last executing test programs: 7m47.694530262s ago: executing program 2 (id=53): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002700)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) 7m47.331070056s ago: executing program 2 (id=54): prctl$PR_SET_KEEPCAPS(0x8, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "0ffdeec2bd75392d"}}}}}, 0x32) 7m47.210193245s ago: executing program 2 (id=55): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) setuid(0xee00) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000180)={0x18, r1}) 7m47.062640064s ago: executing program 2 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 7m46.993190511s ago: executing program 2 (id=57): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0}) 7m46.612890086s ago: executing program 2 (id=59): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 7m46.160180649s ago: executing program 32 (id=59): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 2m58.708452188s ago: executing program 0 (id=2114): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2m55.622227925s ago: executing program 0 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m54.65681304s ago: executing program 0 (id=2130): socket$inet(0xa, 0x801, 0x80000084) syz_emit_ethernet(0x6b9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 2m52.484844845s ago: executing program 0 (id=2144): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f6048", 0x19, 0x0, &(0x7f0000000140), 0x14) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) 2m51.375982822s ago: executing program 0 (id=2153): socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 2m48.871855606s ago: executing program 0 (id=2165): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m33.487458657s ago: executing program 33 (id=2165): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.953488286s ago: executing program 1 (id=2740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0x2, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 10.552746507s ago: executing program 1 (id=2749): inotify_init1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, 0x0) 9.749936562s ago: executing program 3 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000035000701ffdffffffaffffff057c000008000480"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_socket_connect_nvme_tcp() io_setup(0x141, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 9.694517846s ago: executing program 3 (id=2754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x2}}]}, 0x90}}, 0x20000000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) sendmsg$nl_route_sched(r1, 0x0, 0x0) 9.513661431s ago: executing program 1 (id=2756): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8842, 0x2a) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) close(r5) 9.317109903s ago: executing program 3 (id=2759): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) 8.302872105s ago: executing program 3 (id=2761): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000000)="fc", 0x1}], 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000080)='&\x00', 0x82, &(0x7f00000000c0)={@align, {0x5, 0x4, 0xf714, 0x9}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0xeb}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff40, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0xf) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000000)=0x3) 8.247706115s ago: executing program 6 (id=2762): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) 6.801945374s ago: executing program 6 (id=2764): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r2, r2, 0x0, 0x200000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 6.086810626s ago: executing program 1 (id=2766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "8ad957b65964f40189fd88c98a3b09ecbd5b9eeb6c9c618b4cfc97232d64fae3bed9473088fa96698b085be36c5d57f9f28cf59c15358419a1d8d6f320f4d93fc7"}}]}, 0x17c}}, 0x8000) 5.956497115s ago: executing program 4 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r5}, 0x20) 5.901240495s ago: executing program 5 (id=2768): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000180)={0x0, 0xd57f, 0x0, 0x3, 0x250}, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnexthop={0x18, 0x6a, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x40080d0}, 0x40004) 5.279469199s ago: executing program 6 (id=2769): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='.\x02\x00', 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={'\x00', 0x2, 0xde, 0x7fe, 0xfffffffffffffff9, 0x1, r1}) 4.582567594s ago: executing program 4 (id=2770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "7cf56f776d00"}, 0x28) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x4880}], 0x1}, 0x7101}], 0x1, 0x4001c00) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) 4.531982212s ago: executing program 5 (id=2771): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, 0x0, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet(0xa, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.451587775s ago: executing program 4 (id=2772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 4.281024861s ago: executing program 6 (id=2773): accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 3.588809154s ago: executing program 5 (id=2774): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_dev$media(&(0x7f0000001a80), 0x6, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 3.278514244s ago: executing program 4 (id=2775): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x0) shutdown(r4, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 3.224585791s ago: executing program 3 (id=2776): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22eca65c14}, 0x4008844) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.153643294s ago: executing program 5 (id=2777): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB="0080000400020600000000000000bc96211ba1a60000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 3.104004872s ago: executing program 3 (id=2778): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 3.088577273s ago: executing program 5 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.909512688s ago: executing program 1 (id=2780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.805901429s ago: executing program 6 (id=2781): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.80090324s ago: executing program 5 (id=2782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) 1.759243205s ago: executing program 4 (id=2783): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = dup3(r1, r0, 0x0) read$msr(r2, &(0x7f0000026200)=""/102398, 0x18ffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r1, 0x0, 0x94, 0x40000002, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4}, 0xc) 1.637004684s ago: executing program 6 (id=2784): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000080), 0x4000) madvise(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 424.249298ms ago: executing program 1 (id=2785): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r4, 0x2f, 0x0, 0x0, @void, @value=r5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 0s ago: executing program 4 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) kernel console output (not intermixed with test programs): hcd [ 298.403725][ T2166] usb 6-1: Using ep0 maxpacket: 16 [ 298.410541][ T2166] usb 6-1: config 0 has no interfaces? [ 298.418067][ T2166] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.427638][ T2166] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.474830][ T2166] usb 6-1: Manufacturer: syz [ 298.506281][ T2166] usb 6-1: config 0 descriptor?? [ 299.366135][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 299.472576][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.0.1797 [ 299.711785][T11340] Set syz1 is full, maxelem 6117 reached [ 299.747131][T11372] fuse: fd is not a fuse device [ 299.839596][ T5888] usb 6-1: USB disconnect, device number 25 [ 300.282554][ T803] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.409957][T11373] bond4 (unregistering): Released all slaves [ 300.444170][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.458277][ T803] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.468076][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.509505][ T803] usb 2-1: config 0 descriptor?? [ 300.784908][ T803] usbhid 2-1:0.0: can't add hid device: -71 [ 300.809275][ T803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 300.849860][ T803] usb 2-1: USB disconnect, device number 24 [ 301.209758][ T29] audit: type=1400 audit(1776644214.602:861): avc: denied { shutdown } for pid=11388 comm="syz.4.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.302602][ T803] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 301.485680][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 301.507225][ T803] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 301.526932][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.544655][T11399] fuse: fd is not a fuse device [ 301.553204][ T803] usb 2-1: config 0 descriptor?? [ 302.014904][ T803] hid_parser_main: 2 callbacks suppressed [ 302.014925][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.063317][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.077718][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.087827][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.096951][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.105590][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.125979][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.141176][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.153506][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.161948][ T803] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 302.189951][ T803] logitech-djreceiver 0003:046D:C71F.000E: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 303.108491][T11422] fuse: fd is not a fuse device [ 303.391581][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.404472][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.417062][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.429647][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.442199][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.454793][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.467348][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.479906][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.492450][T11430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11430 comm=syz.0.1821 [ 303.704432][T11432] kAFS: unable to lookup cell 'ÿ' [ 303.934710][ T5936] usb 2-1: USB disconnect, device number 25 [ 304.730719][ T29] audit: type=1400 audit(1776644218.122:862): avc: denied { bind } for pid=11438 comm="syz.0.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.106284][ T5936] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 305.272519][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 305.301258][ T5936] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 305.320787][ T5936] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.348150][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.358151][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.745187][ T29] audit: type=1400 audit(1776644220.102:863): avc: denied { write } for pid=11470 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 307.850260][ T5936] usb 6-1: USB disconnect, device number 26 [ 308.773710][ T5936] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 308.985519][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 309.088829][ T5936] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 309.107541][ T5936] usb 6-1: config 0 has no interface number 0 [ 309.121501][ T5936] usb 6-1: config 0 interface 184 has no altsetting 0 [ 309.138014][ T5936] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 309.163811][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.197388][ T5936] usb 6-1: Product: syz [ 309.207918][ T5936] usb 6-1: Manufacturer: syz [ 309.216282][ T5936] usb 6-1: SerialNumber: syz [ 309.229830][ T5936] usb 6-1: config 0 descriptor?? [ 309.516425][T11509] syzkaller0: entered promiscuous mode [ 309.521979][T11509] syzkaller0: entered allmulticast mode [ 310.094865][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 311.639200][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 311.659800][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.667856][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.720889][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 311.731802][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 311.741769][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 311.761466][ T5936] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 311.773133][ T5936] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 311.791083][ T5936] usb 6-1: USB disconnect, device number 27 [ 312.053021][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 312.232511][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 312.253555][ T5888] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.289439][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.329311][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.357864][T11544] binder: 11543:11544 ioctl c0306201 200000000680 returned -14 [ 312.383027][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.418609][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.458641][ T5888] usb 5-1: Product: syz [ 312.482343][ T5888] usb 5-1: Manufacturer: syz [ 312.524121][ T5888] usb 5-1: SerialNumber: syz [ 312.565809][ T5888] usb 5-1: 0:2 : does not exist [ 313.551450][T11554] Process accounting resumed [ 313.607153][ T5888] usb 5-1: USB disconnect, device number 20 [ 313.698544][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.894518][ T29] audit: type=1326 audit(1776644229.292:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.0.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x0 [ 316.087301][ T29] audit: type=1400 audit(1776644229.482:865): avc: denied { read } for pid=11583 comm="syz.3.