last executing test programs: 7m41.67617975s ago: executing program 1 (id=83): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x1, 0x10, 0x39a, 0xffffffffffffffff}, &(0x7f0000000280)=0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 7m38.946093878s ago: executing program 1 (id=105): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m37.945713972s ago: executing program 1 (id=110): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000d40)={0x10003, 0x100, 0x380, &(0x7f0000000940)=[0x7, 0x4, 0x2, 0x518c1533, 0x7, 0x1, 0x9, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x6, 0xcb3, 0x2b3f, 0x1, 0x7ff, 0x100000001, 0x1, 0x8, 0x1ff, 0x6, 0x5, 0x6, 0x4, 0x85, 0x5, 0x0, 0x9, 0x4, 0x2, 0x1000, 0x0, 0xf, 0x9, 0x6, 0x10001, 0xfffffffffffffffb, 0x7, 0xffff, 0x3, 0xfe, 0x5, 0x3, 0x2, 0x1, 0x7fffffffffffffff, 0x3ff, 0x5, 0xc4, 0x8000000000000000, 0x800, 0x8000, 0xff, 0xe532, 0x5deb, 0x6, 0xe6, 0x6d, 0x8, 0xffffffff, 0x5, 0x7, 0xfffffffffffffffe, 0xed2, 0x8, 0x7c, 0xfffffffffffffffc, 0x0, 0x2, 0x2, 0xa, 0x0, 0xfff, 0xf, 0x81, 0x200, 0x10001, 0xf, 0x7fffffff, 0x5, 0x1ff, 0xc, 0x8000, 0x0, 0x6, 0x7fff, 0x1, 0x100000000000000, 0x0, 0x5, 0x7, 0x3, 0x401, 0x6, 0xfff, 0x10000, 0x40, 0x5, 0xd1a8cfe, 0x168, 0xc7c, 0xc293, 0x4, 0x9, 0x9, 0x0, 0xfffffffffffffff7, 0x80000001, 0x8, 0x800, 0x7, 0x0, 0x6, 0xf, 0x2, 0xffffffffffffff6b, 0x400, 0x5, 0x5, 0x3ff, 0x96, 0x80, 0x3, 0x1, 0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x2]}) r1 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) listen(r4, 0x6) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 7m37.663338901s ago: executing program 1 (id=113): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) 7m37.465666559s ago: executing program 1 (id=114): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x80800) signalfd4(r3, &(0x7f0000001180)={[0x8]}, 0x8, 0x0) 7m36.795225216s ago: executing program 1 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 7m36.523767743s ago: executing program 32 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 10.642640756s ago: executing program 0 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000180)='C', 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x41, @val={0x8c, 0x10, {0x4f, "a38623f938cd", @short="44696769f307e674"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) 9.35845275s ago: executing program 0 (id=2113): getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) chdir(&(0x7f0000000080)='./file0\x00') linkat(r3, &(0x7f0000000280)='./file0\x00', r0, 0x0, 0x1400) socket$igmp(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.213934418s ago: executing program 3 (id=2114): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x6}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) 8.907568661s ago: executing program 2 (id=2116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.871530465s ago: executing program 4 (id=2117): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.857242221s ago: executing program 0 (id=2118): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.664788407s ago: executing program 0 (id=2119): socket$inet(0x2b, 0x801, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 8.664455516s ago: executing program 2 (id=2120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioprio_set$pid(0x3, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0x81204101, &(0x7f0000000440)) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x2, 0x7f03) 8.055347464s ago: executing program 3 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) 7.801149499s ago: executing program 4 (id=2122): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000008000000fd0900008400000005"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/138, 0x8a}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)=""/33, 0x21) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 7.444709194s ago: executing program 5 (id=2123): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20000000) openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) 6.41570944s ago: executing program 3 (id=2124): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40a4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 6.332912625s ago: executing program 5 (id=2125): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) 5.534638715s ago: executing program 0 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 5.532257556s ago: executing program 4 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0) 5.270192859s ago: executing program 5 (id=2128): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x4004040) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20400000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1008001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.637689437s ago: executing program 3 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200012, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) pipe2$9p(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) 4.526751601s ago: executing program 4 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) 3.874318273s ago: executing program 5 (id=2131): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x400000002000) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x9) r0 = open(0x0, 0x282400, 0xc32a4cddd557717b) fallocate(r0, 0x0, 0x0, 0x9000f4) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000440)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.849833483s ago: executing program 3 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0xc050) 3.407130593s ago: executing program 4 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 3.33141076s ago: executing program 0 (id=2134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r2, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 3.067098957s ago: executing program 2 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 1.967562173s ago: executing program 3 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f00000000c0)) r2 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0xfffffffe, 0x83800000, 0xa, 0x0, 0x2]}, &(0x7f0000000080)=0x54) 1.965677286s ago: executing program 4 (id=2137): socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.018240404s ago: executing program 2 (id=2138): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 555.729033ms ago: executing program 5 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000340), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) setreuid(0xee01, 0xee01) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x6, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 322.176214ms ago: executing program 2 (id=2140): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 127.102544ms ago: executing program 2 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) write$yama_ptrace_scope(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0x7, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x8}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x4, 0x280000}}, 0xe8) close(r3) 0s ago: executing program 5 (id=2142): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) kernel console output (not intermixed with test programs): e [ 224.397013][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.414384][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.441101][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.455840][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.473944][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.496258][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.511591][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.533357][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.562447][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.579623][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.588573][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.608923][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.624818][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.637435][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.663493][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.679019][ T5808] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 224.692765][ T5808] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 224.716187][ T5808] usb 1-1: Product: syz [ 224.729628][ T5808] usb 1-1: Manufacturer: syz [ 224.746713][ T5808] usb 1-1: SerialNumber: syz [ 224.777568][ T5808] usb 1-1: config 0 descriptor?? [ 224.832590][ T5808] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.137172][ T9236] bond2: left promiscuous mode [ 225.186954][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.243655][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 225.253364][ T7697] usb 1-1: USB disconnect, device number 5 [ 225.261904][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.300493][ T7697] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 225.324931][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.384385][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.792785][ T29] audit: type=1400 audit(1779465931.252:680): avc: denied { write } for pid=9249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.981158][ T29] audit: type=1400 audit(1779465931.442:681): avc: denied { write } for pid=9270 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.837913][ T29] audit: type=1400 audit(1779465933.292:682): avc: denied { write } for pid=9273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.207076][ T29] audit: type=1400 audit(1779465933.662:683): avc: denied { write } for pid=9308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.204891][ T29] audit: type=1400 audit(1779465934.662:684): avc: denied { getopt } for pid=9309 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.385795][ T29] audit: type=1400 audit(1779465934.842:685): avc: denied { write } for pid=9314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.450152][ T29] audit: type=1400 audit(1779465934.872:686): avc: denied { bind } for pid=9334 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.556411][ T29] audit: type=1400 audit(1779465934.872:687): avc: denied { node_bind } for pid=9334 comm="syz.3.1058" src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 229.735919][ T29] audit: type=1400 audit(1779465935.192:688): avc: denied { write } for pid=9342 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.768309][ T5817] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.906616][ T29] audit: type=1400 audit(1779465935.362:689): avc: denied { read } for pid=9347 comm="syz.2.1062" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.962748][ T5817] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.982660][ T5817] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.998121][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.009631][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 230.021875][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 230.035590][ T5817] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.047397][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.166402][ T5817] usb 1-1: Product: syz [ 230.171129][ T5817] usb 1-1: Manufacturer: syz [ 230.184488][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 230.199521][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 230.520213][ T5817] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 230.532336][ T5817] cdc_wdm 1-1:1.0: Unknown control protocol [ 230.594822][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 230.652240][ T9359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9359 comm=syz.3.1066 [ 230.721150][ T9348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.738364][ T9348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 230.799269][ T9348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.467465][ T9348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.692362][ T9348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.720909][ T9348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.079327][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 232.243874][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 232.243895][ T29] audit: type=1400 audit(1779465937.692:691): avc: denied { view } for pid=9377 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 232.373190][ T9381] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.1072'. [ 232.529511][ T7697] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.748359][ T7697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.798754][ T7697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.846501][ T7697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.870021][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 232.900481][ T7697] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 232.939454][ T7697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.970388][ T7697] usb 3-1: config 0 descriptor?? [ 233.021856][ T24] usb 1-1: USB disconnect, device number 6 [ 233.071962][ T9393] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 233.173719][ T9393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.226291][ T7697] usbhid 3-1:0.0: can't add hid device: -71 [ 233.233808][ T7697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.248302][ T7697] usb 3-1: USB disconnect, device number 6 [ 233.285203][ T9393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1078'. [ 233.345468][ T9400] bond3: (slave veth5): Enslaving as an active interface with a down link [ 233.430863][ T9402] bond3: (slave dummy0): making interface the new active one [ 233.450088][ T9402] dummy0: entered promiscuous mode [ 233.465355][ T9402] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 