last executing test programs: 11.691587755s ago: executing program 4 (id=769): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 11.549597046s ago: executing program 4 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) inotify_init1(0x0) getpriority(0x0, 0xe6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x1, 0x8a) r8 = openat(r7, 0x0, 0x80, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x4, 0x4, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x7800, 0x8000, 0x1db1, 0xaed1}}) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 10.762937317s ago: executing program 0 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0xc0000000, 0x7, 0x3, 0x3}, {0x80000001, 0x1, 0x0, 0x3, 0xf8}, {0x40000000, 0x9, 0x4, 0xa232, 0x400}, {0x80000008, 0x5, 0xffff, 0xb5, 0x4}, {0xc0000000, 0x5, 0x81, 0x4, 0x6}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000050000000d000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='fsi_master_write\x00', 0xffffffffffffffff, 0x0, 0x35a}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffecc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000068000903987c00000000010001000000"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bc2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 10.577895868s ago: executing program 4 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000800), 0x6c7, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r5}, 0x38) 9.048261039s ago: executing program 1 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) 8.88525037s ago: executing program 0 (id=781): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 8.834692147s ago: executing program 0 (id=782): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x2fc, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2c6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 8.739150967s ago: executing program 0 (id=783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2538], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.601732018s ago: executing program 0 (id=784): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5, 0x0, 0x8300000000000000}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x82f1, 0xffffffffffffffff, 0xffffd000) 8.023642937s ago: executing program 1 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x8d], 0xeeee8000, 0x201053}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x7, 0x80a0000, 0x0, r3, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x4044) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001740)}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.713207539s ago: executing program 3 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) inotify_init1(0x0) getpriority(0x0, 0xe6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x1, 0x8a) r8 = openat(r7, 0x0, 0x80, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x4, 0x4, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x7800, 0x8000, 0x1db1, 0xaed1}}) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 6.309939707s ago: executing program 3 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100002800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb950000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}}, 0x0) 6.29774444s ago: executing program 1 (id=791): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480d0}, 0x200008a1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, 0x0, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.133885971s ago: executing program 3 (id=792): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/297], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 5.789297856s ago: executing program 3 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2538], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.666154393s ago: executing program 3 (id=795): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.415822642s ago: executing program 2 (id=796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000001000085000000070000009500000000000000fa406a0100b91ea8de1beede42c43d5c5bbaad3b925e4458218b0a2e3570b2164c5b4ff3ea8f5af4f7dd960efb550af7bb6e9ca1152d58519de4eb6ee284d5ff2bd9e2fa4ebff9f1ab5494d48ace0460c4c99e13ee59fd3bf2b613c870f5010d46c54d4c629c4313ca2fe830bd019fe92640061fd90492d04f7237f76f7a0328c9438409527d03ea405218a55660f990595319fac6d7e838a5fee78e2cb1147ff4e2b2093b702f57018be0317c3802911d04e3db8d2196b03640bcf36be4c6ac6c688b0af37aa1b259265b955d5fc29c5e47d174a7507828f64dd444a2ff47ad1885d7ed9350a5d04ef667917a94fd0c063426c45a82bc4efad5a7"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000002bc0)={0xffffffffffffffff}) close_range(r2, r1, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) fchmodat(0xffffffffffffffff, 0x0, 0x2e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0) 4.28790643s ago: executing program 3 (id=797): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006f40)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0xe, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000034000000fbffffff000000003cb8d13f4fc0175377c7"], 0x18}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xb) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000240)={0x1, 0x80000401, 0x9, 0xc4cf, 0x7, "0400004d01000000008080004f00080100", 0x9, 0x7}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x1) 4.185459889s ago: executing program 4 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000600000001000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000000053b8397f825b340a8979de4ad9", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$userns(r5, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4.029910609s ago: executing program 0 (id=799): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f00"/48], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.43181503s ago: executing program 2 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) inotify_init1(0x0) getpriority(0x0, 0xe6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x1, 0x8a) r8 = openat(r7, 0x0, 0x80, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x4, 0x4, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x7800, 0x8000, 0x1db1, 0xaed1}}) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 3.241252228s ago: executing program 1 (id=801): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/31, 0x1f}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 2.94494659s ago: executing program 4 (id=802): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB='\x00\x00']) 2.41489271s ago: executing program 2 (id=803): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.589795793s ago: executing program 2 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x5, 0xe, 0x4, 0xa20, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x2b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000024c0)={0x68, r6, 0x1, 0x70bd2e, 0x259fdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4c880}, 0x8894) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.380775685s ago: executing program 1 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYBLOB, @ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/300], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 367.645771ms ago: executing program 2 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x50, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 110.027197ms ago: executing program 4 (id=807): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 88.449281ms ago: executing program 1 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6c) truncate(0x0, 0x20080000001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 2 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) kernel console output (not intermixed with test programs): interface: batadv_slave_0 [ 59.292321][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.318503][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.329788][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.337641][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.363563][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.374741][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.382064][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.408133][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.432645][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.439681][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.465669][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.490433][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.497858][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.523758][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.544063][ T5812] hsr_slave_0: entered promiscuous mode [ 59.550440][ T5812] hsr_slave_1: entered promiscuous mode [ 59.557333][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.564315][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.590662][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.653597][ T5808] hsr_slave_0: entered promiscuous mode [ 59.660056][ T5808] hsr_slave_1: entered promiscuous mode [ 59.666376][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 59.672561][ T5808] Cannot create hsr debugfs directory [ 59.688078][ T5821] hsr_slave_0: entered promiscuous mode [ 59.691802][ T5815] Bluetooth: hci4: command tx timeout [ 59.694841][ T5821] hsr_slave_1: entered promiscuous mode [ 59.699473][ T5815] Bluetooth: hci0: command tx timeout [ 59.704702][ T5817] Bluetooth: hci1: command tx timeout [ 59.705000][ T5824] Bluetooth: hci2: command tx timeout [ 59.710420][ T5819] Bluetooth: hci3: command tx timeout [ 59.716893][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 59.732802][ T5821] Cannot create hsr debugfs directory [ 59.748679][ T5809] hsr_slave_0: entered promiscuous mode [ 59.754970][ T5809] hsr_slave_1: entered promiscuous mode [ 59.760877][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 59.767028][ T5809] Cannot create hsr debugfs directory [ 59.816076][ T5807] hsr_slave_0: entered promiscuous mode [ 59.822298][ T5807] hsr_slave_1: entered promiscuous mode [ 59.828144][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 59.833897][ T5807] Cannot create hsr debugfs directory [ 60.150221][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.162967][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.179394][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.188576][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.228516][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.244601][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.259431][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.278535][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.323632][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.339620][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.360527][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.374406][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.451865][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.470225][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.483379][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.493466][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.520518][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.585913][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.602261][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.609007][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.623174][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.638786][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.656919][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.666208][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.673420][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.697194][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.707709][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.714782][ T4026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.744404][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.760495][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.767583][ T4026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.796337][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.803438][ T4026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.823388][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.868425][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.875509][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.904468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.911630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.929802][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 60.929817][ T30] audit: type=1400 audit(1768299636.064:84): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.990132][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.063798][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.105717][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.112872][ T4026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.139214][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.160724][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.167878][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.197445][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.225779][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.232932][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.246986][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.265657][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.272763][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.323414][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.372700][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.417526][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.458549][ T5812] veth0_vlan: entered promiscuous mode [ 61.507663][ T5812] veth1_vlan: entered promiscuous mode [ 61.527618][ T5821] veth0_vlan: entered promiscuous mode [ 61.563758][ T5821] veth1_vlan: entered promiscuous mode [ 61.591925][ T5807] veth0_vlan: entered promiscuous mode [ 61.618285][ T5807] veth1_vlan: entered promiscuous mode [ 61.644325][ T5821] veth0_macvtap: entered promiscuous mode [ 61.655041][ T5812] veth0_macvtap: entered promiscuous mode [ 61.666046][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.686201][ T5821] veth1_macvtap: entered promiscuous mode [ 61.695378][ T5812] veth1_macvtap: entered promiscuous mode [ 61.708333][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.733763][ T5807] veth0_macvtap: entered promiscuous mode [ 61.756378][ T5807] veth1_macvtap: entered promiscuous mode [ 61.768453][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.776917][ T5819] Bluetooth: hci3: command tx timeout [ 61.776934][ T5824] Bluetooth: hci0: command tx timeout [ 61.782361][ T5811] Bluetooth: hci1: command tx timeout [ 61.787782][ T5817] Bluetooth: hci4: command tx timeout [ 61.793424][ T5815] Bluetooth: hci2: command tx timeout [ 61.821599][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.844781][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.854836][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.875589][ T2906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.887334][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.900019][ T2906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.913439][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.939990][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.957877][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.976031][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.992014][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.009711][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.019386][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.037436][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.058021][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.067905][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.098489][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.133454][ T5808] veth0_vlan: entered promiscuous mode [ 62.175264][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.185137][ T5808] veth1_vlan: entered promiscuous mode [ 62.193758][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.201657][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.207697][ T5809] veth0_vlan: entered promiscuous mode [ 62.211636][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.244740][ T5809] veth1_vlan: entered promiscuous mode [ 62.288645][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.297869][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.306378][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.314983][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.323792][ T5808] veth0_macvtap: entered promiscuous mode [ 62.349728][ T30] audit: type=1400 audit(1768299637.484:85): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.FlKwIl/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.352283][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.383020][ T5808] veth1_macvtap: entered promiscuous mode [ 62.401577][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.434219][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.442583][ T30] audit: type=1400 audit(1768299637.514:86): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.453137][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.472275][ T30] audit: type=1400 audit(1768299637.514:87): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.FlKwIl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.507731][ T30] audit: type=1400 audit(1768299637.514:88): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.529815][ T30] audit: type=1400 audit(1768299637.514:89): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.FlKwIl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.531638][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.557582][ T5809] veth0_macvtap: entered promiscuous mode [ 62.569913][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.575136][ T30] audit: type=1400 audit(1768299637.514:90): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.FlKwIl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.577642][ T2906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609927][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.630396][ T2906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.643623][ T2906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.654164][ T5809] veth1_macvtap: entered promiscuous mode [ 62.687796][ T2906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.703874][ T30] audit: type=1400 audit(1768299637.544:91): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.803125][ T30] audit: type=1400 audit(1768299637.544:92): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.805251][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.881996][ T30] audit: type=1400 audit(1768299637.554:93): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=7130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.963462][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.972533][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.980346][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.046224][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.073745][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.104136][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.236310][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.251424][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.263912][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.782415][ T5811] Bluetooth: hci1: command tx timeout [ 64.787894][ T5811] Bluetooth: hci2: command tx timeout [ 64.792113][ T5824] Bluetooth: hci4: command tx timeout [ 64.798660][ T5819] Bluetooth: hci0: command tx timeout [ 64.804631][ T5815] Bluetooth: hci3: command tx timeout [ 64.818169][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.891011][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.977188][ T5954] sch_fq: defrate 0 ignored. [ 65.205991][ T5967] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 65.311446][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.048912][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.059418][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.210720][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 66.210735][ T30] audit: type=1400 audit(1768299641.344:126): avc: denied { setopt } for pid=5974 comm="syz.0.15" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.669908][ T30] audit: type=1400 audit(1768299641.804:127): avc: denied { create } for pid=5974 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.867131][ T5983] ======================================================= [ 66.867131][ T5983] WARNING: The mand mount option has been deprecated and [ 66.867131][ T5983] and is ignored by this kernel. Remove the mand [ 66.867131][ T5983] option from the mount to silence this warning. [ 66.867131][ T5983] ======================================================= [ 66.946745][ T5983] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.072306][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 67.091938][ T5815] Bluetooth: hci3: command tx timeout [ 67.097433][ T5815] Bluetooth: hci0: command tx timeout [ 67.102893][ T5815] Bluetooth: hci4: command tx timeout [ 67.108319][ T5815] Bluetooth: hci1: command tx timeout [ 67.191697][ T5815] Bluetooth: hci2: command tx timeout [ 67.256817][ T30] audit: type=1400 audit(1768299641.804:128): avc: denied { write } for pid=5974 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.395296][ T30] audit: type=1400 audit(1768299641.984:129): avc: denied { write } for pid=5979 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.472449][ T5983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.478645][ T5983] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.498761][ T5983] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.512720][ T5983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.518696][ T5983] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.581899][ T5983] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.590282][ T5983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.596999][ T5983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.612068][ T5983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.623451][ T5983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.630428][ T5983] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.645306][ T5983] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.656324][ T5983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 67.662335][ T5983] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 67.681926][ T5983] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 67.970794][ T30] audit: type=1400 audit(1768299642.044:130): avc: denied { mount } for pid=5979 comm="syz.3.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.993438][ T30] audit: type=1400 audit(1768299642.074:131): avc: denied { mounton } for pid=5979 comm="syz.3.17" path="/5/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.232524][ T30] audit: type=1400 audit(1768299642.094:132): avc: denied { mount } for pid=5979 comm="syz.3.17" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.750680][ T30] audit: type=1400 audit(1768299642.124:133): avc: denied { read write } for pid=5979 comm="syz.3.17" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.775515][ T30] audit: type=1400 audit(1768299642.134:134): avc: denied { open } for pid=5979 comm="syz.3.17" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.864599][ T30] audit: type=1400 audit(1768299642.934:135): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.538763][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.546838][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.611689][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.691061][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout [ 69.691086][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.681834][ T6029] input: syz1 as /devices/virtual/input/input5 [ 70.841502][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.900665][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.909883][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.061353][ T5814] usb 1-1: device descriptor read/64, error -71 [ 71.344000][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.520963][ T5814] usb 1-1: device descriptor read/64, error -71 [ 71.617512][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.624459][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.634775][ T5814] usb usb1-port1: attempt power cycle [ 71.691677][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.753575][ T6047] tipc: Enabling of bearer rejected, failed to enable media [ 71.773352][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 71.779471][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.818425][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 71.818455][ T30] audit: type=1400 audit(1768299646.954:147): avc: denied { ioctl } for pid=6046 comm="syz.2.30" path="socket:[9423]" dev="sockfs" ino=9423 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.327465][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 72.340790][ T30] audit: type=1400 audit(1768299647.484:148): avc: denied { execute } for pid=6053 comm="syz.0.31" path="/5/pids.current" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.459103][ T30] audit: type=1400 audit(1768299647.544:149): avc: denied { connect } for pid=6053 comm="syz.0.31" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.541987][ T30] audit: type=1400 audit(1768299647.554:150): avc: denied { write } for pid=6053 comm="syz.0.31" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.619451][ T30] audit: type=1400 audit(1768299647.754:151): avc: denied { read } for pid=6067 comm="syz.2.33" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.701243][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.707351][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.751574][ T30] audit: type=1400 audit(1768299648.834:152): avc: denied { read } for pid=6081 comm="syz.1.38" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.780763][ T30] audit: type=1400 audit(1768299648.854:153): avc: denied { open } for pid=6081 comm="syz.1.38" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.783981][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.804690][ T30] audit: type=1400 audit(1768299648.864:154): avc: denied { ioctl } for pid=6081 comm="syz.1.38" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.923004][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 73.929079][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.131901][ T30] audit: type=1400 audit(1768299649.044:155): avc: denied { mounton } for pid=6077 comm="syz.0.36" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.215985][ T6086] input: syz1 as /devices/virtual/input/input6 [ 75.109922][ T30] audit: type=1400 audit(1768299650.244:156): avc: denied { connect } for pid=6087 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.648420][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 75.657650][ T6101] IPv6: Can't replace route, no match found [ 76.019407][ T9] cfg80211: failed to load regulatory.db [ 76.248050][ T6103] tipc: Enabling of bearer rejected, failed to enable media [ 76.277989][ T6105] tipc: Enabling of bearer rejected, failed to enable media [ 78.422563][ T6135] input: syz1 as /devices/virtual/input/input7 [ 78.992388][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 78.992401][ T30] audit: type=1400 audit(1768299654.134:160): avc: denied { setopt } for pid=6140 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.186535][ T6143] Zero length message leads to an empty skb [ 79.648408][ T30] audit: type=1400 audit(1768299654.134:161): avc: denied { create } for pid=6140 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.668860][ T30] audit: type=1400 audit(1768299654.334:162): avc: denied { allowed } for pid=6145 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.777527][ T30] audit: type=1400 audit(1768299654.434:163): avc: denied { read } for pid=6140 comm="syz.1.53" path="socket:[8677]" dev="sockfs" ino=8677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.860970][ T30] audit: type=1400 audit(1768299654.874:164): avc: denied { create } for pid=6145 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.972822][ T30] audit: type=1400 audit(1768299654.874:165): avc: denied { getopt } for