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.279991][T11594] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 316.348013][T11596] lo speed is unknown, defaulting to 1000 [ 316.389416][ T2166] IPVS: starting estimator thread 0... [ 316.399495][T11598] IPVS: fo: FWM 3 0x00000003 - no destination available [ 316.552716][T11599] IPVS: using max 45 ests per chain, 108000 per kthread [ 317.953607][ T5936] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 318.135447][ T5936] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 318.174186][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.201204][ T5936] usb 2-1: Product: syz [ 318.214462][ T5936] usb 2-1: Manufacturer: syz [ 318.231488][ T5936] usb 2-1: SerialNumber: syz [ 318.665206][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 318.709435][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 318.978113][T11626] syz_tun: entered allmulticast mode [ 319.061416][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 319.166137][T11629] lo speed is unknown, defaulting to 1000 [ 319.344820][T11644] overlayfs: failed to clone upperpath [ 320.380999][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 320.399622][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 320.461886][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 320.486146][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 320.502067][T11659] xt_hashlimit: size too large, truncated to 1048576 [ 320.519968][T11659] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 320.586631][ T5936] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 320.618147][ T5936] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 320.643600][ T5936] usb 2-1: USB disconnect, device number 26 [ 320.872574][ T2166] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 321.080491][ T2166] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt [ 321.095141][ T2166] usb 5-1: config 1 interface 0 has no altsetting 0 [ 321.111441][ T2166] usb 5-1: string descriptor 0 read error: -22 [ 321.121484][ T2166] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 321.132707][ T2166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.152971][T11667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.391764][ T29] audit: type=1400 audit(1776644234.782:866): avc: denied { write } for pid=11666 comm="syz.4.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.446387][ T5936] usb 5-1: USB disconnect, device number 21 [ 321.681588][T11678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 322.697539][T11692] netlink: 'syz.0.1905': attribute type 3 has an invalid length. [ 322.726982][T11692] netlink: 'syz.0.1905': attribute type 3 has an invalid length. [ 322.993272][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 323.175833][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.699360][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 323.744289][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.769752][ T9] usb 6-1: config 0 descriptor?? [ 324.308787][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 324.324397][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 324.341805][ T9] usb 6-1: USB disconnect, device number 28 [ 324.652577][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 324.825614][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 324.837101][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 324.852385][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.891640][ T9] usb 6-1: config 0 descriptor?? [ 325.333933][ T9] hid_parser_main: 448 callbacks suppressed [ 325.333954][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.390319][T11731] lo speed is unknown, defaulting to 1000 [ 325.425209][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.457021][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.481001][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.497806][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.515885][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.532617][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.557697][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.593641][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.619381][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 325.698255][ T9] logitech-djreceiver 0003:046D:C71F.000F: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 325.703830][ T29] audit: type=1400 audit(1776644239.092:867): avc: denied { getopt } for pid=11730 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 326.262969][ T2166] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 326.424632][T11752] __vm_enough_memory: pid: 11752, comm: syz.1.1926, bytes: 11727791427584 not enough memory for the allocation [ 326.433021][ T2166] usb 5-1: Using ep0 maxpacket: 32 [ 326.456216][T11754] overlayfs: failed to resolve './cgroup': -2 [ 326.467182][ T2166] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 326.477898][ T2166] usb 5-1: config 0 has no interface number 0 [ 326.498079][ T2166] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 326.544426][ T2166] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 326.560572][ T2166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.570648][ T2166] usb 5-1: Product: syz [ 326.575186][ T2166] usb 5-1: Manufacturer: syz [ 326.580046][ T2166] usb 5-1: SerialNumber: syz [ 326.632185][ T2166] usb 5-1: config 0 descriptor?? [ 326.640656][T11749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.310042][T11749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.328369][ T5888] usb 6-1: USB disconnect, device number 29 [ 327.401082][T11768] random: crng reseeded on system resumption [ 327.516393][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 327.760410][T11776] lo speed is unknown, defaulting to 1000 [ 328.443182][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 328.642547][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 328.658054][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 328.780619][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'. [ 328.918645][T11801] selinux_netlink_send: 79 callbacks suppressed [ 328.918697][T11801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11801 comm=syz.0.1938 [ 329.570782][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 329.626328][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.635614][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.643739][ T5888] usb 4-1: Product: syz [ 329.648273][ T5888] usb 4-1: Manufacturer: syz [ 329.652955][ T5888] usb 4-1: SerialNumber: syz [ 329.659891][ T5888] usb 4-1: config 0 descriptor?? [ 329.663875][T11805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11805 comm=syz.5.1939 [ 329.681680][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.687980][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1939'. [ 329.986796][ T5888] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 329.994250][ T2166] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 330.004647][ T2166] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 330.015751][ T2166] asix 5-1:0.188: probe with driver asix failed with error -71 [ 330.106826][ T2166] usb 5-1: USB disconnect, device number 22 [ 330.483197][ T5888] em28xx 4-1:0.0: chip ID is em2765 [ 330.497046][T11813] syzkaller0: entered promiscuous mode [ 330.508753][T11813] syzkaller0: entered allmulticast mode [ 330.519360][T11815] syz_tun: entered allmulticast mode [ 330.552984][T11815] syz_tun: left allmulticast mode [ 331.087753][ T5888] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 331.096183][ T5888] em28xx 4-1:0.0: board has no eeprom [ 331.966782][ T29] audit: type=1400 audit(1776644245.362:868): avc: denied { bind } for pid=11839 comm="syz.1.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.178725][T11780] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 332.198490][ T5888] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 332.249152][ T5888] em28xx 4-1:0.0: dvb set to bulk mode. [ 332.286441][ T2166] em28xx 4-1:0.0: Binding DVB extension [ 332.320998][ T5888] usb 4-1: USB disconnect, device number 18 [ 332.369559][ T5888] em28xx 4-1:0.0: Disconnecting em28xx [ 332.483894][ T2166] em28xx 4-1:0.0: Registering input extension [ 332.492728][ T5888] em28xx 4-1:0.0: Closing input extension [ 332.518571][ T5888] em28xx 4-1:0.0: Freeing device [ 332.674319][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1956'. [ 333.042872][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 333.208773][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 333.234375][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.255407][ T9] usb 5-1: Product: syz [ 333.259632][ T9] usb 5-1: Manufacturer: syz [ 333.264563][ T9] usb 5-1: SerialNumber: syz [ 333.354356][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 333.711503][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 333.733084][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 334.965081][T11909] fuse: fd is not a fuse device [ 334.983619][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 335.019951][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 335.051587][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 335.080974][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 335.112117][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 335.139818][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 335.193939][ T9] usb 5-1: USB disconnect, device number 23 [ 335.242260][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1983'. [ 335.290589][T11917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11917 comm=syz.5.1983 [ 335.315500][T11920] fuse: fd is not a fuse device [ 335.370983][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 335.412846][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 335.421145][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 335.445429][T11922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11922 comm=syz.0.1986 [ 335.919142][ T29] audit: type=1400 audit(1776644249.312:869): avc: denied { connect } for pid=11938 comm="syz.0.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 336.092540][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 336.180979][T11943] lo speed is unknown, defaulting to 1000 [ 336.275595][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.314529][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 336.343530][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 336.364147][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 336.393533][ T9] usb 4-1: string descriptor 0 read error: -22 [ 336.403173][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 336.421723][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.541948][T11956] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1998'. [ 336.579754][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 336.605852][ T29] audit: type=1400 audit(1776644250.002:870): avc: denied { connect } for pid=11957 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.757326][ T29] audit: type=1400 audit(1776644250.152:871): avc: denied { read append } for pid=11961 comm="syz.1.2001" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.843638][ T29] audit: type=1400 audit(1776644250.152:872): avc: denied { open } for pid=11961 comm="syz.1.2001" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.917256][ T29] audit: type=1400 audit(1776644250.152:873): avc: denied { ioctl } for pid=11961 comm="syz.1.2001" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.970015][ T29] audit: type=1326 audit(1776644250.232:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.064916][ T29] audit: type=1326 audit(1776644250.232:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.088806][T11974] netlink: 'syz.5.2007': attribute type 1 has an invalid length. [ 337.097687][ T9] usb 4-1: USB disconnect, device number 19 [ 337.121974][T11974] netlink: 'syz.5.2007': attribute type 4 has an invalid length. [ 337.132322][ T29] audit: type=1326 audit(1776644250.232:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.154661][T11974] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.2007'. [ 337.169990][ T29] audit: type=1326 audit(1776644250.232:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.232287][ T29] audit: type=1326 audit(1776644250.232:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.257980][ T29] audit: type=1326 audit(1776644250.232:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.283512][ T29] audit: type=1326 audit(1776644250.232:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.309734][ T29] audit: type=1326 audit(1776644250.232:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.335119][ T29] audit: type=1326 audit(1776644250.232:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.358984][ T29] audit: type=1326 audit(1776644250.232:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 337.383982][ T29] audit: type=1326 audit(1776644250.232:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a29b9c819 code=0x7fc00000 [ 339.915235][T12023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 341.127051][T12049] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 341.912535][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 342.289369][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.316717][ T9] usb 4-1: no configurations [ 342.335080][ T9] usb 4-1: can't read configurations, error -22 [ 342.487311][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 342.767756][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.835779][ T9] usb 4-1: no configurations [ 342.868230][ T9] usb 4-1: can't read configurations, error -22 [ 342.876555][ T9] usb usb4-port1: attempt power cycle [ 343.369432][T12092] Invalid option length (1048308) for dns_resolver key [ 343.433853][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 343.465162][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.482630][ T9] usb 4-1: no configurations [ 343.489099][ T9] usb 4-1: can't read configurations, error -22 [ 343.750805][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 343.798831][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.807585][ T9] usb 4-1: no configurations [ 343.812508][ T9] usb 4-1: can't read configurations, error -22 [ 343.832326][ T9] usb usb4-port1: unable to enumerate USB device [ 343.851303][ T29] kauditd_printk_skb: 3577 callbacks suppressed [ 343.851338][ T29] audit: type=1400 audit(1776644257.222:4462): avc: denied { append } for pid=12098 comm="syz.1.2051" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 343.883544][T12102] syz.1.2051: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.941152][T12102] CPU: 0 UID: 0 PID: 12102 Comm: syz.1.