233.526860][ T9393] bond3: (slave dummy0): Releasing active interface [ 233.535032][ T9393] dummy0 (unregistering): left promiscuous mode [ 233.749405][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 233.756493][ T29] audit: type=1804 audit(1779465939.212:692): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1081" name="bus" dev="ramfs" ino=24337 res=1 errno=0 [ 233.858045][ T29] audit: type=1804 audit(1779465939.242:693): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1081" name="bus" dev="ramfs" ino=24337 res=1 errno=0 [ 233.917949][ T29] audit: type=1400 audit(1779465939.372:694): avc: denied { bind } for pid=9418 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.039370][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 234.149486][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 234.189342][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 234.195981][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.235138][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.269138][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 234.302401][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.335797][ T24] usb 5-1: Product: syz [ 234.349050][ T24] usb 5-1: Manufacturer: syz [ 234.365332][ T24] usb 5-1: SerialNumber: syz [ 234.385967][ T24] usb 5-1: config 0 descriptor?? [ 234.705454][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 234.840644][ T29] audit: type=1400 audit(1779465940.292:695): avc: denied { read } for pid=4964 comm="acpid" name="mouse1" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.950425][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 234.999913][ T29] audit: type=1400 audit(1779465940.292:696): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.088840][ T29] audit: type=1400 audit(1779465940.292:697): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3049 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.139313][ T24] rc_core: IR keymap rc-imon-pad not found [ 235.146387][ T24] Registered IR keymap rc-empty [ 235.151587][ T24] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 235.165922][ T24] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 235.213568][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 235.300318][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 235.344018][ T24] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:7> initialized [ 235.358467][ T9441] IPVS: Unknown mcast interface: vcan0 [ 235.465449][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 235.473073][ T24] usb 5-1: USB disconnect, device number 7 [ 235.791397][ T29] audit: type=1800 audit(1779465941.252:698): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1092" name="/" dev="fuse" ino=1 res=0 errno=0 [ 235.896607][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 236.065849][ T9453] tipc: Failed to remove unknown binding: 66,0,0/4:1577626023/1577626025 [ 236.082442][ T9453] tipc: Failed to remove unknown binding: 66,0,0/4:1577626023/1577626024 [ 236.102941][ T9453] tipc: Failed to remove unknown binding: 66,0,0/4:1577626023/1577626025 [ 236.165589][ T9453] tipc: Failed to remove unknown binding: 66,0,0/4:1577626023/1577626024 [ 236.814341][ T9455] netlink: 'syz.5.1095': attribute type 1 has an invalid length. [ 237.094024][ T9463] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20004 [ 237.171761][ T9462] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.217283][ T9462] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 237.261486][ T9462] bond3: (slave vxcan3): making interface the new active one [ 237.306406][ T9462] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 238.477869][ T29] audit: type=1400 audit(1779465943.932:699): avc: denied { read append } for pid=9478 comm="syz.5.1102" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.565959][ T29] audit: type=1400 audit(1779465943.932:700): avc: denied { open } for pid=9478 comm="syz.5.1102" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.602911][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.613841][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.673326][ T29] audit: type=1400 audit(1779465943.982:701): avc: denied { append } for pid=9480 comm="syz.0.1103" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.947271][ T9496] netlink: 'syz.4.1106': attribute type 8 has an invalid length. [ 240.609302][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.769318][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 240.792020][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.822583][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.852950][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.879346][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.899164][ T24] usb 5-1: Product: syz [ 240.910783][ T24] usb 5-1: Manufacturer: syz [ 240.917464][ T24] usb 5-1: SerialNumber: syz [ 240.938680][ T24] usb 5-1: config 0 descriptor?? [ 240.962148][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.992745][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 241.580241][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 241.607825][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 241.819800][ T5729] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 242.132206][ T5729] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.144266][ T5729] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.307766][ T5729] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.320479][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.335193][ T9519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.350535][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.357296][ T24] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 243.105046][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 243.128755][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 243.150466][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 243.161913][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 243.680306][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 243.740013][ T24] usb 5-1: USB disconnect, device number 8 [ 243.767866][ T5729] usb 1-1: USB disconnect, device number 7 [ 244.014876][ T29] audit: type=1400 audit(1779465949.462:702): avc: denied { ioctl } for pid=9543 comm="syz.5.1123" path="socket:[24842]" dev="sockfs" ino=24842 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 244.415335][ T9547] lo speed is unknown, defaulting to 1000 [ 249.146725][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1144'. [ 249.265791][ T9613] bridge2: port 1(dummy0) entered blocking state [ 249.280578][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1145'. [ 249.291822][ T9613] bridge2: port 1(dummy0) entered disabled state [ 249.298358][ T9613] dummy0: entered allmulticast mode [ 249.306132][ T9613] dummy0: entered promiscuous mode [ 249.321714][ T9613] netlink: 'syz.5.1144': attribute type 10 has an invalid length. [ 249.339377][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1144'. [ 249.377285][ T9613] bridge2: port 1(dummy0) entered blocking state [ 249.383878][ T9613] bridge2: port 1(dummy0) entered forwarding state [ 249.396639][ T9617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9617 comm=syz.4.1145 [ 249.414055][ T9613] dummy0: left allmulticast mode [ 249.419779][ T9613] bridge2: port 1(dummy0) entered disabled state [ 249.686702][ T29] audit: type=1400 audit(1779465955.142:703): avc: denied { nlmsg_read } for pid=9631 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.803782][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 249.902754][ T9635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9635 comm=syz.2.1152 [ 249.980922][ T9637] kvm: emulating exchange as write [ 250.148438][ T29] audit: type=1400 audit(1779465955.602:704): avc: denied { read } for pid=9643 comm="syz.3.1154" path="socket:[25835]" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.215228][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.223603][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.463990][ T9663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.599324][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 251.725937][ T29] audit: type=1804 audit(1779465957.182:705): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1163" name="bus" dev="ramfs" ino=25935 res=1 errno=0 [ 251.747934][ T29] audit: type=1804 audit(1779465957.182:706): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1163" name="bus" dev="ramfs" ino=25935 res=1 errno=0 [ 251.759328][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 251.794314][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 251.814826][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.835044][ T24] usb 1-1: Product: syz [ 251.892040][ T24] usb 1-1: Manufacturer: syz [ 251.900256][ T24] usb 1-1: SerialNumber: syz [ 251.911949][ T24] usb 1-1: config 0 descriptor?? [ 251.921496][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 252.422258][ T29] audit: type=1400 audit(1779465957.882:707): avc: denied { read } for pid=9660 comm="syz.0.1158" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.439491][ T24] gspca_ov534_9: reg_w failed -110 [ 252.499401][ T29] audit: type=1400 audit(1779465957.912:708): avc: denied { open } for pid=9660 comm="syz.0.1158" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.879508][ T24] gspca_ov534_9: Unknown sensor 0000 [ 252.879562][ T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 255.197526][ T9724] syzkaller0: entered promiscuous mode [ 255.207181][ T9724] syzkaller0: entered allmulticast mode [ 255.460365][ T9728] tipc: Started in network mode [ 255.545131][ T9728] tipc: Node identity 967065bdbf5a, cluster identity 4711 [ 255.662379][ T9728] tipc: Enabled bearer , priority 0 [ 255.690968][ T9723] tipc: Resetting bearer [ 255.716560][ T24] usb 1-1: USB disconnect, device number 8 [ 255.737982][ T9723] tipc: Disabling bearer [ 260.696289][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 262.591427][ T9831] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 262.753871][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 263.261637][ T9831] bond4: entered promiscuous mode [ 263.290483][ T9831] bond4: entered allmulticast mode [ 263.320541][ T9831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.402780][ T9834] erspan1: entered allmulticast mode [ 263.543475][ T9834] bond4: (slave erspan1): making interface the new active one [ 263.604794][ T9834] erspan1: entered promiscuous mode [ 263.678152][ T9834] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 263.715897][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 263.824288][ T9836] bond4 (unregistering): (slave erspan1): Releasing active interface [ 263.861760][ T9836] erspan1: left promiscuous mode [ 263.875916][ T29] audit: type=1400 audit(1779465969.322:709): avc: denied { map } for pid=9842 comm="syz.4.1207" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.972581][ T9836] bond4 (unregistering): Released all slaves [ 264.004093][ T9843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.736990][ T29] audit: type=1326 audit(1779465970.192:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 264.824354][ T29] audit: type=1326 audit(1779465970.192:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 264.925410][ T29] audit: type=1326 audit(1779465970.202:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 265.029770][ T29] audit: type=1326 audit(1779465970.202:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 265.094906][ T29] audit: type=1326 audit(1779465970.232:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 265.175751][ T29] audit: type=1326 audit(1779465970.252:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f796eb5d68e code=0x7ffc0000 [ 265.229311][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 265.246324][ T29] audit: type=1326 audit(1779465970.282:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f796eb5d68e code=0x7ffc0000 [ 265.302177][ T29] audit: type=1326 audit(1779465970.282:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f796eb5d68e code=0x7ffc0000 [ 265.359386][ T29] audit: type=1326 audit(1779465970.292:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.3.1211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f796eb5d68e code=0x7ffc0000 [ 265.389369][ T9868] xt_ecn: cannot match TCP bits for non-tcp packets [ 265.427796][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 265.438060][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 265.446502][ T24] usb 3-1: config 0 has no interface number 0 [ 265.468303][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 265.489668][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 265.498843][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.527759][ T24] usb 3-1: Product: syz [ 265.539289][ T24] usb 3-1: Manufacturer: syz [ 265.548464][ T24] usb 3-1: SerialNumber: syz [ 265.582930][ T24] usb 3-1: config 0 descriptor?? [ 265.837411][ T9879] vlan1: entered promiscuous mode [ 265.874323][ T9879] vlan1: entered allmulticast mode [ 265.939622][ T9879] veth0_vlan: entered allmulticast mode [ 266.234821][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 266.281363][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.571408][ T9889] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 266.591745][ T9889] netlink: 'syz.0.1224': attribute type 4 has an invalid length. [ 266.607237][ T9889] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1224'. [ 266.619537][ T9889] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 266.630873][ T9889] netlink: 'syz.0.1224': attribute type 4 has an invalid length. [ 