last executing test programs: 10m57.720966004s ago: executing program 3 (id=777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0xa, 0xfffff010}, {0x6, 0xff, 0x3}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a12600", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x13}}}}}}}, 0x0) 10m57.641780363s ago: executing program 3 (id=779): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) 10m56.782295944s ago: executing program 3 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff04, 0x2, 0xb, 0x3, 0x5, 0xa, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 10m56.426402818s ago: executing program 3 (id=792): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10800, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, 0x0, 0x0) close(r0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xfff, 0x8100) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m56.241174354s ago: executing program 3 (id=795): r0 = io_uring_setup(0x650b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x2d, 0x0, 0xffffffffa0001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) close_range(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 10m56.140213096s ago: executing program 3 (id=797): r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000ac0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 10m55.880816235s ago: executing program 32 (id=797): r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000ac0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 8m57.403698527s ago: executing program 2 (id=2353): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRES8=r0], 0xf8) 8m56.078867441s ago: executing program 2 (id=2369): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/144, 0x90}], 0x1, 0x5, 0x2, 0x1) 8m55.203702913s ago: executing program 2 (id=2388): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x30, 0x0, 0x40, 0x6e}) 8m55.01464329s ago: executing program 2 (id=2393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 8m54.902077644s ago: executing program 2 (id=2397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 8m54.321644415s ago: executing program 2 (id=2406): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b919", 0xa, 0x2251197285d36a80, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m54.159049051s ago: executing program 33 (id=2406): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b919", 0xa, 0x2251197285d36a80, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.381476247s ago: executing program 4 (id=5801): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) 18.427899422s ago: executing program 4 (id=5811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="fbe04481999f6961ce", 0x9}], 0x1) bind$can_j1939(r1, &(0x7f00000006c0)={0x1d, r2, 0x1, {0x2ad9e849e82996fb, 0xff, 0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 17.570959176s ago: executing program 4 (id=5816): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 17.267642288s ago: executing program 4 (id=5819): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.329007631s ago: executing program 1 (id=5899): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020) 5.24239224s ago: executing program 1 (id=5900): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.130401731s ago: executing program 1 (id=5901): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x5, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.971945557s ago: executing program 1 (id=5905): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) 4.854261196s ago: executing program 1 (id=5907): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 3.149240857s ago: executing program 1 (id=5922): ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x1000000, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) io_setup(0x5, &(0x7f0000000100)) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) fcntl$setstatus(r8, 0x4, 0x2200) 2.911650892s ago: executing program 6 (id=5923): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, 0x0) 2.846459003s ago: executing program 6 (id=5924): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008"], 0x40c}}, 0x0) 2.780045901s ago: executing program 4 (id=5824): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.708427394s ago: executing program 6 (id=5925): io_uring_setup(0x304a, &(0x7f0000000340)={0x0, 0x456f, 0x1, 0x1, 0x54}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.522098944s ago: executing program 0 (id=5926): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.520467455s ago: executing program 5 (id=5927): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.463574647s ago: executing program 5 (id=5928): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 2.438952055s ago: executing program 5 (id=5929): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 2.361268437s ago: executing program 5 (id=5930): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 2.334294284s ago: executing program 5 (id=5931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x40) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.671042079s ago: executing program 4 (id=5933): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x5, 0x1, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) 1.648421031s ago: executing program 0 (id=5934): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.569376072s ago: executing program 0 (id=5935): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.373961643s ago: executing program 5 (id=5936): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)) io_uring_enter(r5, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 1.234187397s ago: executing program 0 (id=5937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0), 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 363.838134ms ago: executing program 6 (id=5938): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 312.135087ms ago: executing program 6 (id=5939): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 221.969831ms ago: executing program 0 (id=5940): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 205.459468ms ago: executing program 6 (id=5941): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe7, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=5942): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): 5][ T30] audit: type=1326 audit(1769945068.257:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30031 comm="syz.1.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f726e93c2d9 code=0x7ffc0000 [ 556.612892][ T1856] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.671825][ T1856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.671825][ T30] audit: type=1326 audit(1769945068.257:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30031 comm="syz.1.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f726e99aeb9 code=0x7ffc0000 [ 556.671870][ T30] audit: type=1326 audit(1769945068.267:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30031 comm="syz.1.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f726e994cd7 code=0x7ffc0000 [ 557.511126][ T1856] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.525861][ T1856] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.541085][ T1856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.569350][ T1856] usb 7-1: Product: syz [ 557.574988][ T1856] usb 7-1: Manufacturer: syz [ 557.591198][ T1856] usb 7-1: SerialNumber: syz [ 557.594751][T30058] tipc: Enabling of bearer rejected, failed to enable media [ 557.621421][ T1856] cdc_mbim 7-1:1.0: skipping garbage [ 558.031219][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 558.574499][ T1856] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 558.580666][ T1856] cdc_mbim 7-1:1.0: bind() failure [ 558.589668][ T1856] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 558.609989][ T1856] cdc_ncm 7-1:1.1: bind() failure [ 558.615566][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 558.627700][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 558.649587][ T1856] usb 7-1: USB disconnect, device number 62 [ 558.655892][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 558.669491][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 558.681873][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.693596][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 558.779096][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.785429][T30112] tipc: Enabled bearer , priority 10 [ 558.799433][T30112] syzkaller0: entered promiscuous mode [ 558.826065][T30112] syzkaller0: entered allmulticast mode [ 558.846151][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 558.876512][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 558.886046][T30112] tipc: Resetting bearer [ 558.905428][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 558.915870][T30111] tipc: Resetting bearer [ 558.925191][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.939155][T30111] tipc: Disabling bearer [ 558.939789][ T10] usb 6-1: config 0 descriptor?? [ 559.072281][T30129] syzkaller0: entered promiscuous mode [ 559.083060][T30129] syzkaller0: entered allmulticast mode [ 559.108620][T30129] tipc: Enabling of bearer rejected, failed to enable media [ 559.169313][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 559.197795][ T10] usb 6-1: USB disconnect, device number 45 [ 559.209837][ T10] usblp0: removed [ 559.632895][ T5810] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 560.038616][ T5810] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.064336][ T5810] usb 7-1: config 0 has no interface number 0 [ 560.070458][ T5810] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.102331][ T5810] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.210378][ T5810] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 560.219595][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.289126][ T5810] usb 7-1: config 0 descriptor?? [ 561.406138][T30187] netlink: 'syz.4.4349': attribute type 1 has an invalid length. [ 561.501457][ T5810] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0014/input/input23 [ 561.646934][ T5810] holtek_kbd 0003:04D9:A055.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 561.710979][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 561.710996][ T30] audit: type=1400 audit(1769945073.707:690): avc: denied { bind } for pid=30197 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.741239][ T5810] usb 7-1: USB disconnect, device number 63 [ 561.833399][T30209] fido_id[30209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 562.041998][T30239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4355'. [ 562.259184][T30248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4359'. [ 562.317517][T30248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4359'. [ 562.395731][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.478410][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.964333][T30248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4359'. [ 563.673252][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 564.349769][ T30] audit: type=1326 audit(1769945076.347:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 564.373668][ T30] audit: type=1326 audit(1769945076.347:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 564.398852][ T30] audit: type=1400 audit(1769945076.347:693): avc: denied { read } for pid=30274 comm="syz.6.4366" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 564.398892][ T30] audit: type=1400 audit(1769945076.347:694): avc: denied { open } for pid=30274 comm="syz.6.4366" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 564.398926][ T30] audit: type=1326 audit(1769945076.377:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3516d94cd7 code=0x7ffc0000 [ 564.398962][ T30] audit: type=1326 audit(1769945076.377:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3516d3c2d9 code=0x7ffc0000 [ 564.398997][ T30] audit: type=1326 audit(1769945076.377:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 564.399033][ T30] audit: type=1400 audit(1769945076.397:698): avc: denied { ioctl } for pid=30274 comm="syz.6.4366" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 564.399067][ T30] audit: type=1326 audit(1769945076.397:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3516d94cd7 code=0x7ffc0000 [ 566.176323][ T5810] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 566.211490][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.304734][T30310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4374'. [ 566.357318][ T5810] usb 6-1: config 0 has no interfaces? [ 567.553077][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 567.559147][ T5810] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 568.009920][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.020488][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.032971][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.043471][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.053978][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.064461][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.075036][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.085560][T30300] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.215030][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.241980][ T5810] usb 6-1: config 0 descriptor?? [ 568.527227][T30318] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 568.539041][T30318] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.771008][ T10] usb 6-1: USB disconnect, device number 46 [ 570.350308][T30358] comedi comedi1: comedi_test: 12032 microvolt, 5 microsecond waveform attached [ 571.273413][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 571.273420][ T30] audit: type=1400 audit(1769945083.277:711): avc: denied { connect } for pid=30374 comm="syz.5.