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.941175][T12102] Tainted: [L]=SOFTLOCKUP [ 343.941179][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 343.941186][T12102] Call Trace: [ 343.941191][T12102] [ 343.941196][T12102] dump_stack_lvl+0x100/0x190 [ 343.941213][T12102] warn_alloc.cold+0x95/0x1c1 [ 343.941225][T12102] ? __pfx_warn_alloc+0x10/0x10 [ 343.941244][T12102] ? lockdep_hardirqs_on+0x78/0x100 [ 343.941263][T12102] ? rcu_is_watching+0x12/0xc0 [ 343.941280][T12102] ? trace_sched_exit_tp+0x11c/0x160 [ 343.941296][T12102] __vmalloc_node_range_noprof+0x136c/0x1630 [ 343.941312][T12102] ? rcu_is_watching+0x12/0xc0 [ 343.941330][T12102] ? trace_contention_end+0x122/0x170 [ 343.941344][T12102] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 343.941362][T12102] ? __pfx___schedule+0x10/0x10 [ 343.941381][T12102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.941393][T12102] ? irqentry_exit+0x246/0x790 [ 343.941403][T12102] ? lockdep_hardirqs_on+0x78/0x100 [ 343.941420][T12102] ? irqentry_exit+0x246/0x790 [ 343.941434][T12102] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 343.941450][T12102] __vmalloc_node_noprof+0xad/0xf0 [ 343.941463][T12102] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 343.941482][T12102] dvb_demux_do_ioctl+0x9e0/0x1200 [ 343.941504][T12102] dvb_usercopy+0x167/0x340 [ 343.941518][T12102] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 343.941535][T12102] ? rcu_is_watching+0x12/0xc0 [ 343.941550][T12102] ? __pfx_dvb_usercopy+0x10/0x10 [ 343.941565][T12102] ? irqentry_exit+0x246/0x790 [ 343.941579][T12102] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 343.941601][T12102] dvb_demux_ioctl+0x29/0x40 [ 343.941616][T12102] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 343.941632][T12102] __x64_sys_ioctl+0x18e/0x210 [ 343.941644][T12102] do_syscall_64+0x10b/0xf80 [ 343.941653][T12102] ? clear_bhb_loop+0x40/0x90 [ 343.941667][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.941678][T12102] RIP: 0033:0x7f552b19c819 [ 343.941687][T12102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.941697][T12102] RSP: 002b:00007f552c0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.941708][T12102] RAX: ffffffffffffffda RBX: 00007f552b416180 RCX: 00007f552b19c819 [ 343.941715][T12102] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 343.941721][T12102] RBP: 00007f552b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 343.941727][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.941733][T12102] R13: 00007f552b416218 R14: 00007f552b416180 R15: 00007ffe54216828 [ 343.941747][T12102] [ 343.941811][T12102] Mem-Info: [ 344.300932][T12102] active_anon:28798 inactive_anon:1 isolated_anon:0 [ 344.300932][T12102] active_file:21441 inactive_file:40801 isolated_file:0 [ 344.300932][T12102] unevictable:768 dirty:536 writeback:0 [ 344.300932][T12102] slab_reclaimable:10859 slab_unreclaimable:107127 [ 344.300932][T12102] mapped:30673 shmem:18361 pagetables:1451 [ 344.300932][T12102] sec_pagetables:0 bounce:0 [ 344.300932][T12102] kernel_misc_reclaimable:0 [ 344.300932][T12102] free:1266800 free_pcp:13094 free_cma:0 [ 344.349500][T12102] Node 0 active_anon:115192kB inactive_anon:4kB active_file:85764kB inactive_file:163008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122692kB dirty:2144kB writeback:0kB shmem:71908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13024kB pagetables:5644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.351273][T12099] futex_wake_op: syz.1.2051 tries to shift op by 32; fix this program [ 344.384561][T12102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.384651][T12102] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.384704][T12102] lowmem_reserve[]: 0 2475 2476 2476 2476 [ 344.384741][T12102] Node 0 DMA32 free:1123560kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115192kB inactive_anon:4kB active_file:85764kB inactive_file:163008kB unevictable:1536kB writepending:2144kB zspages:0kB present:3129332kB managed:2535352kB mlocked:0kB bounce:0kB free_pcp:41656kB local_pcp:26788kB free_cma:0kB [ 344.384794][T12102] lowmem_reserve[]: 0 0 0 0 0 [ 344.384825][T12102] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.384870][T12102] lowmem_reserve[]: 0 0 0 0 0 [ 344.384897][T12102] Node 1 Normal free:3928332kB boost:0kB min:55836kB low:69792kB high:83748kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10648kB local_pcp:10648kB free_cma:0kB [ 345.525187][T12102] lowmem_reserve[]: 0 0 0 0 0 [ 345.529946][T12102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.742552][T12102] Node 0 DMA32: 1740*4kB (UME) 2644*8kB (UME) 1610*16kB (UME) 658*32kB (UME) 218*64kB (UME) 180*128kB (UME) 126*256kB (UME) 62*512kB (UME) 24*1024kB (UME) 6*2048kB (UM) 222*4096kB (M) = 1122096kB [ 345.762544][T12102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.805573][T12102] Node 1 Normal: 1*4kB (U) 11*8kB (U) 3*16kB (U) 12*32kB (UM) 10*64kB (UM) 3*128kB (U) 3*256kB (UM) 0*512kB 0*1024kB 1*2048kB (U) 958*4096kB (UM) = 3928332kB [ 345.848175][T12102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.859879][T12102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.873647][T12102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.890054][T12102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.909253][T12102] 80580 total pagecache pages [ 345.917064][T12102] 1 pages in swap cache [ 345.924768][T12102] Free swap = 124992kB [ 345.929689][T12102] Total swap = 124996kB [ 345.933934][T12102] 2097051 pages RAM [ 345.938214][T12102] 0 pages HighMem/MovableOnly [ 345.943004][T12102] 431348 pages reserved [ 345.947214][T12102] 0 pages cma reserved [ 346.127180][T12130] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2062'. [ 346.147516][ T29] audit: type=1400 audit(1776644259.542:4463): avc: denied { getopt } for pid=12129 comm="syz.5.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.229609][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2064'. [ 346.311235][T12134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12134 comm=syz.5.2064 [ 346.872991][ T29] audit: type=1400 audit(1776644260.262:4464): avc: denied { ioctl } for pid=12139 comm="syz.1.2066" path="socket:[39745]" dev="sockfs" ino=39745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.901586][T12140] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2066'. [ 346.954415][ T29] audit: type=1400 audit(1776644260.352:4465): avc: denied { map } for pid=12139 comm="syz.1.2066" path="socket:[39744]" dev="sockfs" ino=39744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.815587][ T29] audit: type=1400 audit(1776644261.202:4466): avc: denied { create } for pid=12154 comm="syz.3.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 348.734148][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 348.983895][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 349.002776][ T9] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 349.013938][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.022871][ T9] usb 2-1: Product: syz [ 349.027152][ T9] usb 2-1: Manufacturer: syz [ 349.037857][ T9] usb 2-1: SerialNumber: syz [ 349.076818][ T9] usb 2-1: config 0 descriptor?? [ 349.084839][ T9] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 349.318412][ T29] audit: type=1326 audit(1776644262.712:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.1.2073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f552b19c819 code=0x0 [ 349.381791][T12189] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2081'. [ 351.525727][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2085'. [ 351.561568][ T9] usb 2-1: USB disconnect, device number 27 [ 351.585539][ T29] audit: type=1400 audit(1776644264.982:4468): avc: denied { execute } for pid=12208 comm="syz.3.2086" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 351.620764][T12210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12210 comm=syz.4.2085 [ 351.664059][ T29] audit: type=1400 audit(1776644265.042:4469): avc: denied { create } for pid=12211 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.152619][T12220] bond0: entered promiscuous mode [ 353.158239][T12220] bond_slave_0: entered promiscuous mode [ 353.166490][T12220] bond_slave_1: entered promiscuous mode [ 353.195413][T12220] batadv0: entered promiscuous mode [ 353.214614][T12220] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 353.224860][T12220] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 353.240987][T12220] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 353.656946][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 354.342546][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 354.513984][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.526743][ T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 354.537748][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.547074][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.569160][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.581538][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.610630][ T9] usb 4-1: Product: syz [ 354.615416][ T9] usb 4-1: Manufacturer: syz [ 354.664513][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 354.878903][ T9] usb 4-1: USB disconnect, device number 24 [ 355.322515][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 355.499937][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.533015][ T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 355.552599][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.571837][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.586850][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.597285][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 355.605352][ T9] usb 4-1: Product: syz [ 355.609593][ T9] usb 4-1: Manufacturer: syz [ 355.625375][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 356.184537][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.197529][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.761478][T12281] overlayfs: failed to clone upperpath [ 356.834728][ T29] audit: type=1400 audit(1776644270.222:4470): avc: denied { name_bind } for pid=12282 comm="syz.0.2111" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 357.271265][ T24] usb 4-1: USB disconnect, device number 25 [ 357.433227][ T29] audit: type=1400 audit(1776644270.812:4471): avc: denied { read write } for pid=12284 comm="syz.3.2112" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 357.511101][ T29] audit: type=1400 audit(1776644270.812:4472): avc: denied { open } for pid=12284 comm="syz.3.2112" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 357.581634][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2114'. [ 357.913659][T12294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12294 comm=syz.0.2114 [ 358.291309][T12298] xt_hashlimit: size too large, truncated to 1048576 [ 359.882932][T12311] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 359.893671][T12314] bpq0: entered promiscuous mode [ 359.898937][T12314] bpq0: entered allmulticast mode [ 359.905670][T12317] xt_ecn: cannot match TCP bits for non-tcp packets [ 359.916275][T12311] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 360.349356][ T29] audit: type=1400 audit(1776644273.742:4473): avc: denied { connect } for pid=12313 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 360.370448][T12311] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 360.409534][ T29] audit: type=1400 audit(1776644273.762:4474): avc: denied { firmware_load } for pid=12309 comm="syz.3.2118" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 360.602775][T12330] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 360.644808][T12330] netlink: 'syz.3.2124': attribute type 4 has an invalid length. [ 360.673859][T12330] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2124'. [ 360.875731][ T29] audit: type=1400 audit(1776644274.272:4475): avc: denied { write } for pid=12337 comm="syz.1.2127" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 360.998913][T12340] lo speed is unknown, defaulting to 1000 [ 361.209305][T12345] input: syz1 as /devices/virtual/input/input18 [ 362.550344][ T29] audit: type=1400 audit(1776644275.942:4476): avc: denied { write } for pid=12367 comm="syz.1.2138" path="socket:[40365]" dev="sockfs" ino=40365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 363.060555][T12371] lo speed is unknown, defaulting to 1000 [ 363.073777][ T50] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 364.512068][ T29] audit: type=1400 audit(1776644277.902:4477): avc: denied { accept } for pid=12406 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 364.951040][T12404] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 365.309439][T12423] No such timeout policy "syz1" [ 366.116796][ T29] audit: type=1400 audit(1776644279.512:4478): avc: denied { setopt } for pid=12429 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.267507][ T29] audit: type=1400 audit(1776644279.542:4479): avc: denied { shutdown } for pid=12429 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.301827][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 366.467892][T12447] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 366.514010][T12447] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 366.525400][T12448] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 366.548141][T12448] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 366.557528][T12447] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2158'. [ 366.576288][T12448] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2158'. [ 367.727843][ T29] audit: type=1400 audit(1776644280.852:4480): avc: denied { mount } for pid=12470 comm="syz.1.2164" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 367.870718][ T24] IPVS: starting estimator thread 0... [ 367.972810][T12478] IPVS: using max 42 ests per chain, 100800 per kthread [ 369.284254][T12508] Process accounting resumed [ 370.311504][ T29] audit: type=1400 audit(1776644283.422:4481): avc: denied { read write } for pid=12523 comm="syz.1.2180" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 370.524447][ T29] audit: type=1400 audit(1776644283.422:4482): avc: denied { open } for pid=12523 comm="syz.1.2180" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 370.793936][ T29] audit: type=1400 audit(1776644284.182:4483): avc: denied { write } for pid=12528 comm="syz.3.2181" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 370.843005][T12527] netlink: 'syz.1.2182': attribute type 4 has an invalid length. [ 370.878750][T12527] netlink: 'syz.1.2182': attribute type 4 has an invalid length. [ 370.914911][ T50] Bluetooth: hci4: unexpected event for opcode 0x040d [ 371.392865][ T29] audit: type=1400 audit(1776644284.792:4484): avc: denied { create } for pid=12552 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 371.419278][T12554] syzkaller1: entered promiscuous mode [ 371.426618][T12554] syzkaller1: entered allmulticast mode [ 371.441262][ T29] audit: type=1400 audit(1776644284.822:4485): avc: denied { setopt } for pid=12555 comm="syz.3.