266.638770][ T9889] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1224'. [ 266.836161][ T9893] kvm: pic: non byte write [ 266.903483][ T9896] xt_nat: multiple ranges no longer supported [ 267.952951][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 267.969834][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 267.980795][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 268.005127][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 268.030415][ T24] usb 3-1: USB disconnect, device number 7 [ 268.905518][ T9928] IPVS: Scheduler module ip_vs_sip not found [ 268.975103][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 268.975135][ T29] audit: type=1326 audit(1779465974.432:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.2.1235" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe53e19ce59 code=0x0 [ 269.495965][ T29] audit: type=1804 audit(1779465974.952:784): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1237" name="file0" dev="tmpfs" ino=1512 res=1 errno=0 [ 269.550674][ T9937] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 269.586324][ T9937] ref_ctr increment failed for inode: 0x5e8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e043d40 [ 270.033094][ T9943] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 270.055425][ T9944] netlink: 149 bytes leftover after parsing attributes in process `syz.5.1239'. [ 270.068723][ T9943] ref_ctr decrement failed for inode: 0x5e8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e043d40 [ 270.094878][ T9943] uprobe: syz.3.1237:9943 failed to unregister, leaking uprobe [ 277.178335][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 278.011432][T10024] ref_ctr_offset mismatch. inode: 0x607 offset: 0x0 ref_ctr_offset(old): 0x800000004 ref_ctr_offset(new): 0x2000000002c0 [ 280.721213][T10061] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1271'. [ 280.793511][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 281.226348][T10069] capability: warning: `syz.4.1274' uses 32-bit capabilities (legacy support in use) [ 283.936278][ T29] audit: type=1400 audit(1779465989.392:785): avc: denied { create } for pid=10103 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.999720][ T29] audit: type=1400 audit(1779465989.422:786): avc: denied { bind } for pid=10103 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.336385][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1292'. [ 284.412840][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 284.434100][T10125] bond0: entered promiscuous mode [ 284.439471][T10125] bond_slave_0: entered promiscuous mode [ 284.445601][T10125] bond_slave_1: entered promiscuous mode [ 284.465199][T10125] batadv0: entered promiscuous mode [ 284.474808][T10125] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 284.559530][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 284.730576][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.781596][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 284.817492][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 284.855911][ T24] usb 6-1: Product: syz [ 284.883666][ T24] usb 6-1: Manufacturer: syz [ 284.913601][ T24] usb 6-1: SerialNumber: syz [ 285.287930][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 285.481720][ T29] audit: type=1400 audit(1779465990.932:787): avc: denied { read write } for pid=10119 comm="syz.5.1291" name="lp0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 285.531392][ T24] usb 6-1: USB disconnect, device number 12 [ 285.583440][ T24] usblp0: removed [ 285.617094][ T29] audit: type=1400 audit(1779465990.932:788): avc: denied { open } for pid=10119 comm="syz.5.1291" path="/dev/usb/lp0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 286.331939][T10176] syzkaller0: entered promiscuous mode [ 286.344823][T10176] syzkaller0: entered allmulticast mode [ 286.793699][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1305'. [ 286.844791][T10201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10201 comm=syz.0.1305 [ 288.146554][T10228] overlayfs: failed to clone upperpath [ 288.812964][ T29] audit: type=1400 audit(1779465994.262:789): avc: denied { read } for pid=10233 comm="syz.5.1316" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.038763][ T29] audit: type=1400 audit(1779465994.262:790): avc: denied { open } for pid=10233 comm="syz.5.1316" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.413765][ T29] audit: type=1400 audit(1779465994.872:791): avc: denied { connect } for pid=10237 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.495063][T10241] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1318'. [ 289.536605][ T29] audit: type=1400 audit(1779465994.992:792): avc: denied { wake_alarm } for pid=10242 comm="syz.4.1319" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.750221][T10255] xt_hashlimit: size too large, truncated to 1048576 [ 289.832924][T10251] ¾x9ÿ: renamed from bridge_slave_0 [ 289.976208][T10252] block device autoloading is deprecated and will be removed. [ 290.083406][ T29] audit: type=1400 audit(1779465995.542:793): avc: denied { setopt } for pid=10259 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.306733][T10267] trusted_key: syz.2.1326 sent an empty control message without MSG_MORE. [ 290.378871][ T29] audit: type=1400 audit(1779465995.832:794): avc: denied { setopt } for pid=10261 comm="syz.5.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.736094][T10270] syzkaller0: entered promiscuous mode [ 290.742248][T10270] syzkaller0: entered allmulticast mode [ 292.251338][ T5817] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 292.430961][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 292.550299][ T5817] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 292.574647][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.998642][ T5817] usb 1-1: Product: syz [ 293.008239][ T5817] usb 1-1: Manufacturer: syz [ 293.013319][ T5817] usb 1-1: SerialNumber: syz [ 293.037669][ T5817] usb 1-1: config 0 descriptor?? [ 293.052074][T10297] netlink: 'syz.3.1328': attribute type 3 has an invalid length. [ 293.068059][T10280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.132172][ T5817] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 293.144756][ T29] audit: type=1400 audit(1779465998.592:795): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 293.147900][T10299] can0: slcan on ttyS3. [ 293.350591][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 293.471560][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 293.486650][ T9711] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.505650][ T9711] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.665127][ T9711] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.686381][ T9711] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.704083][T10298] can0 (unregistered): slcan off ttyS3. [ 293.962847][T10313] lo speed is unknown, defaulting to 1000 [ 294.164107][ T29] audit: type=1400 audit(1779465999.622:796): avc: denied { write } for pid=10301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.167315][ T5817] usb 1-1: USB disconnect, device number 9 [ 294.415739][ T29] audit: type=1400 audit(1779465999.872:797): avc: denied { write } for pid=10328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.596862][T10351] x_tables: duplicate underflow at hook 1 [ 295.695754][ T29] audit: type=1400 audit(1779466001.152:798): avc: denied { write } for pid=10333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.952665][ T29] audit: type=1400 audit(1779466001.412:799): avc: denied { write } for pid=10361 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.582107][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 296.607895][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1350'. [ 296.959613][T10394] ¾x9ÿ: left allmulticast mode [ 296.964452][T10394] ¾x9ÿ: left promiscuous mode [ 296.969460][T10394] bridge0: port 1(1¾x9ÿ) entered disabled state [ 296.978372][ T29] audit: type=1804 audit(1779466002.432:800): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1356" name="bus" dev="ramfs" ino=28308 res=1 errno=0 [ 297.026744][T10394] bridge_slave_1: left allmulticast mode [ 297.033570][T10394] bridge_slave_1: left promiscuous mode [ 297.039387][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.072761][T10394] bond0: (slave bond_slave_0): Releasing backup interface [ 297.100206][T10394] bond0: (slave bond_slave_1): Releasing backup interface [ 297.118430][T10394] team0: Port device team_slave_0 removed [ 297.138141][T10394] team0: Port device team_slave_1 removed [ 297.144439][T10394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.197170][T10396] team0: Mode changed to "loadbalance" [ 297.360634][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1360'. [ 297.388410][T10406] ip6gre1: entered promiscuous mode [ 297.397828][T10406] ip6gre1: entered allmulticast mode [ 297.441745][T10406] netlink: 'syz.4.1360': attribute type 6 has an invalid length. [ 297.461454][T10406] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1360'. [ 299.772449][T10432] bridge0: port 3(macvlan2) entered blocking state [ 299.780840][T10432] bridge0: port 3(macvlan2) entered disabled state [ 299.878543][T10432] macvlan2: entered allmulticast mode [ 299.943704][T10432] ip6gretap0: entered allmulticast mode [ 300.011315][T10432] macvlan2: entered promiscuous mode [ 300.610694][ T29] audit: type=1326 audit(1779466006.072:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 300.712754][ T29] audit: type=1326 audit(1779466006.072:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 300.806370][ T29] audit: type=1326 audit(1779466006.072:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 300.886119][ T29] audit: type=1326 audit(1779466006.072:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 300.940222][ T29] audit: type=1326 audit(1779466006.102:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 300.970766][ T29] audit: type=1326 audit(1779466006.122:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7ffc0000 [ 301.055791][ T29] audit: type=1326 audit(1779466006.122:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe53e15d68e code=0x7ffc0000 [ 301.107006][ T29] audit: type=1326 audit(1779466006.122:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe53e15d68e code=0x7ffc0000 [ 301.152561][ T29] audit: type=1326 audit(1779466006.122:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe53e15d68e code=0x7ffc0000 [ 301.179666][ T29] audit: type=1326 audit(1779466006.122:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.2.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe53e15d68e code=0x7ffc0000 [ 302.449326][ T5817] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 302.482939][T10489] syzkaller0: entered promiscuous mode [ 302.494043][T10489] syzkaller0: entered allmulticast mode [ 302.753798][ T5817] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 302.780415][ T5817] usb 6-1: config 0 has no interface number 0 [ 302.804238][ T5817] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.796911][ T5817] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 303.919333][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 303.927816][ T5817] usb 6-1: Product: syz [ 303.932621][ T5817] usb 6-1: SerialNumber: syz [ 303.964639][ T5817] usb 6-1: config 0 descriptor?? [ 304.121931][ T5817] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 304.669810][T10482] Invalid option length (1048308) for dns_resolver key [ 304.951194][T10507] fuse: fd is not a fuse device [ 305.012238][ T24] usb 6-1: USB disconnect, device number 13 [ 306.212482][T10517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.353112][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 306.353129][ T29] audit: type=1400 audit(1779466011.812:879): avc: denied { name_bind } for pid=10543 comm="syz.3.1395" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 308.293151][ T29] audit: type=1800 audit(1779466013.752:880): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1401" name="/" dev="fuse" ino=1 res=0 errno=0 [ 308.558394][T10588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 308.587373][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 308.599278][T10588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 309.473865][ T29] audit: type=1400 audit(1779466014.932:881): avc: denied { ioctl } for pid=10596 comm="syz.2.1407" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.587085][ T29] audit: type=1400 audit(1779466015.042:882): avc: denied { read } for pid=10600 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 309.684289][T10608] fuse: fd is not a fuse device [ 309.869235][ T5713] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 310.049304][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 310.089724][ T5713] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 310.130957][ T5713] usb 3-1: config 0 has no interface number 0 [ 310.168475][ T5713] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 310.231426][ T5713] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 310.273927][ T5713] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 310.283564][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.291894][ T5713] usb 3-1: Product: syz [ 310.296130][ T5713] usb 3-1: Manufacturer: syz [ 310.301003][ T5713] usb 3-1: SerialNumber: syz [ 310.308708][ T5713] usb 3-1: config 0 descriptor?? [ 310.374839][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.548770][ T7697] usb 3-1: USB disconnect, device number 8 [ 311.306318][ T29] audit: type=1326 audit(1779466016.762:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 311.333854][ T29] audit: type=1326 audit(1779466016.792:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 311.593383][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.599954][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.789395][ T29] audit: type=1326 audit(1779466016.792:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 311.816101][ T29] audit: type=1326 audit(1779466016.792:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 311.884740][ T29] audit: type=1326 audit(1779466016.792:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 311.923162][ T29] audit: type=1326 audit(1779466016.952:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 311.961292][ T29] audit: type=1326 audit(1779466016.962:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.012121][ T29] audit: type=1326 audit(1779466017.002:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.014904][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1421'. [ 312.039210][ T29] audit: type=1326 audit(1779466017.032:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.145639][ T29] audit: type=1326 audit(1779466017.072:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.209937][ T29] audit: type=1326 audit(1779466017.102:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.250923][ T29] audit: type=1326 audit(1779466017.122:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.5.