last executing test programs: 12.230507303s ago: executing program 1 (id=8049): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x6040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 9.847965324s ago: executing program 1 (id=8055): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.715951806s ago: executing program 0 (id=8062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000004740)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f000000060000000400", @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB="00000000010000000000"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 7.689637652s ago: executing program 1 (id=8063): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) exit(0xffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) 6.770100103s ago: executing program 2 (id=8065): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex(&(0x7f0000000180)=0x1, 0x8d, 0x1, 0x0, 0x0, 0x0) 6.759960904s ago: executing program 4 (id=8066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xfa, 0x4}, {0x8, 0x1ff}}}}, 0x11) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 6.33429674s ago: executing program 0 (id=8067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.231879762s ago: executing program 1 (id=8068): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x6040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 6.231080602s ago: executing program 3 (id=8069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.500359469s ago: executing program 2 (id=8070): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000004002020050000000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095ee"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0xf8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xcc, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "6bdc41e5c7cfdc7feb74a70fdf5a390b59b9a553091a77524eda9630f03b0000000014b75a4fc2c5b267a9bfb98005f8869fee9e39b2ba9dbf760fb8e3d036d1cb395a289265c0f45430ee86616fe5428de970c348212c0caf8e62e3b8ce36f1420015c169be1971adf782f247e5b86c36d172bf08062267bccd5896eb6237544218a65e77d3fda6c3a8857742b38d6105a07cb54a77a0e9a178d0321c67bcf9fcc6efb358c6de72f77deb"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x184}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.498177023s ago: executing program 4 (id=8071): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x6040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 5.488686627s ago: executing program 3 (id=8072): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x80302, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000280)={0x2, 0x1}) 5.431528593s ago: executing program 2 (id=8073): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0x117, 0x880, 0x0, 0x0) 5.169613836s ago: executing program 1 (id=8074): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 5.159028733s ago: executing program 2 (id=8075): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 5.153561307s ago: executing program 3 (id=8076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x456f, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r1, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8046) 5.074449954s ago: executing program 0 (id=8077): unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800}) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) unshare(0x44010500) ioctl$TUNSETIFF(r5, 0x400454ca, 0xffffffffffffffff) 3.853218573s ago: executing program 4 (id=8078): io_setup(0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0xc, 0x8, 0xa) 3.672034975s ago: executing program 0 (id=8079): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x4ac743, 0xca) unshare(0x2c020400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) ptrace$getregs(0xe, 0x0, 0x8, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) 3.459995029s ago: executing program 3 (id=8080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r4 = epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r5, 0x0, 0xb8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_pwait(r4, 0x0, 0x0, 0x7, 0x0, 0x0) 2.43743017s ago: executing program 3 (id=8081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xfa, 0x4}, {0x8, 0x1ff}}}}, 0x11) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2.3132374s ago: executing program 2 (id=8082): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 2.119903003s ago: executing program 2 (id=8083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6658919dd714c43c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.886681717s ago: executing program 4 (id=8084): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[], 0x0) 1.788246767s ago: executing program 0 (id=8085): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068988a8030008066b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c72", 0x117, 0x880, 0x0, 0x0) 1.782068698s ago: executing program 4 (id=8086): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) 1.62491415s ago: executing program 4 (id=8087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 117.167614ms ago: executing program 0 (id=8088): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x6040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 743.358µs ago: executing program 1 (id=8089): unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800}) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) unshare(0x44010500) ioctl$TUNSETIFF(r5, 0x400454ca, 0xffffffffffffffff) 0s ago: executing program 3 (id=8090): semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.344146][T29894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.350293][T22738] udevd[22738]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1655.361355][T29910] syzkaller0: entered promiscuous mode [ 1655.385917][T29910] syzkaller0: entered allmulticast mode [ 1655.448999][T29894] hsr_slave_0: entered promiscuous mode [ 1655.456078][T29894] hsr_slave_1: entered promiscuous mode [ 1655.462271][T29894] debugfs: 'hsr0' already exists in 'hsr' [ 1655.468004][T29894] Cannot create hsr debugfs directory [ 1655.547447][T29919] tipc: Enabling of bearer rejected, failed to enable media [ 1655.822161][ T9901] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1655.993030][T29894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1656.014626][T29894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1656.040704][T29894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1656.049958][T29894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1656.061186][T15810] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1656.112650][ T9901] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1656.123454][ T9901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.141493][ T9901] usb 5-1: config 0 descriptor?? [ 1656.148489][T29894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.155784][ T9901] cp210x 5-1:0.0: cp210x converter detected [ 1656.186675][T29894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.203296][T14745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.210458][T14745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.211274][T15810] usb 3-1: Using ep0 maxpacket: 32 [ 1656.231463][T14886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.238597][T14886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.242266][T15810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1656.260371][T15810] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1656.281152][T15810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.289196][T15810] usb 3-1: Product: syz [ 1656.294221][T15810] usb 3-1: Manufacturer: syz [ 1656.298826][T15810] usb 3-1: SerialNumber: syz [ 1656.316619][T15810] usb 3-1: config 0 descriptor?? [ 1656.517198][T29894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.545448][T28268] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1656.552626][T28268] Bluetooth: hci0: command tx timeout [ 1656.558658][ T9901] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1656.590520][T29894] veth0_vlan: entered promiscuous mode [ 1656.606819][T29894] veth1_vlan: entered promiscuous mode [ 1656.640030][T29894] veth0_macvtap: entered promiscuous mode [ 1656.651864][T29894] veth1_macvtap: entered promiscuous mode [ 1656.673684][T29894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.685011][T29894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.714422][T15838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.740699][T15810] gs_usb 3-1:0.0: Configuring for 156 interfaces [ 1656.753424][T15838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.764454][ T9901] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1656.782078][ T9901] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1656.790863][ T9901] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1656.801317][T15838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.810049][T15838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.830371][ T9901] usb 5-1: USB disconnect, device number 67 [ 1656.844137][ T9901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1656.863764][ T9901] cp210x 5-1:0.0: device disconnected [ 1656.931168][T15810] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1656.955313][T15810] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 1657.016552][T14745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.035476][T14745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.070911][T14745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.080629][T14745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.340910][T29971] ieee802154 phy0 wpan0: encryption failed: -22 [ 1658.057913][T29992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1658.078358][ T1328] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.078448][T29992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1658.097029][T14886] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.105873][T14886] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.114752][T14886] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.116304][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1658.133342][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1658.187368][T29997] vlan2: entered promiscuous mode [ 1658.192557][T29997] bridge0: entered promiscuous mode [ 1658.621353][T28268] Bluetooth: hci0: command tx timeout [ 1658.676163][T30021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6098'. [ 1658.832563][ T795] usb 3-1: USB disconnect, device number 40 [ 1659.161400][T15810] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1659.322560][T15810] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1659.341266][T15810] usb 5-1: config 0 has no interface number 0 [ 1659.347457][T15810] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1659.370115][T15810] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1659.389282][T15810] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1659.403109][T30053] netlink: 'syz.3.6104': attribute type 1 has an invalid length. [ 1659.421237][T15810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.441182][T15810] usb 5-1: Product: syz [ 1659.445379][T15810] usb 5-1: Manufacturer: syz [ 1659.449981][T15810] usb 5-1: SerialNumber: syz [ 1659.454907][T30053] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1659.466256][T15810] usb 5-1: config 0 descriptor?? [ 1659.484588][T15810] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 1659.541517][ T55] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1659.722886][ T55] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1659.733103][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.746462][ T55] usb 3-1: config 0 descriptor?? [ 1659.811341][T15810] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1659.961191][T15810] usb 4-1: Using ep0 maxpacket: 16 [ 1659.967880][T15810] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1659.978329][T15810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.995721][T15810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1660.010988][T15810] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1660.020220][T15810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.028739][T15810] usb 4-1: Product: syz [ 1660.033414][T15810] usb 4-1: Manufacturer: syz [ 1660.038247][T15810] usb 4-1: SerialNumber: syz [ 1660.450527][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 1660.458007][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 1660.466332][T15810] usb 4-1: 0:2 : does not exist [ 1660.483267][T15810] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1660.509832][T15810] usb 4-1: USB disconnect, device number 86 [ 1660.556043][T30081] ieee802154 phy0 wpan0: encryption failed: -22 [ 1660.611895][ T9901] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1660.701764][T28268] Bluetooth: hci0: command tx timeout [ 1660.761110][ T9901] usb 1-1: Using ep0 maxpacket: 16 [ 1660.766467][ T55] usb 3-1: Cannot set autoneg [ 1660.772978][ T55] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1660.785911][ T9901] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 1660.799802][ T55] usb 3-1: USB disconnect, device number 41 [ 1660.805907][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.818492][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.830669][ T9901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1660.843854][ T9901] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1660.853425][ T9901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.863208][ T9901] usb 1-1: config 0 descriptor?? [ 1661.475401][ T9901] usbhid 1-1:0.0: can't add hid device: -71 [ 1661.485068][ T9901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1661.492961][ T55] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1661.509857][ T9901] usb 1-1: USB disconnect, device number 47 [ 1661.658899][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 1661.665750][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.677019][ T55] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1661.686544][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.697267][ T55] usb 4-1: config 0 descriptor?? [ 1661.708577][ T55] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1661.928168][ T55] usb 5-1: USB disconnect, device number 68 [ 1662.021690][T15810] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1662.042036][ T30] audit: type=1400 audit(1769267861.789:554): avc: denied { create } for pid=30124 comm="syz.4.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1662.065297][ T30] audit: type=1400 audit(1769267861.809:555): avc: denied { getopt } for pid=30124 comm="syz.4.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1662.085437][ T30] audit: type=1400 audit(1769267861.809:556): avc: denied { ioctl } for pid=30124 comm="syz.4.6132" path="socket:[93395]" dev="sockfs" ino=93395 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1662.192403][T15810] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1662.208162][T15810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.233347][T15810] usb 3-1: config 0 descriptor?? [ 1662.404839][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6135'. [ 1662.534909][T30139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6137'. [ 1662.791177][T28268] Bluetooth: hci0: command tx timeout [ 1663.508244][T30163] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1663.565512][T15810] usb 3-1: Cannot set autoneg [ 1663.574768][T15810] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1663.767857][T21297] usb 3-1: USB disconnect, device number 42 [ 1664.185945][T30152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.290645][T21297] usb 4-1: USB disconnect, device number 87 [ 1664.815112][T30196] netlink: 'syz.0.6156': attribute type 11 has an invalid length. [ 1664.861085][T28268] Bluetooth: hci0: command tx timeout [ 1666.282731][ T30] audit: type=1400 audit(1769267866.029:557): avc: denied { bind } for pid=30248 comm="syz.0.