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.500433][ T29] audit: type=1400 audit(1776644284.892:4486): avc: denied { ioctl } for pid=12552 comm="syz.4.2191" path="socket:[40741]" dev="sockfs" ino=40741 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.599414][ T29] audit: type=1400 audit(1776644284.892:4487): avc: denied { nlmsg_read } for pid=12552 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.096142][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.104283][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.282180][T12610] tipc: Enabling of bearer rejected, already enabled [ 374.020866][T12624] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 374.098109][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.629150][T12624] bond2: (slave gretap1): making interface the new active one [ 374.679604][T12624] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 376.206614][ T29] audit: type=1400 audit(1776644289.592:4488): avc: denied { connect } for pid=12647 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.546261][T12649] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2214'. [ 376.773687][T12656] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 376.790785][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'. [ 378.418048][T12673] lo speed is unknown, defaulting to 1000 [ 378.662585][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 378.722402][T12681] syzkaller0: entered promiscuous mode [ 378.733670][T12681] syzkaller0: entered allmulticast mode [ 378.832570][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 378.868194][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.888123][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.913004][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 378.923636][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.932353][ T24] usb 4-1: Product: syz [ 378.938601][ T24] usb 4-1: Manufacturer: syz [ 378.943457][ T24] usb 4-1: SerialNumber: syz [ 378.956146][ T24] usb 4-1: config 0 descriptor?? [ 379.286847][T12690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.537066][ T29] audit: type=1400 audit(1776644292.932:4489): avc: denied { getopt } for pid=12687 comm="syz.5.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 379.562746][ T50] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 381.482559][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 381.664098][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.701390][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.729959][ T24] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 381.767316][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.796368][ T5888] usb 4-1: USB disconnect, device number 26 [ 381.804757][ T24] usb 5-1: Product: syz [ 381.830000][ T24] usb 5-1: Manufacturer: syz [ 381.849096][ T24] usb 5-1: SerialNumber: syz [ 381.875000][ T24] usb 5-1: config 0 descriptor?? [ 382.156036][T12746] netlink: 'syz.3.2241': attribute type 11 has an invalid length. [ 382.163984][T12746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2241'. [ 382.554812][ T9] usb 5-1: USB disconnect, device number 24 [ 382.986200][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.997862][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.007040][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.525105][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.532755][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.552770][ T29] audit: type=1400 audit(1776644552.946:4490): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 383.620681][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 383.640053][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 383.658366][ T5830] Bluetooth: hci3: hardware error 0x00 [ 384.340729][T12751] lo speed is unknown, defaulting to 1000 [ 385.241992][T12751] chnl_net:caif_netlink_parms(): no params data found [ 385.462265][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.469679][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.477335][T12751] bridge_slave_0: entered allmulticast mode [ 385.485140][T12751] bridge_slave_0: entered promiscuous mode [ 385.495825][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.504630][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.512293][T12751] bridge_slave_1: entered allmulticast mode [ 385.520222][T12751] bridge_slave_1: entered promiscuous mode [ 385.551497][T12751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.580373][T12751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.692532][ T5888] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 385.744148][ T29] audit: type=1400 audit(1776644555.146:4491): avc: denied { create } for pid=12794 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.771906][T12751] team0: Port device team_slave_0 added [ 385.790722][T12751] team0: Port device team_slave_1 added [ 385.815226][T12751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.822205][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.851637][T12751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.864830][T12751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.871786][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.897811][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 385.905656][T12751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.917043][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.927627][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.938966][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.948532][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.957539][ T5888] usb 5-1: Product: syz [ 385.967215][ T5888] usb 5-1: Manufacturer: syz [ 385.979244][ T5888] usb 5-1: SerialNumber: syz [ 385.991426][ T5888] usb 5-1: config 0 descriptor?? [ 386.036935][T12751] hsr_slave_0: entered promiscuous mode [ 386.042808][ T24] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 386.051595][T12751] hsr_slave_1: entered promiscuous mode [ 386.058082][T12751] debugfs: 'hsr0' already exists in 'hsr' [ 386.064619][T12751] Cannot create hsr debugfs directory [ 386.192567][ T24] usb 4-1: device descriptor read/64, error -71 [ 386.213276][ T5827] Bluetooth: hci5: command tx timeout [ 386.294131][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 386.355343][T12751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.388329][T12751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.671198][T12751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.883788][ T24] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 386.898039][T12751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.906411][T12751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.916949][T12751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.925234][T12751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.042753][ T24] usb 4-1: device descriptor read/64, error -71 [ 387.394259][ T24] usb usb4-port1: attempt power cycle [ 387.412213][T12751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.593893][T12751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.620016][T12751] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.639047][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.646220][ T6127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.671659][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.678835][ T6127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.742506][ T24] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 387.773918][ T24] usb 4-1: device descriptor read/8, error -71 [ 387.782189][T12815] netlink: 'syz.1.2260': attribute type 21 has an invalid length. [ 387.911883][T12751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.032547][ T24] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 388.064563][ T24] usb 4-1: device descriptor read/8, error -71 [ 388.113114][ T29] audit: type=1400 audit(1776644557.516:4492): avc: denied { mounton } for pid=12834 comm="syz.1.2262" path="/393/file0" dev="tmpfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 388.193803][ T24] usb usb4-port1: unable to enumerate USB device [ 388.218982][T12751] veth0_vlan: entered promiscuous mode [ 388.247713][T12751] veth1_vlan: entered promiscuous mode [ 388.294178][ T5830] Bluetooth: hci5: command tx timeout [ 388.349757][T12751] veth0_macvtap: entered promiscuous mode [ 388.377113][T12751] veth1_macvtap: entered promiscuous mode [ 388.437429][T12751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.447593][ T803] usb 5-1: USB disconnect, device number 25 [ 388.546488][T12751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.596573][ T1173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.635529][ T1173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.681298][ T1173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.719363][ T1173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.860395][T12845] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 389.044360][T12845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.424806][T12856] input: syz0 as /devices/virtual/input/input19 [ 389.599937][ T6130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.613540][ T6130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.716669][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.736900][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.761202][ T29] audit: type=1400 audit(1776644559.156:4493): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/root/syzkaller.5sFLnt/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 389.795131][ T29] audit: type=1400 audit(1776644559.186:4494): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/root/syzkaller.5sFLnt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 389.848719][T12863] binder: 12862:12863 ioctl c0306201 200000000280 returned -14 [ 389.879110][ T29] audit: type=1400 audit(1776644559.186:4495): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/root/syzkaller.5sFLnt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 389.955896][ T29] audit: type=1400 audit(1776644559.226:4496): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 389.989371][ T29] audit: type=1400 audit(1776644559.226:4497): avc: denied { mount } for pid=12751 comm="syz-executor" name="/" dev="gadgetfs" ino=7109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 390.013505][ T29] audit: type=1400 audit(1776644559.226:4498): avc: denied { mounton } for pid=12751 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 390.072357][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 390.143764][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 390.161709][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 390.200225][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 390.252936][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 390.358566][T12883] netlink: 'syz.6.2276': attribute type 4 has an invalid length. [ 390.372714][ T5830] Bluetooth: hci5: command tx timeout [ 390.420549][T12883] netlink: 'syz.6.2276': attribute type 4 has an invalid length. [ 392.822707][ T5830] Bluetooth: hci5: command tx timeout [ 393.899334][T12918] netlink: 'syz.1.2287': attribute type 1 has an invalid length. [ 394.006845][ T29] audit: type=1400 audit(1776644563.316:4499): avc: denied { map } for pid=12922 comm="syz.3.2289" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 394.031591][ T29] audit: type=1400 audit(1776644563.316:4500): avc: denied { execute } for pid=12922 comm="syz.3.2289" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 394.304239][T12918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.339350][T12926] vlan3: entered allmulticast mode [ 394.345720][T12926] bond3: entered allmulticast mode [ 394.675770][ T29] audit: type=1400 audit(1776644564.076:4501): avc: denied { watch watch_reads } for pid=12937 comm="syz.1.2292" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 395.525019][ T29] audit: type=1400 audit(1776644564.916:4502): avc: denied { read append } for pid=12950 comm="syz.3.2296" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 395.633071][T12951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.641223][T12951] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 397.408654][T12951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.938036][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 398.337140][T12951] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 398.569591][T12951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.695679][T12951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 399.412579][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 399.505549][T12951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.546422][T12951] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 399.615152][T12983] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 399.692747][T12951] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 399.763016][T12951] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 399.801684][T12951] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 399.916868][T12951] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 399.973120][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 400.779651][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 401.592581][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 401.598808][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 401.613670][ T29] audit: type=1400 audit(1776644571.016:4503): avc: denied { accept } for pid=12998 comm="syz.1.