T1035] usb 8-1: Using ep0 maxpacket: 32 [ 65.501815][ T1035] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 65.502835][ T1035] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.502858][ T1035] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 65.502877][ T1035] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.504808][ T1035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.504836][ T1035] usb 8-1: Product: syz [ 65.504847][ T1035] usb 8-1: Manufacturer: syz [ 65.504860][ T1035] usb 8-1: SerialNumber: syz [ 65.510480][ T1035] usb 8-1: config 0 descriptor?? [ 65.541458][ T6654] process 'syz.1.262' launched './file0' with NULL argv: empty string added [ 65.921181][ T1035] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 65.921198][ T1035] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 65.926290][ T1035] usb 8-1: USB disconnect, device number 5 [ 66.525775][ T42] audit: type=1400 audit(1792437394.973:425): avc: denied { map } for pid=6675 comm="syz.2.271" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 66.656208][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6681 comm=syz.0.272 [ 66.666065][ T42] audit: type=1400 audit(1792437395.113:426): avc: denied { create } for pid=6683 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.669055][ T42] audit: type=1400 audit(1792437395.113:427): avc: denied { bind } for pid=6683 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.239153][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 67.971155][ T5818] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.121172][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 68.121918][ T5818] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 68.122931][ T5818] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.122950][ T5818] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.128826][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.128842][ T5818] usb 8-1: Product: syz [ 68.128854][ T5818] usb 8-1: Manufacturer: syz [ 68.128867][ T5818] usb 8-1: SerialNumber: syz [ 68.137815][ T5818] usb 8-1: config 0 descriptor?? [ 68.447524][ T5818] usb 8-1: USB disconnect, device number 6 [ 68.501870][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 68.681291][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 68.682054][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 68.683191][ T5831] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 68.685275][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.685293][ T5831] usb 6-1: Product: syz [ 68.685306][ T5831] usb 6-1: Manufacturer: syz [ 68.685318][ T5831] usb 6-1: SerialNumber: syz [ 68.688283][ T5831] usb 6-1: config 0 descriptor?? [ 68.696938][ T5831] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 69.261124][ T5887] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 69.421791][ T5887] usb 8-1: Using ep0 maxpacket: 16 [ 69.422551][ T5887] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 69.423326][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.423403][ T5887] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.423418][ T5887] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.423429][ T5887] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 69.423442][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 69.423469][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.425879][ T5887] usb 8-1: config 0 descriptor?? [ 69.498903][ T5831] gspca_zc3xx: reg_w_i err -71 [ 69.850196][ T5887] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 70.039608][ T5887] usb 8-1: USB disconnect, device number 7 [ 70.081201][ T5831] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 70.081299][ T5831] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 70.085610][ T5831] usb 6-1: USB disconnect, device number 5 [ 70.341082][ C1] net_ratelimit: 243 callbacks suppressed ** 2517 printk messages dropped ** ** 169 printk messages dropped ** ** 199 printk messages dropped ** ** 182 printk messages dropped ** ** 162 printk messages dropped ** ** 161 printk messages dropped ** ** 159 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 99 printk messages dropped ** ** 101 printk messages dropped ** ** 98 printk messages dropped ** ** 115 printk messages dropped ** ** 147 printk messages dropped ** ** 161 printk messages dropped ** ** 178 printk messages dropped ** ** 164 printk messages dropped ** ** 168 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 143 printk messages