pid=6145 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.010962][ T30] audit: type=1400 audit(1768299654.884:166): avc: denied { create } for pid=6145 comm="syz.2.54" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.061779][ T30] audit: type=1400 audit(1768299655.194:167): avc: denied { set_context_mgr } for pid=6154 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.066446][ T6155] binder: 6154:6155 ioctl c0306201 200000000680 returned -14 [ 80.094655][ T30] audit: type=1400 audit(1768299655.194:168): avc: denied { map } for pid=6154 comm="syz.0.56" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.182551][ T30] audit: type=1400 audit(1768299655.194:169): avc: denied { call } for pid=6154 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.201739][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.241963][ T6159] tipc: Enabling of bearer rejected, failed to enable media [ 80.354968][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 80.374325][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 80.452449][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 80.889287][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.917331][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.936590][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.977136][ T9] usb 3-1: config 0 descriptor?? [ 80.991620][ T6153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.254394][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 82.735234][ T9] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 83.573963][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.680303][ T9] usb 3-1: USB disconnect, device number 2 [ 83.834058][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 84.332097][ T6201] input: syz1 as /devices/virtual/input/input9 [ 84.441014][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.459166][ T6206] binder: BINDER_SET_CONTEXT_MGR already set [ 84.473550][ T6206] binder: 6205:6206 ioctl 4018620d 2000000002c0 returned -16 [ 84.539939][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 84.539954][ T30] audit: type=1400 audit(1768299659.674:171): avc: denied { create } for pid=6209 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.567143][ T30] audit: type=1400 audit(1768299659.704:172): avc: denied { connect } for pid=6209 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.589831][ T30] audit: type=1400 audit(1768299659.704:173): avc: denied { setopt } for pid=6209 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.629775][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.662750][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.693108][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.714851][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.729142][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.736946][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.748160][ T30] audit: type=1400 audit(1768299659.864:174): avc: denied { ioctl } for pid=6211 comm="syz.0.71" path="socket:[9689]" dev="sockfs" ino=9689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.773818][ T5814] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.785886][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.845465][ T6217] tipc: Enabling of bearer rejected, failed to enable media [ 84.867675][ T5814] usb 3-1: config 0 descriptor?? [ 85.535381][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.594500][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.602766][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.610171][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.679074][ T6237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.75'. [ 85.839972][ T30] audit: type=1400 audit(1768299660.834:175): avc: denied { read } for pid=6231 comm="syz.3.75" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.315636][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 86.340335][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 86.348230][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 86.497180][ T30] audit: type=1400 audit(1768299660.834:176): avc: denied { open } for pid=6231 comm="syz.3.75" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.539601][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 86.603175][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 86.651100][ T5814] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.310990][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.500677][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.511227][ T30] audit: type=1400 audit(1768299660.834:177): avc: denied { ioctl } for pid=6231 comm="syz.3.75" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.585419][ T5814] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.621060][ T5892] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.630131][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.669731][ T5814] usb 3-1: USB disconnect, device number 3 [ 87.696373][ T30] audit: type=1400 audit(1768299662.834:178): avc: denied { create } for pid=6256 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.730449][ T5892] usb 2-1: config 0 descriptor?? [ 87.752342][ T30] audit: type=1400 audit(1768299662.864:179): avc: denied { getopt } for pid=6256 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.772569][ T30] audit: type=1400 audit(1768299662.874:180): avc: denied { read } for pid=6260 comm="syz.0.81" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.812487][ T6255] fido_id[6255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 88.148466][ T6266] binder: 6264:6266 ioctl c0306201 0 returned -14 [ 88.188232][ T5892] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 88.225223][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input10 [ 88.270345][ T6273] tipc: Enabling of bearer rejected, failed to enable media [ 88.280708][ T6271] ptrace attach of "./syz-executor exec"[6272] was attempted by "./syz-executor exec"[6271] [ 88.364193][ T5892] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 88.571544][ T6261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.577795][ T6261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.584178][ T6261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.590343][ T6261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.597145][ T6261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.726740][ T5892] usb 2-1: USB disconnect, device number 2 [ 89.697774][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 89.697789][ T30] audit: type=1400 audit(1768299664.834:183): avc: denied { mount } for pid=6279 comm="syz.3.88" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.791762][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.795461][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.797814][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.803822][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.809781][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.883007][ T30] audit: type=1400 audit(1768299665.964:184): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.248699][ T6308] binder: 6307:6308 ioctl c0306201 0 returned -14 [ 91.296962][ T30] audit: type=1400 audit(1768299666.434:185): avc: denied { create } for pid=6309 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.373594][ T30] audit: type=1400 audit(1768299666.514:186): avc: denied { setopt } for pid=6309 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.396302][ T30] audit: type=1400 audit(1768299666.534:187): avc: denied { listen } for pid=6309 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.416206][ T30] audit: type=1400 audit(1768299666.534:188): avc: denied { accept } for pid=6309 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.446248][ T6312] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 91.461087][ T30] audit: type=1400 audit(1768299666.594:189): avc: denied { ioctl } for pid=6309 comm="syz.1.97" path="socket:[9982]" dev="sockfs" ino=9982 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.061037][ T5945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.198391][ T30] audit: type=1400 audit(1768299667.324:190): avc: denied { create } for pid=6318 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.386239][ T30] audit: type=1400 audit(1768299667.374:191): avc: denied { shutdown } for pid=6318 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.396939][ T5814] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 92.428574][ T30] audit: type=1400 audit(1768299667.384:192): avc: denied { read } for pid=6318 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.442234][ T5945] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.471052][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.491044][ T5945] usb 3-1: Product: syz [ 92.495288][ T5945] usb 3-1: Manufacturer: syz [ 92.499875][ T5945] usb 3-1: SerialNumber: syz [ 92.557386][ T6325] input: syz1 as /devices/virtual/input/input11 [ 92.600497][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.620093][ T5814] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 92.637597][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.655006][ T5814] usb 1-1: config 0 descriptor?? [ 93.103203][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 93.157903][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 93.440025][ T5814] hid (null): report_id 44100 is invalid [ 93.453354][ T5814] nintendo 0003:057E:200E.0004: report_id 44100 is invalid [ 93.460576][ T5814] nintendo 0003:057E:200E.0004: item 0 2 1 8 parsing failed [ 93.491436][ T5814] nintendo 0003:057E:200E.0004: HID parse failed [ 93.506470][ T5814] nintendo 0003:057E:200E.0004: probe - fail = -22 [ 93.522979][ T5814] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -22 [ 93.546452][ T5814] usb 1-1: USB disconnect, device number 5 [ 93.686908][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 93.710151][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.738015][ T5945] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.901454][ T5945] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 93.916000][ T5945] usb 3-1: USB disconnect, device number 4 [ 94.201987][ T6340] block device autoloading is deprecated and will be removed. [ 95.014675][ T6349] netlink: 'syz.4.106': attribute type 13 has an invalid length. [ 95.953649][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.029533][ T6364] input: syz1 as /devices/virtual/input/input12 [ 96.080371][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 96.080385][ T30] audit: type=1400 audit(1768299671.214:194): avc: denied { wake_alarm } for pid=6354 comm="syz.0.109" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.132575][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.140873][ T30] audit: type=1400 audit(1768299671.264:195): avc: denied { create } for pid=6365 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.152363][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.221017][ T5921] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 96.374897][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.401829][ T5921] usb 2-1: config 0 descriptor?? [ 96.514072][ T6372] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 96.889057][ T30] audit: type=1400 audit(1768299672.014:196): avc: denied { name_bind } for pid=6371 comm="syz.0.115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 96.964014][ T30] audit: type=1400 audit(1768299672.014:197): avc: denied { node_bind } for pid=6371 comm="syz.0.115" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.557698][ T30] audit: type=1400 audit(1768299672.694:198): avc: denied { getopt } for pid=6383 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.640997][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.684303][ T5921] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -32 [ 97.970789][ T30] audit: type=1400 audit(1768299673.034:199): avc: denied { write } for pid=6383 comm="syz.4.119" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.164975][ T1065] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.292873][ T5878] usb 2-1: USB disconnect, device number 3 [ 98.321205][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 98.330506][ T5814] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.341960][ T5814] usb 3-1: config 0 has no interface number 0 [ 98.363062][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.377604][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.388122][ T5814] usb 3-1: Product: syz [ 98.393477][ T5814] usb 3-1: Manufacturer: syz [ 98.398267][ T5814] usb 3-1: SerialNumber: syz [ 98.417499][ T5814] usb 3-1: config 0 descriptor?? [ 98.423304][ T30] audit: type=1400 audit(1768299673.484:200): avc: denied { read write } for pid=6394 comm="syz.0.121" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.449785][ T30] audit: type=1400 audit(1768299673.484:201): avc: denied { open } for pid=6394 comm="syz.0.121" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.475920][ T30] audit: type=1400 audit(1768299673.514:202): avc: denied { ioctl } for pid=6394 comm="syz.0.121" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.476906][ T5814] smsc95xx v2.0.0 [ 98.506217][ T1065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.532220][ T1065] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.549751][ T1065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.551504][ T6398] syzkaller0: entered promiscuous mode [ 98.565409][ T6398] syzkaller0: entered allmulticast mode [ 98.579107][ T1065] usb 4-1: config 0 descriptor?? [ 99.030090][ T1065] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 99.035410][ T5814] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 99.080450][ T5814] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.085278][ T1065] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input13 [ 99.560933][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 99.598589][ T1065] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 100.536435][ T5814] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 100.550638][ T5814] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 100.565700][ T5814] usb 3-1: USB disconnect, device number 5 [ 101.131204][ T5945] usb 4-1: USB disconnect, device number 2 [ 101.700630][ T30] audit: type=1400 audit(1768299676.834:203): avc: denied { append } for pid=6425 comm="syz.3.127" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.749125][ T30] audit: type=1400 audit(1768299676.884:204): avc: denied { create } for pid=6429 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.833557][ T30] audit: type=1400 audit(1768299676.884:205): avc: denied { write } for pid=6429 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.102685][ T30] audit: type=1400 audit(1768299677.154:206): avc: denied { create } for pid=6432 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.133718][ T30] audit: type=1400 audit(1768299677.154:207): avc: denied { ioctl } for pid=6432 comm="syz.2.128" path="socket:[10124]" dev="sockfs" ino=10124 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.632633][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.701733][ T5814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.792761][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.872511][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.928080][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.970949][ T5814] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.002817][ T5864] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.025759][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.041669][ T5814] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.062619][ T5814] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 103.070683][ T5864] usb 5-1: SerialNumber: syz [ 103.076698][ T5814] usb 1-1: Manufacturer: syz [ 103.137560][ T5814] usb 1-1: config 0 descriptor?? [ 103.304953][ T5864] usb 5-1: 0:2 : does not exist [ 103.320958][ T5992] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.322042][ T5864] usb 5-1: USB disconnect, device number 2 [ 103.354412][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.384101][ T30] audit: type=1400 audit(1768299678.524:208): avc: denied { create } for pid=6441 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.412515][ T938] usb 1-1: USB disconnect, device number 6 [ 103.419324][ T30] audit: type=1400 audit(1768299678.544:209): avc: denied { ioctl } for pid=6441 comm="syz.0.131" path="socket:[10149]" dev="sockfs" ino=10149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.492376][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.503386][ T5992] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.512460][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.522465][ T5992] usb 4-1: config 0 descriptor?? [ 104.065410][ T30] audit: type=1400 audit(1768299679.184:210): avc: denied { map } for pid=6487 comm="syz.2.137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.096739][ T6485] syzkaller0: entered promiscuous mode [ 104.102291][ T6485] syzkaller0: entered allmulticast mode [ 104.143519][ T30] audit: type=1400 audit(1768299679.184:211): avc: denied { read write } for pid=6487 comm="syz.2.137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.233746][ T30] audit: type=1400 audit(1768299679.374:212): avc: denied { setopt } for pid=6489 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.174282][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.139'. [ 106.023320][ T5992] usbhid 4-1:0.0: can't add hid device: -71 [ 106.051098][ T5992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.210169][ T5992] usb 4-1: USB disconnect, device number 3 [ 106.332797][ T6518] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 106.614672][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 106.679231][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 107.035060][ T6532] input: syz1 as /devices/virtual/input/input14 [ 107.244623][ T5945] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.715324][ T6538] netlink: 'syz.0.151': attribute type 11 has an invalid length. [ 108.201312][ T5945] usb 4-1: no configurations [ 108.346277][ T5945] usb 4-1: can't read configurations, error -22 [ 108.470601][ T6549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.556643][ T5945] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.844579][ T6553] syzkaller0: entered promiscuous mode [ 108.850172][ T6553] syzkaller0: entered allmulticast mode [ 108.862581][ T5945] usb 4-1: no configurations [ 108.873483][ T5945] usb 4-1: can't read configurations, error -22 [ 108.885462][ T5945] usb usb4-port1: attempt power cycle [ 108.896781][ T6555] binder: BINDER_SET_CONTEXT_MGR already set [ 108.903418][ T6555] binder: 6554:6555 ioctl 4018620d 200000000100 returned -16 [ 108.915304][ T6555] binder: BINDER_SET_CONTEXT_MGR already set [ 108.930839][ T6555] binder: 6554:6555 ioctl 4018620d 2000000002c0 returned -16 [ 109.110062][ T6561] netlink: 'syz.1.157': attribute type 13 has an invalid length. [ 109.172573][ T5864] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.456675][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.644944][ T5864] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.725629][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.071153][ T5864] usb 3-1: config 0 descriptor?? [ 110.130104][ T5945] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.351078][ T5945] usb 4-1: device not accepting address 6, error -71 [ 111.832518][ T6561] gretap0: refused to change device tx_queue_len [ 111.839095][ T6561] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.005333][ T6578] tunl0: Caught tx_queue_len zero misconfig [ 112.011566][ T6578] sch_fq: defrate 0 ignored. [ 112.199281][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 112.761081][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 112.767077][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.793077][ T5864] usb 3-1: USB disconnect, device number 6 [ 112.896616][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 112.896630][ T30] audit: type=1400 audit(1768299688.034:217): avc: denied { getopt } for pid=6593 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.958317][ T6598] binder: BINDER_SET_CONTEXT_MGR already set [ 112.993622][ T6598] binder: 6593:6598 ioctl 4018620d 200000000040 returned -16 [ 113.445205][ T30] audit: type=1400 audit(1768299688.584:218): avc: denied { name_bind } for pid=6607 comm="syz.3.170" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 113.798920][ T30] audit: type=1400 audit(1768299688.934:219): avc: denied { connect } for pid=6611 comm="syz.3.171" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.459038][ T938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.510162][ T6621] input: syz1 as /devices/virtual/input/input15 [ 114.885881][ T6624] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 114.921206][ T6624] SELinux: failed to load policy [ 114.926560][ T30] audit: type=1400 audit(1768299690.024:220): avc: denied { load_policy } for pid=6618 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.014996][ T30] audit: type=1400 audit(1768299690.104:221): avc: denied { sqpoll } for pid=6625 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.102749][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 115.115494][ T938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.124623][ T30] audit: type=1400 audit(1768299690.114:222): avc: denied { ioctl } for pid=6625 comm="syz.4.176" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10373 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.124671][ T30] audit: type=1400 audit(1768299690.214:223): avc: denied { write } for pid=6625 comm="syz.4.176" laddr=172.20.20.170 lport=12 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.124764][ T30] audit: type=1400 audit(1768299690.254:224): avc: denied { create } for pid=6633 comm="syz.3.178" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.192174][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 115.209288][ T938] usb 2-1: Product: syz [ 115.213566][ T938] usb 2-1: Manufacturer: syz [ 115.218646][ T938] usb 2-1: SerialNumber: syz [ 115.224659][ T30] audit: type=1400 audit(1768299690.344:225): avc: denied { unlink } for pid=6633 comm="syz.3.178" name="#1" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.256249][ T30] audit: type=1400 audit(1768299690.344:226): avc: denied { mount } for pid=6633 comm="syz.3.178" name="/" dev="overlay" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.294742][ T6640] evm: overlay not supported [ 115.360548][ T6636] syzkaller0: entered promiscuous mode [ 115.366789][ T6636] syzkaller0: entered allmulticast mode [ 115.462688][ T938] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.730269][ T5920] usb 2-1: USB disconnect, device number 4 [ 115.786431][ T5920] usblp0: removed [ 118.619388][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 118.619403][ T30] audit: type=1400 audit(1768299693.754:233): avc: denied { bind } for pid=6684 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.717544][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 119.595892][ T30] audit: type=1400 audit(1768299693.974:234): avc: denied { connect } for pid=6684 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.616414][ T30] audit: type=1400 audit(1768299694.074:235): avc: denied { write } for pid=6684 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.937944][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.201'. [ 121.851283][ T6733] xt_CT: No such helper "pptp" [ 121.921697][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 122.102486][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 123.202176][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 124.964174][ T30] audit: type=1400 audit(1768299700.104:236): avc: denied { setopt } for pid=6765 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.156002][ T6777] xt_hashlimit: size too large, truncated to 1048576 [ 125.179247][ T30] audit: type=1400 audit(1768299700.314:237): avc: denied { bind } for pid=6766 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.291961][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.225'. [ 126.477790][ T6785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6785 comm=syz.1.225 [ 127.016118][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 127.981241][ T5892] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.346655][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 128.417359][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 128.830723][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 128.847320][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.868725][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.880988][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.00 [ 128.890050][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.919093][ T5892] usb 1-1: config 0 descriptor?? [ 129.130332][ T6831] binder: BINDER_SET_CONTEXT_MGR already set [ 129.223802][ T6831] binder: 6829:6831 ioctl 4018620d 200000000100 returned -16 [ 129.553163][ T5892] hid (null): report_id 3157846655 is invalid [ 129.568527][ T5892] hid-generic 0003:046D:0057.0007: report_id 3157846655 is invalid [ 129.585302][ T5892] hid-generic 0003:046D:0057.0007: item 0 4 1 8 parsing failed [ 129.629743][ T5892] hid-generic 0003:046D:0057.0007: probe with driver hid-generic failed with error -22 [ 129.716639][ T5892] usb 1-1: USB disconnect, device number 7 [ 129.806592][ T6838] tipc: Started in network mode [ 130.361614][ T6838] tipc: Node identity 2a3a374c1a12, cluster identity 4711 [ 130.368922][ T6838] tipc: Enabled bearer , priority 0 [ 130.541967][ T6837] tipc: Disabling bearer [ 130.597260][ T30] audit: type=1400 audit(1768299705.734:238): avc: denied { create } for pid=6833 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.625604][ T30] audit: type=1400 audit(1768299705.764:239): avc: denied { ioctl } for pid=6833 comm="syz.2.237" path="socket:[10864]" dev="sockfs" ino=10864 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.411449][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.417752][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.496002][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 132.505437][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 133.561231][ T5814] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.587717][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 133.724004][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.766168][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.787327][ T5814] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 133.818597][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.864966][ T5814] usb 3-1: config 0 descriptor?? [ 133.875123][ T6873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.511236][ T5814] logitech 0003:046D:C286.0008: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 134.524753][ T5814] logitech 0003:046D:C286.0008: no inputs found [ 134.690993][ T6906] netlink: 'syz.0.262': attribute type 13 has an invalid length. [ 134.948851][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 135.110031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 135.118900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.212924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.314841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 135.323681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.409714][ T30] audit: type=1400 audit(1768299710.544:240): avc: denied { read } for pid=6872 comm="syz.2.250" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.432745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.463073][ T30] audit: type=1400 audit(1768299710.544:241): avc: denied { open } for pid=6872 comm="syz.2.250" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.491300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.499873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.509498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.601563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.429776][ T6944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6944 comm=syz.3.273 [ 136.463117][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.273'. [ 136.671255][ T5892] usb 3-1: USB disconnect, device number 7 [ 137.261197][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.394977][ T6951] netlink: 'syz.0.276': attribute type 13 has an invalid length. [ 137.572669][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 137.583179][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 137.687776][ T6963] syzkaller0: entered promiscuous mode [ 137.698820][ T6963] syzkaller0: entered allmulticast mode [ 137.811758][ T938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.818036][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 137.842846][ T5892] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 137.877444][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.281451][ T5892] usb 3-1: Product: syz [ 138.327288][ T5892] usb 3-1: Manufacturer: syz [ 138.337264][ T5892] usb 3-1: SerialNumber: syz [ 138.351710][ T5892] usb 3-1: config 0 descriptor?? [ 138.361030][ T938] usb 4-1: device descriptor read/64, error -71 [ 138.363399][ T6949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.395849][ T6949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.417683][ T5892] usb 3-1: ucan: probing device on interface #0 [ 138.437648][ T30] audit: type=1400 audit(1768299713.574:242): avc: denied { create } for pid=6969 comm="syz.4.282" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.510697][ T30] audit: type=1400 audit(1768299713.644:243): avc: denied { mounton } for pid=6969 comm="syz.4.282" path="/57/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.613146][ T938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.649758][ T30] audit: type=1400 audit(1768299713.784:244): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.753022][ T938] usb 4-1: device descriptor read/64, error -71 [ 138.835455][ T5892] usb 3-1: ucan: failed to retrieve device info [ 138.848148][ T30] audit: type=1400 audit(1768299713.984:245): avc: denied { read write } for pid=6976 comm="syz.4.285" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.850484][ T5892] usb 3-1: ucan: probe failed; try to update the device firmware [ 138.881601][ T938] usb usb4-port1: attempt power cycle [ 138.907101][ T5892] usb 3-1: USB disconnect, device number 8 [ 138.908979][ T30] audit: type=1400 audit(1768299713.984:246): avc: denied { open } for pid=6976 comm="syz.4.285" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 139.362764][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.396246][ T938] usb 4-1: device descriptor read/8, error -71 [ 139.661041][ T938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.681699][ T6990] netlink: 'syz.0.290': attribute type 13 has an invalid length. [ 139.692492][ T938] usb 4-1: device descriptor read/8, error -71 [ 139.850325][ T938] usb usb4-port1: unable to enumerate USB device [ 140.181041][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.352862][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.373339][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.383608][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.396934][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.407849][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.420700][ T5920] usb 1-1: config 0 descriptor?? [ 141.014637][ T7008] tipc: Started in network mode [ 141.064868][ T7008] tipc: Node identity d69f92dbe25b, cluster identity 4711 [ 141.170191][ T7008] tipc: Enabled bearer , priority 0 [ 141.226403][ T7008] tipc: Resetting bearer [ 141.261869][ T7006] tipc: Disabling bearer [ 142.011244][ T30] audit: type=1400 audit(1768299717.154:247): avc: denied { connect } for pid=6993 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.020468][ T5920] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.071178][ T30] audit: type=1400 audit(1768299717.154:248): avc: denied { bind } for pid=6993 comm="syz.0.292" lport=45771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.105494][ T30] audit: type=1400 audit(1768299717.154:249): avc: denied { node_bind } for pid=6993 comm="syz.0.292" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 142.204610][ T7027] netlink: 'syz.2.301': attribute type 11 has an invalid length. [ 142.642477][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 143.603365][ T5945] usb 1-1: USB disconnect, device number 8 [ 143.992385][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.526041][ T30] audit: type=1400 audit(1768299719.664:250): avc: denied { setopt } for pid=7051 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.610591][ T30] audit: type=1400 audit(1768299720.724:251): avc: denied { map } for pid=7069 comm="syz.4.315" path="socket:[12200]" dev="sockfs" ino=12200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.634364][ T30] audit: type=1400 audit(1768299720.724:252): avc: denied { read } for pid=7069 comm="syz.4.315" path="socket:[12200]" dev="sockfs" ino=12200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.285698][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.361632][ T7084] capability: warning: `syz.0.320' uses deprecated v2 capabilities in a way that may be insecure [ 146.472948][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.497846][ T5892] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.518389][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.537317][ T5892] usb 3-1: config 0 descriptor?? [ 147.015815][ T5892] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 147.041613][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input17 [ 147.472581][ T5892] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 147.604865][ T5892] usb 3-1: USB disconnect, device number 9 [ 147.820490][ T7101] SELinux: failed to load policy [ 148.136157][ T30] audit: type=1400 audit(1768299723.244:253): avc: denied { block_suspend } for pid=7107 comm="syz.0.328" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.936760][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 152.661405][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.992397][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 153.181258][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 153.193110][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 153.222941][ T5920] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 153.270959][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.308693][ T5920] usb 2-1: Product: syz [ 153.319776][ T5920] usb 2-1: Manufacturer: syz [ 153.327619][ T5920] usb 2-1: SerialNumber: syz [ 153.340176][ T5920] usb 2-1: config 0 descriptor?? [ 153.421533][ T7191] tipc: Enabled bearer , priority 0 [ 153.431017][ T7191] tipc: Resetting bearer [ 153.443019][ T7190] tipc: Disabling bearer [ 153.479124][ T7161] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.486946][ T7161] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.495484][ T5920] usb 2-1: ucan: probing device on interface #0 [ 154.518047][ T5920] usb 2-1: ucan: failed to retrieve device info [ 154.719111][ T5920] usb 2-1: ucan: probe failed; try to update the device firmware [ 154.852497][ T5920] usb 2-1: USB disconnect, device number 5 [ 155.959654][ T7216] netlink: 148 bytes leftover after parsing attributes in process `syz.3.348'. [ 155.968923][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 155.977543][ T30] audit: type=1400 audit(1768299731.094:254): avc: denied { write } for pid=7208 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.978067][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 159.077732][ T7232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.351'. [ 159.117619][ T7232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7232 comm=syz.1.351 [ 159.278919][ T7239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.445989][ T7257] ptrace attach of ""[7258] was attempted by "./syz-executor exec"[7257] [ 160.855894][ T7272] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 160.998050][ T7282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 161.033947][ T7282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7282 comm=syz.1.370 [ 162.120097][ T7294] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.345617][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 164.310919][ T7312] netlink: 'syz.3.378': attribute type 13 has an invalid length. [ 164.436059][ T7312] gretap0: refused to change device tx_queue_len [ 164.443848][ T7312] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.887967][ T7299] netlink: 'syz.0.376': attribute type 12 has an invalid length. [ 165.724925][ T30] audit: type=1400 audit(1768299740.864:255): avc: denied { compute_member } for pid=7326 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.609472][ T30] audit: type=1400 audit(1768299741.624:256): avc: denied { read } for pid=7331 comm="syz.4.385" name="file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.674586][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 167.126522][ T30] audit: type=1400 audit(1768299741.634:257): avc: denied { open } for pid=7331 comm="syz.4.385" path="/82/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.222763][ T5920] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.374303][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 167.411400][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.444568][ T30] audit: type=1400 audit(1768299742.574:258): avc: denied { create } for pid=7349 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.471946][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.516225][ T5920] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 167.545691][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.565899][ T5920] usb 3-1: SerialNumber: syz [ 167.601408][ T5920] usb 3-1: config 0 descriptor?? [ 167.639088][ T5920] usb-storage 3-1:0.0: USB Mass Storage device detected [ 167.681388][ T7361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.390'. [ 167.722281][ T7361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7361 comm=syz.0.390 [ 167.743995][ T5920] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 167.849420][ T938] usb 3-1: USB disconnect, device number 10 [ 168.501078][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.682216][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.699608][ T5814] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.711062][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.731651][ T5814] usb 5-1: config 0 descriptor?? [ 169.150898][ T938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.160734][ T5814] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 169.192913][ T5814] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input18 [ 169.304121][ T5814] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 169.341124][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 169.373129][ T938] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 169.401392][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.433325][ T938] usb 2-1: Product: syz [ 169.471191][ T938] usb 2-1: Manufacturer: syz [ 169.480976][ T938] usb 2-1: SerialNumber: syz [ 169.512304][ T938] usb 2-1: config 0 descriptor?? [ 169.514778][ T938] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 169.536575][ T938] usb 2-1: Detected FT232H [ 169.738932][ T5920] usb 5-1: USB disconnect, device number 3 [ 169.957705][ T938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 169.982670][ T938] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 169.999100][ T938] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.022210][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 170.030097][ T938] usb 2-1: USB disconnect, device number 6 [ 170.044024][ T938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.070090][ T938] ftdi_sio 2-1:0.0: device disconnected [ 170.581477][ T7414] netlink: 148 bytes leftover after parsing attributes in process `syz.4.408'. [ 170.590812][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.408'. [ 170.599827][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 171.160745][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.409'. [ 171.205840][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7423 comm=syz.0.409 [ 171.335662][ T7427] netlink: 148 bytes leftover after parsing attributes in process `syz.1.410'. [ 171.344720][ T7427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.410'. [ 171.353666][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 172.306418][ T7435] netlink: 'syz.4.413': attribute type 13 has an invalid length. [ 172.661946][ T7445] binder: 7432:7445 ioctl 400c620e 0 returned -14 [ 172.669601][ T30] audit: type=1400 audit(1768299747.794:259): avc: denied { write } for pid=7432 comm="syz.2.414" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.730329][ T30] audit: type=1400 audit(1768299747.794:260): avc: denied { ioctl } for pid=7432 comm="syz.2.414" path="socket:[13152]" dev="sockfs" ino=13152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.664925][ T5996] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.134509][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 175.628791][ T7478] netlink: 'syz.1.425': attribute type 11 has an invalid length. [ 175.960934][ T5996] usb 4-1: device descriptor read/64, error -71 [ 176.284735][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 176.401001][ T5921] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 176.410920][ T7485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7485 comm=syz.0.427 [ 176.607620][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.669025][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 176.682847][ T5996] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.696410][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 176.712275][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.730047][ T5921] usb 5-1: config 0 descriptor?? [ 176.742111][ T7488] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.839689][ T7494] tipc: Started in network mode [ 176.844738][ T5996] usb 4-1: device descriptor read/64, error -71 [ 176.851300][ T7494] tipc: Node identity 2a5f6d349286, cluster identity 4711 [ 176.858600][ T7494] tipc: Enabled bearer , priority 0 [ 176.868159][ T7494] tipc: Resetting bearer [ 176.931156][ T7493] tipc: Disabling bearer [ 176.961605][ T5996] usb usb4-port1: attempt power cycle [ 177.044344][ T7502] netlink: 'syz.2.433': attribute type 13 has an invalid length. [ 177.168219][ T5921] logitech 0003:046D:C286.000C: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.4-1/input0 [ 177.192052][ T5921] logitech 0003:046D:C286.000C: no inputs found [ 177.300965][ T5996] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.929421][ T30] audit: type=1400 audit(1768299752.624:261): avc: denied { bind } for pid=7508 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.361265][ T5996] usb 4-1: device descriptor read/8, error -71 [ 178.368343][ T30] audit: type=1400 audit(1768299752.634:262): avc: denied { setopt } for pid=7508 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.455780][ T7521] netlink: 148 bytes leftover after parsing attributes in process `syz.1.438'. [ 179.373675][ T7535] netlink: 'syz.0.442': attribute type 11 has an invalid length. [ 179.425343][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.440'. [ 179.942069][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7536 comm=syz.2.440 [ 180.783820][ T5921] usb 5-1: USB disconnect, device number 4 [ 180.852790][ T7562] netlink: 'syz.4.450': attribute type 13 has an invalid length. [ 181.396372][ T7570] netlink: 148 bytes leftover after parsing attributes in process `syz.2.452'. [ 181.405697][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 181.414658][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 182.881972][ T7591] netlink: 'syz.2.460': attribute type 11 has an invalid length. [ 183.696213][ T30] audit: type=1400 audit(1768299758.784:263): avc: denied { name_bind } for pid=7599 comm="syz.3.463" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 183.883395][ T7612] bridge: RTM_NEWNEIGH with invalid ether address [ 184.070089][ T7612] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 184.146017][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 184.220316][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 185.303273][ T7634] netlink: 148 bytes leftover after parsing attributes in process `syz.4.473'. [ 185.313772][ T7634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.473'. [ 185.322730][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 186.456210][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 187.610941][ T938] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.668287][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 187.706491][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 188.717226][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 188.725323][ T938] usb 1-1: config 1 interface 0 altsetting 121 bulk endpoint 0x1 has invalid maxpacket 1024 [ 188.739557][ T938] usb 1-1: config 1 interface 0 has no altsetting 0 [ 188.766535][ T938] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 188.798175][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.807479][ T938] usb 1-1: Product: syz [ 188.812503][ T938] usb 1-1: Manufacturer: 庤⊢赵Ȕⵎﲰ뭣⥗뎥ࣛ呼鵉᝽锽ᐄﭑ俈赺⫱ȟ”澿늀᪩졸欁ʆ訬࿛訥䶃≈ㅁ犔戨䘳粞琉呥藅⓭幓럛濹葄맭驓禧⋿⌜䆀붥₲琞퐠我㶛ऊ脠씋藄젶ꀀ㔦Ჯ攆੧遳氐哶莪뵗妬誘絹羫圔レ⸼ꧮ玥䵤䞨䠈옺纗袊㟩蜲뻂꼺ŭ笗⶘ᾫ혍䑚㗀꼱眃 [ 189.394695][ T7696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.491'. [ 189.403964][ T7696] netlink: 36 bytes leftover after parsing attributes in process `syz.3.491'. [ 189.413070][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 189.848568][ T938] usb 1-1: SerialNumber: syz [ 189.867016][ T938] usb 1-1: can't set config #1, error -71 [ 189.880642][ T938] usb 1-1: USB disconnect, device number 9 [ 192.892992][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 192.944877][ T30] audit: type=1400 audit(1768299768.054:264): avc: denied { unmount } for pid=7732 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.392437][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.420910][ T5920] usb 2-1: config 0 has no interfaces? [ 193.427483][ T5920] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 193.640384][ T5920] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 193.763617][ T5920] usb 2-1: Manufacturer: syz [ 193.774052][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.780486][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.889736][ T5920] usb 2-1: config 0 descriptor?? [ 194.717983][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 194.727597][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 195.189510][ T5946] usb 2-1: USB disconnect, device number 7 [ 197.374689][ T7788] tipc: Enabled bearer , priority 0 [ 197.429512][ T7790] tipc: Resetting bearer [ 197.690894][ T7787] tipc: Disabling bearer [ 198.329372][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 198.404479][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 199.041649][ T7816] netlink: 'syz.3.526': attribute type 11 has an invalid length. [ 199.651335][ T7815] netlink: 'syz.1.528': attribute type 13 has an invalid length. [ 204.297433][ T30] audit: type=1400 audit(1768299779.434:265): avc: denied { setopt } for pid=7844 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.350945][ T30] audit: type=1400 audit(1768299779.464:266): avc: denied { create } for pid=7844 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 204.384161][ T30] audit: type=1400 audit(1768299779.524:267): avc: denied { bind } for pid=7844 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.783235][ T7860] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 204.832672][ T7861] netlink: 'syz.2.541': attribute type 11 has an invalid length. [ 204.881823][ T30] audit: type=1400 audit(1768299779.934:268): avc: denied { write } for pid=7853 comm="syz.1.540" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.232663][ T30] audit: type=1326 audit(1768299780.374:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 205.305850][ T30] audit: type=1326 audit(1768299780.374:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 205.330065][ T30] audit: type=1326 audit(1768299780.374:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 205.380822][ T7860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.386964][ T7860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.393120][ T7860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.399149][ T7860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.405264][ T7860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.533216][ T30] audit: type=1326 audit(1768299780.374:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 205.718802][ T7872] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 206.329791][ T30] audit: type=1326 audit(1768299780.374:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 206.357338][ T30] audit: type=1326 audit(1768299780.374:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0618f749 code=0x7ffc0000 [ 206.477344][ T7874] syz.4.543 (7874) used greatest stack depth: 19144 bytes left [ 206.564749][ T5946] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 206.807422][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.860974][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.990994][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.082217][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.105154][ T5893] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.114490][ T7892] netlink: 'syz.3.550': attribute type 13 has an invalid length. [ 207.128696][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.157729][ T5893] usb 3-1: config 0 descriptor?? [ 207.161430][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 207.173120][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.174022][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.194627][ T5920] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.212955][ T5946] usb 1-1: config 1 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 207.221156][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.235958][ T5946] usb 1-1: config 1 interface 0 altsetting 69 bulk endpoint 0x82 has invalid maxpacket 1023 [ 207.252038][ T5946] usb 1-1: config 1 interface 0 has no altsetting 0 [ 207.260468][ T5920] usb 2-1: config 0 descriptor?? [ 207.267092][ T5946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.279153][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.287243][ T5946] usb 1-1: Product: syz [ 207.292551][ T5946] usb 1-1: Manufacturer: syz [ 207.297485][ T5946] usb 1-1: SerialNumber: syz [ 207.307533][ T7872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.590022][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.596268][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.602469][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.787799][ T5893] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 207.836421][ T5920] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 207.881415][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input19 [ 207.899738][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input20 [ 207.993239][ T5893] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 208.097644][ T5920] keytouch 0003:0926:3333.000E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 208.227117][ T938] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.319176][ T5814] usb 2-1: USB disconnect, device number 8 [ 208.385963][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.402252][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.436983][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.453067][ T938] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 208.474857][ T938] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.485999][ T938] usb 4-1: Manufacturer: syz [ 208.494174][ T938] usb 4-1: config 0 descriptor?? [ 208.649398][ T5946] usb 1-1: bad CDC descriptors [ 208.663768][ T5946] usb 1-1: USB disconnect, device number 10 [ 208.915269][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.101003][ T7918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.556'. [ 209.311835][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 209.389412][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 209.786894][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.820023][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.829565][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.839278][ T5814] usb 3-1: USB disconnect, device number 11 [ 209.848065][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.858891][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.867589][ T938] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 209.876770][ T938] pyra 0003:1E7D:2CF6.000F: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 209.975458][ T938] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 210.031252][ T938] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 210.050155][ T938] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -32 [ 210.701688][ T7942] random: crng reseeded on system resumption [ 210.810688][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 210.810771][ T30] audit: type=1400 audit(1768299785.834:307): avc: denied { append } for pid=7934 comm="syz.0.563" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 210.853188][ T7939] Restarting kernel threads ... [ 210.858658][ T7939] Done restarting kernel threads. [ 210.901033][ T30] audit: type=1400 audit(1768299785.834:308): avc: denied { ioctl } for pid=7934 comm="syz.0.563" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 211.021018][ T938] usb 4-1: USB disconnect, device number 16 [ 211.386659][ T7952] tipc: Enabled bearer , priority 0 [ 211.406758][ T7952] tipc: Resetting bearer [ 211.473509][ T7951] tipc: Disabling bearer [ 211.801243][ T5946] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.810924][ T938] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 211.892603][ T5814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.982914][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.996575][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.016953][ T938] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.029331][ T5946] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.045755][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.054884][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.066928][ T938] usb 4-1: config 0 descriptor?? [ 212.075941][ T5946] usb 3-1: config 0 descriptor?? [ 212.082177][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 212.092089][ T5814] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.125485][ T5814] usb 2-1: config 179 has no interface number 0 [ 212.138894][ T5814] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.150534][ T5814] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.163609][ T5814] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.175394][ T5814] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.187512][ T5814] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.201394][ T5814] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.210506][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.230763][ T7959] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 212.486779][ T5814] usb 2-1: USB disconnect, device number 9 [ 212.486827][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.500987][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.512485][ T938] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 212.539906][ T5946] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 212.573104][ T938] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input21 [ 212.588552][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input22 [ 212.821822][ T938] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 212.914308][ T5946] keytouch 0003:0926:3333.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 213.093665][ T938] usb 4-1: USB disconnect, device number 17 [ 213.101013][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.211632][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.578'. [ 213.237969][ T7982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7982 comm=syz.1.578 [ 213.285124][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.296776][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.311681][ T5921] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 213.320724][ T5921] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.328776][ T5921] usb 1-1: Manufacturer: syz [ 213.342407][ T5921] usb 1-1: config 0 descriptor?? [ 213.777126][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.922955][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.935947][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.944296][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.951125][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.959817][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.966654][ T5921] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 213.981112][ T5921] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 213.999182][ T5921] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 214.007596][ T5921] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 214.025999][ T5921] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -32 [ 214.373475][ T8002] tipc: Enabled bearer , priority 0 [ 214.382786][ T8002] tipc: Resetting bearer [ 214.390234][ T8001] tipc: Disabling bearer [ 214.544628][ T938] usb 3-1: USB disconnect, device number 12 [ 214.800382][ T8012] lo: Caught tx_queue_len zero misconfig [ 216.525388][ T5992] usb 1-1: USB disconnect, device number 11 [ 219.052469][ T30] audit: type=1400 audit(1768299794.144:309): avc: denied { mounton } for pid=8051 comm="syz.2.600" path="/114/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 220.258207][ T8081] netlink: 'syz.2.608': attribute type 11 has an invalid length. [ 221.639300][ T8094] team_slave_1: Caught tx_queue_len zero misconfig [ 222.012888][ T30] audit: type=1400 audit(1768299796.724:310): avc: denied { getopt } for pid=8084 comm="syz.4.609" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.582707][ T8110] process 'syz.1.616' launched './file0' with NULL argv: empty string added [ 222.631070][ T30] audit: type=1400 audit(1768299797.724:311): avc: denied { execute } for pid=8104 comm="syz.1.616" name="file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.875498][ T30] audit: type=1400 audit(1768299797.734:312): avc: denied { execute_no_trans } for pid=8104 comm="syz.1.616" path="/131/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.958326][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 224.161609][ T938] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 224.304337][ T5946] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 224.326650][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.340974][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 224.380053][ T938] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 224.389785][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.426302][ T938] usb 1-1: config 0 descriptor?? [ 224.435392][ T8129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.445480][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.487352][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.517048][ T5946] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.529144][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.556181][ T5946] usb 4-1: config 0 descriptor?? [ 225.150484][ T938] logitech 0003:046D:C286.0013: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 225.210663][ T938] logitech 0003:046D:C286.0013: no inputs found [ 225.263550][ T938] usb 1-1: USB disconnect, device number 12 [ 225.357569][ T5946] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 225.374921][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.390695][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.397138][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input23 [ 225.405392][ T5921] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 225.420940][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.430154][ T5921] usb 3-1: Manufacturer: syz [ 225.584250][ T8156] fido_id[8156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.609144][ T5921] usb 3-1: config 0 descriptor?? [ 225.768757][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 225.940364][ T5946] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 226.073997][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.100944][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.107859][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.765141][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 226.823944][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.842498][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.849493][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.856554][ T5921] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 226.985329][ T5921] pyra 0003:1E7D:2CF6.0015: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 227.005988][ T5992] usb 4-1: USB disconnect, device number 18 [ 227.886888][ T5921] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 227.905954][ T5921] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 227.920880][ T5921] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -5 [ 227.985807][ T5946] usb 3-1: USB disconnect, device number 13 [ 228.149492][ T8185] fido_id[8185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 228.391292][ T5946] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 228.652163][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.767860][ T5946] usb 3-1: config 0 has no interfaces? [ 228.830382][ T5946] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.895363][ T5946] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 228.966263][ T5946] usb 3-1: Manufacturer: syz [ 229.005139][ T5946] usb 3-1: config 0 descriptor?? [ 229.233968][ T5920] usb 3-1: USB disconnect, device number 14 [ 229.288163][ T8206] fuse: Bad value for 'group_id' [ 229.293443][ T8206] fuse: Bad value for 'group_id' [ 231.272612][ T8225] netlink: 148 bytes leftover after parsing attributes in process `syz.3.646'. [ 231.314962][ T8225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.646'. [ 231.346008][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 232.059269][ T30] audit: type=1400 audit(1768299806.764:313): avc: denied { mount } for pid=8227 comm="syz.2.647" name="/" dev="ramfs" ino=17538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.360924][ T8233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'. [ 232.907122][ T8239] overlayfs: failed to clone upperpath [ 233.034090][ T8246] input: syz1 as /devices/virtual/input/input24 [ 233.812900][ T938] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.983119][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.994292][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.005775][ T938] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 234.015617][ T938] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.024679][ T938] usb 2-1: Manufacturer: syz [ 234.034393][ T938] usb 2-1: config 0 descriptor?? [ 234.643367][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 234.652477][ T8267] bridge_slave_1: left allmulticast mode [ 234.658186][ T8267] bridge_slave_1: left promiscuous mode [ 234.664577][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.707238][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 235.714210][ T8267] bridge_slave_0: left allmulticast mode [ 235.719949][ T8267] bridge_slave_0: left promiscuous mode [ 235.725718][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.440925][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.470092][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.478165][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.489473][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.520031][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.528018][ T938] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 236.560415][ T938] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 236.622159][ T938] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 236.659562][ T938] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 236.721282][ T938] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -5 [ 237.926248][ T5921] usb 2-1: USB disconnect, device number 10 [ 239.926235][ T30] audit: type=1400 audit(1768299815.054:314): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.972468][ T5920] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.584863][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 240.593703][ T5920] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 240.593733][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.593751][ T5920] usb 3-1: Product: syz [ 240.593765][ T5920] usb 3-1: Manufacturer: syz [ 240.593779][ T5920] usb 3-1: SerialNumber: syz [ 240.596147][ T5920] usb 3-1: config 0 descriptor?? [ 240.602080][ T5920] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 240.602984][ T5920] usb 3-1: Detected FT232H [ 241.343437][ T5920] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 241.361319][ T5920] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 241.380769][ T5920] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 241.400161][ T5920] usb 3-1: USB disconnect, device number 15 [ 241.429910][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 241.486482][ T5920] ftdi_sio 3-1:0.0: device disconnected [ 242.531988][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 242.620947][ T30] audit: type=1400 audit(1768299817.714:315): avc: denied { ioctl } for pid=8330 comm="syz.3.678" path="socket:[17283]" dev="sockfs" ino=17283 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.641078][ T7037] Bluetooth: hci5: Frame reassembly failed (-84) [ 244.749902][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 245.346583][ T8364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.685'. [ 245.384455][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.685'. [ 245.425844][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 245.429607][ T8365] kvm: pic: non byte read [ 245.452242][ T8365] kvm: pic: level sensitive irq not supported [ 245.452316][ T8365] kvm: pic: non byte read [ 245.471949][ T8365] kvm: pic: level sensitive irq not supported [ 245.472009][ T8365] kvm: pic: non byte read [ 245.484789][ T8365] kvm: pic: level sensitive irq not supported [ 245.484845][ T8365] kvm: pic: non byte read [ 245.495913][ T8365] kvm: pic: level sensitive irq not supported [ 245.495972][ T8365] kvm: pic: non byte read [ 245.508087][ T8365] kvm: pic: level sensitive irq not supported [ 245.508146][ T8365] kvm: pic: non byte read [ 245.529095][ T8365] kvm: pic: level sensitive irq not supported [ 245.529248][ T8365] kvm: pic: non byte read [ 245.550176][ T8373] netlink: 'syz.1.689': attribute type 13 has an invalid length. [ 245.558243][ T8365] kvm: pic: level sensitive irq not supported [ 245.558301][ T8365] kvm: pic: non byte read [ 245.583416][ T8365] kvm: pic: level sensitive irq not supported [ 245.583471][ T8365] kvm: pic: non byte read [ 245.594788][ T8365] kvm: pic: level sensitive irq not supported [ 245.594845][ T8365] kvm: pic: non byte read [ 245.606972][ T8365] kvm: pic: level sensitive irq not supported [ 245.704911][ T8377] netlink: 44 bytes leftover after parsing attributes in process `syz.3.688'. [ 248.046955][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 248.616896][ T30] audit: type=1400 audit(1768299823.754:316): avc: denied { read } for pid=5996 comm="kworker/0:9" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17404 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.551039][ T30] audit: type=1400 audit(1768299824.694:317): avc: denied { append } for pid=8422 comm="syz.3.701" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 251.654758][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 251.655313][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.456590][ T30] audit: type=1400 audit(1768299827.564:318): avc: denied { read write } for pid=8451 comm="syz.1.711" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 252.695562][ T8459] syz.4.712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 252.900910][ T30] audit: type=1400 audit(1768299827.564:319): avc: denied { open } for pid=8451 comm="syz.1.711" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.067713][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 253.425217][ T30] audit: type=1400 audit(1768299827.564:320): avc: denied { ioctl } for pid=8451 comm="syz.1.711" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.712076][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 254.987275][ T8491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.721'. [ 255.024074][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 255.046161][ T5920] usb 2-1: config 104 has an invalid interface number: 83 but max is 0 [ 255.075870][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.114752][ T5920] usb 2-1: config 104 contains an unexpected descriptor of type 0x1, skipping [ 255.298450][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.304820][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.399229][ T8498] netlink: 'syz.3.723': attribute type 11 has an invalid length. [ 255.849935][ T5920] usb 2-1: config 104 has no interface number 0 [ 255.866963][ T5920] usb 2-1: config 104 interface 83 altsetting 224 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 255.879469][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 255.894526][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has a duplicate endpoint with address 0xB, skipping [ 255.905826][ T5920] usb 2-1: config 104 interface 83 altsetting 224 bulk endpoint 0x7 has invalid maxpacket 1023 [ 255.917733][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 255.929202][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has a duplicate endpoint with address 0xF, skipping [ 255.940606][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has a duplicate endpoint with address 0xF, skipping [ 255.954600][ T5920] usb 2-1: config 104 interface 83 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 255.966085][ T5920] usb 2-1: config 104 interface 83 has no altsetting 0 [ 256.059153][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.070502][ T5920] usb 2-1: New USB device found, idVendor=2262, idProduct=0002, bcdDevice=dd.a2 [ 256.084595][ T5892] usb 3-1: config 0 has no interfaces? [ 256.090094][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.099145][ T5892] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 256.117614][ T5920] usb 2-1: Product: syz [ 256.125279][ T5892] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 256.133522][ T5920] usb 2-1: Manufacturer: syz [ 256.138253][ T5920] usb 2-1: SerialNumber: syz [ 256.151821][ T5892] usb 3-1: Manufacturer: syz [ 257.111916][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.124878][ T8477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.152348][ T5892] usb 3-1: config 0 descriptor?? [ 257.287725][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.967216][ T30] audit: type=1400 audit(1768299833.104:321): avc: denied { write } for pid=8476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 258.014539][ T5933] usb 3-1: USB disconnect, device number 16 [ 259.031430][ T5920] option 2-1:104.83: GSM modem (1-port) converter detected [ 259.046131][ T5920] usb 2-1: USB disconnect, device number 11 [ 259.056373][ T5920] option 2-1:104.83: device disconnected [ 259.554712][ T8544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.735'. [ 260.878583][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 260.888036][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 262.210975][ T5933] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 262.411074][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.453746][ T5933] usb 2-1: config 0 has no interfaces? [ 262.756931][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 262.811059][ T5933] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.820724][ T5933] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 262.833889][ T5933] usb 2-1: Manufacturer: syz [ 262.848876][ T5933] usb 2-1: config 0 descriptor?? [ 263.102794][ T5920] usb 2-1: USB disconnect, device number 12 [ 265.060907][ T5933] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 265.230894][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 265.242166][ T5933] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 265.262157][ T5933] usb 2-1: config 0 has no interface number 0 [ 265.268271][ T5933] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 265.328223][ T5933] usb 2-1: config 0 interface 196 has no altsetting 0 [ 265.342474][ T5933] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 265.358474][ T30] audit: type=1400 audit(1768299840.494:322): avc: denied { bind } for pid=8633 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.378764][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.392759][ T30] audit: type=1400 audit(1768299840.494:323): avc: denied { name_bind } for pid=8633 comm="syz.4.769" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 265.401618][ T5933] usb 2-1: Product: syz [ 265.440994][ T5933] usb 2-1: Manufacturer: syz [ 265.449347][ T5933] usb 2-1: SerialNumber: syz [ 265.449671][ T30] audit: type=1400 audit(1768299840.494:324): avc: denied { node_bind } for pid=8633 comm="syz.4.769" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 265.491189][ T5933] usb 2-1: config 0 descriptor?? [ 265.601189][ T8626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.088443][ T5933] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 266.126146][ T5933] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 266.308272][ T5933] usb 2-1: USB disconnect, device number 13 [ 267.652918][ T8658] netlink: 148 bytes leftover after parsing attributes in process `syz.1.778'. [ 267.691289][ T8658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.778'. [ 267.700255][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 267.814564][ T8661] netlink: 148 bytes leftover after parsing attributes in process `syz.1.779'. [ 268.063774][ T8664] netlink: 'syz.1.780': attribute type 13 has an invalid length. [ 268.122278][ T5933] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 268.303848][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.331742][ T5933] usb 4-1: config 0 has no interfaces? [ 268.359156][ T5933] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.388285][ T5933] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 268.405075][ T5933] usb 4-1: Manufacturer: syz [ 268.419988][ T5933] usb 4-1: config 0 descriptor?? [ 268.656970][ T5933] usb 4-1: USB disconnect, device number 19 [ 268.683189][ T30] audit: type=1400 audit(1768299843.824:325): avc: denied { map } for pid=8671 comm="syz.0.784" path="socket:[19496]" dev="sockfs" ino=19496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.781439][ T30] audit: type=1400 audit(1768299843.854:326): avc: denied { read accept } for pid=8671 comm="syz.0.784" path="socket:[19496]" dev="sockfs" ino=19496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.280570][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 270.293019][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 270.972995][ T8697] netlink: 148 bytes leftover after parsing attributes in process `syz.3.792'. [ 270.999203][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 271.129416][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 271.147059][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 271.316173][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.362746][ T5893] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.415743][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.487441][ T5893] usb 2-1: config 0 descriptor?? [ 272.112361][ T5893] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 272.151084][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input26 [ 272.313775][ T5893] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 272.666678][ T5893] usb 2-1: USB disconnect, device number 14 [ 273.675966][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 276.398760][ T8750] netlink: 148 bytes leftover after parsing attributes in process `syz.1.805'. [ 276.869196][ T8752] binder_alloc: 8751: pid 8751 spamming oneway? 1 buffers allocated for a total size of 4096 [ 277.156329][ T8764] ------------[ cut here ]------------ [ 277.161970][ T8764] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 277.186526][ T8764] WARNING: kernel/bpf/verifier.c:2742 at reg_bounds_sanity_check+0x321/0x1360, CPU#1: syz.1.808/8764 [ 277.197409][ T8764] Modules linked in: [ 277.201376][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.1.808 Not tainted syzkaller #0 PREEMPT(full) [ 277.210600][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.220724][ T8764] RIP: 0010:reg_bounds_sanity_check+0x361/0x1360 [ 277.227121][ T8764] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 7c ff ff ff 50 8b 85 78 ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 277.248471][ T8764] RSP: 0018:ffffc9001c857278 EFLAGS: 00010287 [ 277.254595][ T8764] RAX: 00000000ffffdfcd RBX: ffff8880755f827c RCX: 00000000ffffdfcd [ 277.262623][ T8764] RDX: ffffffff8b95e9e0 RSI: ffffffff8b963480 RDI: ffffffff908ca6f0 [ 277.270595][ T8764] RBP: ffffc9001c857368 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 277.278599][ T8764] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 277.286616][ T8764] R13: ffffffffffffdfcc R14: ffff8880755f8284 R15: ffff8880755f8230 [ 277.294633][ T8764] FS: 00007f5652c7e6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 277.303605][ T8764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.310176][ T8764] CR2: 0000000000000000 CR3: 000000002aff2000 CR4: 00000000003526f0 [ 277.318224][ T8764] Call Trace: [ 277.321511][ T8764] [ 277.324428][ T8764] reg_set_min_max+0x18d/0x2d0 [ 277.329181][ T8764] check_cond_jmp_op+0x277c/0x7890 [ 277.334302][ T8764] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 277.339749][ T8764] ? __asan_memset+0x23/0x50 [ 277.345065][ T8764] do_check_common+0xa4d3/0xc640 [ 277.350011][ T8764] ? compute_live_registers+0x75d/0xfb0 [ 277.355567][ T8764] ? __pfx_do_check_common+0x10/0x10 [ 277.360865][ T8764] ? get_call_summary+0x6e1/0x780 [ 277.365886][ T8764] bpf_check+0x8b63/0xcb70 [ 277.370293][ T8764] ? __pfx_bpf_check+0x10/0x10 [ 277.375114][ T8764] ? rcu_is_watching+0x12/0xc0 [ 277.379857][ T8764] ? trace_kmalloc+0x2b/0xb0 [ 277.384455][ T8764] ? __kmalloc_noprof+0x35d/0x910 [ 277.389464][ T8764] ? lsm_blob_alloc+0x68/0x90 [ 277.394214][ T8764] ? lsm_blob_alloc+0x68/0x90 [ 277.398891][ T8764] ? __asan_memset+0x23/0x50 [ 277.403521][ T8764] ? selinux_bpf_prog_load+0x67/0x170 [ 277.408920][ T8764] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 277.414138][ T8764] bpf_prog_load+0x114e/0x2cc0 [ 277.418889][ T8764] ? __pfx_bpf_prog_load+0x10/0x10 [ 277.424007][ T8764] ? avc_has_perm_noaudit+0x149/0x3b0 [ 277.429356][ T8764] ? avc_has_perm+0x144/0x1f0 [ 277.434029][ T8764] ? selinux_bpf+0xdd/0x130 [ 277.438507][ T8764] ? bpf_lsm_bpf+0x9/0x10 [ 277.442838][ T8764] __sys_bpf+0x3e72/0x4980 [ 277.447965][ T8764] ? futex_private_hash_put+0x160/0x1b0 [ 277.453519][ T8764] ? __pfx___sys_bpf+0x10/0x10 [ 277.458283][ T8764] ? __pfx_futex_wait+0x10/0x10 [ 277.463128][ T8764] ? do_futex+0x122/0x350 [ 277.467444][ T8764] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.472723][ T8764] ? __pfx___x64_sys_truncate+0x10/0x10 [ 277.478256][ T8764] __x64_sys_bpf+0x78/0xc0 [ 277.482686][ T8764] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.487951][ T8764] do_syscall_64+0xcd/0xf80 [ 277.492461][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.498329][ T8764] RIP: 0033:0x7f5651d8f749 [ 277.502760][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.522360][ T8764] RSP: 002b:00007f5652c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.530754][ T8764] RAX: ffffffffffffffda RBX: 00007f5651fe6180 RCX: 00007f5651d8f749 [ 277.538771][ T8764] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 277.546734][ T8764] RBP: 00007f5651e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 277.555500][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.563508][ T8764] R13: 00007f5651fe6218 R14: 00007f5651fe6180 R15: 00007ffc21a66258 [ 277.571496][ T8764] [ 277.574498][ T8764] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.581774][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.1.808 Not tainted syzkaller #0 PREEMPT(full) [ 277.590943][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.600974][ T8764] Call Trace: [ 277.604231][ T8764] [ 277.607137][ T8764] dump_stack_lvl+0x3d/0x1f0 [ 277.611717][ T8764] vpanic+0x640/0x6f0 [ 277.615691][ T8764] ? reg_bounds_sanity_check+0x321/0x1360 [ 277.621396][ T8764] panic+0xca/0xd0 [ 277.625107][ T8764] ? __pfx_panic+0x10/0x10 [ 277.629504][ T8764] check_panic_on_warn+0xab/0xb0 [ 277.634417][ T8764] __warn+0x108/0x3c0 [ 277.638386][ T8764] __report_bug+0x2a0/0x520 [ 277.642865][ T8764] ? reg_bounds_sanity_check+0x321/0x1360 [ 277.648560][ T8764] ? __pfx___report_bug+0x10/0x10 [ 277.653566][ T8764] ? kasan_save_track+0x14/0x30 [ 277.658394][ T8764] ? __kasan_kmalloc+0xaa/0xb0 [ 277.663143][ T8764] ? copy_verifier_state+0xc1b/0x1030 [ 277.668493][ T8764] ? push_stack+0x1ca/0x380 [ 277.672987][ T8764] ? check_cond_jmp_op+0xb06/0x7890 [ 277.678159][ T8764] ? do_check_common+0xa4d3/0xc640 [ 277.683244][ T8764] ? bpf_check+0x8b63/0xcb70 [ 277.687820][ T8764] ? bpf_prog_load+0x114e/0x2cc0 [ 277.692741][ T8764] report_bug_entry+0xe1/0x290 [ 277.697479][ T8764] ? reg_bounds_sanity_check+0x361/0x1360 [ 277.703172][ T8764] handle_bug+0x18a/0x260 [ 277.707479][ T8764] exc_invalid_op+0x17/0x50 [ 277.711960][ T8764] asm_exc_invalid_op+0x1a/0x20 [ 277.716781][ T8764] RIP: 0010:reg_bounds_sanity_check+0x361/0x1360 [ 277.723084][ T8764] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 7c ff ff ff 50 8b 85 78 ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 277.742681][ T8764] RSP: 0018:ffffc9001c857278 EFLAGS: 00010287 [ 277.748734][ T8764] RAX: 00000000ffffdfcd RBX: ffff8880755f827c RCX: 00000000ffffdfcd [ 277.756680][ T8764] RDX: ffffffff8b95e9e0 RSI: ffffffff8b963480 RDI: ffffffff908ca6f0 [ 277.764642][ T8764] RBP: ffffc9001c857368 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 277.772606][ T8764] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 277.780575][ T8764] R13: ffffffffffffdfcc R14: ffff8880755f8284 R15: ffff8880755f8230 [ 277.788540][ T8764] ? __pfx_tnum_or+0x10/0x10 [ 277.793140][ T8764] reg_set_min_max+0x18d/0x2d0 [ 277.797908][ T8764] check_cond_jmp_op+0x277c/0x7890 [ 277.803026][ T8764] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 277.808479][ T8764] ? __asan_memset+0x23/0x50 [ 277.813076][ T8764] do_check_common+0xa4d3/0xc640 [ 277.818022][ T8764] ? compute_live_registers+0x75d/0xfb0 [ 277.823569][ T8764] ? __pfx_do_check_common+0x10/0x10 [ 277.828837][ T8764] ? get_call_summary+0x6e1/0x780 [ 277.833854][ T8764] bpf_check+0x8b63/0xcb70 [ 277.838268][ T8764] ? __pfx_bpf_check+0x10/0x10 [ 277.843021][ T8764] ? rcu_is_watching+0x12/0xc0 [ 277.847765][ T8764] ? trace_kmalloc+0x2b/0xb0 [ 277.852341][ T8764] ? __kmalloc_noprof+0x35d/0x910 [ 277.857350][ T8764] ? lsm_blob_alloc+0x68/0x90 [ 277.862009][ T8764] ? lsm_blob_alloc+0x68/0x90 [ 277.866660][ T8764] ? __asan_memset+0x23/0x50 [ 277.871228][ T8764] ? selinux_bpf_prog_load+0x67/0x170 [ 277.876583][ T8764] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 277.881763][ T8764] bpf_prog_load+0x114e/0x2cc0 [ 277.886514][ T8764] ? __pfx_bpf_prog_load+0x10/0x10 [ 277.891608][ T8764] ? avc_has_perm_noaudit+0x149/0x3b0 [ 277.896962][ T8764] ? avc_has_perm+0x144/0x1f0 [ 277.901622][ T8764] ? selinux_bpf+0xdd/0x130 [ 277.906102][ T8764] ? bpf_lsm_bpf+0x9/0x10 [ 277.910410][ T8764] __sys_bpf+0x3e72/0x4980 [ 277.914808][ T8764] ? futex_private_hash_put+0x160/0x1b0 [ 277.920337][ T8764] ? __pfx___sys_bpf+0x10/0x10 [ 277.925084][ T8764] ? __pfx_futex_wait+0x10/0x10 [ 277.929921][ T8764] ? do_futex+0x122/0x350 [ 277.934245][ T8764] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.939512][ T8764] ? __pfx___x64_sys_truncate+0x10/0x10 [ 277.945043][ T8764] __x64_sys_bpf+0x78/0xc0 [ 277.949444][ T8764] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.954628][ T8764] do_syscall_64+0xcd/0xf80 [ 277.959114][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.964989][ T8764] RIP: 0033:0x7f5651d8f749 [ 277.969383][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.988967][ T8764] RSP: 002b:00007f5652c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.997356][ T8764] RAX: ffffffffffffffda RBX: 00007f5651fe6180 RCX: 00007f5651d8f749 [ 278.005305][ T8764] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 278.013266][ T8764] RBP: 00007f5651e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.021213][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.029161][ T8764] R13: 00007f5651fe6218 R14: 00007f5651fe6180 R15: 00007ffc21a66258 [ 278.037121][ T8764] [ 278.040230][ T8764] Kernel Offset: disabled [ 278.044536][ T8764] Rebooting in 86400 seconds..