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 401.852502][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 402.000929][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 402.254652][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.277058][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 402.312352][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.743697][ T5888] usb 5-1: config 0 descriptor?? [ 402.760624][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 402.827653][ T29] audit: type=1400 audit(1776644572.226:4504): avc: denied { kexec_image_load } for pid=13009 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 402.876415][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 403.310295][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.337456][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.362036][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 403.385340][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 403.412712][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 403.450205][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 403.474561][ T29] audit: type=1400 audit(1776644572.866:4505): avc: denied { create } for pid=13015 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 403.500957][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 403.525817][T13018] lo speed is unknown, defaulting to 1000 [ 403.533052][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 403.545410][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 403.558219][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 403.652532][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 403.792598][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 403.842152][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 403.879779][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 403.894729][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.915711][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 403.932842][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 404.002769][ T5888] pwc: Registered as video103. [ 404.034531][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 404.095494][ T5888] usb 5-1: USB disconnect, device number 26 [ 405.111892][T13049] No such timeout policy "syz1" [ 405.701870][ T29] audit: type=1804 audit(1776644575.096:4506): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2321" name="/newroot/11/file1" dev="tmpfs" ino=73 res=1 errno=0 [ 405.734465][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 405.973474][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.179481][T13060] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 406.187636][T13060] netlink: 384 bytes leftover after parsing attributes in process `syz.3.2324'. [ 406.199236][T13060] ./file0: Can't lookup blockdev [ 406.900654][ T29] audit: type=1400 audit(1776644576.296:4507): avc: denied { ioctl } for pid=13081 comm="syz.4.2330" path="socket:[45730]" dev="sockfs" ino=45730 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.070148][T13086] netlink: 'syz.4.2330': attribute type 10 has an invalid length. [ 407.146094][T13086] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 407.172089][T13086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.295408][T12740] libceph: connect (1)[c::]:6789 error -101 [ 407.310352][T13094] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2333'. [ 407.314961][T12740] libceph: mon0 (1)[c::]:6789 connect error [ 407.327447][T13088] ceph: No mds server is up or the cluster is laggy [ 407.595078][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 407.632680][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 407.977214][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 409.201880][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2344'. [ 409.305120][T13134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13134 comm=syz.4.2344 [ 410.062810][T13139] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 410.128474][ T29] audit: type=1400 audit(1776644579.526:4508): avc: denied { ioctl } for pid=13140 comm="syz.3.2348" path="socket:[45937]" dev="sockfs" ino=45937 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 410.532206][T13139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.592175][T13142] bond5: (slave ip6gretap1): making interface the new active one [ 410.645092][T13142] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 410.688045][T13145] bond5: entered allmulticast mode [ 410.703387][T13145] ip6gretap1: entered allmulticast mode [ 410.709898][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2349'. [ 410.719031][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2349'. [ 411.341650][T13161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 411.422710][T13161] team0: No ports can be present during mode change [ 412.146499][T13155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.175496][T13155] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.195749][T13155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.218479][T13155] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 412.275656][T13155] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 412.510257][ T29] audit: type=1400 audit(1776644581.906:4509): avc: denied { ioctl } for pid=13174 comm="syz.6.2357" path="socket:[46392]" dev="sockfs" ino=46392 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.553816][T12740] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 412.743093][T12740] usb 5-1: Using ep0 maxpacket: 16 [ 412.774843][T12740] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 412.810894][T12740] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 412.850568][T12740] usb 5-1: Product: syz [ 412.872503][T12740] usb 5-1: Manufacturer: syz [ 412.891388][T12740] usb 5-1: SerialNumber: syz [ 412.942111][T12740] usb 5-1: config 0 descriptor?? [ 413.508367][T12740] usb 5-1: USB disconnect, device number 27 [ 414.212974][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 414.213509][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 414.226702][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 414.292567][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.298698][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 414.405992][T13192] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 414.415081][T13192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 415.004605][T13188] Scaler: ================= START STATUS ================= [ 415.031586][T13188] Scaler: ================== END STATUS ================== [ 415.078078][ T29] audit: type=1400 audit(1776644584.466:4510): avc: denied { mounton } for pid=13186 comm="syz.3.2361" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 415.321274][T13204] qnx4: unable to read the superblock [ 415.763445][T12740] libceph: connect (1)[c::]:6789 error -101 [ 415.769708][T12740] libceph: mon0 (1)[c::]:6789 connect error [ 415.830350][T13215] ceph: No mds server is up or the cluster is laggy [ 416.042535][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 416.202953][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 416.222160][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 416.249410][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.310167][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.409140][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.436450][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.472487][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.505674][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.680465][ T803] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 416.747522][T13249] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.988326][ T9] usb 2-1: usb_control_msg returned -32 [ 417.010200][ T9] usbtmc 2-1:16.0: can't read capabilities [ 417.063564][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 417.096863][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.135186][ T803] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 417.162300][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.201978][ T803] usb 4-1: config 0 descriptor?? [ 417.223863][ T803] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 417.253597][T13252] syzkaller0: entered promiscuous mode [ 417.284011][T13252] syzkaller0: entered allmulticast mode [ 417.455113][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2379'. [ 417.712020][T13256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.757860][ T803] gspca_vc032x: reg_r err -110 [ 417.775031][ T803] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 417.906460][T13263] SET target dimension over the limit! [ 418.230680][T12740] usb 4-1: USB disconnect, device number 31 [ 418.364865][ T29] audit: type=1400 audit(1776644587.766:4511): avc: denied { read } for pid=13268 comm="syz.4.2383" path="socket:[46545]" dev="sockfs" ino=46545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.503160][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.664913][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.689928][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.704842][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.718869][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.732214][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.760000][ T9] usb 7-1: config 0 descriptor?? [ 418.908372][T13277] syz_tun (unregistering): left allmulticast mode [ 419.045003][T13281] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 419.111828][T13281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 419.152828][T13283] bond4: entered promiscuous mode [ 419.230017][ T29] audit: type=1400 audit(1776644588.626:4512): avc: denied { accept } for pid=13280 comm="syz.3.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 419.266048][ T9] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 419.491678][T13265] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2381'. [ 419.518833][T13265] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 419.583169][T13265] CIFS mount error: No usable UNC path provided in device string! [ 419.583169][T13265] [ 419.595129][ T803] usb 7-1: USB disconnect, device number 2 [ 419.605527][T13265] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 419.902029][T13304] fuse: fd is not a fuse device [ 421.126210][T13319] netlink: 'syz.5.2395': attribute type 1 has an invalid length. [ 421.384654][T13319] bond3: entered promiscuous mode [ 421.392862][T13319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.527262][T13326] bond3: (slave bridge2): making interface the new active one [ 421.559997][T13326] bridge2: entered promiscuous mode [ 421.589796][T13326] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 421.782655][ T2166] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 422.377305][ T2166] usb 5-1: Using ep0 maxpacket: 16 [ 422.382673][T13225] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 422.395656][ T2166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.427238][ T2166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.439075][ T5888] usb 2-1: USB disconnect, device number 28 [ 422.478985][ T2166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.515948][ T2166] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 422.627359][ T2166] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.595516][ T2166] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.608628][ T2166] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 424.568123][ T2166] usb 5-1: Manufacturer: syz [ 424.579066][ T2166] usb 5-1: config 0 descriptor?? [ 424.667605][T13353] xt_policy: neither incoming nor outgoing policy selected [ 424.686721][ T2166] usb 5-1: can't set config #0, error -71 [ 424.723210][ T2166] usb 5-1: USB disconnect, device number 28 [ 424.780172][T13365] syzkaller0: entered promiscuous mode [ 424.786214][T13365] syzkaller0: entered allmulticast mode [ 430.066572][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.207687][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.217325][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.226528][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.235621][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.245254][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.254300][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.263415][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.272441][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.281524][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 430.979106][ T2166] libceph: connect (1)[c::]:6789 error -101 [ 430.990642][ T2166] libceph: mon0 (1)[c::]:6789 connect error [ 430.996976][T13412] ceph: No mds server is up or the cluster is laggy [ 431.161476][T13425] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 431.704919][ T2166] libceph: connect (1)[c::]:6789 error -101 [ 431.712762][ T2166] libceph: mon0 (1)[c::]:6789 connect error [ 431.744222][ T29] audit: type=1400 audit(1776644601.146:4513): avc: denied { sqpoll } for pid=13428 comm="syz.1.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 431.790368][ T29] audit: type=1326 audit(1776644601.186:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7b639c819 code=0x0 [ 432.087759][ T29] audit: type=1400 audit(1776644601.486:4515): avc: denied { getopt } for pid=13440 comm="syz.5.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 432.676635][ T29] audit: type=1400 audit(1776644602.076:4516): avc: denied { ioctl } for pid=13457 comm="syz.6.2428" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 434.536489][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.480985][T13485] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.781421][ T29] audit: type=1400 audit(1776644606.176:4517): avc: denied { shutdown } for pid=13493 comm="syz.3.2438" lport=43640 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 438.572563][ T5881] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 438.696559][T13536] __nla_validate_parse: 13 callbacks suppressed [ 438.696579][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 438.727557][T13538] futex_wake_op: syz.5.2450 tries to shift op by 144; fix this program [ 438.762463][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 438.779297][ T29] audit: type=1400 audit(1776644608.176:4518): avc: denied { getattr } for pid=13537 comm="syz.5.2450" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 438.822344][ T5881] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 438.839809][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.854333][ T29] audit: type=1400 audit(1776644608.176:4519): avc: denied { connect } for pid=13541 comm="syz.6.