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1666.364949][T30250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.376819][T30250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.459340][T30250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.470437][T30250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.908735][T30250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.921381][ T795] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1666.940713][T30250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.022109][T30250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1667.034245][T30250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.082680][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.094526][ T795] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1667.103687][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.183656][ T795] usb 2-1: config 0 descriptor?? [ 1667.240136][ T1164] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.248714][ T1164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.272211][ T1164] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.281647][ T1164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.300273][ T1164] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.309785][ T1164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.335033][ T1164] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.343388][ T1164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.352191][T30270] fuse: Unknown parameter 'grou00000000000000000000' [ 1667.415344][ T795] usbhid 2-1:0.0: can't add hid device: -71 [ 1667.424765][ T795] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1667.435480][ T795] usb 2-1: USB disconnect, device number 65 [ 1667.851211][ T795] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1668.012491][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1668.016523][T30292] syzkaller0: entered promiscuous mode [ 1668.024904][ T795] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 1668.035014][T30292] syzkaller0: entered allmulticast mode [ 1668.040291][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.108231][ T795] usb 2-1: config 0 descriptor?? [ 1668.149983][ T795] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 1668.467433][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.546603][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.553931][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.561157][ T5170] usb 2-1: control msg error: -71 [ 1668.561218][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.573556][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.581959][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.590859][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.598760][ C0] usb 2-1: pegasus_irq - urb shutting down with status: -2 [ 1668.607450][T21316] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1668.615905][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.623646][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 1668.627741][ T795] usb 2-1: USB disconnect, device number 66 [ 1668.630761][ C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1668.641829][ T5170] usb 2-1: control msg error: -71 [ 1668.761274][T21316] usb 1-1: Using ep0 maxpacket: 32 [ 1668.768114][T21316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1668.777563][T21316] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1668.780464][T30320] fuse: Unknown parameter 'grou00000000000000000000' [ 1668.789215][T21316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.801818][T21316] usb 1-1: Product: syz [ 1668.806005][T21316] usb 1-1: Manufacturer: syz [ 1668.810585][T21316] usb 1-1: SerialNumber: syz [ 1668.817346][T21316] usb 1-1: config 0 descriptor?? [ 1669.225683][T20847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1669.233336][T21316] gs_usb 1-1:0.0: Configuring for 156 interfaces [ 1669.239955][T20847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1669.249418][T20847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1669.257478][T20847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1669.266551][T20847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1669.454690][T21316] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1669.474739][T21316] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1669.651320][T21297] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1669.688021][T30323] chnl_net:caif_netlink_parms(): no params data found [ 1669.717015][T14745] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1669.726326][T14745] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1669.736942][T14745] bridge0: port 2(netdevsim0) entered disabled state [ 1669.776125][T30323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.784678][T30323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.792129][T30323] bridge_slave_0: entered allmulticast mode [ 1669.798864][T30323] bridge_slave_0: entered promiscuous mode [ 1669.804813][T21297] usb 3-1: Using ep0 maxpacket: 32 [ 1669.812948][T30323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.820157][T21297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.830018][T30323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.837498][T21297] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1669.846873][T30323] bridge_slave_1: entered allmulticast mode [ 1669.852829][T21297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.862585][T21297] usb 3-1: config 0 descriptor?? [ 1669.868982][T30323] bridge_slave_1: entered promiscuous mode [ 1669.876706][T21297] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1669.905251][T30323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.929563][T30323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.967796][T30323] team0: Port device team_slave_0 added [ 1669.975854][T30323] team0: Port device team_slave_1 added [ 1670.008164][T30323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.015500][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.042463][T30323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.062329][T30323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.070470][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.100585][T30323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.117598][T14745] bridge_slave_0: left allmulticast mode [ 1670.123553][T14745] bridge_slave_0: left promiscuous mode [ 1670.129250][T14745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.175112][T14745] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1670.360495][T14745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.370044][T14745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.379704][T14745] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1670.401406][T14745] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1670.420850][T14745] bond0 (unregistering): Released all slaves [ 1670.433891][T14745] bond1 (unregistering): (slave veth3): Releasing active interface [ 1670.444011][T14745] bond1 (unregistering): Released all slaves [ 1670.459902][T14745] bond2 (unregistering): Released all slaves [ 1670.476839][T14745] bond3 (unregistering): Released all slaves [ 1670.527512][T30323] hsr_slave_0: entered promiscuous mode [ 1670.538877][T30323] hsr_slave_1: entered promiscuous mode [ 1670.547018][T30323] debugfs: 'hsr0' already exists in 'hsr' [ 1670.556155][T30323] Cannot create hsr debugfs directory [ 1670.599848][T14745] tipc: Left network mode [ 1671.055315][T14745] hsr_slave_0: left promiscuous mode [ 1671.063738][T14745] hsr_slave_1: left promiscuous mode [ 1671.070401][T14745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.343981][T28268] Bluetooth: hci5: command tx timeout [ 1671.375416][T21297] usb 1-1: USB disconnect, device number 48 [ 1671.662691][T30368] fuse: Unknown parameter 'group_i00000000000000000000' [ 1671.673713][T30375] netlink: 'syz.0.6214': attribute type 1 has an invalid length. [ 1671.683339][T30375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1672.007083][T30323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1672.034993][T30323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1672.084731][T30323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1672.106582][T30323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1672.220991][T14745] IPVS: stop unused estimator thread 0... [ 1672.273693][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6215'. [ 1672.384755][T30323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.452734][T30323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.464102][T15810] usb 3-1: USB disconnect, device number 43 [ 1672.494637][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.501815][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.565477][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.572665][T15838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.884595][T30413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1673.263659][T30323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.363522][T30323] veth0_vlan: entered promiscuous mode [ 1673.401267][T30323] veth1_vlan: entered promiscuous mode [ 1673.421324][T28268] Bluetooth: hci5: command tx timeout [ 1673.454187][T30323] veth0_macvtap: entered promiscuous mode [ 1673.516378][T30323] veth1_macvtap: entered promiscuous mode [ 1673.560561][T30323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.590130][T30323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.636478][T14745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.672925][T14745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.727064][ T6033] bridge_slave_0: left allmulticast mode [ 1673.737455][ T6033] bridge_slave_0: left promiscuous mode [ 1673.763740][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.834865][ T30] audit: type=1400 audit(1769267873.579:558): avc: denied { getopt } for pid=30434 comm="syz.2.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1673.888579][T30444] netlink: 'syz.4.6231': attribute type 10 has an invalid length. [ 1674.271535][ T6033] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1674.339221][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.358784][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.370234][ T6033] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1674.379106][ T6033] bond0 (unregistering): Released all slaves [ 1674.391076][ T6033] bond1 (unregistering): Released all slaves [ 1674.404867][T14745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.413739][T14745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.758467][ T6033] tipc: Left network mode [ 1674.885572][T14745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.910529][T14745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.070840][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1675.209216][T14886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.236057][T14886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.422831][ T6033] hsr_slave_0: left promiscuous mode [ 1675.437140][ T6033] hsr_slave_1: left promiscuous mode [ 1675.449116][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.469107][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.511246][T28268] Bluetooth: hci5: command tx timeout [ 1675.608430][ T1328] smc: removing ib device syz2 [ 1675.625856][T30498] netlink: 'syz.1.6248': attribute type 10 has an invalid length. [ 1676.239159][T30498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1676.398511][T30501] syzkaller0: entered promiscuous mode [ 1676.430613][T30501] syzkaller0: entered allmulticast mode [ 1676.496888][T30509] syzkaller0: entered promiscuous mode [ 1676.502616][T30509] syzkaller0: entered allmulticast mode [ 1677.582327][T28268] Bluetooth: hci5: command tx timeout [ 1679.138636][ T30] audit: type=1400 audit(1769267878.879:559): avc: denied { connect } for pid=30542 comm="syz.3.6264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1679.363099][T20847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1679.375771][T20847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1679.390535][T20847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1679.399281][T20847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1679.409076][T20847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1681.501278][T20847] Bluetooth: hci4: command tx timeout [ 1681.525102][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6271'. [ 1681.666125][ T6033] IPVS: stop unused estimator thread 0... [ 1682.026508][T30547] chnl_net:caif_netlink_parms(): no params data found [ 1682.320709][T30547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.337400][T30547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.353495][T30547] bridge_slave_0: entered allmulticast mode [ 1682.368688][T30547] bridge_slave_0: entered promiscuous mode [ 1682.393370][T30547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.410824][T30547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.425742][T30547] bridge_slave_1: entered allmulticast mode [ 1683.349520][T30547] bridge_slave_1: entered promiscuous mode [ 1683.386760][T30612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1683.530306][T30547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.544393][ T30] audit: type=1400 audit(1769267883.289:560): avc: denied { map } for pid=30623 comm="syz.0.6289" path="socket:[96897]" dev="sockfs" ino=96897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1683.582443][T20847] Bluetooth: hci4: command tx timeout [ 1684.216692][T30645] netlink: 'syz.0.6296': attribute type 1 has an invalid length. [ 1684.224888][T30645] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1685.149346][T30547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.217560][T30547] team0: Port device team_slave_0 added [ 1685.225623][T30547] team0: Port device team_slave_1 added [ 1685.276696][T30648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.284309][T30648] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.287542][T30547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.321580][T30547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.354026][T30547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.432706][T30648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.440188][T30648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.489286][T30648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.509337][T30648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.551442][ T9901] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1685.593419][T30547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.601150][T30547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.630418][T30547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.648588][T30515] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.661259][T20847] Bluetooth: hci4: command tx timeout [ 1685.669636][T30515] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.678985][T30515] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.688499][T30515] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.716285][T30515] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.725115][T30515] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.751378][T30515] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.760031][T30515] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.775767][T30547] hsr_slave_0: entered promiscuous mode [ 1685.782519][T30547] hsr_slave_1: entered promiscuous mode [ 1685.788755][T30547] debugfs: 'hsr0' already exists in 'hsr' [ 