dropped ** ** 158 printk messages dropped ** ** 166 printk messages dropped ** ** 159 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 162 printk messages dropped ** ** 188 printk messages dropped ** ** 204 printk messages dropped ** ** 194 printk messages dropped ** ** 194 printk messages dropped ** ** 154 printk messages dropped ** ** 204 printk messages dropped ** ** 206 printk messages dropped ** ** 202 printk messages dropped ** ** 218 printk messages dropped ** ** 253 printk messages dropped ** ** 211 printk messages dropped ** ** 216 printk messages dropped ** ** 210 printk messages dropped ** ** 225 printk messages dropped ** ** 173 printk messages dropped ** ** 157 printk messages dropped ** ** 22 printk messages dropped ** ** 107 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 173 printk messages dropped ** ** 182 printk messages dropped ** ** 192 printk messages dropped ** ** 191 prin ** 277 printk messages dropped ** ** 208 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 190 printk messages dropped ** ** 173 printk messages dropped ** ** 179 printk messages dropped ** ** 182 printk messages dropped ** ** 160 printk messages dropped ** ** 167 printk messages dropped ** ** 177 printk messages dropped ** ** 148 printk messages dropped ** ** 155 printk messages dropped ** ** 275 printk messages dropped ** ** 143 printk messages dropped ** ** 199 printk messages dropped ** ** 140 printk messages dropped ** ** 141 printk messages dropped ** ** 144 printk messages dropped ** ** 144 printk messages dropped ** ** 161 printk messages dropped ** ** 182 printk messages dropped ** ** 199 printk messages dropped ** ** 183 printk messages dropped ** ** 175 printk messages dropped ** ** 184 printk messages dropped ** ** 177 printk messages dropped ** ** 177 printk messages dropped ** ** 184 printk messages dropped ** ** 176 printk messages dropped ** ** 177 printk messages dropped ** ** 168 printk messages dropped ** ** 173 printk messages dropped ** ** 173 printk messages dropped ** ** 175 printk messages dropped ** ** 123 printk messages dropped ** ** 171 printk messages dropped ** ** 28 printk messages dropped ** ** 129 printk messages dropped ** ** 170 printk messages dropped ** ** 187 printk messages dropped ** ** 177 printk messages dropped ** ** 183 printk messages dropped ** ** 183 printk messages dropped ** ** 201 printk messages dropped ** ** 186 printk messages dropped ** ** 181 printk messages dropped ** ** 181 printk messages dropped ** ** 185 printk messages dropped ** ** 189 printk messages dropped ** ** 188 printk messages dropped ** ** 188 printk messages dropped ** ** 188 printk messages dropped ** ** 190 printk messages dropped ** ** 185 printk messages dropped ** ** 184 printk messages dropped ** ** 190 printk messages dropped ** ** 185 printk messages dropped ** ** 190 printk messages dropped ** ** 191 printk messages dropped ** ** 200 printk messages dropped ** ** 188 printk messages dropped ** ** 191 printk messages dropped ** ** 188 printk messages dropped ** ** 190 printk messages dropped ** ** 197 printk messages dropped ** ** 193 printk messages dropped ** ** 186 printk messages dropped ** ** 188 printk messages dropped ** ** 190 printk messages dropped ** ** 183 printk messages dropped ** ** 188 printk messages dropped ** ** 186 printk messages dropped ** ** 186 printk messages dropped ** ** 185 printk messages dropped ** ** 128 printk messages dropped ** ** 154 printk messages dropped ** ** 188 printk messages dropped ** ** 111 printk messages dropped ** ** 90 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 106 printk messages dropped ** ** 170 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 106 printk messages dropped ** ** 156 printk messages dropped ** ** 114 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 110 printk messages dropped ** ** 102 printk messages dropped ** ** 113 printk messages dropped ** ** 108 printk messages dropped ** ** 109 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 108 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 112 printk messages dropped ** ** 111 printk messages dropped ** ** 112 printk messages dropped ** ** 110 printk messages dropped ** ** 109 printk messages dropped ** ** 110 printk messages dropped ** ** 158 printk messages dropped ** ** 166 printk messages dropped ** ** 185 printk messages dropped ** ** 189 printk messages dropped ** ** 197 printk messages dropped ** ** 188 printk messages dropped ** ** 171 printk messages dropped ** ** 180 printk messages dropped ** ** 191 printk messages dropped ** ** 193 printk messages dropped ** ** 115 printk messages dropped ** [ 71.070245][ T6759] Modules linked in: [ 71.072450][ T6759] [ 71.073851][ T6759] CPU: 3 UID: 0 PID: 6759 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT(full) [ 71.078692][ T6759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.083535][ T6759] RIP: 0010:handle_exception_nmi+0xa73/0x1af0 [ 71.087798][ T6759] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d 49 8e a4 10 31 ff 44 89 ee e8 8c 8e 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 6e 94 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 d0 8e 6b 00 45 85 e4 0f 85 b8 0a 00 00 [ 71.098431][ T6759] RSP: 0018:ffffc900027df918 EFLAGS: 00010287 [ 71.101642][ T6759] [ 71.103037][ T6759] RAX: 0000000000034696 RBX: ffff88802752d100 RCX: ffffc900074b2000 [ 71.106711][ T6759] RDX: 0000000000080000 RSI: ffffffff81a0c382 RDI: ffff88802a720000 [ 71.110720][ T6759] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 71.115253][ T6759] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 71.119316][ T6759] R13: 0000000000000000 R14: ffff88802b500000 R15: ffff88802752d1d0 [ 71.123720][ T6759] FS: 00007f262f2566c0(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 71.128653][ T6759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.132679][ T6759] CR2: 000000000f6632eb CR3: 0000000039390000 CR4: 0000000000352ef0 [ 71.136909][ T6759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001fff [ 71.141213][ T6759] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 71.145649][ T6759] Call Trace: [ 71.147547][ T6759] [ 71.149101][ T6759] ? __pfx_handle_exception_nmi+0x10/0x10 [ 71.152134][ T6759] vmx_handle_exit+0x4c8/0x1d30 [ 71.154819][ T6759] vcpu_run+0x3725/0x61a0 [ 71.157307][ T6759] ? __pfx_vcpu_run+0x10/0x10 [ 71.159824][ T6759] ? lock_acquire+0x1d1/0x380 [ 71.162586][ T6759] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 71.165478][ T6759] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 71.168070][ T6759] ? __local_bh_enable_ip+0xa5/0x120 [ 71.170555][ T6759] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.173801][ T6759] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.176949][ T6759] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.180329][ T6759] ? lock_acquire+0x1d1/0x380 [ 71.182970][ T6759] ? do_raw_write_lock+0x11e/0x260 [ 71.185938][ T6759] ? find_held_lock+0x2b/0x80 [ 71.189650][ T6759] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.193659][ T6759] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.196604][ T6759] kvm_vcpu_ioctl+0x730/0x1700 [ 71.199313][ T6759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.202431][ T6759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.205959][ T6759] ? do_vfs_ioctl+0x226/0x13e0 [ 71.208472][ T6759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.210891][ T6759] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.214486][ T6759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.218271][ T6759] ? __fget_files+0x34/0x3d0 [ 71.220767][ T6759] ? selinux_file_ioctl+0x13b/0x290 [ 71.223658][ T6759] ? selinux_file_ioctl+0xb6/0x290 [ 71.226534][ T6759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.229398][ T6759] __x64_sys_ioctl+0x18e/0x210 [ 71.232039][ T6759] do_syscall_64+0x123/0x790 [ 71.234677][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.237910][ T6759] RIP: 0033:0x7f262e39e559 [ 71.240519][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.250008][ T6759] RSP: 002b:00007f262f256028 EFLAGS: 00000246 [ 71.253411][ T6759] ORIG_RAX: 0000000000000010 [ 71.255976][ T6759] RAX: ffffffffffffffda RBX: 00007f262e625fa0 RCX: 00007f262e39e559 [ 71.260146][ T6759] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 71.264682][ T6759] RBP: 00007f262e435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 71.266712][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 71.273896][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.278147][ T6759] R13: 00007f262e626038 R14: 00007f262e625fa0 R15: 00007ffd9b6bfa78 [ 71.283664][ T6759] [ 71.285485][ T6747] 842_compress: template 0 [ 71.285492][ T6759] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.290212][ T6759] CPU: 3 UID: 0 PID: 6759 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT(full) [ 71.293777][ T6759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.297680][ T6759] Call Trace: [ 71.298999][ T6759] [ 71.300146][ T6759] dump_stack_lvl+0x100/0x190 [ 71.302078][ T6759] vpanic+0x553/0x970 [ 71.303632][ T6759] ? __pfx_vpanic+0x10/0x10 [ 71.305446][ T6759] panic+0xd1/0xe0 [ 71.306785][ T6759] ? __pfx_panic+0x10/0x10 [ 71.308289][ T6759] check_panic_on_warn.cold+0x19/0x34 [ 71.310487][ T6759] ? handle_exception_nmi+0xa73/0x1af0 [ 71.312647][ T6759] __warn.cold+0x191/0x318 [ 71.314468][ T6759] __report_bug+0x30f/0x440 [ 71.316317][ T6759] ? handle_exception_nmi+0xa73/0x1af0 [ 71.318526][ T6759] ? __pfx___report_bug+0x10/0x10 [ 71.320527][ T6759] ? kvm_sched_in+0x9a/0xf0 [ 71.322379][ T6759] ? finish_task_switch.isra.0+0x7c4/0x10d0 [ 71.324756][ T6759] ? rcu_is_watching+0x13/0xc0 [ 71.326668][ T6759] ? handle_exception_nmi+0xa73/0x1af0 [ 71.328791][ T6759] report_bug+0xb3/0x220 [ 71.330442][ T6759] ? handle_exception_nmi+0xa73/0x1af0 [ 71.332512][ T6759] handle_bug+0x16a/0x2a0 [ 71.334187][ T6759] exc_invalid_op+0x17/0x50 [ 71.335965][ T6759] asm_exc_invalid_op+0x1a/0x20 [ 71.337895][ T6759] RIP: 0010:handle_exception_nmi+0xa73/0x1af0 [ 71.340330][ T6759] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d 49 8e a4 10 31 ff 44 89 ee e8 8c 8e 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 6e 94 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 d0 8e 6b 00 45 85 e4 0f 85 b8 0a 00 00 [ 71.347690][ T6759] RSP: 0018:ffffc900027df918 EFLAGS: 00010287 [ 71.350082][ T6759] RAX: 0000000000034696 RBX: ffff88802752d100 RCX: ffffc900074b2000 [ 71.353095][ T6759] RDX: 0000000000080000 RSI: ffffffff81a0c382 RDI: ffff88802a720000 [ 71.356138][ T6759] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 71.359201][ T6759] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 71.362179][ T6759] R13: 0000000000000000 R14: ffff88802b500000 R15: ffff88802752d1d0 [ 71.365279][ T6759] ? handle_exception_nmi+0xa72/0x1af0 [ 71.367407][ T6759] ? handle_exception_nmi+0xa72/0x1af0 [ 71.369561][ T6759] ? __pfx_handle_exception_nmi+0x10/0x10 [ 71.371801][ T6759] vmx_handle_exit+0x4c8/0x1d30 [ 71.373747][ T6759] vcpu_run+0x3725/0x61a0 [ 71.375476][ T6759] ? __pfx_vcpu_run+0x10/0x10 [ 71.377331][ T6759] ? lock_acquire+0x1d1/0x380 [ 71.379196][ T6759] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 71.381436][ T6759] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 71.383566][ T6759] ? __local_bh_enable_ip+0xa5/0x120 [ 71.385635][ T6759] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.387868][ T6759] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.390024][ T6759] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.392370][ T6759] ? lock_acquire+0x1d1/0x380 [ 71.394237][ T6759] ? do_raw_write_lock+0x11e/0x260 [ 71.396230][ T6759] ? find_held_lock+0x2b/0x80 [ 71.398114][ T6759] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.400083][ T6759] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.402096][ T6759] kvm_vcpu_ioctl+0x730/0x1700 [ 71.403948][ T6759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.405971][ T6759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.408294][ T6759] ? do_vfs_ioctl+0x226/0x13e0 [ 71.410246][ T6759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.412263][ T6759] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.414783][ T6759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.417473][ T6759] ? __fget_files+0x34/0x3d0 [ 71.419273][ T6759] ? selinux_file_ioctl+0x13b/0x290 [ 71.421321][ T6759] ? selinux_file_ioctl+0xb6/0x290 [ 71.423324][ T6759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.425366][ T6759] __x64_sys_ioctl+0x18e/0x210 [ 71.427202][ T6759] do_syscall_64+0x123/0x790 [ 71.429024][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.431261][ T6759] RIP: 0033:0x7f262e39e559 [ 71.432962][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.439753][ T6759] RSP: 002b:00007f262f256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.443025][ T6759] RAX: ffffffffffffffda RBX: 00007f262e625fa0 RCX: 00007f262e39e559 [ 71.446140][ T6759] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 71.449170][ T6759] RBP: 00007f262e435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 71.452232][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.455289][ T6759] R13: 00007f262e626038 R14: 00007f262e625fa0 R15: 00007ffd9b6bfa78 [ 71.458364][ T6759] [ 71.460342][ T6759] Kernel Offset: disabled [ 71.462083][ T6759] Rebooting in 86400 seconds..