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 438.854437][T13540] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 438.882485][ T5881] usb 4-1: Product: syz [ 438.886944][ T5881] usb 4-1: Manufacturer: syz [ 438.891547][ T5881] usb 4-1: SerialNumber: syz [ 438.911507][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 438.941577][ T5881] usb 4-1: config 0 descriptor?? [ 438.959883][ T5881] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 439.004786][T13536] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 439.071094][T13536] bond6 (unregistering): Released all slaves [ 439.243326][T13550] tipc: Enabled bearer , priority 0 [ 440.213826][T13552] syzkaller0: entered promiscuous mode [ 440.397894][T13552] syzkaller0: entered allmulticast mode [ 440.611499][T13550] tipc: Resetting bearer [ 440.622513][T13548] tipc: Resetting bearer [ 440.654239][T13548] tipc: Disabling bearer [ 440.808417][ T5827] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 440.809361][ T5827] Bluetooth: hci1: connection err: -111 [ 442.145126][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 442.350977][T13582] netlink: 'syz.6.2463': attribute type 178 has an invalid length. [ 442.377343][T13586] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.2461'. [ 442.387755][ T5881] gspca_ov534_9: reg_r err -71 [ 442.423216][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 443.032557][ T5881] gspca_ov534_9: Unknown sensor 0000 [ 443.032638][ T5881] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 443.052909][ T5881] usb 4-1: USB disconnect, device number 32 [ 443.246637][T13611] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 443.430982][T13611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.460208][T13613] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 443.489158][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2469'. [ 443.515513][T13616] bond4: entered promiscuous mode [ 443.526662][T13616] bond4: entered allmulticast mode [ 443.559106][T13607] bond4: left promiscuous mode [ 443.584063][T13607] bond4: left allmulticast mode [ 443.590940][T13607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.604639][T13615] syzkaller0: entered promiscuous mode [ 443.644735][T13615] syzkaller0: entered allmulticast mode [ 446.284380][ T29] audit: type=1400 audit(1776644615.686:4520): avc: denied { bind } for pid=13651 comm="syz.3.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.138124][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 447.703760][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.732566][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.784245][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 447.827341][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 447.851352][ T9] usb 5-1: Product: syz [ 447.868321][ T9] usb 5-1: Manufacturer: syz [ 447.890955][ T9] usb 5-1: SerialNumber: syz [ 448.396033][ T9] usb 5-1: USB disconnect, device number 29 [ 451.016004][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2495'. [ 453.312481][ T2166] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 453.622484][ T2166] usb 7-1: Using ep0 maxpacket: 32 [ 454.069350][ T2166] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 454.097541][ T2166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.129879][ T2166] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 454.863055][ T2166] gspca_nw80x: reg_r err -110 [ 454.889349][ T2166] nw80x 7-1:3.0: probe with driver nw80x failed with error -110 [ 454.994509][ T803] usb 7-1: USB disconnect, device number 3 [ 455.547070][T13789] loop7: detected capacity change from 0 to 16384 [ 455.907663][T13792] loop7: detected capacity change from 16384 to 0 [ 455.914671][ C1] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 456.842490][ T5881] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 457.011160][ T5881] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 457.031467][ T5881] usb 4-1: config 0 has no interface number 0 [ 457.049088][ T5881] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 457.081381][ T5881] usb 4-1: config 0 interface 41 has no altsetting 0 [ 457.111328][ T5881] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 457.126524][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.149163][ T5881] usb 4-1: Product: syz [ 457.156892][ T5881] usb 4-1: Manufacturer: syz [ 457.170276][ T5881] usb 4-1: SerialNumber: syz [ 457.193978][ T5881] usb 4-1: config 0 descriptor?? [ 457.202006][T13805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.332560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 457.424227][T13805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.919303][T13816] binder: 13814:13816 ioctl c0306201 200000000080 returned -14 [ 457.945700][T13816] binder: BINDER_SET_CONTEXT_MGR already set [ 457.973279][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2529'. [ 457.982355][T13816] binder: 13814:13816 ioctl 4018620d 200000000040 returned -16 [ 458.002622][T13816] binder: 13814:13816 ioctl c0306201 2000000003c0 returned -14 [ 458.058471][ T5881] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 458.637016][T13829] netlink: 'syz.5.2532': attribute type 1 has an invalid length. [ 458.666944][T13829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.674158][T13823] syzkaller0: entered promiscuous mode [ 458.693016][T13823] syzkaller0: entered allmulticast mode [ 458.835820][T13829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.842746][T13829] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.853516][T13829] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 459.369016][ T5881] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 459.398324][ T5881] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 459.892533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 459.932358][T13847] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 459.966020][ T5881] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 460.000698][ T5881] usb 4-1: USB disconnect, device number 33 [ 463.497229][T13886] netlink: 'syz.5.2549': attribute type 1 has an invalid length. [ 463.606971][ T29] audit: type=1400 audit(1776644633.006:4521): avc: denied { create } for pid=13885 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 463.629452][ T29] audit: type=1400 audit(1776644633.026:4522): avc: denied { write } for pid=13885 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 463.720710][T13891] bond5: (slave bridge3): making interface the new active one [ 463.737092][T13891] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 463.758626][T13892] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 466.574265][ T2166] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 466.711117][ T29] audit: type=1400 audit(1776644636.106:4523): avc: denied { accept } for pid=13910 comm="syz.5.2555" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 466.814683][ T2166] usb 2-1: Using ep0 maxpacket: 8 [ 466.827853][ T2166] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 466.850720][ T2166] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.901438][ T2166] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.928171][ T2166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.955911][ T2166] usbtmc 2-1:16.0: bulk endpoints not found [ 467.029177][T13924] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2560'. [ 467.145397][T13923] batman_adv: batadv0: Interface activated: dummy0 [ 467.167647][T13923] batadv0: mtu less than device minimum [ 467.181302][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.192172][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.202982][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.213787][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.224578][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.235386][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.246185][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.257481][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.268800][T13923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.346008][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 468.233112][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 468.354890][T13945] lo speed is unknown, defaulting to 1000 [ 468.402473][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 468.450577][ T5881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.484614][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.504912][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.516547][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.530647][ T5881] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 468.533912][T13951] syz.3.2568 (13951): drop_caches: 4 [ 468.541671][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.563028][ T5881] usb 7-1: config 0 descriptor?? [ 468.572543][ T2166] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 468.605959][ T29] audit: type=1400 audit(1776644638.006:4524): avc: denied { ioctl } for pid=13952 comm="syz.3.2569" path="socket:[49607]" dev="sockfs" ino=49607 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 468.672480][T13955] veth0_to_team: entered promiscuous mode [ 468.722495][ T2166] usb 5-1: Using ep0 maxpacket: 32 [ 468.864956][ T2166] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 468.873525][ T2166] usb 5-1: config 0 has no interface number 0 [ 468.901052][ T2166] usb 5-1: config 0 interface 12 has no altsetting 0 [ 468.908084][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 468.949180][ T2166] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 469.347797][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 469.357228][ T9] usb 2-1: USB disconnect, device number 29 [ 469.382814][ T5881] usb 7-1: USB disconnect, device number 4 [ 469.387242][ T2166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.417940][ T2166] usb 5-1: Product: syz [ 469.438229][ T2166] usb 5-1: Manufacturer: syz [ 469.443307][ T2166] usb 5-1: SerialNumber: syz [ 469.465519][ T2166] usb 5-1: config 0 descriptor?? [ 469.645787][ T29] audit: type=1400 audit(1776644639.006:4525): avc: denied { view } for pid=13963 comm="syz.1.2573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 470.651195][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 470.886118][ T2166] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 470.978402][ T2166] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 471.032067][ T2166] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 471.076360][ T2166] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 471.133946][ T2166] usb 5-1: USB disconnect, device number 30 [ 471.960857][ T29] audit: type=1400 audit(1776644641.356:4526): avc: denied { setattr } for pid=13977 comm="syz.6.2576" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 472.884404][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2580'. [ 476.989118][T14038] netlink: 'syz.3.2595': attribute type 10 has an invalid length. [ 477.001209][T14037] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 477.051974][T14037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.098391][T14041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.127013][T14041] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 477.158413][T14041] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 477.232260][T14037] gretap2: entered promiscuous mode [ 477.251807][T14037] bond6: (slave gretap2): making interface the new active one [ 477.280372][T14037] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 477.312917][ T5881] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 477.317852][T14043] macvlan2: entered promiscuous mode [ 477.327146][T14043] macvlan2: entered allmulticast mode [ 477.335192][T14043] bond6: entered promiscuous mode [ 477.343317][T14043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 477.354834][T14043] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 477.369469][T14043] bond6: left promiscuous mode [ 478.136309][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2598'. [ 478.146468][T14049] netlink: 'syz.6.2598': attribute type 11 has an invalid length. [ 478.154437][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 478.189074][ T6127] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.203835][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2598'. [ 478.213697][ T5881] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 478.240945][ T6127] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.255080][T14049] netlink: 'syz.6.2598': attribute type 11 has an invalid length. [ 478.270465][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 478.280627][ T6127] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.118493][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 479.128854][ T6127] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.139322][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.530664][ T5881] usb 4-1: config 0 descriptor?? [ 479.779718][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 479.965354][ T29] audit: type=1400 audit(1776644649.356:4527): avc: denied { create } for pid=14071 comm="syz.4.