1685.795062][T30547] Cannot create hsr debugfs directory [ 1685.822389][ T9901] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1685.831073][ T9901] usb 2-1: config 0 has no interface number 0 [ 1685.837234][ T9901] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1685.846487][ T9901] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1685.856222][ T9901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.865442][ T9901] usb 2-1: Product: syz [ 1685.870015][ T9901] usb 2-1: Manufacturer: syz [ 1685.874825][ T9901] usb 2-1: SerialNumber: syz [ 1685.952380][ T9901] usb 2-1: config 0 descriptor?? [ 1686.592666][ T9901] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -32 [ 1686.674202][T30670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1687.033507][T30686] netlink: 'syz.4.6307': attribute type 1 has an invalid length. [ 1687.054119][T30686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1687.409628][ T30] audit: type=1400 audit(1769267887.149:561): avc: denied { connect } for pid=30690 comm="syz.4.6309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1687.600572][T30547] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1687.619606][T30547] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1687.632821][T30547] bridge0: port 3(netdevsim0) entered disabled state [ 1687.752217][T20847] Bluetooth: hci4: command tx timeout [ 1687.835689][T30547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1687.876455][T30547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1687.888155][T30547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1687.899191][T30547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1688.982309][T30547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.031459][T30547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.682498][ T55] usb 2-1: USB disconnect, device number 67 [ 1689.740594][T30731] netlink: 'syz.1.6319': attribute type 1 has an invalid length. [ 1689.751422][T30731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6319'. [ 1689.772832][T30722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6315'. [ 1689.891538][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1689.920704][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.927908][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.990561][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.997748][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.817219][T30547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.853989][T30547] veth0_vlan: entered promiscuous mode [ 1690.870520][T30547] veth1_vlan: entered promiscuous mode [ 1690.933483][T30547] veth0_macvtap: entered promiscuous mode [ 1690.949740][T30547] veth1_macvtap: entered promiscuous mode [ 1690.972156][T30547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1691.003181][T30547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.018467][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.034046][ T30] audit: type=1400 audit(1769267890.779:562): avc: denied { setopt } for pid=30760 comm="syz.0.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1691.047134][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.100674][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.159692][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.353639][T14268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.379569][T14268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.419172][ T30] audit: type=1400 audit(1769267891.159:563): avc: denied { listen } for pid=30777 comm="syz.0.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1691.442941][T14268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.453472][T14268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.475200][ T30] audit: type=1400 audit(1769267891.199:564): avc: denied { accept } for pid=30777 comm="syz.0.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1691.716835][T30796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6341'. [ 1692.181589][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1692.281136][ T55] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1692.354764][T30831] syzkaller0: entered promiscuous mode [ 1692.360247][T30831] syzkaller0: entered allmulticast mode [ 1692.441336][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 1692.449085][ T55] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1692.463664][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.480802][ T55] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.499531][ T55] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1692.526611][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.541451][ T55] usb 4-1: Product: syz [ 1692.545646][ T55] usb 4-1: Manufacturer: syz [ 1692.559919][ T55] usb 4-1: SerialNumber: syz [ 1693.005664][ T55] usb 4-1: 0:2 : does not exist [ 1693.409442][ T55] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1693.446842][ T55] usb 4-1: USB disconnect, device number 88 [ 1693.491939][T30658] udevd[30658]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.096086][T30885] syzkaller0: entered promiscuous mode [ 1694.121983][T30885] syzkaller0: entered allmulticast mode [ 1694.155998][T30894] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1694.165179][T30894] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 1694.172742][T30894] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1694.270119][T30900] tipc: Started in network mode [ 1694.285245][T30900] tipc: Node identity 961ae82680cb, cluster identity 4711 [ 1694.302735][T30900] tipc: Enabled bearer , priority 0 [ 1694.313647][T30900] syzkaller0: entered promiscuous mode [ 1694.319249][T30900] syzkaller0: entered allmulticast mode [ 1694.334508][T30900] tipc: Resetting bearer [ 1694.342447][T30897] tipc: Resetting bearer [ 1694.364358][T30897] tipc: Disabling bearer [ 1694.426262][T30911] syzkaller0: entered promiscuous mode [ 1694.431827][T30911] syzkaller0: entered allmulticast mode [ 1694.456408][T30911] tipc: Started in network mode [ 1694.461426][T30911] tipc: Node identity bea0286b1929, cluster identity 4711 [ 1694.468783][T30911] tipc: Enabled bearer , priority 0 [ 1694.479796][T30910] tipc: Resetting bearer [ 1694.504170][T30910] tipc: Disabling bearer [ 1694.548484][T30915] syzkaller0: entered promiscuous mode [ 1694.554037][T30915] syzkaller0: entered allmulticast mode [ 1694.889661][T30929] netlink: 'syz.3.6393': attribute type 1 has an invalid length. [ 1694.898563][T30929] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1695.750112][ T30] audit: type=1400 audit(1769267895.489:565): avc: denied { bind } for pid=30937 comm="syz.1.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1696.088956][T30948] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1696.118880][T30948] netlink: Conntrack attr has 4 unknown bytes [ 1697.020485][T30974] fuse: Bad value for 'fd' [ 1697.331773][T31000] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1697.389611][T31003] syzkaller0: entered promiscuous mode [ 1697.421233][T31003] syzkaller0: entered allmulticast mode [ 1697.439184][T31004] syzkaller0: entered promiscuous mode [ 1697.444976][T31004] syzkaller0: entered allmulticast mode [ 1697.631402][T15810] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1697.822082][T15810] usb 2-1: Using ep0 maxpacket: 16 [ 1697.836167][T15810] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1697.842993][T31041] tipc: Enabled bearer , priority 0 [ 1697.866932][T31041] syzkaller0: entered promiscuous mode [ 1697.874379][T15810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.876820][T31041] syzkaller0: entered allmulticast mode [ 1697.897844][T15810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1697.926262][T31041] tipc: Resetting bearer [ 1697.932603][T15810] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1697.961373][T15810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.964073][T28268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1697.969416][T15810] usb 2-1: Product: syz [ 1697.969435][T15810] usb 2-1: Manufacturer: syz [ 1697.969449][T15810] usb 2-1: SerialNumber: syz [ 1697.996643][T28268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1698.005356][T28268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1698.013158][T28268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1698.022983][T28268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1698.269459][T31037] tipc: Resetting bearer [ 1698.316871][T31037] tipc: Disabling bearer [ 1698.431950][T15810] usb 2-1: 0:2 : does not exist [ 1698.599707][T31067] syzkaller0: entered promiscuous mode [ 1698.617814][T31067] syzkaller0: entered allmulticast mode [ 1698.858036][T15810] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1698.902856][T15810] usb 2-1: USB disconnect, device number 68 [ 1698.947428][T31010] udevd[31010]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1699.315881][T31043] chnl_net:caif_netlink_parms(): no params data found [ 1699.457802][T31043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.466432][T31043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.475152][T31043] bridge_slave_0: entered allmulticast mode [ 1699.482909][T31043] bridge_slave_0: entered promiscuous mode [ 1699.490524][T31091] syzkaller0: entered promiscuous mode [ 1699.496443][T31091] syzkaller0: entered allmulticast mode [ 1699.504517][T31043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.521169][T31043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.528533][T31043] bridge_slave_1: entered allmulticast mode [ 1699.550258][T31043] bridge_slave_1: entered promiscuous mode [ 1699.649047][T31097] tipc: Started in network mode [ 1699.663258][T31097] tipc: Node identity 2a90f538aee8, cluster identity 4711 [ 1699.679411][T31097] tipc: Enabled bearer , priority 0 [ 1699.690578][T31043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.700352][T31097] syzkaller0: entered promiscuous mode [ 1699.706458][T31097] syzkaller0: entered allmulticast mode [ 1699.716596][T31043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.733380][T31097] tipc: Resetting bearer [ 1699.742078][T31096] tipc: Resetting bearer [ 1699.759728][T31096] tipc: Disabling bearer [ 1699.795419][T31043] team0: Port device team_slave_0 added [ 1699.803593][T31043] team0: Port device team_slave_1 added [ 1699.855774][T31043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.878220][T31043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.908229][T31043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.921911][T31043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.929464][T31043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.965538][T31043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.018931][T31043] hsr_slave_0: entered promiscuous mode [ 1700.026803][T31043] hsr_slave_1: entered promiscuous mode [ 1700.035407][T31043] debugfs: 'hsr0' already exists in 'hsr' [ 1700.041739][T31043] Cannot create hsr debugfs directory [ 1700.061129][T28268] Bluetooth: hci2: command tx timeout [ 1700.350987][T31118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.603054][T31118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.703229][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6469'. [ 1701.464352][T31118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.561079][T28268] Bluetooth: hci2: command tx timeout [ 1702.805355][T31118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.909971][T31043] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1702.929251][T31043] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1702.951235][T31043] bridge0: port 3(netdevsim0) entered disabled state [ 1702.970075][T31151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1703.088526][T14745] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.155128][T14745] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.187918][T31153] netlink: 'syz.0.6474': attribute type 1 has an invalid length. [ 1703.211696][T31118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.228795][T31153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1703.370838][T31118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.512479][T31163] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6478'. [ 1703.566567][T31043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1703.673275][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1703.816719][T31043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1703.924636][T31043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1703.938095][T31043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1704.018875][T31185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6483'. [ 1704.064873][T31043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.094458][T31043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.125017][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.132167][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.167788][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.174970][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.861092][T28268] Bluetooth: hci2: command tx timeout [ 1705.584523][T31043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.643786][T31043] veth0_vlan: entered promiscuous mode [ 1705.665593][T31212] syzkaller0: entered promiscuous mode [ 1705.678619][T31212] syzkaller0: entered allmulticast mode [ 1705.700738][T31212] tipc: Enabled bearer , priority 0 [ 1705.720352][T31043] veth1_vlan: entered promiscuous mode [ 1705.735810][T31211] tipc: Resetting bearer [ 1705.772627][T31211] tipc: Disabling bearer [ 1705.835678][T31043] veth0_macvtap: entered promiscuous mode [ 1705.872107][T31043] veth1_macvtap: entered promiscuous mode [ 1705.985890][T31043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.049896][T31043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.122235][T14886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.167563][T14886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.190204][T14886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.219887][T14886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.325077][T31235] netlink: 380 bytes leftover after parsing attributes in process `syz.4.6499'. [ 1706.326442][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.349394][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.378877][T14886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.389359][T14886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.522060][T31246] syzkaller1: entered promiscuous mode [ 1706.527836][T31246] syzkaller1: entered allmulticast mode [ 1706.647976][T31253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1706.661774][T14886] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.661853][T31253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1706.670605][T14886] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.691798][T14886] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.702045][T30515] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.745572][T31255] syzkaller0: entered promiscuous mode [ 1706.751410][T31255] syzkaller0: entered allmulticast mode [ 1706.941467][T28268] Bluetooth: hci2: command tx timeout [ 1706.957369][T31262] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 1706.966492][T31262] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6511'. [ 1707.277492][T31282] syzkaller0: entered promiscuous mode [ 1707.283081][T31282] syzkaller0: entered allmulticast mode [ 1707.460978][T31286] syzkaller0: entered promiscuous mode [ 1707.466663][T31286] syzkaller0: entered allmulticast mode [ 1707.544210][T31290] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1707.737448][ T30] audit: type=1400 audit(1769267907.479:566): avc: denied { connect } for pid=31303 comm="syz.0.6530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1707.760411][T31304] dummy0: mtu less than device minimum [ 1707.798923][T31308] syzkaller0: entered promiscuous mode [ 1707.815482][T31308] syzkaller0: entered allmulticast mode [ 1708.434539][T31337] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1708.444788][T31337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1708.460879][T31337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1708.687848][T31354] syzkaller1: entered promiscuous mode [ 1708.693480][T31354] syzkaller1: entered allmulticast mode [ 1709.193332][T31390] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1709.200304][T31390] overlayfs: failed to set xattr on upper [ 1709.206113][T31390] overlayfs: ...falling back to redirect_dir=nofollow. [ 1709.213049][T31390] overlayfs: ...falling back to index=off. [ 1709.218846][T31390] overlayfs: ...falling back to uuid=null. [ 1709.224720][T31390] overlayfs: maximum fs stacking depth exceeded [ 1709.273494][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1709.321130][ T55] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1709.511826][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 1709.536051][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.585826][T31403] syzkaller1: entered promiscuous mode [ 1709.594879][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.612047][T31403] syzkaller1: entered allmulticast mode [ 1709.617932][ T55] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1709.647089][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.691887][ T55] usb 5-1: config 0 descriptor?? [ 1710.139598][ T55] usbhid 5-1:0.0: can't add hid device: -32 [ 1710.160396][ T55] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1710.565268][T31427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1710.669410][T31432] syzkaller1: entered promiscuous mode [ 1710.675045][T31432] syzkaller1: entered allmulticast mode [ 1711.279028][T31465] syzkaller1: entered promiscuous mode [ 1711.284651][T31465] syzkaller1: entered allmulticast mode [ 1711.707097][T31488] syzkaller0: entered promiscuous mode [ 1711.712817][T31488] syzkaller0: entered allmulticast mode [ 1712.130437][ T5884] usb 5-1: USB disconnect, device number 69 [ 1713.244786][T31508] tipc: Enabling of bearer rejected, failed to enable media [ 1713.351750][T31533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1713.425756][T31542] tipc: Enabled bearer , priority 0 [ 1713.442856][T31542] syzkaller0: entered promiscuous mode [ 1713.448435][T31542] syzkaller0: entered allmulticast mode [ 1713.536439][T31541] tipc: Resetting bearer [ 1713.557871][T31541] tipc: Disabling bearer [ 1713.736468][T31556] syzkaller0: entered promiscuous mode [ 1713.743929][T31556] syzkaller0: entered allmulticast mode [ 1715.247913][T30515] bridge_slave_1: left allmulticast mode [ 1715.277546][T30515] bridge_slave_1: left promiscuous mode [ 1715.297559][T30515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.357490][T30515] bridge_slave_0: left allmulticast mode [ 1715.373541][T30515] bridge_slave_0: left promiscuous mode [ 1715.390501][T30515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.808919][T30515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.820618][T30515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.830922][T30515] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1715.845489][T30515] bond0 (unregistering): Released all slaves [ 1715.857922][T31584] syzkaller1: entered promiscuous mode [ 1715.864413][T31584] syzkaller1: entered allmulticast mode [ 1715.953610][T30515] tipc: Left network mode [ 1715.978099][T31612] syzkaller0: entered promiscuous mode [ 1715.994912][T31612] syzkaller0: entered allmulticast mode [ 1716.175561][ T30] audit: type=1400 audit(1769267915.919:567): avc: denied { shutdown } for pid=31623 comm="syz.3.6635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1716.199757][ T30] audit: type=1400 audit(1769267915.949:568): avc: denied { connect } for pid=31623 comm="syz.3.6635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1716.220167][ T30] audit: type=1400 audit(1769267915.949:569): avc: denied { read } for pid=31623 comm="syz.3.6635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1716.240778][ T30] audit: type=1400 audit(1769267915.949:570): avc: denied { setopt } for pid=31623 comm="syz.3.6635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1716.338473][T30515] hsr_slave_0: left promiscuous mode [ 1716.344367][T30515] hsr_slave_1: left promiscuous mode [ 1716.350366][T30515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.387459][T30515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.624587][T28268] Bluetooth: hci6: command 0x0405 tx timeout [ 1717.048600][T31629] syzkaller0: entered promiscuous mode [ 1717.054996][T31629] syzkaller0: entered allmulticast mode [ 1717.458298][T31673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1718.029616][T30515] IPVS: stop unused estimator thread 0... [ 1718.475821][T31718] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1718.483529][T15875] IPVS: starting estimator thread 0... [ 1718.493562][T31718] bridge_slave_0: left allmulticast mode [ 1718.499740][T31718] bridge_slave_0: left promiscuous mode [ 1718.506073][T31718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.524144][T31718] bridge_slave_1: left allmulticast mode [ 1718.529812][T31718] bridge_slave_1: left promiscuous mode [ 1718.541297][T31718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.572278][T31720] IPVS: using max 40 ests per chain, 96000 per kthread [ 1718.595866][T31718] bond0: (slave bond_slave_0): Releasing backup interface [ 1718.616337][T31718] bond0: (slave bond_slave_1): Releasing backup interface [ 1718.641466][T31718] team0: Port device team_slave_0 removed [ 1718.655754][T31718] team0: Port device team_slave_1 removed [ 1718.672237][T31718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.682368][T31718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.701939][T31718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1718.726684][T31726] tipc: Started in network mode [ 1718.731886][T31726] tipc: Node identity e2cd12690ba6, cluster identity 4711 [ 1718.739220][T31726] tipc: Enabled bearer , priority 0 [ 1718.748660][T31725] tipc: Disabling bearer [ 1718.850642][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1719.092630][T31746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1719.250523][T31754] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1719.322532][T31759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input57 [ 1719.425057][T31763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1719.806988][T31782] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1720.369420][T31822] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1720.423648][T31828] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1720.515898][T31830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55362 sclass=netlink_route_socket pid=31830 comm=syz.2.6710 [ 1720.553248][ T30] audit: type=1400 audit(1769267920.299:571): avc: denied { map } for pid=31829 comm="syz.2.6710" path="/proc/157/task/158" dev="proc" ino=102407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1720.579111][T31830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=31830 comm=syz.2.6710 [ 1720.583958][T31833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1720.682407][T31836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6710'. [ 1720.698413][ T30] audit: type=1400 audit(1769267920.439:572): avc: denied { setopt } for pid=31829 comm="syz.2.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1720.960766][ T30] audit: type=1400 audit(1769267920.469:573): avc: denied { ioctl } for pid=31829 comm="syz.2.6710" path="socket:[102419]" dev="sockfs" ino=102419 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1721.972754][ T30] audit: type=1400 audit(1769267921.719:574): avc: denied { write } for pid=31865 comm="syz.4.6723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 1722.136368][T31886] syzkaller0: entered promiscuous mode [ 1722.152252][T31886] syzkaller0: entered allmulticast mode [ 1722.178092][T31888] syz.0.6732 (31888) used obsolete PPPIOCDETACH ioctl [ 1722.523152][T31914] syzkaller0: entered promiscuous mode [ 1722.528726][T31914] syzkaller0: entered allmulticast mode [ 1722.644895][T31924] tipc: Enabling of bearer rejected, failed to enable media [ 1722.835262][T31939] __nla_validate_parse: 5 callbacks suppressed [ 1722.835280][T31939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6754'. [ 1722.857239][T31939] netlink: 'syz.1.6754': attribute type 2 has an invalid length. [ 1722.864401][T31941] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1722.869084][T31938] tap0: tun_chr_ioctl cmd 35111 [ 1723.092740][T31957] tipc: Enabling of bearer rejected, failed to enable media [ 1723.196616][T31965] tipc: Started in network mode [ 1723.205630][T31965] tipc: Node identity 4246, cluster identity 4711 [ 1723.213370][T31965] tipc: Node number set to 16966 [ 1723.218867][T31965] tipc: Cannot configure node identity twice [ 1723.241327][T31967] tipc: Enabled bearer , priority 0 [ 1723.255822][ T30] audit: type=1400 audit(1769267922.999:575): avc: denied { read } for pid=31968 comm="syz.0.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1723.290554][T31966] tipc: Disabling bearer [ 1723.363329][T31975] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6768'. [ 1723.547140][T31985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1724.087030][T32001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1724.096178][T32001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1724.109748][T32001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1724.119053][T32001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1724.223392][T32010] syzkaller0: entered promiscuous mode [ 1724.228994][T32010] syzkaller0: entered allmulticast mode [ 1724.321477][T32015] tipc: Enabled bearer , priority 0 [ 1724.371425][T32014] tipc: Disabling bearer [ 1724.523858][T32030] netlink: 'syz.4.6783': attribute type 4 has an invalid length. [ 1724.556705][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6785'. [ 1724.574733][T32034] netlink: 'syz.4.6783': attribute type 4 has an invalid length. [ 1724.712925][T32042] syzkaller0: entered promiscuous mode [ 1724.718425][T32042] syzkaller0: entered allmulticast mode [ 1724.937043][T32058] syzkaller0: entered promiscuous mode [ 1724.942686][T32058] syzkaller0: entered allmulticast mode [ 1725.126802][T32066] syzkaller0: entered promiscuous mode [ 1725.133037][T32066] syzkaller0: entered allmulticast mode [ 1725.394360][T32078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6803'. [ 1725.728240][T32098] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input58 [ 1726.090335][T32125] netlink: 'syz.1.6824': attribute type 1 has an invalid length. [ 1726.172853][T32130] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1726.183979][ T30] audit: type=1400 audit(1769267925.929:576): avc: denied { connect } for pid=32129 comm="syz.0.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1726.210634][ T30] audit: type=1400 audit(1769267925.959:577): avc: denied { read } for pid=32129 comm="syz.0.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1726.669998][T32150] syzkaller0: entered promiscuous mode [ 1726.697857][T32150] syzkaller0: entered allmulticast mode [ 1726.932392][T32170] syzkaller0: entered promiscuous mode [ 1726.947776][T32170] syzkaller0: entered allmulticast mode [ 1727.099357][T32176] fuse: Unknown parameter 'user_id00000000000000000000' [ 1727.189396][T32180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1727.227050][T32185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input59 [ 1727.269418][T32180] bond_slave_0: entered promiscuous mode [ 1727.275447][T32180] bond_slave_1: entered promiscuous mode [ 1727.319800][T32180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1727.336587][T32180] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1727.418417][ T30] audit: type=1400 audit(1769267927.159:578): avc: denied { read } for pid=32193 comm="syz.0.6851" path="socket:[104057]" dev="sockfs" ino=104057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1727.590976][T32203] syzkaller0: entered promiscuous mode [ 1727.611862][T32203] syzkaller0: entered allmulticast mode [ 1727.920383][T32226] __nla_validate_parse: 9 callbacks suppressed [ 1727.920400][T32226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1728.068566][T32231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6862'. [ 1728.198435][T32237] syzkaller0: entered promiscuous mode [ 1728.257762][T32237] syzkaller0: entered allmulticast mode [ 1728.400473][T32242] netlink: 'syz.4.6867': attribute type 1 has an invalid length. [ 1728.439760][T32242] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1728.521231][T32240] fuse: Unknown parameter 'user_id00000000000000000000' [ 1728.544431][T32244] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6868'. [ 1728.554185][T32244] netlink: ct family unspecified [ 1728.668653][T32253] syzkaller0: entered promiscuous mode [ 1728.677029][T32253] syzkaller0: entered allmulticast mode [ 1728.685000][T32251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6871'. [ 1729.009206][T32262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6876'. [ 1729.218400][T32268] netlink: 'syz.1.6879': attribute type 1 has an invalid length. [ 1729.234991][T32268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6879'. [ 1729.286099][T32270] tipc: Enabling of bearer rejected, failed to enable media [ 1729.299486][T32270] syzkaller0: entered promiscuous mode [ 1729.305300][T32270] syzkaller0: entered allmulticast mode [ 1729.379175][T32275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6883'. [ 1729.480538][T32279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 1729.567552][T32283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6885'. [ 1729.661890][T32282] syzkaller0: entered promiscuous mode [ 1729.680844][T32282] syzkaller0: entered allmulticast mode [ 1729.907305][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.059977][ T30] audit: type=1400 audit(1769267929.799:579): avc: denied { setopt } for pid=32302 comm="syz.4.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1730.093435][T32287] fuse: Unknown parameter 'user_id00000000000000000000' [ 1730.279934][T32315] netlink: 'syz.1.6898': attribute type 1 has an invalid length. [ 1730.457860][T32321] syzkaller0: entered promiscuous mode [ 1730.463571][T32321] syzkaller0: entered allmulticast mode [ 1730.524595][T32324] syzkaller0: entered promiscuous mode [ 1730.530262][T32324] syzkaller0: entered allmulticast mode [ 1731.109652][T32198] Set syz1 is full, maxelem 65536 reached [ 1731.474817][ T9901] hid-generic 0005:0006:5508.001C: item fetching failed at offset 3/4 [ 1731.502473][ T9901] hid-generic 0005:0006:5508.001C: probe with driver hid-generic failed with error -22 [ 1732.511739][T32373] netlink: 'syz.1.6916': attribute type 1 has an invalid length. [ 1732.633920][T32379] syzkaller0: entered promiscuous mode [ 1732.639537][T32379] syzkaller0: entered allmulticast mode [ 1732.853772][T32393] syzkaller0: entered promiscuous mode [ 1732.864928][T32393] syzkaller0: entered allmulticast mode [ 1732.886463][ T30] audit: type=1400 audit(1769267932.629:580): avc: denied { ioctl } for pid=32396 comm="syz.1.6925" path="socket:[104542]" dev="sockfs" ino=104542 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1732.911488][T32397] syz.1.6925 uses old SIOCAX25GETINFO [ 1733.195384][T32413] syzkaller1: entered promiscuous mode [ 1733.201542][T32413] syzkaller1: entered allmulticast mode [ 1733.602967][T32431] __nla_validate_parse: 6 callbacks suppressed [ 1733.602985][T32431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1733.648692][T32433] syzkaller0: entered promiscuous mode [ 1733.654347][T32433] syzkaller0: entered allmulticast mode [ 1733.692867][T21308] hid-generic 0005:0006:5508.001D: item fetching failed at offset 3/6 [ 1733.703223][T21308] hid-generic 0005:0006:5508.001D: probe with driver hid-generic failed with error -22 [ 1733.887627][T32450] syzkaller0: entered promiscuous mode [ 1733.893268][T32450] syzkaller0: entered allmulticast mode [ 1734.369594][T32460] tipc: Enabling of bearer rejected, failed to enable media [ 1734.674162][T32475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1734.976604][T32493] netlink: 'syz.0.6959': attribute type 4 has an invalid length. [ 1734.997414][T32493] netlink: 'syz.0.6959': attribute type 4 has an invalid length. [ 1735.101102][T21308] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1735.261166][T21308] usb 4-1: Using ep0 maxpacket: 32 [ 1735.268425][T21308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.302221][T21308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.322216][T21308] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1735.351104][T21308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.380192][T21308] usb 4-1: config 0 descriptor?? [ 1735.825975][T21308] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 1735.842455][T21308] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 1736.019722][T21308] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 1736.020636][T32543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6982'. [ 1736.027987][T21308] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -32 [ 1736.716563][T32559] syzkaller1: entered promiscuous mode [ 1736.723565][T32559] syzkaller1: entered allmulticast mode [ 1736.860475][T32564] syzkaller0: entered promiscuous mode [ 1736.866379][T32564] syzkaller0: entered allmulticast mode [ 1736.927413][T32570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1736.948003][T32570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1736.979172][ T1164] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.987565][T32570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1736.996771][ T1164] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.005322][ T1164] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.019660][T32570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1737.032573][ T1164] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.052717][T32577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1737.139415][T32582] netlink: 'syz.0.6998': attribute type 4 has an invalid length. [ 1737.220612][T32586] syzkaller0: entered promiscuous mode [ 1737.234059][T32586] syzkaller0: entered allmulticast mode [ 1737.864233][ T55] usb 4-1: USB disconnect, device number 89 [ 1738.317804][T32623] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1738.850632][T32633] tipc: Enabled bearer , priority 0 [ 1738.869862][T32632] tipc: Disabling bearer [ 1738.917408][T32639] netlink: 'syz.2.7017': attribute type 1 has an invalid length. [ 1738.926783][T32639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7017'. [ 1738.935784][T32640] syzkaller0: entered promiscuous mode [ 1738.942126][T32640] syzkaller0: entered allmulticast mode [ 1739.039130][T32647] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1739.307594][T32671] syzkaller0: entered promiscuous mode [ 1739.323464][ T30] audit: type=1400 audit(1769267939.069:581): avc: denied { write } for pid=32652 comm="syz.1.7022" path="socket:[105058]" dev="sockfs" ino=105058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1739.324956][T32674] tipc: Failed to remove unknown binding: 66,0,0/0:3309537188/3309537189 [ 1739.356196][T32671] syzkaller0: entered allmulticast mode [ 1739.399060][T32674] tipc: Failed to remove unknown binding: 66,0,0/0:3309537188/3309537189 [ 1739.478892][T32681] tipc: Enabled bearer , priority 0 [ 1739.523963][T32680] tipc: Disabling bearer [ 1739.640657][T32687] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.7034'. [ 1739.681569][T32690] syzkaller0: entered promiscuous mode [ 1739.687264][T32690] syzkaller0: entered allmulticast mode [ 1739.904108][ T30] audit: type=1400 audit(1769267939.649:582): avc: denied { getopt } for pid=32698 comm="syz.2.7040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1740.068995][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7042'. [ 1740.080481][T32707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1740.090292][T32707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1740.107260][T32707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1740.129762][T32707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1740.132522][T32709] syzkaller0: entered promiscuous mode [ 1740.160262][T32709] syzkaller0: entered allmulticast mode [ 1741.234993][T32747] netlink: 'syz.2.7053': attribute type 1 has an invalid length. [ 1741.242810][T32747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7053'. [ 1741.954579][ T30] audit: type=1400 audit(1769267941.699:583): avc: denied { connect } for pid=305 comm="syz.1.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1742.032006][ T310] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1742.277734][ T327] syzkaller0: entered promiscuous mode [ 1742.283498][ T327] syzkaller0: entered allmulticast mode [ 1742.704922][ T357] tipc: Enabled bearer , priority 0 [ 1742.714372][ T356] tipc: Disabling bearer [ 1743.589301][ T383] team_slave_0: entered promiscuous mode [ 1743.595355][ T383] team_slave_1: entered promiscuous mode [ 1743.601541][ T383] vlan2: entered promiscuous mode [ 1743.606690][ T383] team0: entered promiscuous mode [ 1743.664590][ T388] tipc: Enabled bearer , priority 0 [ 1743.673468][ T387] tipc: Disabling bearer [ 1744.068657][ T407] tipc: Enabled bearer , priority 0 [ 1744.082132][ T407] tipc: Resetting bearer [ 1744.096734][ T406] tipc: Disabling bearer [ 1745.518949][ T435] __nla_validate_parse: 5 callbacks suppressed [ 1745.518965][ T435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1745.872282][ T440] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1746.374805][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1746.475541][ T458] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1746.484882][ T460] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7125'. [ 1746.725771][ T30] audit: type=1400 audit(1769267946.469:584): avc: denied { create } for pid=478 comm="syz.2.7134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1747.045077][ T497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7135'. [ 1748.573577][ T545] syzkaller0: entered promiscuous mode [ 1748.579321][ T545] syzkaller0: entered allmulticast mode [ 1749.194872][ T30] audit: type=1400 audit(1769267948.939:585): avc: denied { accept } for pid=553 comm="syz.4.7163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1749.314534][ T566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1749.519235][ T574] syzkaller0: entered promiscuous mode [ 1749.528043][ T574] syzkaller0: entered allmulticast mode [ 1750.682618][ T602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7184'. [ 1751.112457][ T619] syzkaller0: entered promiscuous mode [ 1751.119590][ T619] syzkaller0: entered allmulticast mode [ 1751.503656][ T643] fuse: Unknown parameter '0x0000000000000003' [ 1751.699404][ T649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1752.460975][ T651] syzkaller0: entered promiscuous mode [ 1752.489131][ T651] syzkaller0: entered allmulticast mode [ 1752.667547][ T659] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1752.916510][ T672] netlink: 'syz.4.7206': attribute type 4 has an invalid length. [ 1752.962307][ T672] netlink: 'syz.4.7206': attribute type 4 has an invalid length. [ 1753.232334][ T692] syzkaller0: entered promiscuous mode [ 1753.239003][ T692] syzkaller0: entered allmulticast mode [ 1753.283240][ T696] syzkaller0: entered promiscuous mode [ 1753.288788][ T696] syzkaller0: entered allmulticast mode [ 1753.611107][ T795] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1753.773277][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 1753.780443][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.799485][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.816278][ T795] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1753.825642][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.865809][ T795] usb 2-1: config 0 descriptor?? [ 1754.287294][ T795] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1754.294624][ T795] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1754.486029][ T795] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 1754.493826][ T795] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -32 [ 1756.194022][ T751] syzkaller0: entered promiscuous mode [ 1756.201419][ T751] syzkaller0: entered allmulticast mode [ 1756.213729][ T755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7230'. [ 1756.398144][T21297] usb 2-1: USB disconnect, device number 69 [ 1758.015902][ T30] audit: type=1400 audit(1769267957.759:586): avc: denied { create } for pid=771 comm="syz.3.7234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1758.084599][ T30] audit: type=1400 audit(1769267957.829:587): avc: denied { read write } for pid=30547 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1758.157841][ T783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1758.173804][ T430] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.173816][ T783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1758.173845][ T430] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.184671][ T30] audit: type=1400 audit(1769267957.829:588): avc: denied { open } for pid=30547 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1758.242478][ T430] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.257036][ T30] audit: type=1400 audit(1769267957.829:589): avc: denied { ioctl } for pid=30547 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1758.332007][ T430] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.532893][ T797] syzkaller0: entered promiscuous mode [ 1758.539120][ T797] syzkaller0: entered allmulticast mode [ 1759.030412][ T828] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7255'. [ 1759.501425][ T858] 9p: Bad value for 'wfdno' [ 1759.514145][ T857] dvmrp6: entered allmulticast mode [ 1759.552618][ T30] audit: type=1400 audit(1769267959.299:590): avc: denied { create } for pid=855 comm="syz.4.7269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1759.613162][ T863] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1759.959236][ T877] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1759.966343][ T877] overlayfs: failed to set xattr on upper [ 1759.972140][ T877] overlayfs: ...falling back to redirect_dir=nofollow. [ 1759.978995][ T877] overlayfs: ...falling back to index=off. [ 1759.985228][ T877] overlayfs: ...falling back to uuid=null. [ 1759.991071][ T877] overlayfs: maximum fs stacking depth exceeded [ 1760.032478][ T876] netlink: 592 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1760.324262][ T876] netlink: 'syz.4.7276': attribute type 1 has an invalid length. [ 1760.403037][ T876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1761.314995][ T898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1762.311482][T21297] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1762.471259][T21297] usb 4-1: Using ep0 maxpacket: 32 [ 1762.482798][T21297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.503018][T21297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.513395][T21297] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1762.522516][T21297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.534079][T21297] usb 4-1: config 0 descriptor?? [ 1762.562452][ T926] netlink: 'syz.4.7289': attribute type 4 has an invalid length. [ 1762.630965][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1762.688135][ T939] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1762.787841][ T30] audit: type=1400 audit(1769267962.529:591): avc: denied { write } for pid=948 comm="syz.1.7297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1762.968906][T21297] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1762.989912][T21297] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1763.157585][T21297] ft260 0003:0403:6030.0020: failed to retrieve chip version [ 1763.180011][T21297] ft260 0003:0403:6030.0020: probe with driver ft260 failed with error -5 [ 1763.955415][ T1018] syzkaller0: entered promiscuous mode [ 1763.960909][ T1018] syzkaller0: entered allmulticast mode [ 1764.295309][ T1053] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1765.126202][ T55] usb 4-1: USB disconnect, device number 90 [ 1765.233369][ T30] audit: type=1400 audit(1769267964.979:592): avc: denied { append } for pid=1093 comm="syz.1.7336" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1765.249019][ T1096] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7337'. [ 1765.531091][ T30] audit: type=1400 audit(1769267965.269:593): avc: denied { create } for pid=1115 comm="syz.0.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1765.664687][ T1121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1765.703020][ T1121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1765.772462][ T30] audit: type=1400 audit(1769267965.519:594): avc: denied { read } for pid=1120 comm="syz.0.7347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1765.825083][ T30] audit: type=1400 audit(1769267965.569:595): avc: denied { accept } for pid=1120 comm="syz.0.7347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1765.923702][ T1139] TCP: TCP_TX_DELAY enabled [ 1766.013277][ T1146] syzkaller0: entered promiscuous mode [ 1766.018965][ T1146] syzkaller0: entered allmulticast mode [ 1766.110507][ T1149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7354'. [ 1767.053471][ T1183] syzkaller0: entered promiscuous mode [ 1767.075228][ T1183] syzkaller0: entered allmulticast mode [ 1767.373903][ T1192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1767.901010][ T1201] syzkaller0: entered promiscuous mode [ 1767.930829][ T1201] syzkaller0: entered allmulticast mode [ 1767.986522][ T1204] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7373'. [ 1768.271813][ T30] audit: type=1400 audit(1769267968.009:596): avc: denied { ioctl } for pid=1214 comm="syz.2.7379" path="socket:[109331]" dev="sockfs" ino=109331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1768.599302][ T1225] syzkaller0: entered promiscuous mode [ 1768.605238][ T1230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1768.634412][ T1225] syzkaller0: entered allmulticast mode [ 1770.156363][ T1266] syzkaller0: entered promiscuous mode [ 1770.165620][ T1266] syzkaller0: entered allmulticast mode [ 1770.966792][ T1293] netlink: 'syz.2.7405': attribute type 4 has an invalid length. [ 1771.019732][ T1293] netlink: 'syz.2.7405': attribute type 4 has an invalid length. [ 1771.090677][ T30] audit: type=1400 audit(1769267970.829:597): avc: denied { create } for pid=1302 comm="syz.4.7409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1771.130696][ T30] audit: type=1400 audit(1769267970.859:598): avc: denied { bind } for pid=1302 comm="syz.4.7409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1771.326634][ T1317] team_slave_0: entered promiscuous mode [ 1771.332338][ T1317] team_slave_1: entered promiscuous mode [ 1771.338358][ T1317] vlan2: entered promiscuous mode [ 1771.344088][ T1317] team0: entered promiscuous mode [ 1771.387594][ T30] audit: type=1400 audit(1769267971.129:599): avc: denied { getopt } for pid=1312 comm="syz.0.7414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1772.243317][ T1341] netlink: 'syz.1.7422': attribute type 4 has an invalid length. [ 1772.256693][ T1341] netlink: 'syz.1.7422': attribute type 4 has an invalid length. [ 1772.513519][ T1348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1773.105236][ T1352] syzkaller1: entered promiscuous mode [ 1773.110722][ T1352] syzkaller1: entered allmulticast mode [ 1773.255199][ T1356] netlink: 'syz.2.7427': attribute type 1 has an invalid length. [ 1773.285639][ T1351] netlink: 'syz.3.7425': attribute type 1 has an invalid length. [ 1773.314098][ T1351] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7425'. [ 1773.382106][ T1356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1773.423016][ T30] audit: type=1400 audit(1769267973.169:600): avc: denied { create } for pid=1355 comm="syz.2.7427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1773.558074][ T1358] vlan3: entered allmulticast mode [ 1773.576928][ T1358] bond1: entered allmulticast mode [ 1773.910415][ T1365] syzkaller0: entered promiscuous mode [ 1773.916512][ T1365] syzkaller0: entered allmulticast mode [ 1774.189144][ T1381] netlink: 'syz.2.7433': attribute type 4 has an invalid length. [ 1774.227705][ T1381] netlink: 'syz.2.7433': attribute type 4 has an invalid length. [ 1774.437973][ T1392] netlink: 876 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1774.450158][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1774.735676][ T1401] syzkaller0: entered promiscuous mode [ 1774.741458][ T1401] syzkaller0: entered allmulticast mode [ 1776.431180][ T1438] netlink: 'syz.3.7456': attribute type 1 has an invalid length. [ 1776.439225][ T1438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7456'. [ 1776.553942][ T1452] netlink: 'syz.0.7455': attribute type 4 has an invalid length. [ 1776.587352][ T1452] netlink: 'syz.0.7455': attribute type 4 has an invalid length. [ 1776.857062][ T30] audit: type=1400 audit(1769267976.599:601): avc: denied { nlmsg_write } for pid=1475 comm="syz.2.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1776.898295][ T30] audit: type=1400 audit(1769267976.629:602): avc: denied { audit_write } for pid=1475 comm="syz.2.7466" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1777.016482][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.024054][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.102601][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.117186][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.265679][ T148] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.294354][ T148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.322667][ T148] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.351972][ T148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.365396][ T148] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.376171][ T148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.447767][ T30] audit: type=1400 audit(1769267977.189:603): avc: denied { connect } for pid=1507 comm="syz.2.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1777.782203][ T148] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.990109][ T148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.081796][T28268] Bluetooth: hci0: command 0x0406 tx timeout [ 1778.188197][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1778.200181][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1778.229442][ T1536] netlink: 'syz.1.7482': attribute type 4 has an invalid length. [ 1778.250796][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1778.259922][ T1536] netlink: 'syz.1.7482': attribute type 4 has an invalid length. [ 1778.286564][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1778.663274][ T1561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1779.818025][ T1590] netlink: 'syz.0.7496': attribute type 4 has an invalid length. [ 1779.829351][ T1590] netlink: 'syz.0.7496': attribute type 4 has an invalid length. [ 1780.717954][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7505'. [ 1781.952295][ T1661] 9p: Bad value for 'rfdno' [ 1782.062947][ T1663] syzkaller0: entered promiscuous mode [ 1782.071072][ T1663] syzkaller0: entered allmulticast mode [ 1782.379415][ T1677] syzkaller0: entered promiscuous mode [ 1782.394845][ T1677] syzkaller0: entered allmulticast mode [ 1782.579552][ T1688] openvswitch: netlink: Flow actions attr not present in new flow. [ 1782.980904][ T30] audit: type=1400 audit(1769267982.719:604): avc: denied { ioctl } for pid=1691 comm="syz.1.7529" path="socket:[111298]" dev="sockfs" ino=111298 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1784.282836][ T1713] syzkaller0: entered promiscuous mode [ 1784.288539][ T1713] syzkaller0: entered allmulticast mode [ 1784.468777][ T1723] syzkaller0: entered promiscuous mode [ 1784.482390][ T1723] syzkaller0: entered allmulticast mode [ 1784.530754][ T30] audit: type=1400 audit(1769267984.269:605): avc: denied { setopt } for pid=1728 comm="syz.2.7539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1784.775226][ T1747] syzkaller0: entered promiscuous mode [ 1784.791408][ T1747] syzkaller0: entered allmulticast mode [ 1784.864907][ T1757] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1784.906731][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1784.953760][ T1763] syzkaller0: entered promiscuous mode [ 1784.959400][ T1763] syzkaller0: entered allmulticast mode [ 1784.979744][ T1762] syzkaller0: entered promiscuous mode [ 1784.985720][ T1762] syzkaller0: entered allmulticast mode [ 1785.085038][ T30] audit: type=1400 audit(1769267984.829:606): avc: denied { setopt } for pid=1769 comm="syz.1.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1785.158168][ T1774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.214285][ T1777] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7561'. [ 1785.305154][ T1785] syzkaller0: entered promiscuous mode [ 1785.310737][ T1785] syzkaller0: entered allmulticast mode [ 1785.397779][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7566'. [ 1785.583847][ T1810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1785.603181][ T1808] syzkaller0: entered promiscuous mode [ 1785.622825][ T1808] syzkaller0: entered allmulticast mode [ 1785.646078][ T1807] syzkaller0: entered promiscuous mode [ 1785.658365][ T1807] syzkaller0: entered allmulticast mode [ 1785.723079][ T1817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.793592][ T1825] netlink: 'syz.2.7576': attribute type 1 has an invalid length. [ 1785.801510][ T1825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7576'. [ 1786.049496][ T1843] team_slave_0: entered promiscuous mode [ 1786.055249][ T1843] team_slave_1: entered promiscuous mode [ 1786.080101][ T1843] vlan2: entered promiscuous mode [ 1786.093181][ T1843] team0: entered promiscuous mode [ 1786.297721][ T1853] xt_CT: No such helper "snmp" [ 1786.451153][ T1867] syzkaller0: entered promiscuous mode [ 1786.464766][ T1867] syzkaller0: entered allmulticast mode [ 1786.582487][ T1874] netlink: 'syz.2.7592': attribute type 1 has an invalid length. [ 1786.590345][ T1874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7592'. [ 1786.758117][ T1888] netlink: 'syz.2.7596': attribute type 4 has an invalid length. [ 1786.774488][ T1887] syzkaller0: entered promiscuous mode [ 1786.782696][ T1887] syzkaller0: entered allmulticast mode [ 1786.797262][ T1888] netlink: 'syz.2.7596': attribute type 4 has an invalid length. [ 1788.251568][ T1922] syzkaller0: entered promiscuous mode [ 1788.257083][ T1922] syzkaller0: entered allmulticast mode [ 1788.287279][ T1930] syzkaller0: entered promiscuous mode [ 1788.301191][ T1930] syzkaller0: entered allmulticast mode [ 1789.737972][ T1952] syzkaller0: entered promiscuous mode [ 1789.746660][ T1952] syzkaller0: entered allmulticast mode [ 1789.870142][ T1968] syzkaller0: entered promiscuous mode [ 1789.882275][ T1968] syzkaller0: entered allmulticast mode [ 1789.892403][ T1966] syzkaller0: entered promiscuous mode [ 1789.911309][ T1966] syzkaller0: entered allmulticast mode [ 1790.026534][ T1978] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1790.061134][ T1978] block nbd0: not configured, cannot reconfigure [ 1790.076141][ T30] audit: type=1400 audit(1769267989.819:607): avc: denied { write } for pid=1977 comm="syz.0.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1790.087463][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1790.105112][ T30] audit: type=1400 audit(1769267989.849:608): avc: denied { read } for pid=1977 comm="syz.0.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1790.118052][ T1982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1790.147111][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1790.152937][ T30] audit: type=1400 audit(1769267989.889:609): avc: denied { setopt } for pid=1977 comm="syz.0.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1790.156660][ T1982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1790.208042][ T1978] netlink: 'syz.0.7617': attribute type 1 has an invalid length. [ 1790.303821][ T1996] syzkaller0: entered promiscuous mode [ 1790.309371][ T1996] syzkaller0: entered allmulticast mode [ 1790.344759][ T1995] syzkaller0: entered promiscuous mode [ 1790.350251][ T1995] syzkaller0: entered allmulticast mode [ 1790.490608][ T2007] syzkaller0: entered promiscuous mode [ 1790.496260][ T2007] syzkaller0: entered allmulticast mode [ 1790.719176][ T30] audit: type=1400 audit(1769267990.459:610): avc: denied { write } for pid=2020 comm="syz.0.7637" name="file0" dev="tmpfs" ino=1662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1791.485146][ T2028] syzkaller0: entered promiscuous mode [ 1791.527354][ T2028] syzkaller0: entered allmulticast mode [ 1791.720202][ T30] audit: type=1400 audit(1769267990.699:611): avc: denied { open } for pid=2020 comm="syz.0.7637" path="/326/file0" dev="tmpfs" ino=1662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1791.875745][ T2046] syzkaller0: entered promiscuous mode [ 1791.897792][ T2046] syzkaller0: entered allmulticast mode [ 1792.320267][ T2060] syzkaller0: entered promiscuous mode [ 1792.339896][ T2060] syzkaller0: entered allmulticast mode [ 1792.355754][ T2064] netlink: 'syz.2.7651': attribute type 4 has an invalid length. [ 1792.393869][ T2064] netlink: 'syz.2.7651': attribute type 4 has an invalid length. [ 1792.474070][ T30] audit: type=1400 audit(1769267992.219:612): avc: denied { watch watch_reads } for pid=2069 comm="syz.0.7654" path="/proc/803/pagemap" dev="proc" ino=113057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1792.494034][ T2077] tipc: Enabled bearer , priority 0 [ 1792.523834][ T2077] syzkaller0: entered promiscuous mode [ 1792.545127][ T2077] syzkaller0: entered allmulticast mode [ 1792.580280][ T2074] tipc: Resetting bearer [ 1792.640891][ T2074] tipc: Disabling bearer [ 1792.708928][ T2091] syzkaller0: entered promiscuous mode [ 1792.719566][ T2091] syzkaller0: entered allmulticast mode [ 1792.785838][ T2096] 9pnet_fd: Insufficient options for proto=fd [ 1793.119105][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7675'. [ 1793.431107][T20847] Bluetooth: hci5: command 0x0406 tx timeout [ 1794.129387][ T2167] netlink: 'syz.3.7692': attribute type 1 has an invalid length. [ 1794.137270][ T2167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1794.471172][T21308] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1795.543070][T21308] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1795.551337][T21308] usb 4-1: config 0 has no interface number 0 [ 1795.557751][T21308] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1795.569871][T21308] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1795.578976][T21308] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1795.587586][T21308] usb 4-1: Manufacturer: syz [ 1796.497151][T21308] usb 4-1: SerialNumber: syz [ 1796.519621][T21308] usb 4-1: config 0 descriptor?? [ 1796.809998][ T2223] syzkaller0: entered promiscuous mode [ 1796.841506][ T2223] syzkaller0: entered allmulticast mode [ 1796.853676][ T2227] syzkaller0: entered promiscuous mode [ 1796.881330][ T2227] syzkaller0: entered allmulticast mode [ 1796.911778][ T2233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1796.960462][T21308] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1796.986635][T21308] usb 4-1: USB disconnect, device number 91 [ 1797.173141][ T2238] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=2238 comm=syz.4.7713 [ 1797.188315][ T2238] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=2238 comm=syz.4.7713 [ 1798.880798][ T2259] 9pnet_fd: Insufficient options for proto=fd [ 1798.936018][ T2265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1798.974531][T14268] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.983739][ T2265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1798.996597][T14268] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.007358][T14268] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.018150][T14268] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.034367][ T2269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7729'. [ 1799.155016][ T2279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7733'. [ 1799.264383][ T2284] syzkaller0: entered promiscuous mode [ 1799.270462][ T2284] syzkaller0: entered allmulticast mode [ 1799.370293][ T2291] netlink: 'syz.2.7740': attribute type 1 has an invalid length. [ 1799.385684][ T2291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7740'. [ 1800.333396][ T2308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1800.569131][ T2316] syzkaller0: entered promiscuous mode [ 1800.575581][ T2316] syzkaller0: entered allmulticast mode [ 1800.752716][T21297] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1800.932693][T21297] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1800.942142][T21297] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.952810][T21297] usb 5-1: config 220 has no interface number 2 [ 1800.959179][T21297] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1800.972720][T21297] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1800.979575][T21297] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1800.986884][T21297] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1800.995780][T21297] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1801.004965][T21297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.013589][T21297] usb 5-1: Product: syz [ 1801.017824][T21297] usb 5-1: Manufacturer: syz [ 1801.029865][T21297] usb 5-1: SerialNumber: syz [ 1801.258073][T21297] usb 5-1: selecting invalid altsetting 0 [ 1801.279948][T21297] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1801.293209][T21297] uvcvideo 5-1:220.0: No valid video chain found. [ 1801.310268][T21297] usb 5-1: selecting invalid altsetting 0 [ 1801.316160][T21297] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1801.344937][T21297] usb 5-1: USB disconnect, device number 70 [ 1802.192312][ T2323] syzkaller0: entered promiscuous mode [ 1802.199620][ T2323] syzkaller0: entered allmulticast mode [ 1802.432688][ T2356] syzkaller0: entered promiscuous mode [ 1802.438324][ T2356] syzkaller0: entered allmulticast mode [ 1802.592992][ T2366] 9pnet_fd: Insufficient options for proto=fd [ 1803.418056][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7766'. [ 1803.662717][T20847] Bluetooth: hci4: command 0x0406 tx timeout [ 1804.951787][ T2399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7770'. [ 1805.794664][ T2421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7780'. [ 1806.056036][ T2433] syzkaller0: entered promiscuous mode [ 1806.062599][ T2433] syzkaller0: entered allmulticast mode [ 1809.566977][ T2499] 9pnet_fd: Insufficient options for proto=fd [ 1809.708822][ T2506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1810.543775][ T2519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7801'. [ 1810.579973][ T2522] syzkaller0: entered promiscuous mode [ 1810.621847][ T2522] syzkaller0: entered allmulticast mode [ 1810.639041][ T2519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7801'. [ 1812.318106][ T2552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7812'. [ 1813.523251][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1813.532809][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1813.628356][ T2578] syzkaller0: entered promiscuous mode [ 1813.633932][ T795] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1813.643460][ T2578] syzkaller0: entered allmulticast mode [ 1813.720603][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.733356][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.746186][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.760508][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.773121][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.785942][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.791050][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 1813.798523][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.816321][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.825310][ T795] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1813.828901][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.852093][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.1.7820 [ 1813.863497][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.886199][ T795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1813.914651][ T795] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1813.934168][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.960509][ T795] usb 4-1: config 0 descriptor?? [ 1814.542679][ T795] usb 4-1: string descriptor 0 read error: -71 [ 1814.570692][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 1814.590930][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1814.612666][ T795] usb 4-1: USB disconnect, device number 92 [ 1816.545768][ T2587] syzkaller1: entered promiscuous mode [ 1816.551502][ T2587] syzkaller1: entered allmulticast mode [ 1816.659964][ T2618] netlink: 'syz.0.7828': attribute type 4 has an invalid length. [ 1816.686979][ T2618] netlink: 'syz.0.7828': attribute type 4 has an invalid length. [ 1817.233142][ T2626] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1817.873408][T20441] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1819.492385][ T2639] bond_slave_0: entered promiscuous mode [ 1819.492464][ T2639] bond_slave_1: entered promiscuous mode [ 1819.492622][ T2639] vlan2: entered promiscuous mode [ 1819.492636][ T2639] bond0: entered promiscuous mode [ 1819.492957][ T2639] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1819.703595][T20441] usb 3-1: Using ep0 maxpacket: 8 [ 1820.625828][ T30] audit: type=1400 audit(1769268275.796:613): avc: denied { ioctl } for pid=2633 comm="syz.1.7833" path="/322/file0" dev="tmpfs" ino=1636 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1820.735114][T20441] usb 3-1: device descriptor read/all, error -71 [ 1821.018671][ T30] audit: type=1400 audit(1769268276.766:614): avc: denied { view } for pid=2649 comm="syz.0.7836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1822.976199][ T2676] syzkaller1: entered promiscuous mode [ 1823.003282][ T2676] syzkaller1: entered allmulticast mode [ 1823.517778][ T2682] bridge_slave_0: left allmulticast mode [ 1823.523547][ T2682] bridge_slave_0: left promiscuous mode [ 1823.529315][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.824903][ T2696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1823.834076][ T2696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1823.843682][ T2696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1824.005253][ T30] audit: type=1326 audit(1769268279.676:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.061327][ T30] audit: type=1326 audit(1769268279.676:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.111361][ T30] audit: type=1326 audit(1769268279.676:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.151743][ T30] audit: type=1326 audit(1769268279.676:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.176534][ T30] audit: type=1326 audit(1769268279.676:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.216342][ T30] audit: type=1326 audit(1769268279.676:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1824.316076][ T30] audit: type=1326 audit(1769268279.676:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2f39acb9 code=0x7ffc0000 [ 1825.598897][ T2745] netlink: 'syz.0.7859': attribute type 1 has an invalid length. [ 1825.631114][ T2745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7859'. [ 1825.716581][ T2760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7862'. [ 1825.738952][ T2760] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7862'. [ 1825.760956][ T2760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7862'. [ 1828.668219][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7898'. [ 1831.551799][ T3002] netlink: 'syz.4.7918': attribute type 4 has an invalid length. [ 1831.601720][ T3006] netlink: 181284 bytes leftover after parsing attributes in process `syz.2.7921'. [ 1831.623468][ T3002] netlink: 'syz.4.7918': attribute type 4 has an invalid length. [ 1832.078660][ T3027] syzkaller0: entered promiscuous mode [ 1832.100588][ T3031] netlink: 'syz.2.7932': attribute type 4 has an invalid length. [ 1832.101261][ T3027] syzkaller0: entered allmulticast mode [ 1832.648756][ T3045] netlink: 'syz.1.7936': attribute type 4 has an invalid length. [ 1832.661638][ T3045] netlink: 'syz.1.7936': attribute type 4 has an invalid length. [ 1833.451264][ T3053] netlink: 'syz.1.7940': attribute type 1 has an invalid length. [ 1833.459040][ T3053] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1833.603751][ T3062] vlan2: entered promiscuous mode [ 1833.677495][ T3061] syzkaller0: entered promiscuous mode [ 1833.683105][ T3061] syzkaller0: entered allmulticast mode [ 1833.698688][ T3064] syzkaller0: entered promiscuous mode [ 1833.704845][ T3064] syzkaller0: entered allmulticast mode [ 1833.714112][ T3066] syzkaller0: entered promiscuous mode [ 1833.719705][ T3066] syzkaller0: entered allmulticast mode [ 1834.234365][T15875] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1834.393491][T15875] usb 1-1: Using ep0 maxpacket: 32 [ 1834.409151][T15875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.427645][T15875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.438198][T15875] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1834.447956][T15875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.527102][T15875] usb 1-1: config 0 descriptor?? [ 1834.961785][T15875] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1834.968695][T15875] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1835.160517][T15875] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 1835.361263][T15875] ft260 0003:0403:6030.0021: failed to retrieve system status [ 1835.370519][T15875] ft260 0003:0403:6030.0021: probe with driver ft260 failed with error -32 [ 1836.122482][ T30] audit: type=1326 audit(1769268291.836:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.1.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503cb9acb9 code=0x7ffc0000 [ 1836.182625][ T7303] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1836.198616][ T3096] netlink: 'syz.4.7956': attribute type 1 has an invalid length. [ 1836.206951][ T3096] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7956'. [ 1836.211248][ T30] audit: type=1326 audit(1769268291.836:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.1.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503cb9acb9 code=0x7ffc0000 [ 1836.277840][ T30] audit: type=1326 audit(1769268291.836:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.1.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f503cb9acb9 code=0x7ffc0000 [ 1836.326269][ T30] audit: type=1326 audit(1769268291.836:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.1.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503cb9acb9 code=0x7ffc0000 [ 1836.358673][ T7303] usb 4-1: Using ep0 maxpacket: 32 [ 1836.368021][ T7303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.388889][ T7303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.399575][ T7303] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1836.416664][ T30] audit: type=1326 audit(1769268291.836:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.1.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503cb9acb9 code=0x7ffc0000 [ 1836.424355][ T7303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.900035][ T7303] usb 4-1: config 0 descriptor?? [ 1836.907832][ T7303] hub 4-1:0.0: USB hub found [ 1837.012045][ T2628] usb 1-1: USB disconnect, device number 49 [ 1837.110589][ T7303] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1837.422592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1837.653932][ T7303] hid-generic 0003:046D:C31C.0022: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1837.926170][ T7303] usb 4-1: USB disconnect, device number 93 [ 1839.607722][ T3154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1840.411522][ T3154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1840.514858][ T3162] netlink: 'syz.3.7972': attribute type 4 has an invalid length. [ 1840.538414][ T3162] netlink: 'syz.3.7972': attribute type 4 has an invalid length. [ 1842.174344][ T2628] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1842.371052][ T2628] usb 1-1: Using ep0 maxpacket: 32 [ 1842.377901][ T2628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.405011][ T2628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.436494][ T2628] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1842.466428][ T2628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.488595][ T2628] usb 1-1: config 0 descriptor?? [ 1842.499116][ T30] audit: type=1400 audit(1769268298.246:627): avc: denied { call } for pid=3190 comm="syz.2.7983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1842.914865][ T2628] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 1842.954518][ T2628] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 1843.846470][ T2628] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 1844.047694][ T2628] ft260 0003:0403:6030.0023: failed to retrieve system status [ 1844.065116][ T2628] ft260 0003:0403:6030.0023: probe with driver ft260 failed with error -5 [ 1845.091801][T15810] usb 1-1: USB disconnect, device number 50 [ 1845.106937][T21316] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1845.152828][T28268] Bluetooth: hci5: SCO packet too small [ 1845.271265][T21316] usb 3-1: Using ep0 maxpacket: 16 [ 1845.306304][T21316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.343386][T21316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.369841][T21316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1845.404821][T21316] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1845.430283][T21316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.464353][T21316] usb 3-1: config 0 descriptor?? [ 1845.912731][T21316] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1845.951028][T21316] microsoft 0003:045E:07DA.0024: no inputs found [ 1845.957423][T21316] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 1846.304017][ T2628] usb 3-1: USB disconnect, device number 46 [ 1847.771063][ T2628] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1847.810026][ T3270] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8007'. [ 1847.841046][ T3270] team0: No ports can be present during mode change [ 1847.905114][T28268] Bluetooth: hci0: SCO packet too small [ 1847.923343][ T2628] usb 2-1: Using ep0 maxpacket: 32 [ 1847.932799][ T2628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.944349][ T2628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.954178][ T2628] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1847.963363][ T2628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.978005][ T2628] usb 2-1: config 0 descriptor?? [ 1848.474540][ T2628] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 1848.501171][ T2628] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 1848.509975][ T3285] syzkaller0: entered promiscuous mode [ 1848.682948][ T3285] syzkaller0: entered allmulticast mode [ 1849.412490][ T2628] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 1849.431084][ T2628] ft260 0003:0403:6030.0025: failed to retrieve system status [ 1849.438686][ T2628] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -5 [ 1850.351272][ T30] audit: type=1400 audit(1769268306.096:628): avc: denied { name_bind } for pid=3300 comm="syz.4.8018" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1850.693397][ T3307] netlink: 181392 bytes leftover after parsing attributes in process `syz.2.8019'. [ 1850.783676][ T3309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1850.798793][ T3309] team0: No ports can be present during mode change [ 1851.036465][T21316] usb 2-1: USB disconnect, device number 70 [ 1851.417500][ T3358] syzkaller0: entered promiscuous mode [ 1851.423185][ T3358] syzkaller0: entered allmulticast mode [ 1851.477179][ T2628] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1852.233295][ T2628] usb 1-1: Using ep0 maxpacket: 32 [ 1852.894290][ T2628] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1852.928219][ T2628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.971423][ T2628] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1853.011105][ T2628] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1853.020160][ T2628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.063684][ T2628] usb 1-1: config 0 descriptor?? [ 1853.276141][ T2628] usb 1-1: string descriptor 0 read error: -71 [ 1853.294757][ T2628] usbhid 1-1:0.0: can't add hid device: -71 [ 1853.300761][ T2628] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1853.337732][ T2628] usb 1-1: USB disconnect, device number 51 [ 1855.072071][ T3377] vlan2: entered promiscuous mode [ 1855.179093][ T30] audit: type=1400 audit(1769268310.916:629): avc: denied { setopt } for pid=3422 comm="syz.0.8044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1856.591204][ T30] audit: type=1400 audit(1769268312.336:630): avc: denied { watch } for pid=3433 comm="syz.0.8047" path="/417/file0" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1856.631417][ T7303] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1856.943175][ T30] audit: type=1400 audit(1769268312.336:631): avc: denied { watch_sb watch_reads } for pid=3433 comm="syz.0.8047" path="/417/file0" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1857.241032][ T7303] usb 3-1: Using ep0 maxpacket: 32 [ 1857.248124][ T7303] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1857.259306][ T7303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.269260][ T7303] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1857.297835][ T7303] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1857.337350][ T7303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.385745][ T7303] usb 3-1: config 0 descriptor?? [ 1857.796286][ T3452] syzkaller0: entered promiscuous mode [ 1857.841430][ T3452] syzkaller0: entered allmulticast mode [ 1858.125518][ T7303] usb 3-1: string descriptor 0 read error: -71 [ 1858.158829][ T7303] usbhid 3-1:0.0: can't add hid device: -71 [ 1858.175424][ T7303] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1858.201191][ T7303] usb 3-1: USB disconnect, device number 47 [ 1858.291073][ T2628] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1858.454396][ T2628] usb 5-1: Using ep0 maxpacket: 32 [ 1858.462281][ T2628] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1858.473183][ T2628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.483080][ T2628] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1858.496131][ T2628] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1858.505438][ T2628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.520480][ T2628] usb 5-1: config 0 descriptor?? [ 1858.730895][ T2628] usb 5-1: string descriptor 0 read error: -71 [ 1858.767045][ T2628] usbhid 5-1:0.0: can't add hid device: -71 [ 1858.775342][ T2628] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1858.799727][ T2628] usb 5-1: USB disconnect, device number 71 [ 1859.734329][ T3494] vlan2: entered promiscuous mode [ 1860.227252][ T3508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1860.294791][ T30] audit: type=1400 audit(1769268316.036:632): avc: denied { associate } for pid=3502 comm="syz.1.8063" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1861.298542][ T3517] syzkaller0: entered promiscuous mode [ 1861.310108][ T3517] syzkaller0: entered allmulticast mode [ 1862.086496][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8073'. [ 1863.898471][ T3540] syzkaller0: entered promiscuous mode [ 1863.931289][ T3540] syzkaller0: entered allmulticast mode [ 1865.758233][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8085'. [ 1865.768243][ T30] audit: type=1400 audit(1769268321.506:633): avc: denied { watch watch_reads } for pid=3576 comm="syz.4.8086" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1867.970576][ T3606] blktrace: Concurrent blktraces are not allowed on loop3 [ 1868.142014][ C1] ------------[ cut here ]------------ [ 1868.147859][ C1] ODEBUG: free active (active state 0) object: ffff8880332d9090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1868.160726][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.8089/3604 [ 1868.170788][ C1] Modules linked in: [ 1868.174890][ C1] CPU: 1 UID: 0 PID: 3604 Comm: syz.1.8089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1868.185737][ C1] Tainted: [L]=SOFTLOCKUP [ 1868.190038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1868.200105][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1868.205994][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 07 d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c ee c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1868.225605][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1868.231661][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1868.239612][ C1] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c18100 [ 1868.247579][ C1] RBP: 0000000000000001 R08: ffff8880332d9090 R09: ffffffff8b92b900 [ 1868.255542][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 1868.263499][ C1] R13: ffffffff8b92b940 R14: ffffffff8a661300 R15: ffffc90000a08b18 [ 1868.271458][ C1] FS: 00007f503da986c0(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 1868.280388][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1868.286962][ C1] CR2: 00007f0837cb4fb4 CR3: 0000000044bd7000 CR4: 00000000003526f0 [ 1868.294927][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1868.302887][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1868.310834][ C1] Call Trace: [ 1868.314122][ C1] [ 1868.316953][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1868.322579][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1868.328387][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1868.333945][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1868.340005][ C1] kfree+0x34c/0x690 [ 1868.343886][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1868.349251][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1868.354351][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1868.359433][ C1] rose_timer_expiry+0x53f/0x630 [ 1868.364354][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1868.369784][ C1] call_timer_fn+0x19a/0x590 [ 1868.374364][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1868.379452][ C1] ? __run_timers+0x747/0xac0 [ 1868.384107][ C1] ? __run_timers+0x747/0xac0 [ 1868.388755][ C1] ? rcu_is_watching+0x12/0xc0 [ 1868.393533][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1868.398979][ C1] __run_timers+0x757/0xac0 [ 1868.403491][ C1] ? __pfx___run_timers+0x10/0x10 [ 1868.408513][ C1] run_timer_base+0x114/0x190 [ 1868.413187][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1868.418357][ C1] ? rcu_is_watching+0x12/0xc0 [ 1868.423109][ C1] run_timer_softirq+0x1a/0x50 [ 1868.427843][ C1] handle_softirqs+0x1ea/0x910 [ 1868.432596][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1868.437858][ C1] __irq_exit_rcu+0xef/0x150 [ 1868.442436][ C1] irq_exit_rcu+0x9/0x30 [ 1868.446658][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1868.452285][ C1] [ 1868.455189][ C1] [ 1868.458091][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1868.464084][ C1] RIP: 0010:finish_task_switch.isra.0+0x20d/0xb70 [ 1868.470505][ C1] Code: d7 e2 0e 48 85 d2 0f 85 7a 06 00 00 85 c0 0f 85 a6 01 00 00 48 89 df e8 31 e5 ff ff e8 fc 57 3a 00 fb 49 8d bc 24 48 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1868.490168][ C1] RSP: 0018:ffffc9000ef97728 EFLAGS: 00000202 [ 1868.496237][ C1] RAX: 00000000000124bf RBX: ffff8880b853ac80 RCX: 0000000000000000 [ 1868.504208][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45440 RDI: ffff888078515fc8 [ 1868.512165][ C1] RBP: ffffc9000ef97770 R08: 0000000000000001 R09: 0000000000000000 [ 1868.520106][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888078514980 [ 1868.528056][ C1] R13: ffff888078510000 R14: ffff888078510000 R15: ffff8880b853bab0 [ 1868.536018][ C1] ? finish_task_switch.isra.0+0x204/0xb70 [ 1868.541817][ C1] ? __schedule+0xf65/0x5e10 [ 1868.546381][ C1] __schedule+0xfec/0x5e10 [ 1868.550767][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1868.555692][ C1] ? __pfx___schedule+0x10/0x10 [ 1868.560513][ C1] ? find_held_lock+0x2b/0x80 [ 1868.565175][ C1] ? schedule+0x2bf/0x390 [ 1868.569476][ C1] schedule+0xdd/0x390 [ 1868.573529][ C1] schedule_timeout+0x1b2/0x280 [ 1868.578357][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1868.583718][ C1] ? __wait_for_common+0x2da/0x4c0 [ 1868.588811][ C1] ? __wait_for_common+0x2da/0x4c0 [ 1868.593906][ C1] ? rcu_is_watching+0x12/0xc0 [ 1868.598660][ C1] __wait_for_common+0x2e7/0x4c0 [ 1868.603586][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1868.608936][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 1868.614376][ C1] ? preempt_schedule_common+0x42/0xc0 [ 1868.619820][ C1] ? generic_exec_single+0xbb/0x460 [ 1868.625006][ C1] rdmsr_safe_on_cpu+0x1f3/0x220 [ 1868.629915][ C1] ? irqentry_exit+0x180/0x670 [ 1868.634666][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1868.639837][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 1868.645281][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1868.650894][ C1] msr_read+0x19d/0x250 [ 1868.655043][ C1] ? __pfx_msr_read+0x10/0x10 [ 1868.659698][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 1868.665055][ C1] ? security_file_permission+0x76/0x210 [ 1868.670665][ C1] ? rw_verify_area+0xce/0x6d0 [ 1868.675414][ C1] ? __pfx_msr_read+0x10/0x10 [ 1868.680068][ C1] vfs_read+0x1e4/0xb30 [ 1868.684210][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1868.688858][ C1] ? find_held_lock+0x2b/0x80 [ 1868.693533][ C1] ? __fget_files+0x215/0x3d0 [ 1868.698185][ C1] ? __fget_files+0x215/0x3d0 [ 1868.702853][ C1] ? __fget_files+0x21f/0x3d0 [ 1868.707521][ C1] ksys_read+0x12a/0x250 [ 1868.711750][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1868.716500][ C1] do_syscall_64+0xc9/0xf80 [ 1868.720997][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.726871][ C1] RIP: 0033:0x7f503cb9acb9 [ 1868.731267][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.750858][ C1] RSP: 002b:00007f503da98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1868.759254][ C1] RAX: ffffffffffffffda RBX: 00007f503ce15fa0 RCX: 00007f503cb9acb9 [ 1868.767205][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 1868.775158][ C1] RBP: 00007f503cc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1868.783112][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1868.791064][ C1] R13: 00007f503ce16038 R14: 00007f503ce15fa0 R15: 00007ffe45235508 [ 1868.799012][ C1] [ 1868.802016][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1868.809271][ C1] CPU: 1 UID: 0 PID: 3604 Comm: syz.1.8089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1868.820085][ C1] Tainted: [L]=SOFTLOCKUP [ 1868.824377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1868.834408][ C1] Call Trace: [ 1868.837673][ C1] [ 1868.840491][ C1] dump_stack_lvl+0x100/0x190 [ 1868.845144][ C1] vpanic+0x20d/0x630 [ 1868.849107][ C1] panic+0xd1/0xd1 [ 1868.852815][ C1] ? __pfx_panic+0x10/0x10 [ 1868.857218][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1868.862309][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1868.867655][ C1] ? debug_print_object+0x18e/0x2a0 [ 1868.872823][ C1] __warn.cold+0x191/0x2f8 [ 1868.877210][ C1] __report_bug+0x296/0x3d0 [ 1868.881683][ C1] ? debug_print_object+0x18e/0x2a0 [ 1868.886851][ C1] ? __pfx___report_bug+0x10/0x10 [ 1868.891846][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1868.896764][ C1] report_bug_entry+0xe1/0x290 [ 1868.901499][ C1] ? debug_print_object+0x19b/0x2a0 [ 1868.906669][ C1] handle_bug+0x1c9/0x2a0 [ 1868.910979][ C1] exc_invalid_op+0x17/0x50 [ 1868.915467][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1868.920299][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1868.926077][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 07 d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c ee c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1868.945665][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1868.951704][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1868.959658][ C1] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c18100 [ 1868.967612][ C1] RBP: 0000000000000001 R08: ffff8880332d9090 R09: ffffffff8b92b900 [ 1868.975556][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 1868.983498][ C1] R13: ffffffff8b92b940 R14: ffffffff8a661300 R15: ffffc90000a08b18 [ 1868.991441][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1868.997066][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1869.002685][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1869.008485][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1869.014009][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1869.020056][ C1] kfree+0x34c/0x690 [ 1869.023935][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1869.029282][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1869.034377][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1869.039458][ C1] rose_timer_expiry+0x53f/0x630 [ 1869.044368][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1869.049796][ C1] call_timer_fn+0x19a/0x590 [ 1869.054362][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1869.059454][ C1] ? __run_timers+0x747/0xac0 [ 1869.064112][ C1] ? __run_timers+0x747/0xac0 [ 1869.068759][ C1] ? rcu_is_watching+0x12/0xc0 [ 1869.073499][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1869.078927][ C1] __run_timers+0x757/0xac0 [ 1869.083405][ C1] ? __pfx___run_timers+0x10/0x10 [ 1869.088418][ C1] run_timer_base+0x114/0x190 [ 1869.093077][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1869.098246][ C1] ? rcu_is_watching+0x12/0xc0 [ 1869.102985][ C1] run_timer_softirq+0x1a/0x50 [ 1869.107718][ C1] handle_softirqs+0x1ea/0x910 [ 1869.112463][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1869.117729][ C1] __irq_exit_rcu+0xef/0x150 [ 1869.122298][ C1] irq_exit_rcu+0x9/0x30 [ 1869.126515][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1869.132117][ C1] [ 1869.135022][ C1] [ 1869.137925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1869.143877][ C1] RIP: 0010:finish_task_switch.isra.0+0x20d/0xb70 [ 1869.150267][ C1] Code: d7 e2 0e 48 85 d2 0f 85 7a 06 00 00 85 c0 0f 85 a6 01 00 00 48 89 df e8 31 e5 ff ff e8 fc 57 3a 00 fb 49 8d bc 24 48 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1869.169857][ C1] RSP: 0018:ffffc9000ef97728 EFLAGS: 00000202 [ 1869.175894][ C1] RAX: 00000000000124bf RBX: ffff8880b853ac80 RCX: 0000000000000000 [ 1869.183848][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45440 RDI: ffff888078515fc8 [ 1869.191791][ C1] RBP: ffffc9000ef97770 R08: 0000000000000001 R09: 0000000000000000 [ 1869.199734][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888078514980 [ 1869.207674][ C1] R13: ffff888078510000 R14: ffff888078510000 R15: ffff8880b853bab0 [ 1869.215624][ C1] ? finish_task_switch.isra.0+0x204/0xb70 [ 1869.221416][ C1] ? __schedule+0xf65/0x5e10 [ 1869.225975][ C1] __schedule+0xfec/0x5e10 [ 1869.230359][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1869.235273][ C1] ? __pfx___schedule+0x10/0x10 [ 1869.240101][ C1] ? find_held_lock+0x2b/0x80 [ 1869.244753][ C1] ? schedule+0x2bf/0x390 [ 1869.249054][ C1] schedule+0xdd/0x390 [ 1869.253093][ C1] schedule_timeout+0x1b2/0x280 [ 1869.257930][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1869.263279][ C1] ? __wait_for_common+0x2da/0x4c0 [ 1869.268362][ C1] ? __wait_for_common+0x2da/0x4c0 [ 1869.273460][ C1] ? rcu_is_watching+0x12/0xc0 [ 1869.278201][ C1] __wait_for_common+0x2e7/0x4c0 [ 1869.283112][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1869.288470][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 1869.293925][ C1] ? preempt_schedule_common+0x42/0xc0 [ 1869.299382][ C1] ? generic_exec_single+0xbb/0x460 [ 1869.304578][ C1] rdmsr_safe_on_cpu+0x1f3/0x220 [ 1869.309498][ C1] ? irqentry_exit+0x180/0x670 [ 1869.314239][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1869.319412][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 1869.324844][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1869.330458][ C1] msr_read+0x19d/0x250 [ 1869.334595][ C1] ? __pfx_msr_read+0x10/0x10 [ 1869.339260][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 1869.344620][ C1] ? security_file_permission+0x76/0x210 [ 1869.350224][ C1] ? rw_verify_area+0xce/0x6d0 [ 1869.354957][ C1] ? __pfx_msr_read+0x10/0x10 [ 1869.359635][ C1] vfs_read+0x1e4/0xb30 [ 1869.363782][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1869.368438][ C1] ? find_held_lock+0x2b/0x80 [ 1869.373096][ C1] ? __fget_files+0x215/0x3d0 [ 1869.377757][ C1] ? __fget_files+0x215/0x3d0 [ 1869.382417][ C1] ? __fget_files+0x21f/0x3d0 [ 1869.387073][ C1] ksys_read+0x12a/0x250 [ 1869.391290][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1869.396027][ C1] do_syscall_64+0xc9/0xf80 [ 1869.400503][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.406374][ C1] RIP: 0033:0x7f503cb9acb9 [ 1869.410761][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.430427][ C1] RSP: 002b:00007f503da98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1869.438811][ C1] RAX: ffffffffffffffda RBX: 00007f503ce15fa0 RCX: 00007f503cb9acb9 [ 1869.446751][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 1869.454695][ C1] RBP: 00007f503cc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1869.462637][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1869.470585][ C1] R13: 00007f503ce16038 R14: 00007f503ce15fa0 R15: 00007ffe45235508 [ 1869.478532][ C1] [ 1869.481835][ C1] Kernel Offset: disabled [ 1869.486141][ C1] Rebooting in 86400 seconds..