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 573.011038][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 573.363495][ T30] audit: type=1400 audit(1769945085.277:712): avc: denied { open } for pid=30426 comm="syz.6.4394" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 573.725690][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.736720][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 573.751235][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.772987][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.782319][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.838505][ T24] usb 2-1: Product: syz [ 573.853145][ T24] usb 2-1: Manufacturer: syz [ 573.861563][ T24] usb 2-1: SerialNumber: syz [ 573.878183][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 573.910766][ T24] cdc_ncm 2-1:1.0: bind() failure [ 574.931037][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 575.091189][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 575.097748][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 575.116894][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 575.129585][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 575.138917][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.176408][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 575.186881][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 575.224133][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 575.241110][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.494487][ T24] usb 6-1: config 0 descriptor?? [ 575.622558][T30509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.689979][ T10] usb 2-1: USB disconnect, device number 38 [ 575.810316][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 575.855395][ T24] usb 6-1: USB disconnect, device number 47 [ 576.087466][T30528] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4412'. [ 576.101248][ T30] audit: type=1400 audit(1769945087.967:713): avc: denied { ioctl } for pid=30510 comm="syz.4.4412" path="socket:[74937]" dev="sockfs" ino=74937 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 576.770914][T30527] syz.4.4412 (30527) used greatest stack depth: 19200 bytes left [ 576.821519][ T24] usblp0: removed [ 576.841520][ T30] audit: type=1400 audit(1769945088.147:714): avc: denied { firmware_load } for pid=30510 comm="syz.4.4412" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 577.193543][T30530] syzkaller0: entered promiscuous mode [ 577.199035][T30530] syzkaller0: entered allmulticast mode [ 578.211433][ T30] audit: type=1326 audit(1769945090.217:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 578.341039][ T30] audit: type=1326 audit(1769945090.217:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 578.372825][ T30] audit: type=1326 audit(1769945090.217:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdca2b94cd7 code=0x7ffc0000 [ 579.008489][ T30] audit: type=1326 audit(1769945090.217:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdca2b3c2d9 code=0x7ffc0000 [ 579.060412][ T30] audit: type=1326 audit(1769945090.217:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 579.100988][ T30] audit: type=1326 audit(1769945090.217:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdca2b94cd7 code=0x7ffc0000 [ 579.655637][ T30] audit: type=1326 audit(1769945090.217:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdca2b3c2d9 code=0x7ffc0000 [ 579.685380][ T30] audit: type=1326 audit(1769945090.217:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 579.892698][T30591] syzkaller0: entered promiscuous mode [ 580.552263][T30591] syzkaller0: entered allmulticast mode [ 580.862106][ T30] audit: type=1326 audit(1769945090.237:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.6.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 581.429538][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4436'. [ 582.301007][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 582.462319][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.473270][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 582.488595][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.498090][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.507521][ T24] usb 6-1: Product: syz [ 582.512109][ T24] usb 6-1: Manufacturer: syz [ 582.516682][ T24] usb 6-1: SerialNumber: syz [ 582.554533][ T24] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 582.591035][ T24] cdc_ncm 6-1:1.0: bind() failure [ 582.676104][T30662] fuse: Bad value for 'fd' [ 583.399394][T30689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4458'. [ 583.511078][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 583.659627][T30696] fuse: Bad value for 'fd' [ 583.671478][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 583.705425][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.721154][ T10] usb 2-1: config 179 has no interface number 0 [ 583.741079][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.772480][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.797542][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.814628][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 583.828452][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.856943][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.869882][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.901086][T30684] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 584.439369][T30723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'. [ 584.448656][T30724] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4467'. [ 584.463687][ T79] usb 2-1: USB disconnect, device number 39 [ 584.463751][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 584.478129][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 584.583380][T30737] tipc: Enabling of bearer rejected, failed to enable media [ 585.109500][ T79] usb 6-1: USB disconnect, device number 48 [ 585.174943][T30761] x_tables: duplicate underflow at hook 1 [ 585.192812][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 585.192830][ T30] audit: type=1400 audit(1769945097.187:741): avc: denied { read } for pid=30753 comm="syz.6.4476" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 585.667840][ T30] audit: type=1400 audit(1769945097.187:742): avc: denied { open } for pid=30753 comm="syz.6.4476" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 585.759347][ T30] audit: type=1400 audit(1769945097.187:743): avc: denied { ioctl } for pid=30753 comm="syz.6.4476" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 586.177265][T30774] sctp_transport_update_pmtu: 49 callbacks suppressed [ 586.177284][T30774] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 587.415249][T30781] orangefs_mount: mount request failed with -4 [ 588.217513][ T51] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 588.225568][ T51] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 589.730364][T30913] syzkaller0: entered promiscuous mode [ 589.736112][T30913] syzkaller0: entered allmulticast mode [ 589.967533][ T30] audit: type=1400 audit(1769945101.967:744): avc: denied { ioctl } for pid=30946 comm="syz.4.4507" path="socket:[75349]" dev="sockfs" ino=75349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 590.126598][T30960] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4510'. [ 590.407748][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4509'. [ 591.287263][T30975] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.921557][T30989] syzkaller0: entered promiscuous mode [ 591.927078][T30989] syzkaller0: entered allmulticast mode [ 592.233282][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 592.242553][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 592.252464][ T51] Bluetooth: hci2: hardware error 0x00 [ 592.631314][T31010] syzkaller0: entered promiscuous mode [ 592.681311][T31010] syzkaller0: entered allmulticast mode [ 592.747613][T31021] fuse: Bad value for 'fd' [ 594.231687][T31075] fuse: Unknown parameter 'user_i00000000000000000000' [ 594.311109][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 594.534474][T31112] hub 8-0:1.0: USB hub found [ 594.626148][T31112] hub 8-0:1.0: 1 port detected [ 595.198370][T31129] tipc: Enabling of bearer rejected, failed to enable media [ 595.449675][T31136] comedi comedi0: Minor 47 could not be opened [ 597.786440][ T30] audit: type=1400 audit(1769945109.787:745): avc: denied { create } for pid=31198 comm="syz.1.4553" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.830826][ T30] audit: type=1400 audit(1769945109.787:746): avc: denied { write } for pid=31198 comm="syz.1.4553" name="file0" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.862915][T31206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4557'. [ 597.869944][T31207] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4556'. [ 597.872825][ T30] audit: type=1400 audit(1769945109.787:747): avc: denied { open } for pid=31198 comm="syz.1.4553" path="/299/file0" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.932592][ T30] audit: type=1400 audit(1769945109.787:748): avc: denied { ioctl } for pid=31198 comm="syz.1.4553" path="/299/file0" dev="tmpfs" ino=1586 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.958189][ T30] audit: type=1400 audit(1769945109.787:749): avc: denied { unlink } for pid=22162 comm="syz-executor" name="file0" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 598.059999][T31206] binder: 31204:31206 ioctl 0 200000000040 returned -22 [ 598.983578][T31258] fuse: Unknown parameter 'user_id00000000000000000000' [ 598.995975][T31259] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4568'. [ 599.001237][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 599.075760][T31257] syzkaller0: entered promiscuous mode [ 599.099386][T31257] syzkaller0: entered allmulticast mode [ 599.207399][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.220319][ T24] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.251053][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.260117][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.294206][ T24] usb 1-1: Product: syz [ 599.298464][ T24] usb 1-1: Manufacturer: syz [ 599.308588][ T24] usb 1-1: SerialNumber: syz [ 599.376380][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'. [ 600.493949][ T24] cdc_ncm 1-1:1.0: bind() failure [ 600.513591][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 600.520384][ T24] cdc_ncm 1-1:1.1: bind() failure [ 600.920535][T31306] netlink: 'syz.5.4582': attribute type 6 has an invalid length. [ 601.847674][T31325] fuse: Bad value for 'fd' [ 602.925069][ T24] usb 1-1: USB disconnect, device number 44 [ 603.999420][T31355] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 604.005950][T31355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 604.071849][T31355] vhci_hcd vhci_hcd.0: Device attached [ 604.081144][T31356] vhci_hcd: connection closed [ 604.084559][T10500] vhci_hcd vhci_hcd.0: stop threads [ 604.841532][T10500] vhci_hcd vhci_hcd.0: release socket [ 604.855487][T10500] vhci_hcd vhci_hcd.0: disconnect device [ 604.970063][ T1786] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 605.263700][T31371] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4599'. [ 605.665457][T31374] binder: 31373:31374 ioctl c0306201 0 returned -14 [ 605.898028][ T30] audit: type=1400 audit(1769945117.897:750): avc: denied { write } for pid=31382 comm="syz.6.4603" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 606.807143][ T30] audit: type=1400 audit(1769945118.757:751): avc: denied { ioctl } for pid=31385 comm="syz.0.4604" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 607.133291][ T1786] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 607.351174][ T1786] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.391127][ T1786] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 607.604038][ T1786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.676661][ T1786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.837237][ T1786] usb 7-1: Product: syz [ 607.867105][ T1786] usb 7-1: Manufacturer: syz [ 607.891056][ T1786] usb 7-1: SerialNumber: syz [ 609.294730][T31404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.305281][T31404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.458130][T31410] lo speed is unknown, defaulting to 1000 [ 609.464155][T31410] lo speed is unknown, defaulting to 1000 [ 609.472218][T31410] lo speed is unknown, defaulting to 1000 [ 609.515729][ T1786] cdc_ncm 7-1:1.0: bind() failure [ 609.578748][ T1786] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 609.592732][ T1786] cdc_ncm 7-1:1.1: bind() failure [ 609.914639][T31410] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 609.925385][T31410] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 609.947344][T31410] lo speed is unknown, defaulting to 1000 [ 609.953955][T31410] lo speed is unknown, defaulting to 1000 [ 609.960359][T31410] lo speed is unknown, defaulting to 1000 [ 609.966931][T31410] lo speed is unknown, defaulting to 1000 [ 609.973343][T31410] lo speed is unknown, defaulting to 1000 [ 610.768746][T31404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.782957][T31404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.825724][ T1786] usb 7-1: USB disconnect, device number 64 [ 610.913492][T31451] capability: warning: `syz.1.4611' uses 32-bit capabilities (legacy support in use) [ 611.022359][T31404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.041377][T31404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.680589][ T30] audit: type=1326 audit(1769945123.677:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 611.766778][T31404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.840380][T31404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.864101][ T30] audit: type=1326 audit(1769945123.677:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 611.925118][ T30] audit: type=1326 audit(1769945123.677:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 611.989581][ T30] audit: type=1326 audit(1769945123.707:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3516d94cd7 code=0x7ffc0000 [ 612.070144][ T30] audit: type=1326 audit(1769945123.707:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3516d3c2d9 code=0x7ffc0000 [ 612.132828][ T30] audit: type=1326 audit(1769945123.707:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 612.166347][ T6936] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.185058][ T6936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.212841][ T6936] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.212862][ T30] audit: type=1326 audit(1769945123.717:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3516d94cd7 code=0x7ffc0000 [ 612.291191][ T30] audit: type=1326 audit(1769945123.717:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3516d3c2d9 code=0x7ffc0000 [ 612.298537][ T6936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.315049][ T30] audit: type=1326 audit(1769945123.717:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 612.348116][ T30] audit: type=1326 audit(1769945123.727:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31463 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3516d94cd7 code=0x7ffc0000 [ 612.494216][T31486] syzkaller0: entered promiscuous mode [ 612.500372][T31486] syzkaller0: entered allmulticast mode [ 612.511016][ T6936] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.522369][ T6936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.540809][ T6936] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.610568][T31495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4619'. [ 612.959914][ T6936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.233692][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4624'. [ 615.942740][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 615.963904][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 615.982452][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 615.993589][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.028068][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.069192][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.114517][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.139938][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.228899][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.284359][T31551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 616.649972][T31571] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4635'. [ 617.914806][T31591] syzkaller0: entered promiscuous mode [ 617.921054][T31591] syzkaller0: entered allmulticast mode [ 618.631614][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 618.631643][ T30] audit: type=1326 audit(1769945130.627:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 618.684761][ T30] audit: type=1326 audit(1769945130.627:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 618.790522][ T30] audit: type=1326 audit(1769945130.627:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 618.826899][ T30] audit: type=1326 audit(1769945130.667:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdca2b94cd7 code=0x7ffc0000 [ 618.853868][ T30] audit: type=1326 audit(1769945130.667:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdca2b3c2d9 code=0x7ffc0000 [ 618.961269][ T30] audit: type=1326 audit(1769945130.667:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 619.066579][ T30] audit: type=1326 audit(1769945130.677:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdca2b94cd7 code=0x7ffc0000 [ 619.146243][ T30] audit: type=1326 audit(1769945130.677:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdca2b3c2d9 code=0x7ffc0000 [ 619.201241][ T30] audit: type=1326 audit(1769945130.677:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdca2b9aeb9 code=0x7ffc0000 [ 619.266093][ T30] audit: type=1326 audit(1769945130.677:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.6.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdca2b94cd7 code=0x7ffc0000 [ 620.277442][T31640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'. [ 620.431075][ T1786] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 620.669973][ T1580] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 620.771379][ T1786] usb 7-1: Using ep0 maxpacket: 32 [ 620.791166][T31006] Bluetooth: hci0: command 0x0406 tx timeout [ 620.826744][ T1786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 620.874405][ T1786] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 620.894763][ T1786] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 620.905375][ T1580] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.919886][ T1786] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 620.932115][ T1580] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.942170][ T1786] usb 7-1: Product: syz [ 620.947325][ T1786] usb 7-1: Manufacturer: syz [ 620.952713][ T1580] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 620.964021][ T1786] usb 7-1: SerialNumber: syz [ 620.969814][ T1580] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.980054][ T1786] usb 7-1: config 0 descriptor?? [ 620.986527][ T1580] usb 6-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 621.000104][ T1786] hub 7-1:0.0: bad descriptor, ignoring hub [ 621.007592][ T1786] hub 7-1:0.0: probe with driver hub failed with error -5 [ 621.018957][ T1580] usb 6-1: config 7 interface 0 has no altsetting 0 [ 621.030452][ T1580] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 621.061273][ T1580] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.557048][ T1580] usbhid 6-1:7.0: can't add hid device: -71 [ 622.601111][ T1580] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 622.632075][ T1580] usb 6-1: USB disconnect, device number 49 [ 623.238382][T31702] binder: 31698:31702 ioctl c0306201 0 returned -14 [ 623.311264][ T24] usb 7-1: USB disconnect, device number 65 [ 623.516042][T31712] hub 8-0:1.0: USB hub found [ 623.520825][T31712] hub 8-0:1.0: 1 port detected [ 623.834669][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.841086][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.015820][ T51] Bluetooth: hci5: unexpected event for opcode 0x204e [ 624.606122][T31731] syzkaller0: entered promiscuous mode [ 624.612890][T31731] syzkaller0: entered allmulticast mode [ 625.022129][T31746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 625.028671][T31746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 625.050710][T31746] vhci_hcd vhci_hcd.0: Device attached [ 625.291293][ T1786] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 625.503896][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 625.503912][ T30] audit: type=1400 audit(2000000003.750:978): avc: denied { write } for pid=31752 comm="syz.4.4682" path="socket:[78376]" dev="sockfs" ino=78376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.574278][T31747] vhci_hcd: connection reset by peer [ 625.598978][T10500] vhci_hcd vhci_hcd.0: stop threads [ 625.605676][T10500] vhci_hcd vhci_hcd.0: release socket [ 625.617008][T10500] vhci_hcd vhci_hcd.0: disconnect device [ 626.531303][T31778] netlink: 'syz.5.4691': attribute type 10 has an invalid length. [ 626.994926][T31778] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 627.065660][T31779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.079947][T31819] netlink: 'syz.4.4692': attribute type 1 has an invalid length. [ 627.242704][T31825] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 627.391395][T31825] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 627.424026][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 627.523057][T31878] netlink: 'syz.6.4695': attribute type 1 has an invalid length. [ 627.530958][T31878] netlink: 280 bytes leftover after parsing attributes in process `syz.6.4695'. [ 627.900856][T31819] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 627.924834][T31870] macvlan2: entered promiscuous mode [ 627.931409][T31870] macvlan2: entered allmulticast mode [ 627.937417][T31870] bond4: entered promiscuous mode [ 627.965671][T31870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 627.985833][T31870] bond4: left promiscuous mode [ 628.793343][T31899] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4700'. [ 629.221043][T31916] netlink: 'syz.4.4705': attribute type 2 has an invalid length. [ 629.260828][T31916] !: entered promiscuous mode [ 630.421388][ T1786] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 631.122486][T31958] netlink: 'syz.1.4719': attribute type 10 has an invalid length. [ 631.166003][T31958] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 631.200405][T31962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.019253][T32026] fuse: Bad value for 'fd' [ 633.203912][T32038] hub 8-0:1.0: USB hub found [ 633.209253][T32038] hub 8-0:1.0: 1 port detected [ 633.985141][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 634.527674][ T793] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 634.710334][T32073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4744'. [ 634.728617][ T793] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 634.815492][ T793] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.906421][ T793] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 634.918674][T32085] syzkaller0: entered promiscuous mode [ 634.924773][T32085] syzkaller0: entered allmulticast mode [ 634.964105][ T793] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 635.443746][ T793] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 635.462210][ T793] usb 1-1: config 7 interface 0 has no altsetting 0 [ 635.469961][ T793] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 635.486177][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.716307][T32107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4750'. [ 635.919511][T32114] fuse: Bad value for 'fd' [ 635.991300][ T793] usbhid 1-1:7.0: can't add hid device: -71 [ 636.013225][ T793] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 636.067908][ T793] usb 1-1: USB disconnect, device number 45 [ 636.100411][T32126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4758'. [ 637.075508][T32143] syzkaller0: entered promiscuous mode [ 637.081643][T32143] syzkaller0: entered allmulticast mode [ 638.510486][T32182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 639.067639][T32172] lo speed is unknown, defaulting to 1000 [ 640.061749][ T30] audit: type=1326 audit(2000000018.310:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efe39aeb9 code=0x7ffc0000 [ 640.262642][ T30] audit: type=1326 audit(2000000018.330:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6efe394cd7 code=0x7ffc0000 [ 640.333771][ T30] audit: type=1326 audit(2000000018.330:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6efe33c2d9 code=0x7ffc0000 [ 640.385938][ T30] audit: type=1326 audit(2000000018.330:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6efe39aeb9 code=0x7ffc0000 [ 640.410875][ T30] audit: type=1326 audit(2000000018.340:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6efe394cd7 code=0x7ffc0000 [ 640.436005][ T30] audit: type=1326 audit(2000000018.340:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6efe33c2d9 code=0x7ffc0000 [ 640.471651][ T30] audit: type=1326 audit(2000000018.340:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6efe39aeb9 code=0x7ffc0000 [ 640.529896][ T30] audit: type=1326 audit(2000000018.350:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6efe394cd7 code=0x7ffc0000 [ 640.553701][ T30] audit: type=1326 audit(2000000018.350:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6efe33c2d9 code=0x7ffc0000 [ 640.577784][ T30] audit: type=1326 audit(2000000018.350:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32208 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6efe39aeb9 code=0x7ffc0000 [ 641.122455][ T1856] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 641.264690][T32271] syzkaller0: entered promiscuous mode [ 641.270185][T32271] syzkaller0: entered allmulticast mode [ 641.280004][T32277] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4789'. [ 641.291775][ T1856] usb 1-1: Using ep0 maxpacket: 8 [ 641.301846][ T1856] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 641.317316][ T1856] usb 1-1: config 0 has no interface number 0 [ 641.324921][ T1856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.336046][ T1856] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 641.348061][ T1856] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 641.359428][ T1856] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 641.400635][ T1856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 641.423860][ T1856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.631455][T32286] hub 8-0:1.0: USB hub found [ 641.636991][T32286] hub 8-0:1.0: 1 port detected [ 641.800879][T32288] atomic_op ffff888022bd6198 conn xmit_atomic 0000000000000000 [ 642.419690][T32284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4792'. [ 642.453839][ T1856] usb 1-1: config 0 descriptor?? [ 642.683462][ T1856] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 643.895588][ T1856] usb 1-1: USB disconnect, device number 46 [ 643.901589][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 643.935350][ T1856] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 645.015794][T32294] lo speed is unknown, defaulting to 1000 [ 645.240553][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 645.240570][ T30] audit: type=1400 audit(2000000023.480:1039): avc: denied { read write } for pid=32357 comm="syz.0.4802" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 645.262126][ T5810] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 645.612231][ T5810] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 645.836533][ T30] audit: type=1400 audit(2000000023.480:1040): avc: denied { open } for pid=32357 comm="syz.0.4802" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 646.046502][T32365] fido_id[32365]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 649.773837][T32432] tipc: Enabled bearer , priority 0 [ 649.860765][T32431] tipc: Disabling bearer [ 650.228481][ T30] audit: type=1400 audit(2000000028.537:1041): avc: denied { create } for pid=32449 comm="syz.5.