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 480.006518][ T5881] hid_parser_main: 457 callbacks suppressed [ 480.006539][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.025277][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.054494][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.079274][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.102735][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.127302][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.157322][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.182130][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.204924][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.215724][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.247072][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.259731][ T5881] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 480.303159][ T5881] logitech 0003:046D:C29C.0011: hidraw0: USB HID v0.20 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 480.369867][ T5881] logitech 0003:046D:C29C.0011: no inputs found [ 480.688550][ T5881] usb 4-1: USB disconnect, device number 34 [ 480.757844][T14075] fido_id[14075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 480.913476][T14078] netlink: 'syz.5.2608': attribute type 1 has an invalid length. [ 481.143207][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2608'. [ 481.360464][T14080] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 481.373530][T14080] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 481.438462][T14083] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 481.455139][T14078] macvlan0: entered promiscuous mode [ 481.460830][T14078] macvlan0: entered allmulticast mode [ 481.489417][T14078] bond6: entered promiscuous mode [ 481.501325][T14078] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 481.950600][T14078] bond6: left promiscuous mode [ 481.993334][ T5888] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 482.216055][ T29] audit: type=1400 audit(1776644651.456:4528): avc: denied { setopt } for pid=14092 comm="syz.3.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 482.643511][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 482.652573][ T5888] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 482.661773][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.669886][ T5888] usb 2-1: Product: syz [ 482.674197][ T5888] usb 2-1: Manufacturer: syz [ 482.678839][ T5888] usb 2-1: SerialNumber: syz [ 482.752416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 483.037846][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.062799][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.770192][T14086] lo speed is unknown, defaulting to 1000 [ 483.882855][ T5888] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 483.958711][ T5888] usb 2-1: USB disconnect, device number 30 [ 484.076739][T14121] lo speed is unknown, defaulting to 1000 [ 484.362544][ T2166] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 484.527344][ T2166] usb 4-1: config 0 has no interfaces? [ 484.544395][ T2166] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 484.556318][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.576505][ T2166] usb 4-1: config 0 descriptor?? [ 485.536726][ T29] audit: type=1400 audit(1776644654.926:4529): avc: denied { map } for pid=14119 comm="syz.3.2617" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.644724][ T29] audit: type=1400 audit(1776644654.966:4530): avc: denied { execute } for pid=14119 comm="syz.3.2617" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.841562][ T803] usb 4-1: USB disconnect, device number 35 [ 487.278924][ T2166] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 488.297993][ T2166] usb 4-1: Using ep0 maxpacket: 16 [ 488.394782][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 488.408109][ T2166] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.421459][ T2166] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 488.622559][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 488.863652][ T2166] usb 4-1: config 0 interface 0 has no altsetting 0 [ 488.880945][ T2166] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 488.899968][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.945904][ T2166] usb 4-1: config 0 descriptor?? [ 489.095087][T14185] syzkaller1: entered promiscuous mode [ 489.111952][T14185] syzkaller1: entered allmulticast mode [ 489.753147][ T29] audit: type=1400 audit(1776644659.156:4531): avc: denied { ioctl } for pid=14194 comm="syz.1.2636" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 490.182870][ T2166] usbhid 4-1:0.0: can't add hid device: -71 [ 490.221356][ T2166] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 490.267440][ T2166] usb 4-1: USB disconnect, device number 36 [ 491.760040][T14215] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 491.770944][T14215] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 492.260956][ T5881] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 492.433946][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 492.452779][ T5881] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 492.575251][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.587657][ T5881] usb 7-1: Product: syz [ 492.600056][ T5881] usb 7-1: Manufacturer: syz [ 492.616084][ T5881] usb 7-1: SerialNumber: syz [ 492.638669][ T5881] usb 7-1: config 0 descriptor?? [ 492.812535][ T29] audit: type=1400 audit(1776644662.116:4532): avc: denied { unmount } for pid=14225 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 493.278941][ T5881] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: failure sending bit rate [ 493.874285][ T5881] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 493.899016][ T5881] usb 7-1: USB disconnect, device number 5 [ 493.947762][T14240] tipc: Enabled bearer , priority 0 [ 493.965235][T14240] syzkaller0: entered promiscuous mode [ 493.970758][T14240] syzkaller0: entered allmulticast mode [ 494.067521][T14240] tipc: Resetting bearer [ 494.104206][T14239] tipc: Resetting bearer [ 494.292017][T14239] tipc: Disabling bearer [ 496.049784][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.685301][T14265] netlink: 'syz.5.2656': attribute type 1 has an invalid length. [ 497.166482][T14275] macvlan0: entered promiscuous mode [ 497.223913][T14275] macvlan0: entered allmulticast mode [ 497.278751][ T29] audit: type=1400 audit(1776644666.676:4533): avc: denied { module_load } for pid=14267 comm="syz.6.2658" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 497.299650][T14276] Invalid ELF header magic: != ELF [ 497.312510][T14275] bond7: entered promiscuous mode [ 497.320144][ T803] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 497.322853][T14275] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 497.362518][T14275] bond7: left promiscuous mode [ 497.895477][ T803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.908171][ T803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.921960][ T29] audit: type=1400 audit(1776644667.316:4534): avc: denied { getopt } for pid=14280 comm="syz.5.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 497.922803][ T803] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.968477][ T803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 498.007212][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 498.022499][ T5888] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 498.040345][ T803] usb 2-1: Product: syz [ 498.050675][ T803] usb 2-1: Manufacturer: syz [ 498.064012][ T803] usb 2-1: SerialNumber: syz [ 498.174345][ T5888] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 498.302512][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.312883][ T5888] usb 4-1: config 0 has no interface number 0 [ 498.314803][ T803] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 498.319266][ T5888] usb 4-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.345904][ T5888] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 498.355440][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.363767][ T5888] usb 4-1: Product: syz [ 498.367964][ T5888] usb 4-1: Manufacturer: syz [ 498.374509][ T5888] usb 4-1: SerialNumber: syz [ 498.386192][ T5888] usb 4-1: config 0 descriptor?? [ 498.395121][ T5888] usb-storage 4-1:0.20: USB Mass Storage device detected [ 498.405066][ T5888] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 498.581003][T14266] net_ratelimit: 10 callbacks suppressed [ 498.581124][T14266] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 498.598228][ T29] audit: type=1400 audit(1776644667.996:4535): avc: denied { read write } for pid=14264 comm="syz.1.2657" name="lp0" dev="devtmpfs" ino=3533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.623797][ T29] audit: type=1400 audit(1776644667.996:4536): avc: denied { open } for pid=14264 comm="syz.1.2657" path="/dev/usb/lp0" dev="devtmpfs" ino=3533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.655687][ T29] audit: type=1400 audit(1776644667.996:4537): avc: denied { ioctl } for pid=14264 comm="syz.1.2657" path="/dev/usb/lp0" dev="devtmpfs" ino=3533 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.708466][ T803] usb 2-1: USB disconnect, device number 31 [ 498.736882][ T803] usblp0: removed [ 498.868591][ T9] usb 4-1: USB disconnect, device number 37 [ 499.769951][ T29] audit: type=1400 audit(1776644669.166:4538): avc: denied { execute } for pid=14299 comm="syz.1.2666" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 500.408332][T14311] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 503.132115][T14324] futex_wake_op: syz.4.2672 tries to shift op by 144; fix this program [ 503.329970][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 503.361445][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 503.841117][T14334] bond5: entered allmulticast mode [ 503.895365][T14334] veth7: entered allmulticast mode [ 503.907076][T14334] bond5: (slave veth7): Enslaving as an active interface with an up link [ 503.950049][T14334] bond5 (unregistering): (slave veth7): Releasing backup interface [ 503.969536][T14334] bond5 (unregistering): Released all slaves [ 504.882783][ T29] audit: type=1400 audit(1776644673.936:4539): avc: denied { mount } for pid=14348 comm="syz.1.2680" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 504.932089][ T29] audit: type=1400 audit(1776644673.956:4540): avc: denied { mounton } for pid=14348 comm="syz.1.2680" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 505.218026][ T29] audit: type=1400 audit(1776644674.616:4541): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 506.289615][T14377] vlan0: entered promiscuous mode [ 506.351956][T14377] vlan0: entered allmulticast mode [ 506.482897][T14377] hsr_slave_1: entered allmulticast mode [ 506.489847][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 507.662490][ T803] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 507.834195][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 508.167523][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.190296][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.221535][ T803] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 508.263005][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.291186][ T803] usb 5-1: config 0 descriptor?? [ 508.406088][ T2166] libceph: connect (1)[c::]:6789 error -101 [ 508.412249][ T2166] libceph: mon0 (1)[c::]:6789 connect error [ 508.422599][T14403] ceph: No mds server is up or the cluster is laggy [ 508.830623][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 508.838019][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 509.333924][ T29] audit: type=1400 audit(1776644678.686:4542): avc: denied { ioctl } for pid=14414 comm="syz.6.2699" path="socket:[50429]" dev="sockfs" ino=50429 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.125725][T14427] macsec1: entered promiscuous mode [ 510.131591][T14427] virt_wifi0: entered promiscuous mode [ 510.353158][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 510.522778][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 510.539924][ T9] usb 2-1: config 0 has no interfaces? [ 510.567215][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 510.580792][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.599535][ T9] usb 2-1: Product: syz [ 510.611498][ T9] usb 2-1: Manufacturer: syz [ 510.632152][ T9] usb 2-1: SerialNumber: syz [ 510.687848][ T9] usb 2-1: config 0 descriptor?? [ 510.829732][ T803] usbhid 5-1:0.0: can't add hid device: -71 [ 510.872740][ T803] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 511.159603][ T803] usb 5-1: USB disconnect, device number 31 [ 511.215586][T14424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.279932][T14424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.551176][T14450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.950130][ T5888] usb 2-1: USB disconnect, device number 32 [ 511.996003][T14453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2709'. [ 512.330330][T14453] netlink: 'syz.5.2709': attribute type 15 has an invalid length. [ 512.380814][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2709'. [ 512.793750][T14207] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 512.804427][T14453] netlink: 'syz.5.2709': attribute type 15 has an invalid length. [ 512.820131][T14207] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 512.854809][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2709'. [ 512.894552][T14207] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 512.961324][T14207] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 513.165705][T14469] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 513.524306][T14469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.747620][T14472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.756625][T14472] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.776622][T14472] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 514.841324][ T29] audit: type=1326 audit(1776644684.236:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.4.2716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02a4f9c819 code=0x0 [ 515.826493][ T5881] IPVS: starting estimator thread 0... [ 515.982714][T14500] IPVS: using max 77 ests per chain, 184800 per kthread [ 520.039586][ T5881] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 521.232820][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 521.255275][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 521.269359][T14539] netlink: 'syz.5.2732': attribute type 1 has an invalid length. [ 521.285818][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.299955][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 521.315561][ T5881] usb 4-1: Product: syz [ 521.322547][ T5881] usb 4-1: Manufacturer: syz [ 521.341352][ T5881] usb 4-1: SerialNumber: syz [ 521.355978][T14539] 8021q: adding VLAN 0 to HW filter on device bond8 [ 521.364045][ T5881] usb 4-1: config 0 descriptor?? [ 521.376688][ T5881] usb 4-1: can't set config #0, error -71 [ 521.395055][T14542] bond8: entered allmulticast mode [ 521.419326][ T5881] usb 4-1: USB disconnect, device number 38 [ 521.439606][T14543] bond8: (slave ip6gretap1): making interface the new active one [ 521.543216][T14543] ip6gretap1: entered allmulticast mode [ 521.782673][T14543] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 522.708833][T14552] netlink: 'syz.1.2735': attribute type 1 has an invalid length. [ 522.787005][T14552] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 522.828368][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 522.844117][T14552] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 522.856891][T14552] bond6 (unregistering): Released all slaves [ 522.868564][T14560] binder_alloc: 14556: binder_alloc_buf size 16777216 failed, no address space [ 522.927044][T14560] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 523.028065][T14563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.037802][T14563] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 523.054621][T14563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.099842][T14563] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 523.129542][T14563] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.146891][T14563] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 523.163019][T14565] syz.5.2738 (14565) used greatest stack depth: 19720 bytes left [ 523.180027][T14563] tipc: Resetting bearer [ 523.254924][T14563] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 523.265685][T14563] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 523.280964][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2740'. [ 523.308787][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2740'. [ 525.071397][T14592] GUP no longer grows the stack in syz.5.2747 (14592): 200000004000-200000005000 (200000001000) [ 525.105954][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.5.