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 312.292075][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 312.486404][T10651] fuse: fd is not a fuse device [ 314.059635][ T7697] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 314.289515][ T7697] usb 6-1: Using ep0 maxpacket: 16 [ 314.309944][ T7697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.346811][ T7697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.378576][ T7697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.393076][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 314.403483][T10675] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 314.409246][ T7697] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 314.429545][ T7697] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.450347][ T7697] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 314.461641][ T7697] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 314.479347][ T7697] usb 6-1: Manufacturer: syz [ 314.575518][ T7697] usb 6-1: config 0 descriptor?? [ 314.589334][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 314.604443][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.650976][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.664522][T10677] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.682703][T10677] bond8: (slave bond9): making interface the new active one [ 314.699442][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.712083][T10677] bond8: (slave bond9): Enslaving as an active interface with an up link [ 314.720587][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.743226][ T24] usb 1-1: config 0 descriptor?? [ 314.757728][T10680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.922473][T10687] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1436'. [ 315.117471][ T7697] rc_core: IR keymap rc-hauppauge not found [ 315.123497][ T7697] Registered IR keymap rc-empty [ 315.128841][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 315.149415][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.098597][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 316.107293][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.119326][ T7697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 316.133451][ T24] usb 1-1: USB disconnect, device number 10 [ 316.146660][ T7697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 316.226420][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.262974][ C1] rc rc0: IR event FIFO is full! [ 316.267987][ C1] rc rc0: IR event FIFO is full! [ 316.273178][ C1] rc rc0: IR event FIFO is full! [ 316.278117][ C1] rc rc0: IR event FIFO is full! [ 316.283046][ C1] rc rc0: IR event FIFO is full! [ 316.287973][ C1] rc rc0: IR event FIFO is full! [ 316.292899][ C1] rc rc0: IR event FIFO is full! [ 316.297834][ C1] rc rc0: IR event FIFO is full! [ 316.304108][ C1] rc rc0: IR event FIFO is full! [ 316.309058][ C1] rc rc0: IR event FIFO is full! [ 316.313986][ C1] rc rc0: IR event FIFO is full! [ 316.318917][ C1] rc rc0: IR event FIFO is full! [ 316.323842][ C1] rc rc0: IR event FIFO is full! [ 316.328766][ C1] rc rc0: IR event FIFO is full! [ 316.333691][ C1] rc rc0: IR event FIFO is full! [ 316.339754][ C1] rc rc0: IR event FIFO is full! [ 316.344700][ C1] rc rc0: IR event FIFO is full! [ 316.349631][ C1] rc rc0: IR event FIFO is full! [ 316.354556][ C1] rc rc0: IR event FIFO is full! [ 316.359483][ C1] rc rc0: IR event FIFO is full! [ 316.364640][ C1] rc rc0: IR event FIFO is full! [ 316.369578][ C1] rc rc0: IR event FIFO is full! [ 316.374507][ C1] rc rc0: IR event FIFO is full! [ 316.379431][ C1] rc rc0: IR event FIFO is full! [ 316.384360][ C1] rc rc0: IR event FIFO is full! [ 316.389572][ C1] rc rc0: IR event FIFO is full! [ 316.394606][ C1] rc rc0: IR event FIFO is full! [ 316.399912][ C1] rc rc0: IR event FIFO is full! [ 316.404845][ C1] rc rc0: IR event FIFO is full! [ 316.409771][ C1] rc rc0: IR event FIFO is full! [ 316.414696][ C1] rc rc0: IR event FIFO is full! [ 316.419623][ C1] rc rc0: IR event FIFO is full! [ 316.424750][ C1] rc rc0: IR event FIFO is full! [ 316.429718][T10704] rc rc0: two consecutive events of type space [ 316.469621][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.489324][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.509353][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.529311][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.549815][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.579977][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.599394][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.619400][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.649325][ T7697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 316.700920][ T7697] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.713522][ T7697] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.713567][T10719] veth0_to_team: entered promiscuous mode [ 316.726700][ T7697] usb 6-1: USB disconnect, device number 14 [ 317.453292][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 317.453308][ T29] audit: type=1400 audit(1779466022.912:928): avc: denied { lock } for pid=10731 comm="syz.5.1450" path="socket:[29289]" dev="sockfs" ino=29289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 317.508571][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1449'. [ 317.545493][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'. [ 317.582936][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1449'. [ 317.691634][T10739] lo speed is unknown, defaulting to 1000 [ 317.871261][T10745] netlink: 'syz.5.1453': attribute type 1 has an invalid length. [ 317.900454][T10745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.964300][T10749] CIFS mount error: No usable UNC path provided in device string! [ 317.964300][T10749] [ 317.974482][T10749] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 318.438000][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.479108][T10745] bond4: (slave batadv0): making interface the new active one [ 318.495760][T10745] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 319.022575][T10748] bond4: (slave veth5): Enslaving as an active interface with a down link [ 319.723961][T10781] cgroup: fork rejected by pids controller in /syz5 [ 320.280540][ T29] audit: type=1400 audit(1779466025.742:929): avc: denied { bind } for pid=10903 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.592844][T11102] lo speed is unknown, defaulting to 1000 [ 321.348831][ T29] audit: type=1400 audit(1779466026.802:930): avc: denied { read } for pid=11152 comm="syz.2.1469" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.384412][ T29] audit: type=1400 audit(1779466026.832:931): avc: denied { open } for pid=11152 comm="syz.2.1469" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.420052][ T29] audit: type=1400 audit(1779466026.832:932): avc: denied { ioctl } for pid=11152 comm="syz.2.1469" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.516004][T11153] kvm: pic: single mode not supported [ 322.241578][ T5817] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 322.516220][T11173] netlink: 'syz.5.1476': attribute type 4 has an invalid length. [ 322.585304][T11173] netlink: 'syz.5.1476': attribute type 4 has an invalid length. [ 322.969280][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 322.983454][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 323.005841][ T5817] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 323.137256][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1479'. [ 323.148568][ T5817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.162098][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.171989][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.182395][ T5817] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.195998][ T5817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.201587][T11187] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 323.205171][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.237827][T11184] bond10: entered promiscuous mode [ 323.243660][T11184] bond10: entered allmulticast mode [ 323.940501][ T5817] usb 1-1: usb_control_msg returned -32 [ 323.953412][ T5817] usbtmc 1-1:16.0: can't read capabilities [ 324.441759][ T5817] usb 1-1: USB disconnect, device number 11 [ 326.328136][ T29] audit: type=1326 audit(1779466031.782:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.356620][ T29] audit: type=1326 audit(1779466031.782:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.384865][ T29] audit: type=1326 audit(1779466031.782:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.426275][ T29] audit: type=1326 audit(1779466031.782:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.453310][ T29] audit: type=1326 audit(1779466031.792:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.480475][ T29] audit: type=1326 audit(1779466031.782:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3ef619ce59 code=0x7ffc0000 [ 326.507871][ T29] audit: type=1326 audit(1779466031.842:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 326.535746][ T29] audit: type=1326 audit(1779466031.882:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 326.564293][ T29] audit: type=1326 audit(1779466031.882:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 326.591406][ T29] audit: type=1326 audit(1779466031.882:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.5.1486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef615d68e code=0x7ffc0000 [ 326.636371][T11230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1491'. [ 326.645910][T11230] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1491'. [ 326.655333][T11230] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1491'. [ 326.715618][T11233] fuse: fd is not a fuse device [ 327.129291][ T7697] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 327.329323][ T7697] usb 1-1: Using ep0 maxpacket: 32 [ 327.338907][ T7697] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 327.373020][ T7697] usb 1-1: config 0 has no interface number 0 [ 327.386184][ T7697] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.824297][ T7697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.833303][ T7697] usb 1-1: Product: syz [ 327.838162][ T7697] usb 1-1: Manufacturer: syz [ 327.843433][ T7697] usb 1-1: SerialNumber: syz [ 327.854843][ T7697] usb 1-1: config 0 descriptor?? [ 327.865835][ T7697] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.166256][ T7697] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 328.574263][T11260] vivid-001: disconnect [ 328.627882][ T7697] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 328.923071][T11236] vivid-001: reconnect [ 328.943055][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 328.951322][ T7697] usb 1-1: USB disconnect, device number 12 [ 328.999089][ T7697] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.043692][ T7697] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.078621][ T7697] quatech2 1-1:0.51: device disconnected [ 329.944760][T11283] syz_tun: left allmulticast mode [ 329.950279][T11283] syz_tun: left promiscuous mode [ 329.955419][T11283] bridge0: port 3(syz_tun) entered disabled state [ 329.971243][T11283] bridge_slave_0: left allmulticast mode [ 329.976952][T11283] bridge_slave_0: left promiscuous mode [ 329.983309][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.994521][T11283] bridge_slave_1: left allmulticast mode [ 330.000420][T11283] bridge_slave_1: left promiscuous mode [ 330.006288][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.184760][T11283] bond1: (slave veth0_to_bond): Releasing backup interface [ 330.195503][T11283] bond0: (slave bond_slave_0): Releasing backup interface [ 330.210707][T11283] bond0: (slave bond_slave_1): Releasing backup interface [ 330.223739][T11283] team0: Port device team_slave_0 removed [ 330.502074][T11283] team0: Port device team_slave_1 removed [ 330.508908][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.516353][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.718915][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.726559][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.735499][T11283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.813503][T11287] team0: Mode changed to "loadbalance" [ 331.029859][T11296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1514'. [ 331.124488][T11299] syzkaller0: entered promiscuous mode [ 331.141963][T11299] syzkaller0: entered allmulticast mode [ 331.467470][T11308] dummy0: left promiscuous mode [ 332.638650][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1523'. [ 334.160562][T11337] netlink: 'syz.0.1527': attribute type 5 has an invalid length. [ 334.378255][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 334.536026][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 334.536043][ T29] audit: type=1400 audit(1779466039.992:1140): avc: denied { connect } for pid=11350 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.575806][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 336.417630][T11373] evm: overlay not supported [ 338.515005][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 338.521320][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 338.530312][T11423] ceph: No mds server is up or the cluster is laggy [ 338.554571][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 338.561759][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 338.960126][T11427] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1545'. [ 338.964170][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 338.987037][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 339.068553][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 339.119464][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 339.330838][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 339.339873][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 339.348907][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 340.146720][ T29] audit: type=1400 audit(1779466045.602:1141): avc: denied { append } for pid=11438 comm="syz.0.1551" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 341.132914][ T29] audit: type=1400 audit(1779466046.592:1142): avc: denied { setopt } for pid=11444 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.298211][T11481] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1561'. [ 343.307481][T11481] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1561'. [ 344.086072][T11491] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 345.894587][T11483] cgroup: fork rejected by pids controller in /syz4 [ 346.051547][T11510] gretap0: left promiscuous mode [ 346.080606][T11510] bridge0: port 3(macvlan2) entered blocking state [ 346.087295][T11510] bridge0: port 3(macvlan2) entered forwarding state [ 346.104719][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.118471][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.255750][T11510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.271890][T11510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.285067][T11510] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 346.302856][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.310023][T10535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.337691][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.344876][T10535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.312224][ T29] audit: type=1400 audit(1779466052.772:1143): avc: denied { connect } for pid=11554 comm="syz.5.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.860750][T11588] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 351.370088][T11604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.384194][T11604] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.965054][T11604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.975987][T11604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.989607][T11604] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 352.058689][T11620] F2FS-fs: Conflicting test_dummy_encryption options [ 352.549169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 352.593458][T11624] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 353.440792][T11625] bond5: entered promiscuous mode [ 353.481701][T11625] bond5: entered allmulticast mode [ 353.532789][T11625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.724070][T11629] bridge4: entered promiscuous mode [ 353.739938][ T29] audit: type=1400 audit(1779466059.192:1144): avc: denied { append } for pid=11643 comm="syz.5.1599" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.764027][T11629] bridge4: entered allmulticast mode [ 353.776421][T11629] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 353.805588][ T29] audit: type=1400 audit(1779466059.222:1145): avc: denied { ioctl } for pid=11643 comm="syz.5.1599" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.837715][ T9735] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.913372][T11635] bridge5: entered promiscuous mode [ 353.934635][T11635] bridge5: entered allmulticast mode [ 353.949755][T11635] bond5: (slave bridge5): Enslaving as a backup interface with a down link [ 353.969786][T10560] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.983146][T11647] batman_adv: batadv0: Adding interface: macvtap1 [ 353.991019][T11647] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.029472][T11647] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 354.148668][T11649] batman_adv: batadv0: Removing interface: macvtap1 [ 354.403775][T11635] bridge6: entered promiscuous mode [ 354.409837][T11635] bridge6: entered allmulticast mode [ 354.420735][T11635] bond5: (slave bridge6): Enslaving as a backup interface with a down link [ 355.468265][ T29] audit: type=1400 audit(1779466060.922:1146): avc: denied { create } for pid=11667 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 355.549167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 356.004125][T11678] netlink: 'syz.0.1605': attribute type 10 has an invalid length. [ 356.012553][T11678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1605'. [ 356.026795][T11678] bridge0: port 1(dummy0) entered blocking state [ 356.034038][T11678] bridge0: port 1(dummy0) entered disabled state [ 356.044847][T11678] dummy0: entered allmulticast mode [ 356.064816][T11678] dummy0: entered promiscuous mode [ 356.073499][T11678] bridge0: port 1(dummy0) entered blocking state [ 356.080066][T11678] bridge0: port 1(dummy0) entered forwarding state [ 356.749601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14!!! [ 356.928978][ T29] audit: type=1400 audit(1779466062.382:1147): avc: denied { bind } for pid=11687 comm="syz.0.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 357.320136][T11707] binder: 11706:11707 ioctl c0306201 0 returned -14 [ 358.482710][ T29] audit: type=1400 audit(1779466063.942:1148): avc: denied { write } for pid=11695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.805099][ T29] audit: type=1400 audit(1779466064.262:1149): avc: denied { write } for pid=11738 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.925245][ T5622] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 358.925343][ T5622] Bluetooth: hci3: connection err: -111 [ 359.152512][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1623'. [ 359.379293][T11744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11744 comm=syz.4.1623 [ 359.748154][ T29] audit: type=1400 audit(1779466065.202:1150): avc: denied { write } for pid=11746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.815299][ T29] audit: type=1400 audit(1779466065.232:1151): avc: denied { create } for pid=11737 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 360.242314][ T29] audit: type=1400 audit(1779466065.482:1152): avc: denied { write } for pid=11766 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.519164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 362.579169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 363.209470][ T29] audit: type=1400 audit(1779466068.662:1153): avc: denied { write } for pid=11774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.590294][ T29] audit: type=1400 audit(1779466069.042:1154): avc: denied { write } for pid=11810 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.959410][ T29] audit: type=1400 audit(1779466071.422:1155): avc: denied { getopt } for pid=11835 comm="syz.0.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.466076][ T29] audit: type=1400 audit(1779466072.922:1156): avc: denied { write } for pid=11817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.877418][ T29] audit: type=1400 audit(1779466073.332:1157): avc: denied { write } for pid=11858 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.303457][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 368.355498][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 368.406361][T11867] netlink: 'syz.4.1648': attribute type 4 has an invalid length. [ 368.456533][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.478879][T11867] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1648'. [ 368.519724][T11863] bond6: (slave bond0): making interface the new active one [ 368.548009][T11863] bond6: (slave bond0): Enslaving as an active interface with an up link [ 368.576932][T11867] .`: renamed from bond0 (while UP) [ 368.618044][T11875] Bluetooth: MGMT ver 1.23 [ 368.949162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 369.237537][ T29] audit: type=1400 audit(1779466074.692:1158): avc: denied { write } for pid=11862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.359406][ T29] audit: type=1326 audit(1779466074.762:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.2.1649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53e19ce59 code=0x7fc00000 [ 369.409608][T11890] lo speed is unknown, defaulting to 1000 [ 369.548170][T11897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.560327][T11897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 370.039998][T11898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1655'. [ 370.461244][ T29] audit: type=1400 audit(1779466075.912:1160): avc: denied { write } for pid=11895 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.542995][T11898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1655'. [ 371.393344][T11906] syzkaller0: entered promiscuous mode [ 371.420123][T11906] syzkaller0: entered allmulticast mode [ 373.029164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 373.047738][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.056762][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.108179][T11924] netlink: 'syz.5.1660': attribute type 10 has an invalid length. [ 373.116925][T11924] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1660'. [ 373.134088][T11924] bridge0: port 3(dummy0) entered blocking state [ 373.141107][T11924] bridge0: port 3(dummy0) entered disabled state [ 373.147863][T11924] dummy0: entered allmulticast mode [ 373.154431][T11924] dummy0: entered promiscuous mode [ 373.375954][T11933] fuse: fd is not a fuse device [ 373.466698][ T29] audit: type=1400 audit(1779466078.922:1161): avc: denied { write } for pid=11904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.549829][ T29] audit: type=1400 audit(1779466080.012:1162): avc: denied { write } for pid=11940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.214916][T11947] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 375.272857][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'. [ 375.358891][T11952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11952 comm=syz.5.1667 [ 375.756764][T11956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.329165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 376.742220][ T5622] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 376.745707][T11975] netlink: 'syz.5.1674': attribute type 10 has an invalid length. [ 376.839898][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.957933][T11977] netlink: 'syz.5.1674': attribute type 10 has an invalid length. [ 377.093337][ T5622] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 377.190976][T11975] team0: Port device netdevsim1 added [ 377.653247][T11977] team0: Port device netdevsim1 removed [ 377.705134][T11977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.735407][T11977] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 377.869659][T11982] tipc: Failed to remove unknown binding: 66,0,0/2886997162:350847259/350847261 [ 377.911649][T11982] tipc: Failed to remove unknown binding: 66,0,0/2886997162:350847259/350847260 [ 377.951358][T11982] tipc: Failed to remove unknown binding: 66,0,0/2886997162:350847259/350847261 [ 378.084756][T11982] tipc: Failed to remove unknown binding: 66,0,0/2886997162:350847259/350847260 [ 378.579897][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 378.602148][T11997] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 378.982200][T11997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.535381][T11999] bond5: (slave ip6gretap1): making interface the new active one [ 379.597118][T11999] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 380.878279][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 380.940809][T12025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12025 comm=syz.0.1687 [ 381.015321][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'. [ 381.805620][T12042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1692'. [ 383.415201][T12065] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 383.653278][T12071] lo speed is unknown, defaulting to 1000 [ 383.905575][ T29] audit: type=1400 audit(1779466089.362:1163): avc: denied { write } for pid=12076 comm="syz.0.1702" name="/" dev="ocfs2_dlmfs" ino=32804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.915100][T12079] o2cb: This node has not been configured. [ 383.936087][T12079] o2cb: Cluster check failed. Fix errors before retrying. [ 383.943786][T12079] (syz.0.1702,12079,0):user_dlm_register:674 ERROR: status = -22 [ 383.951810][T12079] (syz.0.1702,12079,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 383.975742][ T29] audit: type=1400 audit(1779466089.372:1164): avc: denied { add_name } for pid=12076 comm="syz.0.1702" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.089021][ T29] audit: type=1400 audit(1779466089.372:1165): avc: denied { create } for pid=12076 comm="syz.0.1702" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 384.261232][ T29] audit: type=1400 audit(1779466089.372:1166): avc: denied { associate } for pid=12076 comm="syz.0.1702" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 384.350235][ T29] audit: type=1400 audit(1779466089.442:1167): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.569165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 384.587276][ T29] audit: type=1400 audit(1779466089.442:1168): avc: denied { open } for pid=5619 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.612165][ T29] audit: type=1400 audit(1779466089.442:1169): avc: denied { ioctl } for pid=5619 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.398903][T12095] fuse: fd is not a fuse device [ 385.595286][T12099] bridge0: port 2(syz_tun) entered blocking state [ 385.610948][T12099] bridge0: port 2(syz_tun) entered disabled state [ 385.626911][T12099] syz_tun: entered allmulticast mode [ 385.654268][T12099] syz_tun: entered promiscuous mode [ 385.662073][T12099] bridge0: port 2(syz_tun) entered blocking state [ 385.668681][T12099] bridge0: port 2(syz_tun) entered forwarding state [ 388.838667][T12127] fuse: fd is not a fuse device [ 389.951158][ T29] audit: type=1400 audit(1779466095.412:1170): avc: denied { create } for pid=12145 comm="syz.4.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 389.957427][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 389.988537][ T29] audit: type=1400 audit(1779466095.412:1171): avc: denied { write } for pid=12145 comm="syz.4.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 390.003868][T12147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.017586][T12147] batadv_slave_1: entered promiscuous mode [ 390.095160][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 390.157352][T12149] bond0: entered promiscuous mode [ 390.165640][T12149] bond0: entered allmulticast mode [ 390.300835][T12157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12157 comm=syz.2.1723 [ 391.830414][T12179] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 392.220163][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1732'. [ 392.267388][T12179] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.299744][ T29] audit: type=1400 audit(1779466097.752:1172): avc: denied { listen } for pid=12189 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.332430][T12184] bond7: entered promiscuous mode [ 392.341239][T12184] bond7: entered allmulticast mode [ 392.344062][ T29] audit: type=1400 audit(1779466097.782:1173): avc: denied { accept } for pid=12189 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.440426][T12187] bond7: (slave dummy0): making interface the new active one [ 392.468069][T12187] dummy0: entered promiscuous mode [ 392.487397][T12187] dummy0: entered allmulticast mode [ 393.090487][T12187] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 393.589757][T12207] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 394.608009][T12207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.149297][ T5713] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 395.301119][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 395.302007][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.302058][ T5713] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 395.302091][ T5713] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.325922][ T5713] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 395.325951][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.325970][ T5713] usb 6-1: Product: syz [ 395.325984][ T5713] usb 6-1: Manufacturer: syz [ 395.326000][ T5713] usb 6-1: SerialNumber: syz [ 396.319634][T12243] bond4: (slave batadv0): Releasing active interface [ 396.338085][ T5713] usb 6-1: USB disconnect, device number 15 [ 396.339450][T12243] bond4: (slave batadv0): the permanent HWaddr of slave - 0a:8e:db:78:86:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 396.558070][T12245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.680702][T10004] udevd[10004]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.752929][T12264] fuse: fd is not a fuse device [ 398.245296][ T29] audit: type=1400 audit(1779466103.702:1174): avc: denied { map } for pid=12267 comm="syz.0.1755" path="socket:[33481]" dev="sockfs" ino=33481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 398.372169][ T29] audit: type=1400 audit(1779466103.832:1175): avc: denied { ioctl } for pid=12274 comm="syz.4.1758" path="socket:[33501]" dev="sockfs" ino=33501 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.536257][T12275] netlink: 'syz.4.1758': attribute type 10 has an invalid length. [ 398.587086][T12282] netlink: 'syz.0.1759': attribute type 39 has an invalid length. [ 398.634536][T12282] bridge0: port 2(syz_tun) entered disabled state [ 398.739749][T12282] syz_tun (unregistering): left allmulticast mode [ 398.860466][T12282] syz_tun (unregistering): left promiscuous mode [ 398.875535][T12282] bridge0: port 2(syz_tun) entered disabled state [ 401.958015][T12287] uprobe: syz.5.1761:12287 failed to unregister, leaking uprobe [ 402.209399][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 406.606427][ T29] audit: type=1400 audit(1779466112.062:1176): avc: denied { getopt } for pid=12344 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.689642][ T29] audit: type=1400 audit(1779466112.152:1177): avc: denied { setopt } for pid=12344 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.747052][ T29] audit: type=1400 audit(1779466112.172:1178): avc: denied { read } for pid=12344 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.922484][T12354] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 406.946895][T12360] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 407.354526][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 407.398444][ T29] audit: type=1400 audit(1779466112.852:1179): avc: denied { getopt } for pid=12349 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 407.414706][T12354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.172541][T12377] netlink: 'syz.5.1788': attribute type 1 has an invalid length. [ 412.340109][ T5729] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 412.357259][T12377] 8021q: adding VLAN 0 to HW filter on device bond6 [ 412.560383][T12387] bond6: (slave ip6gretap1): making interface the new active one [ 412.602870][T12387] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 412.708633][T12396] vxlan0: entered promiscuous mode [ 412.717023][T12396] vxlan0: entered allmulticast mode [ 412.731433][T10140] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.756191][T10140] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.776876][T10140] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.809766][T10140] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.003953][ T29] audit: type=1400 audit(1779466118.462:1180): avc: denied { name_bind } for pid=12407 comm="syz.0.1797" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 415.709458][ T29] audit: type=1400 audit(1779466121.152:1181): avc: denied { write } for pid=12416 comm="syz.4.1800" path="socket:[34436]" dev="sockfs" ino=34436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 416.634893][ T29] audit: type=1400 audit(1779466121.972:1182): avc: denied { shutdown } for pid=12431 comm="syz.2.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 416.867658][ T29] audit: type=1400 audit(1779466121.972:1183): avc: denied { read } for pid=12431 comm="syz.2.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.375935][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1805'. [ 418.688758][T12448] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 418.878443][T12451] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 418.924794][T12451] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 419.120380][T12453] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 419.286676][T12448] macvlan2: entered promiscuous mode [ 419.309263][T12448] macvlan2: entered allmulticast mode [ 419.332909][T12448] bond8: entered promiscuous mode [ 419.374710][T12448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.420759][T12448] bond8: left promiscuous mode [ 419.827629][ T29] audit: type=1804 audit(1779466125.282:1184): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1810" name="/newroot/360/file0" dev="tmpfs" ino=1895 res=1 errno=0 [ 419.861649][T12458] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 419.890033][T12458] ref_ctr increment failed for inode: 0x767 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880359bbd40 [ 420.097945][T12464] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 420.108761][T12464] ref_ctr decrement failed for inode: 0x767 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880359bbd40 [ 420.120891][T12464] uprobe: syz.0.1810:12464 failed to unregister, leaking uprobe [ 421.288035][T12479] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 421.406738][T12479] bond7: (slave lo): Enslaving as an active interface with an up link [ 421.569838][T12479] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 421.598721][ T5713] lo speed is unknown, defaulting to 1000 [ 421.605177][T12481] syzkaller0: entered promiscuous mode [ 421.630657][T12481] syzkaller0: entered allmulticast mode [ 421.658283][ T5729] lo speed is unknown, defaulting to 1000 [ 421.673044][ T5817] lo speed is unknown, defaulting to 1000 [ 427.626344][ T29] audit: type=1400 audit(1779466133.082:1185): avc: denied { read } for pid=12524 comm="syz.5.1828" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 427.803023][ T29] audit: type=1400 audit(1779466133.082:1186): avc: denied { open } for pid=12524 comm="syz.5.1828" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 428.194081][ T29] audit: type=1400 audit(1779466133.452:1187): avc: denied { listen } for pid=12526 comm="syz.4.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.711067][T12539] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1832'. [ 430.680959][ T29] audit: type=1400 audit(1779466136.132:1188): avc: denied { read append } for pid=12555 comm="syz.2.1836" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 430.786769][ T29] audit: type=1400 audit(1779466136.142:1189): avc: denied { open } for pid=12555 comm="syz.2.1836" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 430.852439][ T29] audit: type=1400 audit(1779466136.242:1190): avc: denied { map } for pid=12555 comm="syz.2.1836" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.057307][ T29] audit: type=1400 audit(1779466136.292:1191): avc: denied { write execute } for pid=12555 comm="syz.2.1836" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 434.499826][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.120334][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.257890][T12589] fuse: fd is not a fuse device [ 435.599574][ T29] audit: type=1400 audit(1779466141.052:1192): avc: denied { connect } for pid=12597 comm="syz.2.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 435.969377][ T5808] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.004672][ T29] audit: type=1804 audit(1779466141.462:1193): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1854" name="bus" dev="ramfs" ino=35203 res=1 errno=0 [ 436.005274][T12613] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1855'. [ 436.097881][ T29] audit: type=1804 audit(1779466141.492:1194): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1854" name="bus" dev="ramfs" ino=35203 res=1 errno=0 [ 436.113671][T12613] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1855'. [ 436.176750][ T5808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 436.200040][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.208898][ T5808] usb 1-1: Product: syz [ 436.215376][ T5808] usb 1-1: Manufacturer: syz [ 436.221111][ T5808] usb 1-1: SerialNumber: syz [ 436.248637][ T5808] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.280659][ T7697] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 437.627657][ T7697] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 437.642664][ T7697] ath9k_htc: Failed to initialize the device [ 437.663580][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 437.692139][ T7697] usb 1-1: ath9k_htc: USB layer deinitialized [ 438.265307][ T5817] usb 1-1: USB disconnect, device number 14 [ 439.026137][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 439.041436][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 439.219947][T12633] ceph: No mds server is up or the cluster is laggy [ 439.541437][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 439.547617][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 439.763819][T12645] syzkaller0: entered promiscuous mode [ 439.781386][T12645] syzkaller0: entered allmulticast mode [ 440.417508][T12645] tipc: Enabled bearer , priority 0 [ 440.453339][T12644] tipc: Resetting bearer [ 440.533319][T12644] tipc: Disabling bearer [ 440.813222][T12659] syzkaller0: entered promiscuous mode [ 440.854916][T12659] syzkaller0: entered allmulticast mode [ 441.690428][T12665] lo speed is unknown, defaulting to 1000 [ 441.711525][T12670] syzkaller0: entered promiscuous mode [ 441.744854][T12670] syzkaller0: entered allmulticast mode [ 442.369754][ T5729] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 443.151319][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.188646][ T5729] usb 1-1: config 0 has no interfaces? [ 443.212425][ T5729] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.07 [ 443.244730][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.292908][ T5729] usb 1-1: config 0 descriptor?? [ 444.728413][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 444.905318][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 446.263727][ T24] usb 1-1: USB disconnect, device number 15 [ 446.583026][T12738] tipc: Enabled bearer , priority 0 [ 446.682650][T12729] tipc: Resetting bearer [ 446.752531][T12739] syzkaller0: entered promiscuous mode [ 446.774764][T12739] syzkaller0: entered allmulticast mode [ 446.818595][T12728] tipc: Resetting bearer [ 446.871925][T12728] tipc: Disabling bearer [ 446.922877][T12743] syz_tun: entered allmulticast mode [ 446.950357][T12746] fuse: fd is not a fuse device [ 448.502821][ T29] audit: type=1400 audit(1779466153.962:1195): avc: denied { create } for pid=12763 comm="syz.5.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 452.325910][T12815] netlink: 'syz.3.1910': attribute type 12 has an invalid length. [ 452.559604][T12804] lo speed is unknown, defaulting to 1000 [ 455.303241][ T29] audit: type=1400 audit(1779466160.762:1196): avc: denied { accept } for pid=12854 comm="syz.4.1921" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 455.617544][T12865] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 456.259411][ T5817] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 457.325940][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.445636][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 457.511717][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 457.815070][ T5817] usb 1-1: string descriptor 0 read error: -22 [ 457.821510][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.839304][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.625972][T12913] siw: device registration error -23 [ 463.248107][ T5817] usb 1-1: can't set config #1, error -71 [ 463.287867][ T5817] usb 1-1: USB disconnect, device number 16 [ 463.498703][T12923] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12923] [ 463.952011][ T29] audit: type=1326 audit(1779466169.412:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.139662][ T29] audit: type=1326 audit(1779466169.412:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.170452][ T29] audit: type=1326 audit(1779466169.412:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.282272][ T29] audit: type=1326 audit(1779466169.412:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.410567][ T29] audit: type=1326 audit(1779466169.442:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.534633][ T29] audit: type=1326 audit(1779466169.462:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796eb9ce59 code=0x7ffc0000 [ 464.611719][ T29] audit: type=1326 audit(1779466169.462:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f796eb9cbc2 code=0x7ffc0000 [ 464.690211][ T29] audit: type=1326 audit(1779466169.462:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f796eb9cc57 code=0x7ffc0000 [ 464.728726][ T29] audit: type=1326 audit(1779466169.462:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f796eb59b51 code=0x7ffc0000 [ 464.758302][ T29] audit: type=1326 audit(1779466169.462:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f796eb9dc49 code=0x7ffc0000 [ 467.276995][T12981] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5615] was attempted by " [ 468.630627][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 468.735876][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 468.746338][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 468.755676][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 470.971819][T13007] fuse: fd is not a fuse device [ 471.679282][ T5729] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 472.189558][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 472.201685][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.232684][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.244425][ T5729] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.255168][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.267439][ T5729] usb 1-1: config 0 descriptor?? [ 472.290357][ T5729] hub 1-1:0.0: USB hub found [ 472.435917][T13038] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 472.473942][T13038] bond11: entered promiscuous mode [ 472.479699][T13038] 8021q: adding VLAN 0 to HW filter on device bond11 [ 472.493394][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1968'. [ 472.505144][ T5729] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 472.550955][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1975'. [ 472.584141][T13038] bond11: entered allmulticast mode [ 472.655985][T13038] bond11: (slave bridge4): making interface the new active one [ 472.665100][T13038] bridge4: entered promiscuous mode [ 472.671982][T13038] bridge4: entered allmulticast mode [ 472.682246][T13038] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 473.180425][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 473.405330][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 473.535223][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 473.665880][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 473.699634][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 473.730181][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 474.222104][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 474.222122][ T29] audit: type=1400 audit(1779466179.682:1223): avc: denied { connect } for pid=13066 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.627299][ T5729] usbhid 1-1:0.0: can't add hid device: -71 [ 476.646136][ T5729] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 476.692680][T13085] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 476.692680][T13085] The task syz.4.1987 (13085) triggered the difference, watch for misbehavior. [ 476.723339][ T5729] usb 1-1: USB disconnect, device number 17 [ 477.087915][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 478.601236][T13114] ªªªªªª: renamed from vlan0 [ 481.343193][T13133] syzkaller0: entered promiscuous mode [ 481.366392][T13133] syzkaller0: entered allmulticast mode [ 482.049261][ T5713] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 483.586631][ T5713] usb 6-1: device descriptor read/64, error -71 [ 483.864165][ T5713] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 484.472092][ T5713] usb 6-1: device descriptor read/64, error -71 [ 484.839916][ T5713] usb usb6-port1: attempt power cycle [ 485.761005][T13176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.771396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.471401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.509225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.549223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.791657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.803245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.813895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.822557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.831325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.853076][T13206] orangefs_mount: mount request failed with -4 [ 490.263413][T13211] xt_hashlimit: max too large, truncated to 1048576 [ 490.321653][T13211] xt_hashlimit: overflow, rate too high: 0 [ 490.337227][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2018'. [ 491.277876][ T5713] net_ratelimit: 2 callbacks suppressed [ 491.277894][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.669230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.709280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.029571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.039040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.048497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.057744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.067207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.749293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.789248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.310737][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.326996][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.879232][ C1] net_ratelimit: 1 callbacks suppressed [ 496.879265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.679371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.688009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.696642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.705238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.919220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.949239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.989237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.149830][T13260] Bluetooth: hci0: command 0x0406 tx timeout [ 500.290280][T13272] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2035'. [ 500.392538][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.439030][T13278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.717362][T13286] hfsplus: unable to find HFS+ superblock [ 502.079295][ C1] net_ratelimit: 7 callbacks suppressed [ 502.079334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.109227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.099286][T13306] PKCS8: Unsupported PKCS#8 version [ 504.149288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.709776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.719271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.728611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.737925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.747236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.189250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.632347][T13312] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5618] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13312] [ 506.143523][ T29] audit: type=1400 audit(1779466211.522:1224): avc: denied { write } for pid=13310 comm="syz.0.2044" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 506.229233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.269265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.900006][ T7697] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 508.319218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.629472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.638652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.647893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.657063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.666395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.959820][ T7697] usb 6-1: Using ep0 maxpacket: 16 [ 508.968268][ T7697] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.981318][ T7697] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.996148][ T7697] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 509.349241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.921510][ T7697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.938584][ T7697] usb 6-1: config 0 descriptor?? [ 509.989699][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.187893][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.276871][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.314057][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2053'. [ 510.399260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.749591][T13338] team0: Port device team_slave_0 removed [ 511.784269][ T7697] usbhid 6-1:0.0: can't add hid device: -71 [ 511.813804][ T7697] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 511.924003][ T7697] usb 6-1: USB disconnect, device number 19 [ 512.479275][ C1] net_ratelimit: 7 callbacks suppressed [ 512.479325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.519287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.549245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.589301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.451653][T13434] fuse: fd is not a fuse device [ 516.574551][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'. [ 516.608150][T13423] openvswitch: netlink: Flow key attr not present in new flow. [ 516.629231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.719543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.728976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.738319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.747651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.761823][T13440] bond0: (slave team0): Releasing backup interface [ 516.804251][T13440] dummy0: left allmulticast mode [ 516.814370][T13440] dummy0: left promiscuous mode [ 516.821367][T13440] bridge0: port 3(dummy0) entered disabled state [ 516.835150][T13440] bridge_slave_0: left allmulticast mode [ 517.464608][T13440] bridge_slave_0: left promiscuous mode [ 517.509911][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.684231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.517700][T13440] bridge_slave_1: left allmulticast mode [ 518.528983][T13440] bridge_slave_1: left promiscuous mode [ 518.553629][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.604192][T13440] bond1: (slave veth0_to_bond): Releasing backup interface [ 518.645454][T13440] bond0: (slave bond_slave_1): Releasing backup interface [ 518.673876][T13440] team0: Port device team_slave_1 removed [ 518.686493][T13440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.709502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.749257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.279858][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.709470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.718206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.726902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.735508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.744070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.650440][T13498] hfsplus: unable to find HFS+ superblock [ 522.879263][ C1] net_ratelimit: 10 callbacks suppressed [ 522.879288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.556177][ T29] audit: type=1400 audit(1779466229.012:1225): avc: denied { lock } for pid=13513 comm="syz.5.2094" path="socket:[38166]" dev="sockfs" ino=38166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 523.909280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.229614][ T5817] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 524.309652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.319126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.328435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.337667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.802760][T13525] bridge0: port 1(dummy0) entered disabled state [ 524.873869][T13525] gretap1: left promiscuous mode [ 524.949441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.107514][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.118226][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.128616][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.151547][ T5817] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 525.186634][ T5817] usb 6-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 525.212811][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.239749][ T5817] usb 6-1: Product: syz [ 525.253366][ T5817] usb 6-1: Manufacturer: syz [ 525.277819][ T5817] usb 6-1: SerialNumber: syz [ 525.989468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.989905][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.265106][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.362669][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.372853][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.889310][T13538] net_ratelimit: 10215 callbacks suppressed [ 527.889334][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.904416][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.914897][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.923764][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.932570][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.941520][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.950366][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.959065][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.967966][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.976800][T13538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.601302][ T5817] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.630816][ T5817] usb 6-1: MIDIStreaming interface descriptor not found [ 529.876554][ T29] audit: type=1400 audit(1779466235.332:1226): avc: denied { ioctl } for pid=13540 comm="syz.4.2107" path="socket:[38243]" dev="sockfs" ino=38243 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 531.235501][ T5817] usb 6-1: USB disconnect, device number 20 [ 531.428143][T13565] udevd[13565]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.517858][T13563] vlan0: entered promiscuous mode [ 531.539027][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2112'. [ 531.553052][T13563] hsr0: entered promiscuous mode [ 531.573739][T13563] vlan0: entered allmulticast mode [ 531.599391][T13563] hsr0: entered allmulticast mode [ 531.627099][T13563] hsr_slave_0: entered allmulticast mode [ 531.646959][T13563] hsr_slave_1: entered allmulticast mode [ 531.767916][T13571] hsr_slave_1 (unregistering): left promiscuous mode [ 531.922321][T13585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.279222][ C1] net_ratelimit: 11201 callbacks suppressed [ 533.279254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.149344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.157730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.166050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.174907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.309371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.349244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.399250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.405257][T13636] netlink: 'syz.5.2131': attribute type 12 has an invalid length. [ 537.429342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.437730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.469242][ C1] net_ratelimit: 6 callbacks suppressed [ 538.469272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.509251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.723754][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.889368][T13656] lo speed is unknown, defaulting to 1000 [ 540.397786][T13674] tipc: Enabling of bearer rejected, failed to enable media [ 540.549562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.557938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.566091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.574428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.582744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.591452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.589245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.007743][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 646.014716][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13661/1:b..l [ 646.023262][ C0] rcu: (detected by 0, t=10502 jiffies, g=71165, q=365 ncpus=2) [ 646.030972][ C0] task:syz.4.2137 state:R running task stack:25880 pid:13661 tgid:13653 ppid:5615 task_flags:0x400140 flags:0x00080000 [ 646.045078][ C0] Call Trace: [ 646.048364][ C0] [ 646.051291][ C0] __schedule+0x1295/0x67a0 [ 646.055818][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 646.061201][ C0] ? __pfx___schedule+0x10/0x10 [ 646.066059][ C0] ? mark_held_locks+0x40/0x70 [ 646.070820][ C0] preempt_schedule_irq+0x50/0x90 [ 646.075842][ C0] irqentry_exit+0x205/0x7e0 [ 646.080429][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.086410][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 646.091603][ C0] Code: 05 3b d2 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 53 f3 0e 0f 82 a4 02 00 00 8b 35 ce 86 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd d1 26 12 0f 85 ed 02 00 00 48 83 c4 [ 646.111197][ C0] RSP: 0018:ffffc9000dbd7708 EFLAGS: 00000206 [ 646.117260][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 646.125325][ C0] RDX: 0000000000000000 RSI: ffffffff8defe87f RDI: ffffffff8c1c4200 [ 646.133380][ C0] RBP: ffffffff8e7e5620 R08: 000000006dd403e6 R09: 0000000000000007 [ 646.141338][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 646.149295][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.157358][ C0] ? is_module_text_address+0x148/0x220 [ 646.162907][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 646.169051][ C0] is_bpf_text_address+0x36/0x1a0 [ 646.174091][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 646.179341][ C0] kernel_text_address+0x8d/0x100 [ 646.184375][ C0] __kernel_text_address+0xd/0x30 [ 646.189404][ C0] unwind_get_return_address+0x59/0xa0 [ 646.194882][ C0] arch_stack_walk+0xa6/0xf0 [ 646.199510][ C0] stack_trace_save+0x8e/0xc0 [ 646.204184][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 646.209549][ C0] ? do_raw_spin_lock+0x128/0x260 [ 646.214578][ C0] kasan_save_stack+0x30/0x50 [ 646.219245][ C0] ? kasan_save_stack+0x30/0x50 [ 646.224080][ C0] ? kasan_save_track+0x14/0x30 [ 646.229011][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 646.234049][ C0] ? kmem_cache_alloc_bulk_noprof+0x359/0x970 [ 646.240123][ C0] ? __io_alloc_req_refill+0x9e/0x330 [ 646.245492][ C0] ? io_submit_sqes.cold+0x1b5/0x2f1 [ 646.250764][ C0] ? __do_sys_io_uring_enter+0xa88/0x1b50 [ 646.256561][ C0] ? do_syscall_64+0x10b/0xf80 [ 646.261338][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.267448][ C0] kasan_save_track+0x14/0x30 [ 646.272138][ C0] __kasan_slab_alloc+0x89/0x90 [ 646.277002][ C0] kmem_cache_alloc_bulk_noprof+0x359/0x970 [ 646.282904][ C0] __io_alloc_req_refill+0x9e/0x330 [ 646.288098][ C0] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 646.293899][ C0] ? io_issue_sqe+0xbd/0x13e0 [ 646.298565][ C0] ? write_comp_data+0x2b/0x90 [ 646.303326][ C0] io_submit_sqes.cold+0x1b5/0x2f1 [ 646.308443][ C0] __do_sys_io_uring_enter+0xa88/0x1b50 [ 646.313984][ C0] ? __fget_files+0x21f/0x3d0 [ 646.318659][ C0] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 646.324633][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 646.329566][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 646.334504][ C0] ? xfd_validate_state+0x129/0x190 [ 646.339702][ C0] ? rcu_is_watching+0x12/0xc0 [ 646.344470][ C0] do_syscall_64+0x10b/0xf80 [ 646.349061][ C0] ? clear_bhb_loop+0x40/0x90 [ 646.353735][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.359669][ C0] RIP: 0033:0x7efff559ce59 [ 646.364093][ C0] RSP: 002b:00007efff37cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 646.372510][ C0] RAX: ffffffffffffffda RBX: 00007efff5816090 RCX: 00007efff559ce59 [ 646.380471][ C0] RDX: 000000000000cf74 RSI: 0000000000002219 RDI: 0000000000000000 [ 646.388431][ C0] RBP: 00007efff5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 646.396389][ C0] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 646.404353][ C0] R13: 00007efff5816128 R14: 00007efff5816090 R15: 00007fffc3277858 [ 646.412332][ C0] [ 646.415353][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g71165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 646.426533][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 646.436486][ C0] rcu: RCU grace-period kthread stack dump: [ 646.442359][ C0] task:rcu_preempt state:R running task stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 646.455842][ C0] Call Trace: [ 646.459292][ C0] [ 646.462227][ C0] __schedule+0x1295/0x67a0 [ 646.466758][ C0] ? __pfx___schedule+0x10/0x10 [ 646.471618][ C0] ? find_held_lock+0x2b/0x80 [ 646.476293][ C0] ? schedule+0x2bf/0x390 [ 646.480622][ C0] schedule+0xdd/0x390 [ 646.484687][ C0] schedule_timeout+0x127/0x280 [ 646.489538][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 646.494909][ C0] ? __pfx_process_timeout+0x10/0x10 [ 646.500191][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 646.505996][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 646.511455][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 646.516222][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 646.521502][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 646.526957][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 646.531890][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 646.537083][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 646.542887][ C0] rcu_gp_kthread+0x179/0x230 [ 646.547560][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 646.552751][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 646.558559][ C0] ? __kthread_parkme+0x18c/0x230 [ 646.563579][ C0] ? kthread+0x13a/0x450 [ 646.567816][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 646.573009][ C0] kthread+0x370/0x450 [ 646.577071][ C0] ? __pfx_kthread+0x10/0x10 [ 646.581657][ C0] ret_from_fork+0x72b/0xd50 [ 646.586244][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 646.591353][ C0] ? __switch_to+0x800/0x1100 [ 646.596033][ C0] ? __pfx_kthread+0x10/0x10 [ 646.600620][ C0] ret_from_fork_asm+0x1a/0x30 [ 646.605401][ C0] [ 646.608414][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 646.614729][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.625222][ C0] Tainted: [L]=SOFTLOCKUP [ 646.629531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.639574][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 646.645206][ C0] Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 71 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 646.664822][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 646.670880][ C0] RAX: 000000000113a601 RBX: ffffffff8e4955c0 RCX: ffffffff8b8b2095 [ 646.678841][ C0] RDX: 0000000000000000 RSI: ffffffff8df23d8d RDI: ffffffff8c1c4200 [ 646.686802][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 646.694761][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 646.702719][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7e150 [ 646.710679][ C0] FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 646.719603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.726180][ C0] CR2: 00007f3ef61ea540 CR3: 00000000418b4000 CR4: 00000000003526f0 [ 646.734142][ C0] DR0: 000000000000000d DR1: 0000000000000000 DR2: 0000000000000000 [ 646.742102][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 646.750061][ C0] Call Trace: [ 646.753330][ C0] [ 646.756250][ C0] default_idle+0x9/0x10 [ 646.760484][ C0] default_idle_call+0x6c/0xb0 [ 646.765324][ C0] do_idle+0x464/0x590 [ 646.769390][ C0] ? __pfx_do_idle+0x10/0x10 [ 646.773975][ C0] ? do_idle+0x9/0x590 [ 646.778037][ C0] cpu_startup_entry+0x4f/0x60 [ 646.782808][ C0] rest_init+0x251/0x260 [ 646.787040][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 646.792580][ C0] start_kernel+0x484/0x490 [ 646.797085][ C0] x86_64_start_reservations+0x24/0x30 [ 646.802543][ C0] x86_64_start_kernel+0x12b/0x130 [ 646.807654][ C0] common_startup_64+0x13e/0x148 [ 646.812605][ C0]