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 651.224779][T32465] fuse: Bad value for 'fd' [ 651.401174][T32474] tipc: Enabling of bearer rejected, failed to enable media [ 651.657328][ T24] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 652.518231][T32488] netlink: 'syz.1.4843': attribute type 4 has an invalid length. [ 652.682277][ T24] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 653.181006][ T24] usb 6-1: config 0 has no interface number 0 [ 653.187126][ T24] usb 6-1: config 0 interface 41 has no altsetting 0 [ 653.196239][ T24] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 653.205944][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.231110][ T24] usb 6-1: Product: syz [ 653.235294][ T24] usb 6-1: Manufacturer: syz [ 653.239882][ T24] usb 6-1: SerialNumber: syz [ 653.270068][ T24] usb 6-1: config 0 descriptor?? [ 653.765712][T32532] netlink: 'syz.4.4856': attribute type 4 has an invalid length. [ 653.793770][ T793] lo speed is unknown, defaulting to 1000 [ 653.814392][ T793] syz0: Port: 1 Link DOWN [ 653.909173][ T24] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 654.607614][ T30] audit: type=1326 audit(2000000032.837:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32541 comm="syz.6.4859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca2b9aeb9 code=0x0 [ 656.502965][T32561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'. [ 656.771175][ T24] usb 6-1: USB disconnect, device number 50 [ 657.837649][T32592] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4874'. [ 657.848918][T32592] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4874'. [ 657.921885][T32599] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 657.926691][T32603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4870'. [ 658.025146][T32608] xt_hashlimit: size too large, truncated to 1048576 [ 658.088223][T32610] sctp_transport_update_pmtu: 48 callbacks suppressed [ 658.088243][T32610] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 658.141054][ T24] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 658.154736][T32610] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 658.339842][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.382123][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.415525][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.466586][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.513566][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.549611][ T24] usb 7-1: config 0 descriptor?? [ 659.252738][ T24] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 659.306798][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 659.656701][ T24] usb 7-1: USB disconnect, device number 66 [ 660.420701][ T30] audit: type=1400 audit(2000000038.727:1043): avc: denied { append } for pid=32668 comm="syz.0.4893" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 660.570986][ T30] audit: type=1400 audit(2000000038.877:1044): avc: denied { create } for pid=32677 comm="syz.4.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 660.639118][ T30] audit: type=1400 audit(2000000038.947:1045): avc: denied { unmount } for pid=32677 comm="syz.4.4897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 660.679501][T32678] lo speed is unknown, defaulting to 1000 [ 660.752472][ T30] audit: type=1400 audit(2000000039.067:1046): avc: denied { associate } for pid=32710 comm="syz.4.4897" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 660.973619][T32715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4901'. [ 661.151629][T32726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32726 comm=syz.0.4901 [ 661.203711][ T30] audit: type=1400 audit(2000000039.457:1047): avc: denied { accept } for pid=32689 comm="syz.0.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 661.299149][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4902'. [ 663.678838][T32755] netlink: 'syz.0.4908': attribute type 10 has an invalid length. [ 663.741219][T32755] bridge0: port 3(syz_tun) entered disabled state [ 663.782691][T32755] syz_tun: left allmulticast mode [ 663.830015][T32755] syz_tun: left promiscuous mode [ 663.844815][T32755] bridge0: port 3(syz_tun) entered disabled state [ 663.853767][T32749] orangefs_mount: mount request failed with -4 [ 663.934435][T32755] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 664.006351][T32763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.121835][ T5810] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 664.299403][ T30] audit: type=1400 audit(2000000042.597:1048): avc: denied { write } for pid=345 comm="syz.0.4915" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 664.368199][ T5810] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 664.382537][ T30] audit: type=1400 audit(2000000042.597:1049): avc: denied { open } for pid=345 comm="syz.0.4915" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 664.411022][ T5810] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 664.431161][ T5810] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 664.454799][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.482120][ T30] audit: type=1400 audit(2000000042.797:1050): avc: denied { create } for pid=350 comm="syz.4.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 664.527365][ T30] audit: type=1400 audit(2000000042.827:1051): avc: denied { bind } for pid=350 comm="syz.4.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 664.574754][ T30] audit: type=1400 audit(2000000042.827:1052): avc: denied { setopt } for pid=350 comm="syz.4.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 665.341290][ T5810] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 665.448588][ T5810] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input25 [ 665.794772][ T5810] input: failed to attach handler kbd to device input25, error: -5 [ 665.936562][ T5810] usb 7-1: USB disconnect, device number 67 [ 666.651086][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 666.921061][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 667.744537][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 667.783852][ T9] usb 6-1: config 0 has no interface number 0 [ 667.835577][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 667.861647][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 667.983517][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.003030][ T9] usb 6-1: Product: syz [ 668.007293][ T9] usb 6-1: Manufacturer: syz [ 668.203672][ T444] lo speed is unknown, defaulting to 1000 [ 669.001599][ T9] usb 6-1: SerialNumber: syz [ 669.334186][ T9] usb 6-1: config 0 descriptor?? [ 669.368203][ T9] smsc75xx v1.0.0 [ 669.406467][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 669.441484][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 669.477816][ T9] usb 6-1: USB disconnect, device number 51 [ 669.681721][ T482] mmap: syz.4.4937 (482) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 671.290270][ T534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4954'. [ 671.505946][ T539] siw: device registration error -23 [ 672.202738][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 672.414216][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 672.920986][ T24] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 8 [ 672.969848][ T24] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 673.003096][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 673.036671][ T24] usb 6-1: string descriptor 0 read error: -22 [ 673.051569][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.068202][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.139991][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4961'. [ 673.615888][ T546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 673.655312][ T546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 673.792615][ T573] lo speed is unknown, defaulting to 1000 [ 673.924341][ T546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 673.941309][ T546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 674.211875][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -32 [ 674.269569][ T24] usb 6-1: USB disconnect, device number 52 [ 675.520380][ T666] orangefs_mount: mount request failed with -4 [ 675.683305][ T703] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4979'. [ 675.705948][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 675.705965][ T30] audit: type=1400 audit(2000000054.017:1054): avc: denied { checkpoint_restore } for pid=696 comm="syz.0.4977" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 677.391309][ T740] random: crng reseeded on system resumption [ 677.774038][ T30] audit: type=1400 audit(2000000055.697:1055): avc: denied { write } for pid=731 comm="syz.0.4989" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 677.836965][ T726] orangefs_mount: mount request failed with -4 [ 677.902330][ T30] audit: type=1400 audit(2000000055.697:1056): avc: denied { open } for pid=731 comm="syz.0.4989" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 679.164463][ T683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.491956][ T30] audit: type=1326 audit(2000000059.707:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.5003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6efe39aeb9 code=0x0 [ 681.817172][ T798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5009'. [ 681.831032][ T30] audit: type=1400 audit(2000000060.027:1058): avc: denied { watch } for pid=786 comm="syz.0.5004" path="/393/file1" dev="tmpfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 681.994686][ T800] lo speed is unknown, defaulting to 1000 [ 683.335245][ T868] hub 8-0:1.0: USB hub found [ 683.341084][ T868] hub 8-0:1.0: 1 port detected [ 684.133559][ T30] audit: type=1326 audit(2000000062.447:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8d59aeb9 code=0x7ffc0000 [ 684.636703][ T30] audit: type=1326 audit(2000000062.447:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8d59aeb9 code=0x7ffc0000 [ 684.763613][ T30] audit: type=1326 audit(2000000062.447:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d8d59aeb9 code=0x7ffc0000 [ 685.313653][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.319955][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.353473][ T30] audit: type=1326 audit(2000000062.457:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d8d594cd7 code=0x7ffc0000 [ 685.395920][ T30] audit: type=1326 audit(2000000062.457:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d8d53c2d9 code=0x7ffc0000 [ 685.466183][ T30] audit: type=1326 audit(2000000062.457:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d8d59aeb9 code=0x7ffc0000 [ 685.523059][ T30] audit: type=1326 audit(2000000062.897:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d8d594cd7 code=0x7ffc0000 [ 685.681078][ T30] audit: type=1326 audit(2000000062.897:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d8d53c2d9 code=0x7ffc0000 [ 686.190534][ T921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=921 comm=syz.6.5037 [ 686.396816][ T933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5042'. [ 686.415231][ T933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5042'. [ 686.530025][ T949] overlayfs: failed to resolve './bus': -2 [ 686.535952][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 686.541016][ T30] audit: type=1400 audit(2000000064.837:1106): avc: denied { ioctl } for pid=936 comm="syz.0.5041" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 690.111069][ T51] Bluetooth: hci4: unexpected event for opcode 0x6574 [ 690.160887][ T1007] netlink: 'syz.5.5059': attribute type 1 has an invalid length. [ 690.865177][ T1020] xt_hashlimit: size too large, truncated to 1048576 [ 690.921574][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5063'. [ 690.949305][ T1011] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 691.138190][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.350227][ T1022] bridge_slave_0 (unregistering): left allmulticast mode [ 691.408876][ T1022] bridge_slave_0 (unregistering): left promiscuous mode [ 691.540333][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.048403][ T51] Bluetooth: hci1: unexpected event for opcode 0x6574 [ 692.431048][ T1093] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5083'. [ 692.449294][ T1786] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 692.507718][ T30] audit: type=1326 audit(2000000070.817:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.548340][ T30] audit: type=1326 audit(2000000070.817:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.573343][ T30] audit: type=1326 audit(2000000070.817:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.603640][ T30] audit: type=1326 audit(2000000070.817:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.627982][ T1786] usb 6-1: Using ep0 maxpacket: 16 [ 692.648975][ T1786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.660255][ T1786] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 692.669499][ T1786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.677683][ T30] audit: type=1326 audit(2000000070.817:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.703963][ T30] audit: type=1326 audit(2000000070.817:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.728211][ T30] audit: type=1326 audit(2000000070.817:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 692.766787][ T1786] usb 6-1: config 0 descriptor?? [ 692.789359][ T30] audit: type=1326 audit(2000000070.817:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.4.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3516d9aeb9 code=0x7ffc0000 [ 693.188373][ T1786] betop 0003:11C0:5506.0017: item fetching failed at offset 3/5 [ 693.207377][ T1786] betop 0003:11C0:5506.0017: parse failed [ 693.222718][ T1786] betop 0003:11C0:5506.0017: probe with driver betop failed with error -22 [ 693.437431][ T5881] usb 6-1: USB disconnect, device number 53 [ 694.030977][ T1786] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 694.056954][ T51] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 694.242910][ T1786] usb 1-1: Using ep0 maxpacket: 16 [ 694.257524][ T1786] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.288629][ T1786] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.362821][ T1171] input: syz1 as /devices/virtual/input/input26 [ 694.711989][ T1786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 694.718645][ T1786] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 694.727735][ T1786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.750693][ T1786] usb 1-1: config 0 descriptor?? [ 695.058745][ T1157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.086246][ T1157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.332843][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.351129][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.360970][ T5881] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 695.375689][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.394894][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.410205][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.425572][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.440304][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.457585][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.494143][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.515375][ T1786] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 695.537490][ T1786] cougar 0003:060B:500A.0018: unexpected long global item [ 695.544391][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 695.552603][ T1202] tipc: Enabling of bearer rejected, failed to enable media [ 695.563184][ T1786] cougar 0003:060B:500A.0018: parse failed [ 695.569302][ T1786] cougar 0003:060B:500A.0018: probe with driver cougar failed with error -22 [ 695.581354][ T5881] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 695.604239][ T1786] usb 1-1: USB disconnect, device number 47 [ 695.611196][ T5881] usb 6-1: config 0 has no interface number 0 [ 695.649047][ T5881] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.678263][ T5881] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 695.805495][ T5881] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.816638][ T5881] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.852088][ T5881] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 695.861251][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.872464][ T5881] usb 6-1: config 0 descriptor?? [ 696.341949][ T5881] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 696.358355][ T5881] usb 6-1: USB disconnect, device number 54 [ 696.372439][ T5881] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 696.372897][ T1075] udevd[1075]: setting mode of /dev/ldusb0 to 020600 failed: No such file or directory [ 696.410167][ T1075] udevd[1075]: setting owner of /dev/ldusb0 to uid=0, gid=0 failed: No such file or directory [ 696.936546][ T1256] tipc: Enabling of bearer rejected, failed to enable media [ 697.367516][ T1263] siw: device registration error -23 [ 698.684976][ T1273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5131'. [ 698.761184][ T1273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5131'. [ 699.214380][ T30] audit: type=1400 audit(2000000077.517:1115): avc: denied { bind } for pid=1311 comm="syz.6.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 699.311349][ T1856] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 699.508537][ T1856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.539899][ T1856] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 699.555852][ T1856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.703969][ T1330] warning: `syz.5.5145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 699.726875][ T1856] usb 1-1: Product: syz [ 699.742434][ T1856] usb 1-1: Manufacturer: syz [ 699.757466][ T1856] usb 1-1: SerialNumber: syz [ 699.779434][ T1856] usb 1-1: config 0 descriptor?? [ 699.852639][ T1856] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 699.915900][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.005276][ T5881] usb 1-1: USB disconnect, device number 48 [ 700.509011][ T30] audit: type=1400 audit(2000000078.797:1116): avc: denied { mount } for pid=1360 comm="syz.1.5148" name="/" dev="hugetlbfs" ino=82951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 701.654254][ T1392] lo speed is unknown, defaulting to 1000 [ 702.529706][ T51] Bluetooth: hci4: unexpected event for opcode 0x040d [ 702.620002][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5163'. [ 703.320060][ T793] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 703.972631][ T1446] delete_channel: no stack [ 704.647542][ T30] audit: type=1400 audit(2000000081.797:1117): avc: denied { bind } for pid=1446 comm="syz.6.5165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 704.762437][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 704.769079][ T793] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 704.777587][ T793] usb 1-1: config 0 has no interface number 0 [ 704.788822][ T793] usb 1-1: config 0 interface 184 has no altsetting 0 [ 704.798788][ T793] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 704.843506][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.866179][ T1461] lo speed is unknown, defaulting to 1000 [ 704.878629][ T793] usb 1-1: Product: syz [ 704.953323][ T793] usb 1-1: Manufacturer: syz [ 704.967217][ T793] usb 1-1: SerialNumber: syz [ 704.983653][ T793] usb 1-1: config 0 descriptor?? [ 705.001187][ T793] smsc75xx v1.0.0 [ 705.531046][ T1856] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 705.730681][ T793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 705.777965][ T793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 705.792270][ T793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 705.804233][ T793] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 705.891490][ T1856] usb 6-1: Using ep0 maxpacket: 32 [ 705.902125][ T1856] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 705.924936][ T1856] usb 6-1: config 0 has no interface number 0 [ 705.996046][ T1856] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 706.032178][ T1856] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 706.046503][ T1856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.055514][ T1856] usb 6-1: Product: syz [ 706.059745][ T1856] usb 6-1: Manufacturer: syz [ 706.066315][ T1856] usb 6-1: SerialNumber: syz [ 706.081596][ T1856] usb 6-1: config 0 descriptor?? [ 706.098538][ T1502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 707.182081][ T1502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 707.248885][ T9] usb 1-1: USB disconnect, device number 49 [ 707.463668][ T1856] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 707.497258][ T1856] asix 6-1:0.188: probe with driver asix failed with error -61 [ 707.843449][ T1553] lo speed is unknown, defaulting to 1000 [ 708.848807][ T793] usb 6-1: USB disconnect, device number 55 [ 708.973362][ T1617] lo speed is unknown, defaulting to 1000 [ 709.590564][ T1629] lo speed is unknown, defaulting to 1000 [ 710.755580][ T1705] netlink: 'syz.5.5207': attribute type 10 has an invalid length. [ 710.821784][ T1705] bond1: option mode: unable to set because the bond device is up [ 710.872022][ T1705] bond_slave_0: entered promiscuous mode [ 710.878126][ T1705] bond_slave_1: entered promiscuous mode [ 710.900678][ T1705] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 710.920142][ T1705] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 710.933487][ T30] audit: type=1400 audit(2000000089.247:1118): avc: denied { write } for pid=1717 comm="syz.0.5210" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 711.097160][ T1722] bond1: option mode: unable to set because the bond device has slaves [ 711.129608][ T1723] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 713.141585][ T1777] IPVS: length: 528 != 8 [ 715.440139][ T1827] ======================================================= [ 715.440139][ T1827] WARNING: The mand mount option has been deprecated and [ 715.440139][ T1827] and is ignored by this kernel. Remove the mand [ 715.440139][ T1827] option from the mount to silence this warning. [ 715.440139][ T1827] ======================================================= [ 716.038798][ T1844] bond1: option mode: unable to set because the bond device has slaves [ 717.472981][ T1852] hub 8-0:1.0: USB hub found [ 717.478918][ T1852] hub 8-0:1.0: 1 port detected [ 717.776651][ T1858] tipc: Enabling of bearer rejected, failed to enable media [ 718.001248][ T1856] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 718.156143][ T1856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.165486][ T1856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.180941][ T1856] usb 6-1: Product: syz [ 718.185136][ T1856] usb 6-1: Manufacturer: syz [ 718.189870][ T1856] usb 6-1: SerialNumber: syz [ 719.142322][ T1913] netlink: 'syz.4.5266': attribute type 1 has an invalid length. [ 720.026316][ T1856] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 720.063283][ T1856] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 720.483213][ T1950] lo speed is unknown, defaulting to 1000 [ 720.691313][ T30] audit: type=1326 audit(2000000098.897:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.6.5276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca2b9aeb9 code=0x0 [ 721.553675][ T793] usb 6-1: USB disconnect, device number 56 [ 721.595645][ T793] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 722.615591][ T1992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 725.250043][ T30] audit: type=1326 audit(2000000103.557:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.4.5290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3516d9aeb9 code=0x0 [ 725.824367][ T2069] lo speed is unknown, defaulting to 1000 [ 728.082993][ T2165] lo speed is unknown, defaulting to 1000 [ 728.818939][ T51] Bluetooth: hci5: unexpected event for opcode 0x2012 [ 728.940650][ T2209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5316'. [ 730.046873][ T30] audit: type=1400 audit(2000000108.307:1121): avc: denied { shutdown } for pid=2225 comm="syz.5.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 730.377279][ T5861] libceph: connect (1)[c::]:6789 error -97 [ 730.385729][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 730.408178][ T2232] lo speed is unknown, defaulting to 1000 [ 730.520483][ T30] audit: type=1400 audit(2000000108.827:1122): avc: denied { ioctl } for pid=2249 comm="syz.0.5328" path="socket:[85025]" dev="sockfs" ino=85025 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 730.574752][ T2238] ceph: No mds server is up or the cluster is laggy [ 730.685694][ T30] audit: type=1400 audit(2000000108.997:1123): avc: denied { read } for pid=2275 comm="syz.0.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 730.990134][ T2282] overlayfs: failed to clone upperpath [ 732.440468][ T30] audit: type=1326 audit(2000000110.717:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2301 comm="syz.0.5340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d8d59aeb9 code=0x0 [ 733.057279][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 733.066455][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 733.076134][ T51] Bluetooth: hci5: hardware error 0x00 [ 735.010761][ T30] audit: type=1400 audit(2000000113.317:1125): avc: denied { ioctl } for pid=2344 comm="syz.5.5351" path="socket:[85116]" dev="sockfs" ino=85116 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 735.142011][ T1580] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 735.377475][ T2344] delete_channel: no stack [ 735.445066][ T1580] usb 1-1: Using ep0 maxpacket: 8 [ 735.463903][ T1580] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 735.478152][ T1580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.489087][ T1580] usb 1-1: Product: syz [ 735.499976][ T1580] usb 1-1: Manufacturer: syz [ 735.511949][ T1580] usb 1-1: SerialNumber: syz [ 735.533988][ T1580] usb 1-1: config 0 descriptor?? [ 735.548540][ T1580] imon_raw 1-1:0.0: IR endpoint missing [ 735.556054][ T2362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5358'. [ 735.762411][ T1580] usb 1-1: USB disconnect, device number 50 [ 735.831353][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 738.836498][ T2447] syz_tun: entered allmulticast mode [ 738.844939][ T2445] syz_tun: left allmulticast mode [ 739.527934][ T2452] sctp: [Deprecated]: syz.1.5383 (pid 2452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.527934][ T2452] Use struct sctp_sack_info instead [ 739.625211][ T51] Bluetooth: Frame is too long (len 18, expected len 4) [ 741.156127][ T2495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5384'. [ 741.176408][ T51] Bluetooth: Frame is too long (len 18, expected len 4) [ 741.185196][ T53] bond0: (slave bond_slave_0): interface is now down [ 741.195720][ T53] bond0: (slave bond_slave_1): interface is now down [ 741.209369][ T53] bond0: now running without any active interface! [ 741.443799][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5405'. [ 741.516545][ T30] audit: type=1400 audit(2000000375.819:1126): avc: denied { ioctl } for pid=2527 comm="syz.5.5407" path="socket:[84799]" dev="sockfs" ino=84799 ioctlcmd=0x8b21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.605267][T31006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 741.617597][T31006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 741.629502][T31006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 741.637390][T31006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 741.647240][ T2533] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 741.672038][ T2533] netlink: 'syz.4.5408': attribute type 2 has an invalid length. [ 741.691442][T31006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 741.844533][ T2529] lo speed is unknown, defaulting to 1000 [ 742.626402][ T2629] syz_tun: entered allmulticast mode [ 742.686926][ T2529] chnl_net:caif_netlink_parms(): no params data found [ 742.803329][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.818101][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.826411][ T2529] bridge_slave_0: entered allmulticast mode [ 742.833426][ T2529] bridge_slave_0: entered promiscuous mode [ 742.841269][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.848536][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.856126][ T2529] bridge_slave_1: entered allmulticast mode [ 742.864360][ T2529] bridge_slave_1: entered promiscuous mode [ 742.900818][ T2529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.915849][ T2529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.941234][ T1786] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 742.974556][ T2529] team0: Port device team_slave_0 added [ 742.982830][ T2529] team0: Port device team_slave_1 added [ 743.004318][ T2529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.012419][ T2529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.040356][ T2529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.057980][ T2529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.072457][ T2529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.145166][ T2529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.164673][ T1786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.227224][ T1786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.278898][ T1786] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 743.343067][ T1786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.442938][ T1786] usb 6-1: config 0 descriptor?? [ 743.445824][ T2529] hsr_slave_0: entered promiscuous mode [ 743.454715][ T2529] hsr_slave_1: entered promiscuous mode [ 743.462284][ T2529] debugfs: 'hsr0' already exists in 'hsr' [ 743.468399][ T2529] Cannot create hsr debugfs directory [ 743.501926][ T2823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5423'. [ 743.515724][ T2823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5423'. [ 743.694616][ T2529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.706209][ T2529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.834195][ T51] Bluetooth: hci3: command tx timeout [ 743.876310][ T2529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.883077][ T1786] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 743.913938][ T2529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.963398][ T1786] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 744.014169][ T1786] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 744.071642][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5432'. [ 744.128281][ T2529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.183319][ T2529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.302652][ T2529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.313153][ T2529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.433375][ T2969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5438'. [ 744.557845][ T2529] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 744.589123][ T2529] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 744.609739][ T2529] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 744.646849][ T2529] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 744.757180][ T3003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5445'. [ 744.789022][ T2529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.812669][ T2529] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.835256][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.842416][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.845998][ T3009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5446'. [ 744.914807][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.921986][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.037130][ T5881] kernel write not supported for file bpf-prog (pid: 5881 comm: kworker/1:6) [ 745.158206][ T2529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.395189][ T2529] veth0_vlan: entered promiscuous mode [ 745.407447][ T2529] veth1_vlan: entered promiscuous mode [ 745.439816][ T2529] veth0_macvtap: entered promiscuous mode [ 745.449459][ T2529] veth1_macvtap: entered promiscuous mode [ 745.468462][ T2529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.482834][ T2529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.499908][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.508942][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.539361][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.558455][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.723869][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.750297][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.786501][ T2142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.802340][ T1580] usb 6-1: USB disconnect, device number 57 [ 745.806482][ T2142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.843833][ T1580] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 745.911487][ T51] Bluetooth: hci3: command tx timeout [ 746.568252][ T3071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.698991][ T5881] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 746.723477][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.732502][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.001573][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 747.073878][ T5881] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.084561][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.137164][ T5881] usb 7-1: Product: syz [ 747.148215][ T5881] usb 7-1: Manufacturer: syz [ 747.155506][ T5881] usb 7-1: SerialNumber: syz [ 747.416271][ T3097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5461'. [ 747.425386][ T3090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5460'. [ 747.446690][ T3097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5461'. [ 747.587626][ T3100] lo speed is unknown, defaulting to 1000 [ 747.847320][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 748.004800][ T51] Bluetooth: hci3: command tx timeout [ 748.250302][ T5881] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 748.473296][ T5881] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 748.776159][ T30] audit: type=1400 audit(2000000383.059:1127): avc: denied { read } for pid=3160 comm="syz.0.5476" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 749.736377][ T1786] usb 7-1: USB disconnect, device number 68 [ 749.842705][ T793] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 749.877422][ T1786] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 750.309360][ T51] Bluetooth: hci3: command tx timeout [ 750.464698][ T793] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 750.475510][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.483681][ T793] usb 1-1: Product: syz [ 750.487918][ T793] usb 1-1: Manufacturer: syz [ 750.504116][ T793] usb 1-1: SerialNumber: syz [ 750.578925][ T793] usb 1-1: config 0 descriptor?? [ 751.118925][ T793] usb 1-1: Firmware: major: 145, minor: 244, hardware type: UNKNOWN (94) [ 751.372057][ T793] usb 1-1: Read permanent extended address c4:27:3f:2d:ae:32:64:42 from device [ 751.392562][ T793] usb 1-1: atusb_probe: initialization failed, error = -524 [ 751.419162][ T793] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 751.631182][ T793] libceph: connect (1)[c::]:6789 error -97 [ 751.836626][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 751.843694][ T5861] usb 1-1: USB disconnect, device number 51 [ 752.079629][ T3250] ceph: No mds server is up or the cluster is laggy [ 753.520948][ T5861] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 753.713545][ T5861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.766696][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.979331][ T5861] usb 6-1: Product: syz [ 753.984595][ T5861] usb 6-1: Manufacturer: syz [ 753.989198][ T5861] usb 6-1: SerialNumber: syz [ 754.621174][ T793] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 754.806395][ T793] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 754.820571][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.830382][ T793] usb 7-1: Product: syz [ 754.834898][ T793] usb 7-1: Manufacturer: syz [ 754.839605][ T793] usb 7-1: SerialNumber: syz [ 754.848157][ T793] usb 7-1: config 0 descriptor?? [ 755.021343][ T5861] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 755.046396][ T3341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5512'. [ 755.066444][ T793] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 755.257135][ T3354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5517'. [ 755.269679][ T3354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5517'. [ 755.441839][ T5861] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 755.483383][ T793] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 755.521270][ T793] usb 7-1: USB disconnect, device number 69 [ 755.635991][ T1786] usb 6-1: USB disconnect, device number 58 [ 755.654508][ T1786] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 759.080096][ T3495] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 759.098738][ T30] audit: type=1400 audit(2000000009.450:1128): avc: denied { setopt } for pid=3501 comm="syz.6.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 759.319329][ T3506] ubi31: attaching mtd0 [ 759.335611][ T3506] ubi31: scanning is finished [ 759.340329][ T3506] ubi31: empty MTD device detected [ 759.397185][ T3507] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 759.705566][ T3506] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 759.713275][ T3506] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 759.720923][ T3506] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 759.727954][ T3506] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 759.735416][ T3506] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 759.742249][ T3506] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 759.750282][ T3506] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1749964087 [ 759.760334][ T3506] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 759.780607][ T3509] ubi31: background thread "ubi_bgt31d" started, PID 3509 [ 759.832272][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 759.883017][ T3514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5550'. [ 759.912104][ T3517] bridge1: entered promiscuous mode [ 759.923437][ T3517] bridge1: entered allmulticast mode [ 759.926480][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5550'. [ 759.938645][ T3517] team0: Port device bridge1 added [ 759.969383][ T3520] bridge0: port 3(team0) entered blocking state [ 759.976041][ T3514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5550'. [ 759.985857][ T3520] bridge0: port 3(team0) entered disabled state [ 760.055133][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 760.066516][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5550'. [ 760.076237][ T3520] team0: entered allmulticast mode [ 760.081526][ T3520] team_slave_0: entered allmulticast mode [ 760.087293][ T3520] team_slave_1: entered allmulticast mode [ 760.093083][ T3520] macvlan0: entered allmulticast mode [ 760.100266][ T3520] team0: entered promiscuous mode [ 760.105543][ T3520] team_slave_0: entered promiscuous mode [ 760.114947][ T3520] team_slave_1: entered promiscuous mode [ 760.122746][ T3520] macvlan0: entered promiscuous mode [ 760.129802][ T3520] bridge0: port 3(team0) entered blocking state [ 760.136207][ T3520] bridge0: port 3(team0) entered forwarding state [ 760.144411][T10500] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.156273][T10500] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.196862][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.246171][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.275817][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5556'. [ 760.342413][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5557'. [ 760.363288][ T3535] netlink: 'syz.0.5557': attribute type 11 has an invalid length. [ 760.410083][ T30] audit: type=1326 audit(2000000010.760:1129): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3540 comm="syz.1.5560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f726e99aeb9 code=0x0 [ 760.593067][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5557'. [ 760.850028][ T3535] netlink: 'syz.0.5557': attribute type 11 has an invalid length. [ 760.931006][ T30] audit: type=1400 audit(2000000011.230:1130): avc: denied { map } for pid=3555 comm="syz.4.5563" path="socket:[86635]" dev="sockfs" ino=86635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 760.992467][ T30] audit: type=1400 audit(2000000011.230:1131): avc: denied { read accept } for pid=3555 comm="syz.4.5563" path="socket:[86635]" dev="sockfs" ino=86635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 762.975683][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5574'. [ 763.095387][ T3602] binder: 3585:3602 ioctl 0 200000000040 returned -22 [ 763.373366][ T3606] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 763.425437][ T3606] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 764.095970][ T3634] netlink: 'syz.0.5586': attribute type 1 has an invalid length. [ 764.199955][ T3634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.677873][ T30] audit: type=1400 audit(2000000017.030:1132): avc: denied { bind } for pid=3720 comm="syz.5.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 766.752551][ T30] audit: type=1400 audit(2000000017.060:1133): avc: denied { ioctl } for pid=3720 comm="syz.5.5598" path="socket:[87938]" dev="sockfs" ino=87938 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 766.865715][ T30] audit: type=1400 audit(2000000017.200:1134): avc: denied { connect } for pid=3724 comm="syz.0.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.970940][ T30] audit: type=1400 audit(2000000017.200:1135): avc: denied { setopt } for pid=3724 comm="syz.0.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 767.067189][ T3728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5601'. [ 767.278304][ T30] audit: type=1400 audit(2000000017.630:1136): avc: denied { name_bind } for pid=3732 comm="syz.4.5604" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 767.516575][ T30] audit: type=1400 audit(2000000017.870:1137): avc: denied { sys_module } for pid=3740 comm="syz.4.5605" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 767.671926][ T5881] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 768.092903][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.119955][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.138263][ T5881] usb 1-1: Product: syz [ 768.146678][ T5881] usb 1-1: Manufacturer: syz [ 768.157268][ T5881] usb 1-1: SerialNumber: syz [ 768.406020][ T30] audit: type=1400 audit(2000000018.750:1138): avc: denied { map } for pid=3751 comm="syz.5.5609" path="socket:[87984]" dev="sockfs" ino=87984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.781304][ T30] audit: type=1400 audit(2000000018.820:1139): avc: denied { read } for pid=3751 comm="syz.5.5609" path="socket:[87984]" dev="sockfs" ino=87984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.866479][ T30] audit: type=1326 audit(2000000019.180:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3790 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726e99aeb9 code=0x7ffc0000 [ 768.890067][ T1580] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 768.911487][ T30] audit: type=1326 audit(2000000019.180:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3790 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726e99aeb9 code=0x7ffc0000 [ 769.062176][ T1580] usb 7-1: Using ep0 maxpacket: 8 [ 769.075007][ T1580] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 769.101049][ T1580] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.163781][ T1580] usb 7-1: config 0 has no interface number 0 [ 769.190957][ T1580] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.215491][ T5881] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 769.219601][ T1580] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.282884][ T1580] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 769.341354][ T1580] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.378782][ T1580] usb 7-1: config 0 descriptor?? [ 769.416825][ T1580] ldusb 7-1:0.55: Interrupt in endpoint not found [ 769.635799][ T5881] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 769.665619][ T793] usb 7-1: USB disconnect, device number 70 [ 769.666341][ T3816] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 769.844844][ T5881] usb 1-1: USB disconnect, device number 52 [ 769.878685][ T5881] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 772.513100][ T3896] lo speed is unknown, defaulting to 1000 [ 772.695949][ T793] IPVS: starting estimator thread 0... [ 772.941839][ T3936] IPVS: using max 42 ests per chain, 100800 per kthread [ 773.661738][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 773.661750][ T30] audit: type=1400 audit(2000000024.020:1168): avc: denied { read append } for pid=3976 comm="syz.6.5653" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 773.804858][ T30] audit: type=1400 audit(2000000024.050:1169): avc: denied { open } for pid=3976 comm="syz.6.5653" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 773.996018][ T3985] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5653'. [ 774.266582][ T30] audit: type=1400 audit(2000000024.070:1170): avc: denied { create } for pid=3976 comm="syz.6.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 774.343314][ T3979] lo speed is unknown, defaulting to 1000 [ 774.365434][ T3993] netlink: 'syz.0.5655': attribute type 1 has an invalid length. [ 774.487898][ T3993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 774.786779][ T4073] netlink: 'syz.0.5661': attribute type 2 has an invalid length. [ 774.816082][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'. [ 775.191064][ T30] audit: type=1400 audit(2000000025.480:1171): avc: denied { ioctl } for pid=4077 comm="syz.6.5662" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 775.866359][ T4094] netlink: 'syz.6.5667': attribute type 13 has an invalid length. [ 775.906938][ T4094] netlink: 'syz.6.5667': attribute type 17 has an invalid length. [ 776.171358][ T4094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.144426][ T30] audit: type=1400 audit(2000000027.020:1172): avc: denied { mounton } for pid=4111 comm="syz.6.5673" path="/41/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 777.421053][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 777.671141][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 777.677914][ T24] usb 1-1: config index 0 descriptor too short (expected 20772, got 36) [ 777.712495][ T24] usb 1-1: config 6 has too many interfaces: 211, using maximum allowed: 32 [ 777.749651][ T24] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 777.801238][ T24] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 211 [ 777.818507][ T24] usb 1-1: config 6 has no interface number 0 [ 777.826517][ T24] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 777.846286][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=82.06 [ 777.855628][ T24] usb 1-1: New USB device strings: Mfr=62, Product=2, SerialNumber=3 [ 777.864530][ T24] usb 1-1: Product: syz [ 777.868785][ T24] usb 1-1: Manufacturer: syz [ 777.876903][ T24] usb 1-1: SerialNumber: syz [ 777.925313][ T24] hso 1-1:6.2: Failed to find INT IN ep [ 777.936937][ T4140] lo speed is unknown, defaulting to 1000 [ 778.100663][ T30] audit: type=1400 audit(2000000028.440:1173): avc: denied { write } for pid=4174 comm="syz.5.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 778.160597][ T1786] usb 1-1: USB disconnect, device number 53 [ 778.915664][ T4199] fuse: Bad value for 'fd' [ 779.961201][ T4216] delete_channel: no stack [ 780.457755][ T30] audit: type=1400 audit(2000000030.810:1174): avc: denied { create } for pid=4253 comm="syz.0.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 780.978240][T24896] IPVS: starting estimator thread 0... [ 781.066082][ T4294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5727'. [ 781.080956][ T4291] IPVS: using max 56 ests per chain, 134400 per kthread [ 781.591421][T24896] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 782.193099][T24896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.212221][T24896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.239874][T24896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.259662][T24896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.492220][T24896] usb 1-1: usb_control_msg returned -32 [ 782.497786][T24896] usbtmc 1-1:16.0: can't read capabilities [ 782.670954][ T5861] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 782.843475][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.865333][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.890762][ T5861] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 782.917089][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.938525][ T5861] usb 7-1: config 0 descriptor?? [ 783.425056][ T51] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 783.566138][ T5861] hid_parser_main: 457 callbacks suppressed [ 783.566221][ T5861] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 783.629707][ T5861] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 783.638751][ T5861] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 783.647208][ T5861] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 783.662471][ T5861] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 783.739012][ T5861] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 783.989197][ T5861] usb 7-1: USB disconnect, device number 71 [ 784.044813][ T4372] fido_id[4372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 784.387082][ T5861] usb 1-1: USB disconnect, device number 54 [ 786.550605][ T4451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 787.380962][ T1786] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 787.430972][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 787.440746][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 787.449591][ T51] Bluetooth: hci0: hardware error 0x00 [ 787.530208][ T4481] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 787.565197][ T1786] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 787.576643][ T4481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.587104][ T1786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.617747][ T1786] usb 7-1: Product: syz [ 787.626301][ T1786] usb 7-1: Manufacturer: syz [ 787.628968][ T4516] bond4: (slave ip6gretap1): making interface the new active one [ 787.643036][ T4516] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 787.646839][ T1786] usb 7-1: SerialNumber: syz [ 787.692489][ T1786] usb 7-1: config 0 descriptor?? [ 787.739354][ T4481] veth5: entered promiscuous mode [ 787.763223][ T4481] bond4: (slave veth5): Enslaving as an active interface with a down link [ 787.790796][ T4516] erspan0: entered allmulticast mode [ 787.813669][ T4516] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 787.832177][ T4538] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 788.241455][ T1786] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 788.457122][ T1786] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 788.519219][ T1786] usb 7-1: USB disconnect, device number 72 [ 789.076957][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5793'. [ 789.511326][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 791.031615][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5811'. [ 792.827838][ T4666] Bluetooth: MGMT ver 1.23 [ 793.136062][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 793.146330][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 793.157210][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 793.168873][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 793.177898][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 793.282343][ T4676] lo speed is unknown, defaulting to 1000 [ 793.361179][ T5810] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 793.457268][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.468718][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.494438][ T4676] chnl_net:caif_netlink_parms(): no params data found [ 793.536905][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.549507][ T5810] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 793.565179][ T5810] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.569106][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.573984][ T5810] usb 1-1: Manufacturer: syz [ 793.584738][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.592151][ T5810] usb 1-1: config 0 descriptor?? [ 793.663584][ T4773] lo speed is unknown, defaulting to 1000 [ 793.686677][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.697149][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.714284][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.721619][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.728764][ T4676] bridge_slave_0: entered allmulticast mode [ 793.736010][ T4676] bridge_slave_0: entered promiscuous mode [ 793.744470][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.752351][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.759504][ T4676] bridge_slave_1: entered allmulticast mode [ 793.767111][ T4676] bridge_slave_1: entered promiscuous mode [ 793.836566][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.849834][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.900763][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.915217][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.975957][ T4676] team0: Port device team_slave_0 added [ 793.997792][ T4676] team0: Port device team_slave_1 added [ 794.036447][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.140427][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.060941][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 795.121271][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.134612][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.141808][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.168281][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.271259][ T51] Bluetooth: hci6: command tx timeout [ 795.574350][ T4919] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5839'. [ 796.104875][ T4676] hsr_slave_0: entered promiscuous mode [ 796.112035][ T4676] hsr_slave_1: entered promiscuous mode [ 796.118196][ T4676] debugfs: 'hsr0' already exists in 'hsr' [ 796.124792][ T4676] Cannot create hsr debugfs directory [ 796.155422][ T53] bridge_slave_1: left allmulticast mode [ 796.162087][ T53] bridge_slave_1: left promiscuous mode [ 796.167941][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.178666][ T53] bridge_slave_0: left allmulticast mode [ 796.188295][ T53] bridge_slave_0: left promiscuous mode [ 796.198553][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.438616][ T5810] usb 1-1: USB disconnect, device number 55 [ 797.351521][ T51] Bluetooth: hci6: command tx timeout [ 797.493589][ T53] bond4 (unregistering): (slave bridge1): Releasing active interface [ 797.557211][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.567692][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.580536][ T53] bond0 (unregistering): Released all slaves [ 798.123273][ T53] bond1 (unregistering): Released all slaves [ 798.218237][ T53] bond2 (unregistering): Released all slaves [ 798.294895][ T53] bond3 (unregistering): (slave dummy0): Releasing active interface [ 798.305374][ T53] bond3 (unregistering): Released all slaves [ 798.319768][ T53] bond4 (unregistering): Released all slaves [ 798.757150][ T53] !: left promiscuous mode [ 798.902917][ T53] tipc: Left network mode [ 799.172241][ T5105] tipc: Enabled bearer , priority 0 [ 799.435699][ T51] Bluetooth: hci6: command tx timeout [ 799.954708][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'. [ 800.095371][ T5156] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5868'. [ 800.270676][ T30] audit: type=1400 audit(2000000050.620:1175): avc: denied { listen } for pid=5158 comm="syz.5.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.490098][ T5861] tipc: Node number set to 2062824829 [ 800.519300][ T53] hsr_slave_0: left promiscuous mode [ 800.541278][ T53] hsr_slave_1: left promiscuous mode [ 800.547314][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.555281][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.566092][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.573960][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.594373][ T53] veth1_macvtap: left promiscuous mode [ 800.599957][ T53] veth0_macvtap: left promiscuous mode [ 800.606763][ T53] veth1_vlan: left promiscuous mode [ 800.612210][ T53] veth0_vlan: left promiscuous mode [ 800.919368][ T53] team0 (unregistering): Port device macvlan0 removed [ 801.183623][ T30] audit: type=1400 audit(2000000051.540:1176): avc: denied { append } for pid=5189 comm="syz.0.5875" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 801.251934][ T30] audit: type=1400 audit(2000000051.600:1177): avc: denied { map } for pid=5196 comm="syz.6.5878" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 801.521286][ T51] Bluetooth: hci6: command tx timeout [ 801.603739][ T53] team0 (unregistering): Port device team_slave_1 removed [ 801.683235][ T53] team0 (unregistering): Port device team_slave_0 removed [ 802.404807][ T5262] netlink: 'syz.5.5892': attribute type 5 has an invalid length. [ 803.196701][ T4676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 803.235295][ T4676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 803.372112][ T4676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 803.456126][ T4676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 803.530726][ T5298] netlink: 'syz.6.5895': attribute type 10 has an invalid length. [ 803.538646][ T5298] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5895'. [ 803.924711][ T5298] batman_adv: batadv0: Adding interface: virt_wifi0 [ 803.933532][ T5298] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.959732][ T5298] batman_adv: batadv0: Interface activated: virt_wifi0 [ 804.314956][ T5326] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.350398][ T5326] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.449087][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.522742][ T5326] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.536876][ T5326] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.572934][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.588521][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.595734][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.669359][ T5326] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.718145][ T5326] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.778628][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.785728][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.863290][ T5326] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.886600][ T5326] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.127848][ T6112] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.189545][ T6112] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.246700][ T5382] netlink: 'syz.0.5912': attribute type 1 has an invalid length. [ 805.286201][ T6783] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.318095][ T6783] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.403746][ T6783] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.448652][ T6783] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.478454][ T6783] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.500257][ T6783] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.554417][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.069075][ T4676] veth0_vlan: entered promiscuous mode [ 806.091927][ T4676] veth1_vlan: entered promiscuous mode [ 806.119368][ T4676] veth0_macvtap: entered promiscuous mode [ 806.127346][ T4676] veth1_macvtap: entered promiscuous mode [ 806.139908][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.153724][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.226587][ T6936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.271458][ T6936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.284037][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.297949][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.353733][ T6936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.366795][ T6936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.400342][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.410420][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.448999][ T5446] netlink: 996 bytes leftover after parsing attributes in process `syz.6.5924'. [ 806.747320][ T5459] netlink: 892 bytes leftover after parsing attributes in process `syz.0.5926'. [ 806.808437][ T5466] netlink: 892 bytes leftover after parsing attributes in process `syz.0.5926'. [ 807.663633][T31006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 807.675434][T31006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 807.685639][T31006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 807.698407][T31006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.706594][T31006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.232031][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.252345][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.454720][ T5485] chnl_net:caif_netlink_parms(): no params data found [ 808.552452][ T5823] Bluetooth: hci4: command 0x1003 tx timeout [ 808.571282][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 809.100201][ T5647] netlink: 'syz.6.5941': attribute type 32 has an invalid length. [ 809.135122][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.147616][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5941'. [ 809.241522][T25040] ================================================================== [ 809.249600][T25040] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 809.256793][T25040] Read of size 8 at addr ffff8880587f80a8 by task khidpd_15c25886/25040 [ 809.265105][T25040] [ 809.267424][T25040] CPU: 1 UID: 0 PID: 25040 Comm: khidpd_15c25886 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.267451][T25040] Tainted: [L]=SOFTLOCKUP [ 809.267457][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 809.267469][T25040] Call Trace: [ 809.267475][T25040] [ 809.267482][T25040] dump_stack_lvl+0x100/0x190 [ 809.267508][T25040] print_report+0x156/0x4c9 [ 809.267531][T25040] ? __virt_addr_valid+0x81/0x620 [ 809.267548][T25040] ? __phys_addr+0xe8/0x180 [ 809.267565][T25040] ? __mutex_lock+0x1861/0x1b90 [ 809.267584][T25040] kasan_report+0xdf/0x1a0 [ 809.267609][T25040] ? __mutex_lock+0x1861/0x1b90 [ 809.267632][T25040] __mutex_lock+0x1861/0x1b90 [ 809.267650][T25040] ? __pfx_debug_object_deactivate+0x10/0x10 [ 809.267670][T25040] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.267691][T25040] ? l2cap_unregister_user+0x71/0x240 [ 809.267720][T25040] ? __pfx___mutex_lock+0x10/0x10 [ 809.267738][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.267766][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.267792][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.267815][T25040] ? lockdep_hardirqs_on+0x78/0x100 [ 809.267835][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.267859][T25040] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 809.267886][T25040] ? __timer_delete_sync+0x151/0x1c0 [ 809.267913][T25040] ? l2cap_unregister_user+0x71/0x240 [ 809.267937][T25040] l2cap_unregister_user+0x71/0x240 [ 809.267963][T25040] hidp_session_thread+0x459/0x680 [ 809.267983][T25040] ? __pfx_hidp_session_thread+0x10/0x10 [ 809.268003][T25040] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 809.268022][T25040] ? __kthread_parkme+0xbb/0x230 [ 809.268048][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.268070][T25040] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 809.268096][T25040] ? __kthread_parkme+0x18c/0x230 [ 809.268123][T25040] ? __pfx_hidp_session_thread+0x10/0x10 [ 809.268142][T25040] kthread+0x3b3/0x730 [ 809.268160][T25040] ? __pfx_kthread+0x10/0x10 [ 809.268177][T25040] ? ret_from_fork+0x79/0xaf0 [ 809.268196][T25040] ? ret_from_fork+0x79/0xaf0 [ 809.268216][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.268238][T25040] ? __pfx_kthread+0x10/0x10 [ 809.268256][T25040] ret_from_fork+0x754/0xaf0 [ 809.268276][T25040] ? __pfx_ret_from_fork+0x10/0x10 [ 809.268296][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.268318][T25040] ? __switch_to+0x7b9/0x10c0 [ 809.268341][T25040] ? __pfx_kthread+0x10/0x10 [ 809.268360][T25040] ret_from_fork_asm+0x1a/0x30 [ 809.268396][T25040] [ 809.268402][T25040] [ 809.479815][ T5485] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.482651][T25040] The buggy address belongs to the physical page: [ 809.482661][T25040] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880587fba80 pfn:0x587f8 [ 809.482678][T25040] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 809.488123][ T5485] bridge_slave_0: entered allmulticast mode [ 809.492598][T25040] raw: 00fff00000000000 ffffea0001ed1608 ffff8880b8540f80 0000000000000000 [ 809.492615][T25040] raw: ffff8880587fba80 0000000000000000 00000000ffffffff 0000000000000000 [ 809.498341][ T5485] bridge_slave_0: entered promiscuous mode [ 809.501806][T25040] page dumped because: kasan: bad access detected [ 809.501816][T25040] page_owner tracks the page as freed [ 809.501822][T25040] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 22162, tgid 22162 (syz-executor), ts 350207940720, free_ts 809200444857 [ 809.501848][T25040] post_alloc_hook+0x1e1/0x250 [ 809.501867][T25040] get_page_from_freelist+0xe3d/0x2e10 [ 809.501882][T25040] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 809.501898][T25040] alloc_pages_mpol+0x1fb/0x550 [ 809.501918][T25040] ___kmalloc_large_node+0x104/0x150 [ 809.501942][T25040] __kmalloc_large_node_noprof+0x1c/0x70 [ 809.632826][T25040] __kmalloc_noprof+0x6b1/0x9c0 [ 809.637662][T25040] hci_alloc_dev_priv+0x1d/0x28a0 [ 809.642664][T25040] __vhci_create_device+0xf0/0x880 [ 809.647761][T25040] vhci_write+0x2c4/0x490 [ 809.652073][T25040] vfs_write+0x6ac/0x1070 [ 809.656383][T25040] ksys_write+0x12a/0x250 [ 809.660689][T25040] do_syscall_64+0xc9/0xf80 [ 809.665171][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.671052][T25040] page last free pid 22162 tgid 22162 stack trace: [ 809.677535][T25040] __free_frozen_pages+0x822/0x1130 [ 809.682716][T25040] hci_release_dev+0x4ef/0x630 [ 809.687457][T25040] bt_host_release+0x6a/0xb0 [ 809.692027][T25040] device_release+0xa4/0x240 [ 809.696598][T25040] kobject_put+0x1f7/0x640 [ 809.700992][T25040] put_device+0x1f/0x30 [ 809.705135][T25040] vhci_release+0x185/0x230 [ 809.709617][T25040] __fput+0x3ff/0xb40 [ 809.713581][T25040] task_work_run+0x150/0x240 [ 809.718149][T25040] do_exit+0x829/0x2a30 [ 809.722280][T25040] do_group_exit+0xd5/0x2a0 [ 809.726759][T25040] get_signal+0x1ec7/0x21e0 [ 809.731241][T25040] arch_do_signal_or_restart+0x91/0x7a0 [ 809.736767][T25040] exit_to_user_mode_loop+0x86/0x4b0 [ 809.742029][T25040] do_syscall_64+0x4fe/0xf80 [ 809.746595][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.752464][T25040] [ 809.754763][T25040] Memory state around the buggy address: [ 809.760366][T25040] ffff8880587f7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.768400][T25040] ffff8880587f8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 809.776437][T25040] >ffff8880587f8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 809.784468][T25040] ^ [ 809.789817][T25040] ffff8880587f8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 809.797848][T25040] ffff8880587f8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 809.805880][T25040] ================================================================== [ 809.814136][T25040] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 809.821322][T25040] CPU: 1 UID: 0 PID: 25040 Comm: khidpd_15c25886 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.832677][T25040] Tainted: [L]=SOFTLOCKUP [ 809.836979][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 809.847009][T25040] Call Trace: [ 809.850266][T25040] [ 809.853174][T25040] dump_stack_lvl+0x100/0x190 [ 809.857846][T25040] vpanic+0x20d/0x630 [ 809.861891][T25040] panic+0xd1/0xd1 [ 809.865589][T25040] ? __pfx_panic+0x10/0x10 [ 809.869983][T25040] ? check_panic_on_warn+0x1f/0x90 [ 809.875073][T25040] check_panic_on_warn.cold+0x19/0x34 [ 809.880429][T25040] end_report.part.0+0x3a/0x90 [ 809.885176][T25040] kasan_report.cold+0xe/0x18 [ 809.889845][T25040] ? __mutex_lock+0x1861/0x1b90 [ 809.894677][T25040] __mutex_lock+0x1861/0x1b90 [ 809.899334][T25040] ? __pfx_debug_object_deactivate+0x10/0x10 [ 809.905291][T25040] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.910641][T25040] ? l2cap_unregister_user+0x71/0x240 [ 809.915998][T25040] ? __pfx___mutex_lock+0x10/0x10 [ 809.921003][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.926619][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.932233][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.936979][T25040] ? lockdep_hardirqs_on+0x78/0x100 [ 809.942172][T25040] ? __try_to_del_timer_sync+0x107/0x160 [ 809.947793][T25040] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 809.953755][T25040] ? __timer_delete_sync+0x151/0x1c0 [ 809.959032][T25040] ? l2cap_unregister_user+0x71/0x240 [ 809.964384][T25040] l2cap_unregister_user+0x71/0x240 [ 809.969568][T25040] hidp_session_thread+0x459/0x680 [ 809.974658][T25040] ? __pfx_hidp_session_thread+0x10/0x10 [ 809.980270][T25040] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 809.986494][T25040] ? __kthread_parkme+0xbb/0x230 [ 809.991415][T25040] ? rcu_is_watching+0x12/0xc0 [ 809.996161][T25040] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 810.002380][T25040] ? __kthread_parkme+0x18c/0x230 [ 810.007386][T25040] ? __pfx_hidp_session_thread+0x10/0x10 [ 810.012997][T25040] kthread+0x3b3/0x730 [ 810.017043][T25040] ? __pfx_kthread+0x10/0x10 [ 810.021619][T25040] ? ret_from_fork+0x79/0xaf0 [ 810.026274][T25040] ? ret_from_fork+0x79/0xaf0 [ 810.030931][T25040] ? rcu_is_watching+0x12/0xc0 [ 810.035681][T25040] ? __pfx_kthread+0x10/0x10 [ 810.040249][T25040] ret_from_fork+0x754/0xaf0 [ 810.044819][T25040] ? __pfx_ret_from_fork+0x10/0x10 [ 810.049919][T25040] ? rcu_is_watching+0x12/0xc0 [ 810.054661][T25040] ? __switch_to+0x7b9/0x10c0 [ 810.059320][T25040] ? __pfx_kthread+0x10/0x10 [ 810.063887][T25040] ret_from_fork_asm+0x1a/0x30 [ 810.068646][T25040] [ 810.071918][T25040] Kernel Offset: disabled [ 810.076217][T25040] Rebooting in 86400 seconds..