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.105987][T14592] Tainted: [L]=SOFTLOCKUP [ 525.105994][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.106005][T14592] Call Trace: [ 525.106012][T14592] [ 525.106020][T14592] dump_stack_lvl+0x100/0x190 [ 525.106045][T14592] gup_vma_lookup.cold+0x83/0x96 [ 525.106074][T14592] __get_user_pages+0x241/0x32a0 [ 525.106102][T14592] ? down_read_killable+0x307/0x4b0 [ 525.106126][T14592] ? __pfx___get_user_pages+0x10/0x10 [ 525.106155][T14592] __gup_longterm_locked+0x87d/0x16f0 [ 525.106184][T14592] ? __pfx___gup_longterm_locked+0x10/0x10 [ 525.106209][T14592] ? lock_acquire+0x1b1/0x370 [ 525.106243][T14592] gup_fast_fallback+0x16dc/0x2790 [ 525.106282][T14592] ? __pfx_gup_fast_fallback+0x10/0x10 [ 525.106305][T14592] ? __lock_acquire+0x4a5/0x2630 [ 525.106326][T14592] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 525.106362][T14592] ? lockdep_hardirqs_on+0x78/0x100 [ 525.106394][T14592] get_user_pages_fast+0xa7/0xf0 [ 525.106416][T14592] ? __pfx_get_user_pages_fast+0x10/0x10 [ 525.106444][T14592] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 525.106470][T14592] ? __mutex_lock+0x26d/0x1b10 [ 525.106487][T14592] ? pipe_lock+0x69/0x80 [ 525.106509][T14592] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 525.106532][T14592] ? __pfx___mutex_lock+0x10/0x10 [ 525.106549][T14592] ? find_held_lock+0x2b/0x80 [ 525.106566][T14592] ? futex_unqueue+0x133/0x2c0 [ 525.106593][T14592] ? import_ubuf+0x1b6/0x220 [ 525.106617][T14592] iov_iter_get_pages2+0xa3/0x100 [ 525.106637][T14592] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 525.106658][T14592] ? wait_for_space+0x2ca/0x3b0 [ 525.106687][T14592] __do_sys_vmsplice+0x7dd/0x13c0 [ 525.106719][T14592] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 525.106750][T14592] ? __pfx_futex_wait+0x10/0x10 [ 525.106802][T14592] ? rcu_is_watching+0x12/0xc0 [ 525.106834][T14592] ? do_syscall_64+0x10b/0xf80 [ 525.106850][T14592] do_syscall_64+0x10b/0xf80 [ 525.106864][T14592] ? clear_bhb_loop+0x40/0x90 [ 525.106886][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.106904][T14592] RIP: 0033:0x7ff45459c819 [ 525.106920][T14592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.106936][T14592] RSP: 002b:00007ff455462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 525.106972][T14592] RAX: ffffffffffffffda RBX: 00007ff454815fa0 RCX: 00007ff45459c819 [ 525.106985][T14592] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 525.106995][T14592] RBP: 00007ff454632c91 R08: 0000000000000000 R09: 0000000000000000 [ 525.107007][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.107017][T14592] R13: 00007ff454816038 R14: 00007ff454815fa0 R15: 00007ffd4b415058 [ 525.107044][T14592] [ 525.503280][T14588] lo speed is unknown, defaulting to 1000 [ 526.130629][ T29] audit: type=1400 audit(1776644695.226:4544): avc: denied { getopt } for pid=14598 comm="syz.1.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 526.705700][T14621] tipc: Enabled bearer , priority 0 [ 526.777079][T14621] syzkaller0: entered promiscuous mode [ 526.802525][T14621] syzkaller0: entered allmulticast mode [ 526.823126][T14630] fuse: fd is not a fuse device [ 526.995133][ T29] audit: type=1400 audit(1776644696.386:4545): avc: denied { read write } for pid=14629 comm="syz.5.2758" name="file0" dev="tmpfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 527.021424][ T29] audit: type=1400 audit(1776644696.386:4546): avc: denied { open } for pid=14629 comm="syz.5.2758" path="/501/file0" dev="tmpfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 527.461999][T14633] tipc: Resetting bearer [ 527.514083][T14619] tipc: Resetting bearer [ 527.564791][T14619] tipc: Disabling bearer [ 528.779884][T14645] random: crng reseeded on system resumption [ 529.824318][ T2166] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 530.078814][ T2166] usb 4-1: Using ep0 maxpacket: 8 [ 530.117608][ T2166] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.140723][ T2166] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.273871][ T2166] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.306652][ T2166] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.381028][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 530.412692][T14666] gtp0: entered promiscuous mode [ 530.417702][T14666] gtp0: entered allmulticast mode [ 530.733760][ T2166] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.795658][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.244696][T14672] blktrace: Concurrent blktraces are not allowed on loop4 [ 531.476972][ T2166] usb 4-1: GET_CAPABILITIES returned 0 [ 531.503600][ T2166] usbtmc 4-1:16.0: can't read capabilities [ 531.843847][ T803] usb 4-1: USB disconnect, device number 39 [ 532.584779][ T29] audit: type=1400 audit(1776644701.956:4547): avc: denied { mount } for pid=14685 comm="syz.6.2773" name="/" dev="rpc_pipefs" ino=50921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 534.239760][ T5881] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 534.562639][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 535.410593][T14720] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 535.441336][ T5881] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.458363][ T5881] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 535.471718][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 535.478609][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 535.627908][ T803] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 535.668537][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.706788][ T5881] usb 4-1: config 0 descriptor?? [ 535.747067][T14726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 535.772744][T14726] team0: Port device batadv1 added [ 535.796148][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 535.854064][ T803] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.901905][ T803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.932999][ T803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 535.996895][ T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.040544][ T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.079089][ T803] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.089546][T14728] [ 536.091889][T14728] ============================================ [ 536.098030][T14728] WARNING: possible recursive locking detected [ 536.104159][T14728] syzkaller #0 Tainted: G L [ 536.110116][T14728] -------------------------------------------- [ 536.116242][T14728] syz.3.2778/14728 is trying to acquire lock: [ 536.122285][T14728] ffffffff8f7c2630 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 536.132734][T14728] [ 536.132734][T14728] but task is already holding lock: [ 536.140081][T14728] ffffffff8f7c2630 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 536.150328][T14728] [ 536.150328][T14728] other info that might help us debug this: [ 536.158365][T14728] Possible unsafe locking scenario: [ 536.158365][T14728] [ 536.165791][T14728] CPU0 [ 536.169049][T14728] ---- [ 536.172326][T14728] lock(qp_broker_list.mutex); [ 536.177161][T14728] lock(qp_broker_list.mutex); [ 536.181994][T14728] [ 536.181994][T14728] *** DEADLOCK *** [ 536.181994][T14728] [ 536.190115][T14728] May be due to missing lock nesting notation [ 536.190115][T14728] [ 536.198411][T14728] 1 lock held by syz.3.2778/14728: [ 536.203499][T14728] #0: ffffffff8f7c2630 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 536.214184][T14728] [ 536.214184][T14728] stack backtrace: [ 536.220054][T14728] CPU: 1 UID: 0 PID: 14728 Comm: syz.3.2778 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.220074][T14728] Tainted: [L]=SOFTLOCKUP [ 536.220079][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.220088][T14728] Call Trace: [ 536.220094][T14728] [ 536.220099][T14728] dump_stack_lvl+0x100/0x190 [ 536.220119][T14728] print_deadlock_bug.cold+0xbd/0xca [ 536.220142][T14728] __lock_acquire+0x12bb/0x2630 [ 536.220165][T14728] lock_acquire+0x1b1/0x370 [ 536.220182][T14728] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 536.220202][T14728] ? __pfx___might_resched+0x10/0x10 [ 536.220223][T14728] __mutex_lock+0x1a4/0x1b10 [ 536.220237][T14728] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 536.220258][T14728] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 536.220278][T14728] ? __lock_acquire+0x4a5/0x2630 [ 536.220293][T14728] ? __pfx___mutex_lock+0x10/0x10 [ 536.220306][T14728] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 536.220328][T14728] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 536.220349][T14728] vmci_qp_broker_detach+0x14c/0x11e0 [ 536.220369][T14728] ? kfence_guarded_free+0x242/0x5d0 [ 536.220393][T14728] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 536.220412][T14728] ? __kfence_free+0xb6/0x1d0 [ 536.220424][T14728] ? ctx_free_ctx+0x480/0xda0 [ 536.220443][T14728] ? kfree+0x3a1/0x6c0 [ 536.220461][T14728] ctx_free_ctx+0x517/0xda0 [ 536.220481][T14728] ? __pfx___schedule+0x10/0x10 [ 536.220500][T14728] ? __pfx_ctx_free_ctx+0x10/0x10 [ 536.220521][T14728] ? preempt_schedule_thunk+0x16/0x30 [ 536.220546][T14728] ? preempt_schedule_common+0x42/0xc0 [ 536.220566][T14728] ? preempt_schedule_thunk+0x16/0x30 [ 536.220588][T14728] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 536.220611][T14728] vmci_datagram_dispatch+0x3db/0xc60 [ 536.220625][T14728] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 536.220638][T14728] ? find_held_lock+0x2b/0x80 [ 536.220649][T14728] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 536.220669][T14728] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 536.220689][T14728] qp_notify_peer+0x1a6/0x230 [ 536.220706][T14728] ? __pfx_qp_notify_peer+0x10/0x10 [ 536.220727][T14728] vmci_qp_broker_detach+0xa20/0x11e0 [ 536.220747][T14728] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 536.220766][T14728] ? ctx_free_ctx+0x480/0xda0 [ 536.220785][T14728] ? ctx_free_ctx+0x4bd/0xda0 [ 536.220806][T14728] ? kfree+0x223/0x6c0 [ 536.220823][T14728] ctx_free_ctx+0x517/0xda0 [ 536.220844][T14728] ? synchronize_rcu_expedited+0x3c3/0x450 [ 536.220861][T14728] ? __pfx_ctx_free_ctx+0x10/0x10 [ 536.220881][T14728] ? __pfx_autoremove_wake_function+0x10/0x10 [ 536.220898][T14728] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 536.220916][T14728] vmci_ctx_destroy+0x150/0x1c0 [ 536.220938][T14728] vmci_host_close+0x115/0x1a0 [ 536.220954][T14728] ? __pfx_vmci_host_close+0x10/0x10 [ 536.220970][T14728] __fput+0x3ff/0xb50 [ 536.220999][T14728] task_work_run+0x150/0x240 [ 536.221018][T14728] ? __pfx_task_work_run+0x10/0x10 [ 536.221037][T14728] ? rcu_is_watching+0x12/0xc0 [ 536.221060][T14728] exit_to_user_mode_loop+0x100/0x4a0 [ 536.221081][T14728] ? do_syscall_64+0x52d/0xf80 [ 536.221095][T14728] do_syscall_64+0x706/0xf80 [ 536.221106][T14728] ? clear_bhb_loop+0x40/0x90 [ 536.221121][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.221135][T14728] RIP: 0033:0x7fd7ac99c819 [ 536.221148][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.221161][T14728] RSP: 002b:00007fd7ad7c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 536.221175][T14728] RAX: 0000000000000000 RBX: 00007fd7acc16090 RCX: 00007fd7ac99c819 [ 536.221184][T14728] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 536.221193][T14728] RBP: 00007fd7aca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 536.221204][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.221213][T14728] R13: 00007fd7acc16128 R14: 00007fd7acc16090 R15: 00007ffcb0ad5c18 [ 536.221229][T14728] [ 536.697299][ T803] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.708743][ T803] usb 7-1: Product: syz [ 536.713104][ T803] usb 7-1: Manufacturer: syz [ 536.738172][ T803] cdc_wdm 7-1:1.0: skipping garbage [ 536.744036][ T803] cdc_wdm 7-1:1.0: skipping garbage [ 536.753379][ T803] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 536.759383][ T803] cdc_wdm 7-1:1.0: Unknown control protocol [ 537.044058][ T24] usb 7-1: USB disconnect, device number 6 [ 540.783498][ T5881] usbhid 4-1:0.0: can't add hid device: -32 [ 540.789482][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -32