last executing test programs: 5m58.260267597s ago: executing program 4 (id=3646): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000680)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000580), 0xd21, 0x200) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x14e7c00, 0x9}}) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000200004801c0001800b00010065787468647200000c5a02800800064000000003140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5, 0x8c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x335, 0xefffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xfffffffffffffc00, 0x9, 0x9, 0xffffffffffff0001, 0x1, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) close_range(r0, 0xffffffffffffffff, 0x0) 5m54.124240264s ago: executing program 4 (id=3662): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) sysinfo(&(0x7f0000000000)=""/35) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4048850) connect$inet6(r4, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast=0xfffffffe}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000200)={0x0, 'netdevsim0\x00', {0x2}, 0xfff8}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) 5m52.674616351s ago: executing program 4 (id=3670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x17e}) 5m52.556241925s ago: executing program 4 (id=3671): syz_io_uring_setup(0x1d89, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x17ffff}, &(0x7f0000000340), &(0x7f0000000280)) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeba, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000005c0)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x100, 0x9, r3, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x401, 0x8000, 'syz1\x00', 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) chmod(&(0x7f00000002c0)='./file0\x00', 0xc2) prctl$PR_SCHED_CORE(0x3e, 0x10000, r3, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0xf80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5m50.184554238s ago: executing program 4 (id=3680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x20000, 0x81, 0x12, 0x0, 0x4}, 0x9c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x22, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa400000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x6, 0x20, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000f80)=""/4096, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x2, 0x4, 0x10000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xc, 0x3}], 0x10, 0xf}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=0x1, 0x24, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001fc0)={r3, r3, 0x4e1ab994a1ed7da3, 0x0, @val=@tcx={@void, @value, @void, @void, r4}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x1, @local}}}, 0x108) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000030801040000000000000000020000052400048008000140000000040800024000007046c4da935bbbf3000908000240fffffff60800014000000007050003003a000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 5m49.052791847s ago: executing program 4 (id=3687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x20, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x24, 0x2) io_submit(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000040), 0x17, 0x0, &(0x7f0000000080)="c7f2f3eaed02276aa89c280c68a8666bd645bd9c44cc0c"}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) 5m33.627320184s ago: executing program 32 (id=3687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x20, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x24, 0x2) io_submit(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000040), 0x17, 0x0, &(0x7f0000000080)="c7f2f3eaed02276aa89c280c68a8666bd645bd9c44cc0c"}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) 3m49.847015411s ago: executing program 0 (id=4063): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x42, 0x309}, 0x18}}, 0x0) 3m48.956312677s ago: executing program 0 (id=4068): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x348, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x11, 0x8, 0x3a}, {@empty, 0x4e21, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setattr(r3, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x90200, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x80400, 0x40) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) accept4$unix(r5, 0x0, &(0x7f0000000140), 0x800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) socket$key(0xf, 0x3, 0x2) msgctl$MSG_INFO(0x0, 0xc, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xd9) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) socket$inet6_sctp(0xa, 0x0, 0x84) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m47.924936991s ago: executing program 0 (id=4073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x2804cdc, 0x0) 3m47.858816116s ago: executing program 0 (id=4074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2804cdc, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m47.765580442s ago: executing program 0 (id=4075): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1, 0x400303) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffdfffd) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') close(0x3) lseek(r3, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ptrace(0x10, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240a41, 0x0) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="0007c30d00000200020000000100060e5de01e8f76f086b294e08a4ac604c9abf972c6a6dbf3374bb40b576ca7365d0ea839605a9c0396665bc29953db917815cca3bc779e66344fa44c7ce565e4896fb495fe336861969b8f172f2d5e499e366955f79fc2d60cbc55932ba85a302a85ba3928f649bae9d217b1c0544b5df8a0c9e0672d98ee44fb91dba8863883c13ad4c7af14536b15e267de16825d46e6af9416e513d8aa0ffebffb2a3178e6bd6afac478bc4c3f7ebe11e7a6ee8cd6059ea084f7bebe350631784a37a9e20a01f8ffff6dcd68c72c00"/227], 0xe3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0x18) connect$unix(r4, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) socket(0x23, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_NOP={0x0, 0x11}) 3m42.695231966s ago: executing program 0 (id=4088): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000001100)='./file0\x00') r4 = memfd_create(&(0x7f00000001c0)='9p\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000180)={0x8, 0x0, '\x00', 0x0, &(0x7f0000000140)}) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x374b) 3m27.171697783s ago: executing program 33 (id=4088): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000001100)='./file0\x00') r4 = memfd_create(&(0x7f00000001c0)='9p\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000180)={0x8, 0x0, '\x00', 0x0, &(0x7f0000000140)}) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x374b) 4.262507384s ago: executing program 6 (id=5108): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef8f0838a6fe99b000ee0f30f3400f09660f38803f8f23c00f21f835020002001723f8c40279134e9ac4c17b117d0d000000000001c5", 0x4f}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0xeeef0004, 0x2, 0x6, 0x400, 0x0, [{0x2, 0xc5, 0xa3, '\x00', 0x4}, {0x7, 0x5a, 0x5, '\x00', 0x9}, {0x7, 0xf, 0x3, '\x00', 0x6}, {0xf4, 0x5, 0x1, '\x00', 0xc}, {0x10, 0x3, 0x6, '\x00', 0x6}, {0x4, 0x9, 0xc}, {0x4, 0x6, 0xf7, '\x00', 0x8}, {0x5, 0x5, 0x9, '\x00', 0x2}, {0xd9, 0xa, 0x9, '\x00', 0x1}, {0x4, 0x1, 0x84, '\x00', 0x4}, {0x5, 0xfe, 0x9, '\x00', 0x8}, {0x9, 0x0, 0x9, '\x00', 0x75}, {0x9, 0x6, 0x23, '\x00', 0x1}, {0x8, 0xd, 0xd0, '\x00', 0x6}, {0x1, 0x6, 0x9, '\x00', 0x6}, {0x8, 0x0, 0x34, '\x00', 0x3}, {0x81, 0xb, 0xa, '\x00', 0x81}, {0x81, 0x1c, 0x3, '\x00', 0x8}, {0x5, 0x8, 0x8, '\x00', 0x7}, {0x9, 0x7, 0x69, '\x00', 0x9}, {0x5, 0x8, 0xc, '\x00', 0x80}, {0x4, 0x7, 0xd4, '\x00', 0x3}, {0x9, 0x6, 0x10, '\x00', 0x2}, {0x8, 0x7, 0x6, '\x00', 0x9}]}}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.091287818s ago: executing program 6 (id=5111): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.791852123s ago: executing program 1 (id=5114): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') rename(&(0x7f0000000000)='./file2\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r6 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r6, 0x0, 0x0, 0x100000000) syz_emit_ethernet(0x154, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 3.373550242s ago: executing program 2 (id=5116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) memfd_create(0x0, 0x7) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000580)={0x50, 0x0, r2, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) 3.305102205s ago: executing program 2 (id=5118): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003d000b08d25a80648c7494f90324fc1d5aca56b593600b0002400a000000053582c137153e3719ac018000f01700d1bdd3452aba749926af59d15665d3e9dd917df517279d476a34bb6d27459076a37c9bb36f8bed3569372d453a041b2e2fabf9621d5026c7dd71ed342359b17f1810414ebc4fb3122890d4ca68ec6f0e54d7e2b39bd190f59bf3126c2fbbefacaacd989c2a4b4268748b1f53bc7d9d1c383d794a673476289edc15650279fd6bd1f5ffde4c8f21a121f63c7f9243ac7a06fec1ddb27503e1432270ffa30044150eaebb67e039d50be034f80f57b427be01a8af", 0xe5}], 0x100000000000012c}, 0x4048801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000000c0)={0x16, 0x5, 0x3}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)={0xe400000000000000, 0xeeef0000, 0x401, 0x2, 0x3}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'batadv0\x00', {0x4}, 0x8}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002340)=@migrate={0xa0, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in6=@remote, 0x4e21, 0xfff, 0x4e21, 0x8, 0xa, 0x20, 0x80, 0xff, 0x0, 0xffffffffffffffff}, 0x6e6bb6, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@rand_addr=0x64010102, @in=@private=0xa010100, @in6=@rand_addr=' \x01\x00', 0x348f6f258fa9637, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c4) r7 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x0, 0x6000, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2}) 3.204158926s ago: executing program 6 (id=5119): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r2, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 3.129339891s ago: executing program 6 (id=5121): socket$xdp(0x2c, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a80)=""/228, 0xe4}], 0x2}, 0xfffffff8}], 0x2, 0x2, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x61) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.359758878s ago: executing program 1 (id=5124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) sigaltstack(0x0, 0x0) 2.261088599s ago: executing program 1 (id=5126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) 2.10190478s ago: executing program 1 (id=5131): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.806107085s ago: executing program 1 (id=5136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) sigaltstack(0x0, 0x0) 1.700228652s ago: executing program 1 (id=5139): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000021000904000002923350000905060bff030000000905ba"], 0x0) 1.699452381s ago: executing program 5 (id=5140): r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) 1.657636743s ago: executing program 5 (id=5141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008055}, 0x4000001) 1.62033694s ago: executing program 5 (id=5142): socket(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 1.555685264s ago: executing program 5 (id=5143): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@access_uid}, {@dfltuid}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f00000076c0)={0x2020}, 0x2020) 1.523654974s ago: executing program 5 (id=5144): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe2(&(0x7f00000000c0), 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x400, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x154800}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.457317435s ago: executing program 2 (id=5146): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1.455995901s ago: executing program 5 (id=5147): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a000301000000090400000001010000"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x18, @string={0x18, 0x3, "1534e5439eb985b676b1a4393426417c1d533d889aa7"}}}, 0x0) 1.362408932s ago: executing program 3 (id=5149): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 1.320611899s ago: executing program 3 (id=5150): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x6801, 0x80000001, 0x9, 0xffffffff, 0x879f, 0x8}) 1.19637979s ago: executing program 3 (id=5151): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x82040, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x0, 0xee00, 0x3, 0xf2ee}, 0x0, 0x0, 0x3, 0x8dc, 0xb8d, 0x5, 0x8, 0xc, 0x3, 0x8000}) 1.085180305s ago: executing program 3 (id=5152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r0) 799.709853ms ago: executing program 6 (id=5153): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) fchdir(r0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) 564.344684ms ago: executing program 3 (id=5154): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 564.113855ms ago: executing program 6 (id=5155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f00000001c0)={0x40, 0x6, 0x59, {0x59, 0xf, "00030000007a5da01de3bf38b57a31e8f4eba3287c27a8425856f2275ce88875b8a55e1b96137e59e63df47c979a13d172f5742672a90b8beb0483cc3af58b99bfe5854a16fc39a01d6a5ee231052ff50c5884ebc894c6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 493.564344ms ago: executing program 2 (id=5156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 356.957704ms ago: executing program 3 (id=5157): r0 = syz_open_dev$video(0x0, 0x7, 0x0) dup(r0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000140021010000000000000000230000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0xe) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 99.102688ms ago: executing program 2 (id=5158): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0180bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"3f95bf504ac9f164adc3cb0605588d5e47e35905d98df3fc9cd0972169e16c42", r4}) 0s ago: executing program 2 (id=5159): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="070000000c000000083e4c153693c5166f1bf167f0a07ebba702000021dfa08a1aca50daca41d99ef53c6f93cd084a869dc1ebb68018b72a48800212d66f7bc6796d30841444ff79e44a62676fdf946a048ea89d92d2030892e2ac6175720d78fb6746b5bf2baa9871d028572bf0b39331e59365d7879ed4c9aaa575f6789405feb4e2b8fac205e8190acb5066"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xfdef) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) kernel console output (not intermixed with test programs): ir permissive=1 [ 1405.072765][T23898] chnl_net:caif_netlink_parms(): no params data found [ 1405.559468][ T30] audit: type=1400 audit(1756960920.895:2662): avc: denied { add_name } for pid=23943 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.559539][ T1156] hsr_slave_0: left promiscuous mode [ 1405.593909][ T30] audit: type=1400 audit(1756960920.895:2663): avc: denied { create } for pid=23943 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1405.627654][ T30] audit: type=1400 audit(1756960920.895:2664): avc: denied { write } for pid=23943 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=13971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1405.661616][ T1156] hsr_slave_1: left promiscuous mode [ 1405.674792][ T30] audit: type=1400 audit(1756960920.895:2665): avc: denied { append } for pid=23943 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=13971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1405.753631][ T30] audit: type=1400 audit(1756960921.125:2666): avc: denied { remove_name } for pid=23959 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=13971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.784945][ T30] audit: type=1400 audit(1756960921.125:2667): avc: denied { unlink } for pid=23959 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=13971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1406.407988][T23893] smc: removing ib device sz1 [ 1406.410731][T23898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.422943][T23898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.431413][T23898] bridge_slave_0: entered allmulticast mode [ 1406.451288][T23898] bridge_slave_0: entered promiscuous mode [ 1406.490495][T23898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.505715][T23898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.520895][T23898] bridge_slave_1: entered allmulticast mode [ 1406.549906][T23898] bridge_slave_1: entered promiscuous mode [ 1406.658747][T23898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.672963][T17730] Bluetooth: hci1: command tx timeout [ 1406.700666][T23898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.847982][T23898] team0: Port device team_slave_0 added [ 1406.860709][T23898] team0: Port device team_slave_1 added [ 1407.060274][T23898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.092894][T23898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.155096][T23898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.186257][T23898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.197966][T23898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.227733][T23898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.371542][T23898] hsr_slave_0: entered promiscuous mode [ 1407.397926][T23898] hsr_slave_1: entered promiscuous mode [ 1407.404962][T23898] debugfs: 'hsr0' already exists in 'hsr' [ 1407.410697][T23898] Cannot create hsr debugfs directory [ 1408.487715][ T1156] bond0 (unregistering): Released all slaves [ 1408.594325][ T1156] bond1 (unregistering): Released all slaves [ 1408.605996][ T1156] bond2 (unregistering): Released all slaves [ 1408.618694][ T1156] bond3 (unregistering): Released all slaves [ 1408.726558][T23898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1408.752438][T17730] Bluetooth: hci1: command tx timeout [ 1408.768622][T23898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1408.799926][T23898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1408.812617][T23898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1408.930194][ T1156] hsr_slave_0: left promiscuous mode [ 1408.936068][ T1156] hsr_slave_1: left promiscuous mode [ 1409.547731][T23898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.561609][T23898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.576595][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.583742][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.598676][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.605805][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.763425][ T1156] IPVS: stop unused estimator thread 0... [ 1409.796740][T23898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.831829][T23898] veth0_vlan: entered promiscuous mode [ 1409.841319][T23898] veth1_vlan: entered promiscuous mode [ 1409.863718][T23898] veth0_macvtap: entered promiscuous mode [ 1409.871655][T23898] veth1_macvtap: entered promiscuous mode [ 1409.886372][T23898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.900840][T23898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.916572][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.925615][ T3619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.938664][ T3619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.948025][ T3619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.005704][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.018352][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.040928][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.049278][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.147130][ T30] audit: type=1400 audit(1756960925.514:2668): avc: denied { read } for pid=24020 comm="syz.1.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1410.248802][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1410.842421][T17730] Bluetooth: hci1: command tx timeout [ 1422.677717][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.597573][ T30] audit: type=1326 audit(1756960949.951:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1434.775666][ T30] audit: type=1326 audit(1756960949.951:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1434.827210][ T43] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1434.948936][T22155] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1435.026032][ T30] audit: type=1326 audit(1756960949.961:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1435.115532][ T43] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1435.179524][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.287574][ T43] usb 6-1: config 0 descriptor?? [ 1435.324192][T22155] usb 2-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 1435.342628][ T30] audit: type=1326 audit(1756960949.961:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1435.378445][T22155] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 1435.395115][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1435.478628][T22155] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1435.513149][ T5954] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1435.537596][T23905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1435.547076][T23905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1435.555133][T23905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1435.563626][T23905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1435.572139][T23905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1435.594708][ T30] audit: type=1326 audit(1756960949.961:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1435.621091][ T43] gp8psk: usb in 128 operation failed. [ 1435.665226][T22155] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1435.674289][T22155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.806362][ T30] audit: type=1326 audit(1756960950.001:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1435.831067][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 1435.838704][T22155] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1435.857136][ T5954] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1435.885868][T22155] usb 2-1: invalid MIDI out EP 0 [ 1435.901650][ T5954] usb 4-1: config 0 has no interface number 0 [ 1435.907514][ T43] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 1435.911489][ T5954] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1436.035572][ T30] audit: type=1326 audit(1756960950.001:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1436.106412][ T43] gp8psk: usb in 149 operation failed. [ 1436.120566][ T43] gp8psk: failed to get FPGA version [ 1436.137891][ T43] gp8psk: usb in 138 operation failed. [ 1436.143346][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1436.180441][T24102] delete_channel: no stack [ 1436.197533][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1436.237313][ T43] usb 6-1: USB disconnect, device number 29 [ 1436.288955][ T5954] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1436.308227][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.340906][ T30] audit: type=1326 audit(1756960950.001:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1436.366896][ T5954] usb 4-1: Product: syz [ 1436.371376][ T5954] usb 4-1: Manufacturer: syz [ 1436.377939][ T5954] usb 4-1: SerialNumber: syz [ 1436.383194][ T30] audit: type=1326 audit(1756960950.011:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1436.407612][ T5954] usb 4-1: config 0 descriptor?? [ 1436.419108][ T5954] smsc75xx v1.0.0 [ 1436.422911][ T30] audit: type=1326 audit(1756960950.011:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1436.442748][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1436.534057][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1436.567466][T22155] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1436.593047][T22155] usb 2-1: USB disconnect, device number 103 [ 1436.648909][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1436.860356][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1436.954092][T24107] chnl_net:caif_netlink_parms(): no params data found [ 1437.010067][T24119] FAULT_INJECTION: forcing a failure. [ 1437.010067][T24119] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.035515][T24119] CPU: 1 UID: 0 PID: 24119 Comm: syz.5.4186 Not tainted syzkaller #0 PREEMPT(full) [ 1437.035542][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1437.035552][T24119] Call Trace: [ 1437.035558][T24119] [ 1437.035567][T24119] dump_stack_lvl+0x16c/0x1f0 [ 1437.035591][T24119] should_fail_ex+0x512/0x640 [ 1437.035607][T24119] ? __kmalloc_noprof+0xbf/0x510 [ 1437.035625][T24119] ? fib6_info_alloc+0x40/0x160 [ 1437.035643][T24119] should_failslab+0xc2/0x120 [ 1437.035662][T24119] __kmalloc_noprof+0xd2/0x510 [ 1437.035680][T24119] ? fib6_get_table+0x1f/0x140 [ 1437.035703][T24119] fib6_info_alloc+0x40/0x160 [ 1437.035725][T24119] ip6_route_info_create+0x14c/0x870 [ 1437.035742][T24119] ip6_route_add.part.0+0x22/0x1d0 [ 1437.035756][T24119] inet6_rtm_newroute+0x185/0x1a0 [ 1437.035769][T24119] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1437.035803][T24119] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1437.035824][T24119] rtnetlink_rcv_msg+0x95b/0xe90 [ 1437.035847][T24119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.035864][T24119] ? __lock_acquire+0xb97/0x1ce0 [ 1437.035885][T24119] ? irqentry_exit+0x3b/0x90 [ 1437.035901][T24119] netlink_rcv_skb+0x155/0x420 [ 1437.035916][T24119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.035930][T24119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1437.035948][T24119] ? rcu_is_watching+0x12/0xc0 [ 1437.035984][T24119] netlink_unicast+0x5aa/0x870 [ 1437.036007][T24119] ? __pfx_netlink_unicast+0x10/0x10 [ 1437.036022][T24119] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1437.036039][T24119] netlink_sendmsg+0x8d1/0xdd0 [ 1437.036055][T24119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.036074][T24119] ____sys_sendmsg+0xa98/0xc70 [ 1437.036097][T24119] ? copy_msghdr_from_user+0x10a/0x160 [ 1437.036115][T24119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1437.036140][T24119] ? rcu_is_watching+0x12/0xc0 [ 1437.036158][T24119] ? finish_task_switch.isra.0+0x221/0xc10 [ 1437.036172][T24119] ? lockdep_hardirqs_on+0x7c/0x110 [ 1437.036187][T24119] ___sys_sendmsg+0x134/0x1d0 [ 1437.036200][T24119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1437.036230][T24119] ? irqentry_exit_to_user_mode+0x1d0/0x270 [ 1437.036256][T24119] __sys_sendmsg+0x16d/0x220 [ 1437.036275][T24119] ? __pfx___sys_sendmsg+0x10/0x10 [ 1437.036292][T24119] ? fput+0x88/0xd0 [ 1437.036318][T24119] do_syscall_64+0xcd/0x4c0 [ 1437.036332][T24119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.036344][T24119] RIP: 0033:0x7fc1a2f8ebe9 [ 1437.036354][T24119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.036367][T24119] RSP: 002b:00007fc1a3e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.036384][T24119] RAX: ffffffffffffffda RBX: 00007fc1a31b5fa0 RCX: 00007fc1a2f8ebe9 [ 1437.036395][T24119] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000008 [ 1437.036405][T24119] RBP: 00007fc1a3e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.036415][T24119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.036425][T24119] R13: 00007fc1a31b6038 R14: 00007fc1a31b5fa0 R15: 00007ffcafbdd9d8 [ 1437.036446][T24119] [ 1437.346186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1437.561467][ T5954] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1437.590281][ T5954] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1437.637875][T17730] Bluetooth: hci3: command tx timeout [ 1438.103524][T24107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.459865][T24107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.467709][T24107] bridge_slave_0: entered allmulticast mode [ 1438.474601][T24107] bridge_slave_0: entered promiscuous mode [ 1438.484716][T24107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.492027][T24107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.509030][T24107] bridge_slave_1: entered allmulticast mode [ 1438.520145][T24107] bridge_slave_1: entered promiscuous mode [ 1438.614983][ T64] gretap0: left allmulticast mode [ 1438.620478][ T64] gretap0: left promiscuous mode [ 1438.697493][ T64] bridge0: port 1(gretap0) entered disabled state [ 1439.182099][T24152] ufs: You didn't specify the type of your ufs filesystem [ 1439.182099][T24152] [ 1439.182099][T24152] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1439.182099][T24152] [ 1439.182099][T24152] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1439.213133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.219988][T24152] ufs: ufstype=old is supported read-only [ 1439.237801][T24152] ufs: ufs_fill_super(): bad magic number [ 1439.824052][T17730] Bluetooth: hci3: command tx timeout [ 1440.111383][ T5954] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1440.195041][ T5954] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1440.213847][ T5954] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1440.329483][ T5954] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1440.345110][ T5954] usb 4-1: USB disconnect, device number 101 [ 1440.438227][T24162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1441.786006][T22155] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1441.886947][T17730] Bluetooth: hci3: command tx timeout [ 1441.988807][T22155] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1442.017561][T22155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.042034][T22155] usb 2-1: config 0 descriptor?? [ 1442.075362][T22155] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1442.280459][T22155] gp8psk: usb in 128 operation failed. [ 1442.308156][ T64] bond0 (unregistering): Released all slaves [ 1442.463200][ T64] bond1 (unregistering): Released all slaves [ 1442.510781][T22155] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 1442.598276][ T64] bond2 (unregistering): (slave veth3): Releasing active interface [ 1442.608286][ T64] bond2 (unregistering): Released all slaves [ 1442.694431][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1442.748013][T24170] netlink: 'syz.5.4196': attribute type 11 has an invalid length. [ 1442.765361][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1442.810205][T24107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.851863][T22155] gp8psk: usb in 149 operation failed. [ 1442.857782][T22155] gp8psk: failed to get FPGA version [ 1442.865369][T24107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.884884][T22155] gp8psk: usb in 138 operation failed. [ 1442.890798][T22155] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1442.927227][T22155] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1442.927784][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1442.946114][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1442.946129][ T30] audit: type=1400 audit(1756960958.300:2733): avc: denied { mount } for pid=24181 comm="syz.3.4199" name="/" dev="rpc_pipefs" ino=74795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1442.983662][T24170] netlink: 'syz.5.4196': attribute type 11 has an invalid length. [ 1442.993172][T24184] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 1442.999100][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1443.010351][ T1106] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.024207][T22155] usb 2-1: USB disconnect, device number 104 [ 1443.030562][ T1106] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.164349][ T1106] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.351352][T24107] team0: Port device team_slave_0 added [ 1443.388896][ T1106] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.432395][T24107] team0: Port device team_slave_1 added [ 1443.677679][T24107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.695209][T24107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.744138][T24107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.805544][T24107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.813829][T24107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.845363][T24107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.976960][T17730] Bluetooth: hci3: command tx timeout [ 1444.004073][ T64] hsr_slave_0: left promiscuous mode [ 1444.011702][ T64] hsr_slave_1: left promiscuous mode [ 1444.486250][ T5954] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1444.509837][ T64] veth1_macvtap: left allmulticast mode [ 1444.542650][ T64] pimreg (unregistering): left allmulticast mode [ 1444.679641][ T5954] usb 6-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 1444.742606][ T5954] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 1444.855815][ T5954] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.926821][ T5954] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1445.037605][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.037642][ T30] audit: type=1400 audit(1756960960.380:2734): avc: denied { lock } for pid=24211 comm="syz.1.4203" path="socket:[74840]" dev="sockfs" ino=74840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1445.222150][ T5954] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.280412][ T5954] usb 6-1: invalid MIDI out EP 0 [ 1445.471320][T24199] delete_channel: no stack [ 1445.523048][ T5954] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1445.535607][T24221] udevd[24221]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.588464][ T5954] usb 6-1: USB disconnect, device number 30 [ 1446.346143][ T30] audit: type=1400 audit(1756960961.710:2735): avc: denied { read write } for pid=24224 comm="syz.6.4204" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1446.374614][ T30] audit: type=1400 audit(1756960961.710:2736): avc: denied { open } for pid=24224 comm="syz.6.4204" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1446.431699][ T30] audit: type=1400 audit(1756960961.800:2737): avc: denied { getopt } for pid=24224 comm="syz.6.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1447.106100][T24107] hsr_slave_0: entered promiscuous mode [ 1447.115923][T24107] hsr_slave_1: entered promiscuous mode [ 1447.387632][ T30] audit: type=1326 audit(1756960962.740:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1447.411102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.767454][ T64] IPVS: stop unused estimator thread 0... [ 1447.796391][ T30] audit: type=1326 audit(1756960962.790:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1448.677084][ T30] audit: type=1326 audit(1756960962.800:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1448.893926][ T30] audit: type=1326 audit(1756960962.800:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.037007][ T30] audit: type=1326 audit(1756960962.800:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.061735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.136409][T24107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1449.168997][T24107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1449.203520][T24272] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1449.223072][T24107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1449.237869][ T30] audit: type=1326 audit(1756960962.800:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.261332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.319797][T24107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1449.485365][ T30] audit: type=1326 audit(1756960962.800:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.606314][ T30] audit: type=1326 audit(1756960962.800:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.744738][ T30] audit: type=1326 audit(1756960962.800:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.832058][ T30] audit: type=1326 audit(1756960962.800:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.883944][T24107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.921497][ T30] audit: type=1326 audit(1756960962.800:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1449.995645][T24107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.998305][ T30] audit: type=1326 audit(1756960962.800:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc91cb8ebe9 code=0x7ffc0000 [ 1450.025550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.108965][T23893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.116131][T23893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.181220][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.188308][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.551514][T24107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.967938][ T5954] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1451.151700][T24314] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1451.187776][ T5954] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1451.301998][ T5954] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.325449][ T5954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1451.335089][T24107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.361242][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1451.376490][T24316] svc: failed to register nfsdv3 RPC service (errno 111). [ 1451.390831][ T5954] usb 4-1: SerialNumber: syz [ 1451.402351][T24316] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1451.422302][T24303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1451.509141][T24107] veth0_vlan: entered promiscuous mode [ 1451.548696][T24107] veth1_vlan: entered promiscuous mode [ 1451.644277][ T5954] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1451.715083][T24107] veth0_macvtap: entered promiscuous mode [ 1451.732570][ T5954] usb 4-1: USB disconnect, device number 102 [ 1451.745014][T24107] veth1_macvtap: entered promiscuous mode [ 1451.791118][T24107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.815613][T24107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.836891][ T8661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.861841][ T8661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.891166][ T8661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.946137][ T8661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.969543][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.985110][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.021606][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.031266][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.038275][T24341] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1453.090034][T24341] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1453.165693][T24341] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1453.243724][T24341] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1453.565871][ T5954] hid_parser_main: 7 callbacks suppressed [ 1453.566951][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.582603][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.590673][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.664829][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.722622][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.764952][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.843903][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1453.845574][T23905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1453.867865][T23905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1453.879406][T23905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1453.887035][T23905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1453.896014][T23905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1454.067480][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1454.087743][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1454.097712][ T5954] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1454.108717][ T5954] hid-generic 0006:0004:0009.0030: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1454.404457][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1454.587795][T24364] fido_id[24364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1454.764430][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1454.764444][ T30] audit: type=1400 audit(1756960970.119:2783): avc: denied { bind } for pid=24370 comm="syz.5.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1454.960139][ T30] audit: type=1400 audit(1756960970.309:2784): avc: denied { listen } for pid=24370 comm="syz.5.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1455.122541][T24374] netlink: 'syz.5.4225': attribute type 1 has an invalid length. [ 1455.134369][T24374] netlink: 'syz.5.4225': attribute type 2 has an invalid length. [ 1455.154084][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4225'. [ 1455.673040][T24374] netlink: 'syz.5.4225': attribute type 4 has an invalid length. [ 1455.703012][T24374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=24374 comm=syz.5.4225 [ 1455.783728][T24350] chnl_net:caif_netlink_parms(): no params data found [ 1456.524633][T17730] Bluetooth: hci0: command tx timeout [ 1456.719376][T24350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.728457][T24350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.735673][T24350] bridge_slave_0: entered allmulticast mode [ 1456.943547][T24350] bridge_slave_0: entered promiscuous mode [ 1457.000234][T24350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.020142][T24350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.035024][T24350] bridge_slave_1: entered allmulticast mode [ 1457.115008][T24350] bridge_slave_1: entered promiscuous mode [ 1457.259574][ T30] audit: type=1400 audit(1756960972.609:2785): avc: denied { create } for pid=24409 comm="syz.6.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1457.400079][T24350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.420678][T24419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1457.430059][ T30] audit: type=1400 audit(1756960972.649:2786): avc: denied { read } for pid=24412 comm="syz.1.4231" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1457.498722][T24350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.665894][ T30] audit: type=1400 audit(1756960972.649:2787): avc: denied { open } for pid=24412 comm="syz.1.4231" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1457.780262][T24350] team0: Port device team_slave_0 added [ 1457.851335][T24350] team0: Port device team_slave_1 added [ 1457.962509][T17730] Bluetooth: hci5: connection err: -111 [ 1457.997942][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1458.007875][ T5954] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1458.151225][ T30] audit: type=1400 audit(1756960973.478:2788): avc: denied { read } for pid=24434 comm="syz.5.4236" dev="sockfs" ino=74673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1458.176322][T24350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.194859][T24350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.221100][ T5954] usb 2-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 1458.255082][ T5954] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 1458.291262][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1458.320479][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1458.335533][ T5954] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.373847][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.376092][T24350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.425470][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.439301][ T5954] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.467808][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.488474][T24423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1458.554577][ T5954] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.576735][T24350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.592584][ T5954] usb 2-1: invalid MIDI out EP 0 [ 1458.597828][T24350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.598383][T17730] Bluetooth: hci0: command tx timeout [ 1458.630490][T24350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.706407][ T5954] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1458.706824][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.724301][ T30] audit: type=1326 audit(1756960974.088:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1458.889780][ T30] audit: type=1326 audit(1756960974.088:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1458.956612][ T30] audit: type=1326 audit(1756960974.088:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1459.015905][ T5954] usb 2-1: USB disconnect, device number 105 [ 1459.046093][T24430] delete_channel: no stack [ 1459.288150][ T30] audit: type=1326 audit(1756960974.088:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9b98ebe9 code=0x7ffc0000 [ 1459.311618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.898232][T17730] Bluetooth: hci0: command tx timeout [ 1460.986733][T24350] hsr_slave_0: entered promiscuous mode [ 1461.003210][T24350] hsr_slave_1: entered promiscuous mode [ 1461.009454][T24350] debugfs: 'hsr0' already exists in 'hsr' [ 1461.018473][T24350] Cannot create hsr debugfs directory [ 1461.191511][ T24] usb 3-1: USB disconnect, device number 105 [ 1461.202457][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1461.202472][ T30] audit: type=1400 audit(1756960976.548:2843): avc: denied { load_policy } for pid=24462 comm="syz.6.4243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1461.241216][T24465] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1461.253188][T24465] SELinux: failed to load policy [ 1462.390848][T24350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1462.427655][T24350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1462.453806][T24350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1462.496337][T24350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1462.598559][ T975] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1462.936964][T17730] Bluetooth: hci0: command tx timeout [ 1463.283075][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.316664][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.334075][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1463.364933][ T975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1463.445133][T24350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.451845][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.462349][ T975] usb 6-1: config 0 descriptor?? [ 1463.494532][T24350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.514826][T23893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.521984][T23893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.535867][T23893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.543018][T23893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.570870][ T24] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1463.732336][ T24] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1463.767891][ T24] usb 3-1: config 0 has no interface number 0 [ 1463.798276][ T24] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1463.858070][ T24] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1463.883836][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.913837][ T24] usb 3-1: Product: syz [ 1463.957044][ T24] usb 3-1: Manufacturer: syz [ 1463.984966][ T24] usb 3-1: SerialNumber: syz [ 1464.033822][ T24] usb 3-1: config 0 descriptor?? [ 1464.053390][T24500] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1464.070058][ T975] hid_parser_main: 7 callbacks suppressed [ 1464.070079][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.084745][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.101207][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.101938][ T24] ums-karma 3-1:0.46: USB Mass Storage device detected [ 1464.117767][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.126862][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.136462][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.144710][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.156391][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.166990][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.176002][ T975] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1464.187170][ T24] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 1464.221679][ T975] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1464.329783][ T30] audit: type=1400 audit(1756960979.688:2844): avc: denied { read } for pid=24481 comm="syz.5.4249" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1464.364991][ T975] usb 6-1: USB disconnect, device number 31 [ 1464.379026][ T30] audit: type=1400 audit(1756960979.728:2845): avc: denied { open } for pid=24481 comm="syz.5.4249" path="/106/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1464.412655][T24350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.427702][T24514] fido_id[24514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1464.537498][T24350] veth0_vlan: entered promiscuous mode [ 1464.558095][T24350] veth1_vlan: entered promiscuous mode [ 1465.293301][T24350] veth0_macvtap: entered promiscuous mode [ 1465.302636][T24350] veth1_macvtap: entered promiscuous mode [ 1465.524797][T24350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.571600][T24350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.652924][T22155] usb 3-1: USB disconnect, device number 106 [ 1465.671666][T23893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.705527][T23893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.757551][T23893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.797761][T23893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.982444][T23893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.003852][T23893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.077288][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.105914][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.403017][ T30] audit: type=1400 audit(1756960981.767:2846): avc: denied { append } for pid=24538 comm="syz.3.4261" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1466.622968][ T30] audit: type=1400 audit(1756960981.987:2847): avc: denied { nlmsg_write } for pid=24533 comm="syz.2.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1466.879746][ T1787] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1467.861083][ T1787] usb 3-1: Using ep0 maxpacket: 32 [ 1467.868512][ T1787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1468.167019][ T1787] usb 3-1: config 224 interface 0 has no altsetting 0 [ 1468.176172][ T1787] usb 3-1: string descriptor 0 read error: -22 [ 1468.223253][ T30] audit: type=1400 audit(1468.114:2848): avc: denied { ioctl } for pid=24565 comm="syz.5.4271" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1468.329174][ T1787] usb 3-1: New USB device found, idVendor=0458, idProduct=011c, bcdDevice=fd.40 [ 1468.378819][ T1787] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1468.446073][ T30] audit: type=1400 audit(1468.114:2849): avc: denied { set_context_mgr } for pid=24565 comm="syz.5.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1469.689826][ T30] audit: type=1400 audit(1469.644:2850): avc: denied { read } for pid=24580 comm="syz.3.4275" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1470.816866][ T30] audit: type=1400 audit(1469.644:2851): avc: denied { open } for pid=24580 comm="syz.3.4275" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1470.841365][ T30] audit: type=1400 audit(1469.694:2852): avc: denied { ioctl } for pid=24580 comm="syz.3.4275" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1471.101821][ T30] audit: type=1400 audit(1471.064:2853): avc: denied { call } for pid=24598 comm="syz.3.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1471.149343][ T1787] usbhid 3-1:224.0: can't add hid device: -71 [ 1471.156578][ T1787] usbhid 3-1:224.0: probe with driver usbhid failed with error -71 [ 1471.209490][ T1787] usb 3-1: USB disconnect, device number 107 [ 1471.975000][T24605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.982625][T24605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.189193][T24605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.234000][T24605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.120856][T24622] netlink: 'syz.1.4286': attribute type 4 has an invalid length. [ 1473.829085][ T1106] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.866992][ T1106] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.904957][ T1106] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.923198][ T1106] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.299453][ T975] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1474.879068][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 1474.880839][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.880869][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.880904][ T975] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1474.880926][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.900218][ T975] usb 6-1: config 0 descriptor?? [ 1477.201147][ T975] savu 0003:1E7D:2D5A.0032: unbalanced collection at end of report description [ 1477.212419][ T975] savu 0003:1E7D:2D5A.0032: parse failed [ 1477.218116][ T975] savu 0003:1E7D:2D5A.0032: probe with driver savu failed with error -22 [ 1477.230364][ T975] usb 6-1: USB disconnect, device number 32 [ 1477.255578][T24652] bridge_slave_1: left allmulticast mode [ 1477.285117][T24652] bridge_slave_1: left promiscuous mode [ 1477.325148][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.528694][T24652] bridge_slave_0: left allmulticast mode [ 1477.535193][T24652] bridge_slave_0: left promiscuous mode [ 1477.540994][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.934635][ T30] audit: type=1400 audit(1477.894:2854): avc: denied { ioctl } for pid=24674 comm="syz.6.4303" path="socket:[76707]" dev="sockfs" ino=76707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1478.435329][T24677] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1478.445106][T24677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1478.455687][T24677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1478.552545][ T30] audit: type=1400 audit(1478.424:2855): avc: denied { firmware_load } for pid=24668 comm="syz.2.4301" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1478.989013][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1478.999029][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1479.824614][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1479.889553][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1479.934359][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.965296][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1480.004520][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1480.062186][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.132933][ T24] usb 3-1: Product: syz [ 1480.137122][ T24] usb 3-1: Manufacturer: syz [ 1480.193345][ T24] usb 3-1: SerialNumber: syz [ 1480.389110][T12782] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1480.719699][ T24] usb 3-1: 0:2 : does not exist [ 1480.739540][T12782] usb 2-1: Using ep0 maxpacket: 16 [ 1480.747045][T12782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.750057][T22155] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1480.762496][T12782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1480.782744][T12782] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1480.795615][T12782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.807490][T12782] usb 2-1: config 0 descriptor?? [ 1481.291385][T22155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.303204][T22155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.313072][T22155] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1481.322271][T22155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.339650][T22155] usb 7-1: config 0 descriptor?? [ 1481.513214][T12782] hid_parser_main: 28 callbacks suppressed [ 1481.513242][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.527677][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.534958][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.548965][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.557258][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.566072][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.582840][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.747042][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.754638][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.762256][T12782] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1481.771294][T12782] HID 045e:07da: Invalid code 65791 type 1 [ 1481.784673][T12782] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0033/input/input100 [ 1481.873716][T24730] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1481.931337][ T30] audit: type=1326 audit(1481.824:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1481.970507][T12782] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1482.194291][T24732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.219105][ T24] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1482.281747][T12782] usb 2-1: USB disconnect, device number 106 [ 1482.289971][ T30] audit: type=1326 audit(1481.824:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1482.309221][T24732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.328144][ T30] audit: type=1326 audit(1481.824:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1482.358278][ T30] audit: type=1326 audit(1481.834:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1482.567932][ T24] usb 3-1: USB disconnect, device number 108 [ 1483.063352][T24733] fido_id[24733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1483.086389][T22155] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1483.102315][ T30] audit: type=1326 audit(1481.834:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1483.138001][T24222] udevd[24222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.163491][ T30] audit: type=1326 audit(1481.834:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1483.201333][T22155] cp2112 0003:10C4:EA90.0034: Part Number: 0x81 Device Version: 0xD2 [ 1483.239298][ T30] audit: type=1400 audit(1481.844:2862): avc: denied { relabelto } for pid=24726 comm="syz.3.4321" name="15" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1483.268782][ T30] audit: type=1400 audit(1481.844:2863): avc: denied { associate } for pid=24726 comm="syz.3.4321" name="15" dev="tmpfs" ino=91 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1483.301317][ T30] audit: type=1326 audit(1481.844:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1483.346051][ T30] audit: type=1326 audit(1481.844:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1483.417691][T22155] cp2112 0003:10C4:EA90.0034: error requesting SMBus config [ 1483.433315][ T30] audit: type=1326 audit(1481.854:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1483.929468][T22155] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -32 [ 1483.941555][T22155] usb 7-1: USB disconnect, device number 2 [ 1483.954549][ T30] audit: type=1326 audit(1481.854:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1484.061504][ T30] audit: type=1326 audit(1481.854:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1484.085090][ T30] audit: type=1326 audit(1481.854:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.3.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1484.123701][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.135627][T24739] fido_id[24739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1485.098993][T22155] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1485.262982][T22155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1485.290359][T22155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.310769][T22155] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1485.323256][T22155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.415951][T22155] usb 4-1: config 0 descriptor?? [ 1487.510018][T24785] syz.6.4336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1487.532994][T22155] usb 4-1: can't set config #0, error -71 [ 1487.559125][T22155] usb 4-1: USB disconnect, device number 103 [ 1491.894761][T24828] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 1492.181868][T24817] fuse: Bad value for 'fd' [ 1493.296234][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1493.531019][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.094792][T24848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1494.129655][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.156171][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1494.165405][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.176209][ T24] usb 6-1: config 0 descriptor?? [ 1494.182754][T24848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1494.237329][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1494.237345][ T30] audit: type=1400 audit(1494.194:2900): avc: denied { read } for pid=24861 comm="syz.1.4356" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1494.249072][T12540] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1494.266640][ T30] audit: type=1400 audit(1494.194:2901): avc: denied { open } for pid=24861 comm="syz.1.4356" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1494.304715][ T30] audit: type=1400 audit(1494.204:2902): avc: denied { ioctl } for pid=24861 comm="syz.1.4356" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1494.509560][T12540] usb 3-1: Using ep0 maxpacket: 16 [ 1494.535712][T12540] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1494.553081][T12540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.911812][T12782] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1495.047723][ T24] magicmouse 0003:05AC:0324.0035: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 1495.245435][T12782] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1495.300506][ T24] magicmouse 0003:05AC:0324.0035: magicmouse input not registered [ 1495.384589][T12782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.526326][T12540] usb 3-1: Product: syz [ 1495.530586][T12540] usb 3-1: Manufacturer: syz [ 1495.531128][ T24] magicmouse 0003:05AC:0324.0035: probe with driver magicmouse failed with error -12 [ 1495.535171][T12540] usb 3-1: SerialNumber: syz [ 1495.615911][T12782] usb 2-1: config 0 has no interface number 0 [ 1495.755064][T12782] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1495.918565][ T24] usb 6-1: USB disconnect, device number 33 [ 1495.937498][T12782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.063691][T12782] usb 2-1: Product: syz [ 1496.068312][T12782] usb 2-1: Manufacturer: syz [ 1496.174018][T12782] usb 2-1: SerialNumber: syz [ 1496.330560][T12782] usb 2-1: config 0 descriptor?? [ 1496.403781][T12540] usb 3-1: config 0 descriptor?? [ 1496.415614][T12540] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1496.445365][T12540] usb 3-1: Detected FT-X [ 1496.450138][T17730] Bluetooth: hci5: command 0x0406 tx timeout [ 1496.470442][T24871] fido_id[24871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1496.627316][T12540] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1497.306383][T22155] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1497.314298][T12540] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 1497.333164][T12540] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1497.364652][T12540] usb 3-1: USB disconnect, device number 109 [ 1497.381881][T12540] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1497.406385][T12540] ftdi_sio 3-1:0.0: device disconnected [ 1497.479129][T22155] usb 4-1: Using ep0 maxpacket: 32 [ 1497.488086][T22155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.508192][T22155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.518488][T22155] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1497.527974][T22155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.551552][T22155] usb 4-1: config 0 descriptor?? [ 1497.731426][ T24] usb 2-1: USB disconnect, device number 107 [ 1497.782801][T24890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1497.790129][T24890] IPv6: NLM_F_CREATE should be set when creating new route [ 1498.512585][T22155] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1498.668801][ T30] audit: type=1400 audit(1498.624:2903): avc: denied { ioctl } for pid=24901 comm="syz.6.4369" path="socket:[79146]" dev="sockfs" ino=79146 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1498.785753][T12782] usb 4-1: USB disconnect, device number 104 [ 1499.169222][T12540] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1499.322301][T12540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.334911][T12540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1499.345327][T12540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.355693][T12540] usb 2-1: config 0 descriptor?? [ 1499.444537][T24924] macsec1: entered promiscuous mode [ 1499.798039][T12540] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 1500.012915][T24932] 9pnet_fd: Insufficient options for proto=fd [ 1500.537641][T12540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0037/input/input101 [ 1500.713100][ T30] audit: type=1400 audit(1500.594:2904): avc: denied { bind } for pid=24925 comm="syz.6.4375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1501.851620][T24952] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1502.348116][T24953] serio: Serial port ttyS3 [ 1503.669656][T12540] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1503.733086][T12540] usb 2-1: USB disconnect, device number 108 [ 1503.737535][T24959] 9pnet_virtio: no channels available for device syz [ 1504.005759][T24961] fido_id[24961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1505.185073][T24992] overlayfs: overlapping lowerdir path [ 1505.319137][ T1787] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1505.500575][ T1787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.518429][ T1787] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1505.533491][ T1787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.547168][ T1787] usb 6-1: config 0 descriptor?? [ 1505.988630][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.019317][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.044139][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.074807][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.139326][ T1787] zydacron 0003:13EC:0006.0038: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 1506.249150][ T30] audit: type=1400 audit(1506.204:2905): avc: denied { bind } for pid=25002 comm="syz.6.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1506.324940][ T30] audit: type=1400 audit(1506.204:2906): avc: denied { name_bind } for pid=25002 comm="syz.6.4401" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1506.395834][ T30] audit: type=1400 audit(1506.204:2907): avc: denied { node_bind } for pid=25002 comm="syz.6.4401" saddr=172.30.64.7 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1506.397190][T12540] usb 6-1: USB disconnect, device number 34 [ 1507.683923][T25022] overlayfs: failed to resolve './file1': -2 [ 1507.699595][T25024] input: syz1 as /devices/virtual/input/input102 [ 1507.724787][T25024] input: failed to attach handler leds to device input102, error: -6 [ 1512.313361][ T30] audit: type=1400 audit(1512.274:2908): avc: denied { getopt } for pid=25080 comm="syz.3.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1514.029563][ T30] audit: type=1400 audit(1513.984:2909): avc: denied { bind } for pid=25097 comm="syz.6.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1514.227203][ T30] audit: type=1400 audit(1514.014:2910): avc: denied { setopt } for pid=25097 comm="syz.6.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1514.923725][T25110] tipc: Started in network mode [ 1514.928701][T25110] tipc: Node identity 060fff2a1908, cluster identity 4711 [ 1514.936630][T25110] tipc: Enabled bearer , priority 0 [ 1515.518761][T25104] tipc: Disabling bearer [ 1516.236781][T12782] tipc: Node number set to 520617770 [ 1516.931439][T17730] Bluetooth: hci2: command 0x0406 tx timeout [ 1517.203402][ T30] audit: type=1400 audit(1517.164:2911): avc: denied { mounton } for pid=25122 comm="syz.2.4433" path="/37/file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1518.449727][ T30] audit: type=1400 audit(1518.344:2912): avc: denied { create } for pid=25137 comm="syz.3.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1518.599012][T12540] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1519.503844][T12540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 1519.528900][T12540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17801, setting to 1024 [ 1519.568929][T12540] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.593126][ T30] audit: type=1400 audit(1519.544:2913): avc: denied { watch watch_reads } for pid=25137 comm="syz.3.4437" path="/proc/124/task/125" dev="proc" ino=78570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1519.664058][T12540] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.683417][T12540] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.725609][T12540] usb 7-1: config 0 descriptor?? [ 1519.741692][T25135] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1519.885912][ T30] audit: type=1400 audit(1519.844:2914): avc: denied { write } for pid=25153 comm="syz.5.4441" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1520.510330][T12540] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1522.163591][ T24] usb 7-1: USB disconnect, device number 3 [ 1524.234588][T25221] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 1525.619908][T25234] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4466'. [ 1525.655673][ T30] audit: type=1400 audit(1525.224:2915): avc: denied { mount } for pid=25228 comm="syz.1.4464" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1525.708285][ T30] audit: type=1400 audit(1525.254:2916): avc: denied { mounton } for pid=25228 comm="syz.1.4464" path="/58/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1526.126164][ T30] audit: type=1400 audit(1526.084:2917): avc: denied { unmount } for pid=23898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1526.446383][T25244] macsec1: entered promiscuous mode [ 1526.454006][T25244] bridge0: entered promiscuous mode [ 1526.464893][T25244] bridge0: port 1(macsec1) entered blocking state [ 1526.471818][T25244] bridge0: port 1(macsec1) entered disabled state [ 1526.478529][T25244] macsec1: entered allmulticast mode [ 1526.487959][T25244] bridge0: entered allmulticast mode [ 1526.548446][T25244] macsec1: left allmulticast mode [ 1526.555426][T25244] bridge0: left allmulticast mode [ 1526.571860][T25244] bridge0: left promiscuous mode [ 1527.161145][T23905] Bluetooth: hci1: command 0x0406 tx timeout [ 1527.985084][T12782] hid_parser_main: 1 callbacks suppressed [ 1527.985126][T12782] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1528.066221][T12782] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1528.217717][T25267] fido_id[25267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1528.450324][T25232] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1528.912456][T25232] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1529.400264][T23905] Bluetooth: hci4: command 0x1003 tx timeout [ 1529.407126][T17730] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1529.797536][T25275] net_ratelimit: 3 callbacks suppressed [ 1529.797552][T25275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.884658][T25232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1529.892297][T25232] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1530.073998][T25232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1530.109161][T25232] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1530.211642][T17866] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1530.636368][T25232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1531.030710][ T30] audit: type=1400 audit(1530.914:2918): avc: denied { shutdown } for pid=25288 comm="syz.6.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1531.062627][T25232] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1531.073503][ T30] audit: type=1400 audit(1530.994:2919): avc: denied { map } for pid=25288 comm="syz.6.4481" path="socket:[80967]" dev="sockfs" ino=80967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1531.108527][ T30] audit: type=1400 audit(1530.994:2920): avc: denied { read accept } for pid=25288 comm="syz.6.4481" path="socket:[80967]" dev="sockfs" ino=80967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1531.217956][T12540] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1531.300297][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.314819][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.327864][T17866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1531.346151][T17866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1531.355388][T17866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.369915][T17866] usb 2-1: config 0 descriptor?? [ 1531.420698][T12540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.455912][T12540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.468174][T12540] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1531.481156][T12540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.511100][T12540] usb 3-1: config 0 descriptor?? [ 1532.526171][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1532.542153][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.128903][T11913] Bluetooth: hci0: command 0x0405 tx timeout [ 1533.138075][T25232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1533.147916][T25232] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1533.405687][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.413243][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.428962][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.436405][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.468979][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.476423][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.517751][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.553513][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.587962][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.615826][T17866] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1533.646692][T17866] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1533.684081][T17866] usb 2-1: USB disconnect, device number 109 [ 1533.823159][T25318] fido_id[25318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1533.865611][T12540] hid-led 0003:27B8:01ED.003C: probe with driver hid-led failed with error -71 [ 1533.894325][T12540] usb 3-1: USB disconnect, device number 110 [ 1538.983259][ T1787] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1539.047012][ T30] audit: type=1326 audit(1538.404:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.321456][ T30] audit: type=1326 audit(1538.404:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.355273][ T30] audit: type=1326 audit(1538.414:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.424297][ T30] audit: type=1326 audit(1538.414:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.451105][ T30] audit: type=1326 audit(1538.414:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.505390][ T30] audit: type=1326 audit(1538.414:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.547670][ T1787] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1539.566026][ T1787] usb 7-1: config 128 has an invalid interface number: 59 but max is 0 [ 1539.587773][ T1787] usb 7-1: config 128 has no interface number 0 [ 1539.594579][ T30] audit: type=1326 audit(1538.414:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.621471][ T1787] usb 7-1: config 128 interface 59 has no altsetting 0 [ 1539.653894][ T1787] usb 7-1: string descriptor 0 read error: -22 [ 1539.660534][ T1787] usb 7-1: New USB device found, idVendor=a2f1, idProduct=6ed8, bcdDevice=bc.ba [ 1539.669728][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1539.692761][ T30] audit: type=1326 audit(1538.414:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.719549][ T1787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.752227][ T30] audit: type=1326 audit(1538.414:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.794048][ T1787] usb-storage 7-1:128.59: USB Mass Storage device detected [ 1539.852235][ T30] audit: type=1326 audit(1538.414:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1539.904927][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.944629][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1539.967434][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1540.015751][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1540.044279][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.077292][ T24] usb 3-1: Product: syz [ 1540.093884][ T24] usb 3-1: Manufacturer: syz [ 1540.113390][ T24] usb 3-1: SerialNumber: syz [ 1540.137123][ T1787] usb 7-1: USB disconnect, device number 4 [ 1540.170371][ T24] usb 3-1: config 0 descriptor?? [ 1540.252885][ T24] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 1540.535659][ T24] usb 3-1: USB disconnect, device number 111 [ 1541.511900][T25417] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1541.780181][T25414] usb usb8: usbfs: process 25414 (syz.1.4513) did not claim interface 0 before use [ 1542.496380][T25429] syzkaller0: entered promiscuous mode [ 1542.502502][T25429] syzkaller0: entered allmulticast mode [ 1542.545434][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4517'. [ 1545.649623][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.997746][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1546.997766][ T30] audit: type=1400 audit(1546.604:2958): avc: denied { bind } for pid=25499 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1546.997810][ T30] audit: type=1400 audit(1546.624:2959): avc: denied { accept } for pid=25499 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1546.997850][ T30] audit: type=1400 audit(1546.634:2960): avc: denied { listen } for pid=25499 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1547.191357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.676746][ T30] audit: type=1400 audit(1548.634:2961): avc: denied { remount } for pid=25529 comm="syz.2.4553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1548.972297][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4524'. [ 1549.577099][ T30] audit: type=1400 audit(1549.534:2962): avc: denied { bind } for pid=25546 comm="syz.2.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1549.726118][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1550.159030][ T30] audit: type=1400 audit(1550.114:2963): avc: denied { create } for pid=25575 comm="syz.1.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1550.227789][ T30] audit: type=1400 audit(1550.164:2964): avc: denied { sys_admin } for pid=25575 comm="syz.1.4571" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1550.896902][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1551.289951][ T30] audit: type=1326 audit(1551.244:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae9b985ba7 code=0x7ffc0000 [ 1551.319372][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1551.343459][ T30] audit: type=1326 audit(1551.244:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae9b92ade9 code=0x7ffc0000 [ 1551.376992][ T30] audit: type=1326 audit(1551.244:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25611 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae9b985ba7 code=0x7ffc0000 [ 1551.659274][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1551.819783][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1551.981346][ T24] usb 3-1: config 224 interface 0 has no altsetting 0 [ 1552.001308][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1552.008642][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=011c, bcdDevice=fd.40 [ 1552.129130][ T24] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1552.147276][T25627] tipc: Started in network mode [ 1552.161964][T25627] tipc: Node identity dad4de0fad23, cluster identity 4711 [ 1552.172220][T25627] tipc: Enabled bearer , priority 0 [ 1552.195178][T25627] syzkaller0: entered promiscuous mode [ 1552.209491][T25627] syzkaller0: entered allmulticast mode [ 1552.243818][T25627] tipc: Resetting bearer [ 1552.253635][T25626] tipc: Resetting bearer [ 1552.268953][T12540] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1552.325277][T25626] tipc: Disabling bearer [ 1552.440833][T12540] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1552.458282][T12540] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1552.471799][T12540] usb 7-1: config 1 has no interface number 1 [ 1552.488639][T12540] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1552.641614][T12540] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1552.659973][T12540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.681211][T12540] usb 7-1: Product: syz [ 1552.685423][T12540] usb 7-1: Manufacturer: syz [ 1552.692321][T12540] usb 7-1: SerialNumber: syz [ 1552.936168][T12540] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1552.987369][T12540] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1553.093246][T12540] usb 7-1: USB disconnect, device number 5 [ 1553.216461][T24222] udevd[24222]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1553.598554][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1553.598571][ T30] audit: type=1400 audit(1553.554:2977): avc: denied { open } for pid=25639 comm="syz.3.4593" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1553.659083][ T24] usbhid 3-1:224.0: can't add hid device: -71 [ 1553.662749][ T30] audit: type=1400 audit(1553.574:2978): avc: denied { ioctl } for pid=25639 comm="syz.3.4593" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1553.678908][ T24] usbhid 3-1:224.0: probe with driver usbhid failed with error -71 [ 1553.758431][ T24] usb 3-1: USB disconnect, device number 112 [ 1553.999118][T24579] Bluetooth: hci4: Frame reassembly failed (-84) [ 1554.005728][T25652] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1554.335803][ T30] audit: type=1400 audit(1554.294:2979): avc: denied { mount } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1554.403680][ T30] audit: type=1400 audit(1554.324:2980): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.484391][ T30] audit: type=1400 audit(1554.334:2981): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.538043][ T30] audit: type=1400 audit(1554.334:2982): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.587041][ T30] audit: type=1400 audit(1554.334:2983): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.672457][ T30] audit: type=1400 audit(1554.334:2984): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.718245][ T30] audit: type=1400 audit(1554.334:2985): avc: denied { search } for pid=25671 comm="syz.2.4606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1554.763472][ T30] audit: type=1326 audit(1554.724:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25683 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0738ebe9 code=0x7ffc0000 [ 1554.990098][ T5912] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1555.148905][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 1555.173546][ T5912] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1555.189815][ T5912] usb 7-1: config 224 interface 0 has no altsetting 0 [ 1555.197338][ T5912] usb 7-1: string descriptor 0 read error: -22 [ 1555.215734][ T5912] usb 7-1: New USB device found, idVendor=0458, idProduct=011c, bcdDevice=fd.40 [ 1555.242875][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1555.569904][T25709] tipc: Enabled bearer , priority 0 [ 1555.608209][T25709] syzkaller0: entered promiscuous mode [ 1555.648880][T25709] syzkaller0: entered allmulticast mode [ 1555.676972][T25709] tipc: Resetting bearer [ 1555.687449][T25708] tipc: Resetting bearer [ 1555.735101][T25708] tipc: Disabling bearer [ 1556.038978][T11913] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1556.039245][T17730] Bluetooth: hci4: command 0x1003 tx timeout [ 1557.008096][T25755] overlayfs: failed to resolve './file1': -2 [ 1557.353859][ T5912] usbhid 7-1:224.0: can't add hid device: -71 [ 1557.377836][ T5912] usbhid 7-1:224.0: probe with driver usbhid failed with error -71 [ 1557.403669][ T5912] usb 7-1: USB disconnect, device number 6 [ 1559.256719][T25824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1559.281422][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1559.281439][ T30] audit: type=1400 audit(1559.244:3015): avc: denied { unlink } for pid=25816 comm="syz.3.4666" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1559.309805][T25824] block device autoloading is deprecated and will be removed. [ 1559.694361][T25837] overlayfs: failed to resolve './file1': -2 [ 1560.063179][T25858] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1560.103936][ T30] audit: type=1326 audit(1560.064:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.236295][ T30] audit: type=1326 audit(1560.064:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.337797][ T30] audit: type=1326 audit(1560.064:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.502022][ T30] audit: type=1326 audit(1560.064:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.538933][ T30] audit: type=1326 audit(1560.064:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.564833][ T30] audit: type=1326 audit(1560.064:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.588750][ T30] audit: type=1326 audit(1560.064:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1560.612218][ T30] audit: type=1326 audit(1560.064:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1561.214466][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1561.238931][T25896] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1561.451089][T25902] loop2: detected capacity change from 0 to 7 [ 1561.485709][T25902] Dev loop2: unable to read RDB block 7 [ 1561.498282][T25902] loop2: unable to read partition table [ 1561.519933][T25902] loop2: partition table beyond EOD, truncated [ 1561.538926][T25902] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1561.919463][ T30] audit: type=1326 audit(1561.874:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25910 comm="syz.5.4704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a2f8ebe9 code=0x0 [ 1564.669311][T25976] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1565.874298][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1565.874315][ T30] audit: type=1400 audit(1565.834:3035): avc: denied { watch } for pid=26001 comm="syz.6.4737" path="/135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1565.957277][ T30] audit: type=1400 audit(1565.914:3036): avc: denied { watch_sb watch_reads } for pid=26001 comm="syz.6.4737" path="/135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1566.250184][ T30] audit: type=1400 audit(1566.204:3037): avc: denied { write } for pid=26005 comm="syz.3.4739" path="socket:[84471]" dev="sockfs" ino=84471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1566.321347][ T30] audit: type=1400 audit(1566.244:3038): avc: denied { accept } for pid=26005 comm="syz.3.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1566.347157][ T30] audit: type=1400 audit(1566.244:3039): avc: denied { read } for pid=26005 comm="syz.3.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1567.242831][ T30] audit: type=1400 audit(1567.194:3040): avc: denied { ioctl } for pid=26043 comm="syz.3.4754" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1567.485179][ T30] audit: type=1400 audit(1567.434:3041): avc: denied { mounton } for pid=26050 comm="syz.5.4758" path="/proc/686/task" dev="proc" ino=83967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1567.533248][ T30] audit: type=1326 audit(1567.474:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26050 comm="syz.5.4758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a2f8ebe9 code=0x0 [ 1567.716416][T26067] loop2: detected capacity change from 0 to 7 [ 1567.724948][T26067] Dev loop2: unable to read RDB block 7 [ 1567.731400][T26067] loop2: unable to read partition table [ 1567.738059][T26067] loop2: partition table beyond EOD, truncated [ 1567.745216][T26067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1568.592336][T26085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1568.739184][T26094] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1572.175065][ T30] audit: type=1400 audit(1572.134:3043): avc: denied { name_connect } for pid=26216 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1572.194786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.670602][ T30] audit: type=1326 audit(1572.634:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1572.729242][ T30] audit: type=1326 audit(1572.634:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1572.905157][ T30] audit: type=1326 audit(1572.664:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1572.936426][ T30] audit: type=1326 audit(1572.664:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1572.986503][ T30] audit: type=1326 audit(1572.674:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1573.046810][ T30] audit: type=1326 audit(1572.674:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1573.139034][ T30] audit: type=1326 audit(1572.684:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1573.235488][ T30] audit: type=1326 audit(1572.684:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1573.286743][T26239] syzkaller0: entered promiscuous mode [ 1573.293925][T26239] syzkaller0: entered allmulticast mode [ 1573.341039][ T30] audit: type=1326 audit(1572.684:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.3.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f350558ebe9 code=0x7ffc0000 [ 1579.372206][T26403] overlayfs: failed to resolve './file1': -2 [ 1579.743991][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1579.744007][ T30] audit: type=1400 audit(1579.704:3075): avc: denied { lock } for pid=26421 comm="syz.3.4896" path="socket:[86698]" dev="sockfs" ino=86698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1579.865937][ T30] audit: type=1400 audit(1579.824:3076): avc: denied { ioctl } for pid=26424 comm="syz.3.4897" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1580.255889][T26447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 1580.745006][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4917'. [ 1581.348153][ T30] audit: type=1400 audit(1581.304:3077): avc: denied { mount } for pid=26511 comm="syz.6.4934" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1581.371838][T26512] devpts: Unknown parameter 'm' [ 1581.412481][ T30] audit: type=1400 audit(1581.334:3078): avc: denied { remount } for pid=26511 comm="syz.6.4934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1581.485030][ T30] audit: type=1400 audit(1581.364:3079): avc: denied { unmount } for pid=23742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1582.474368][ T30] audit: type=1400 audit(1582.434:3080): avc: denied { mount } for pid=26545 comm="syz.6.4946" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1582.499754][T26550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1582.517420][T26550] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1582.524461][ T30] audit: type=1400 audit(1582.434:3081): avc: denied { mounton } for pid=26545 comm="syz.6.4946" path="/171/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 1582.602220][ T30] audit: type=1800 audit(1582.544:3082): pid=26555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4948" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1582.636397][ T30] audit: type=1400 audit(1582.594:3083): avc: denied { unmount } for pid=23742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1583.209102][ T30] audit: type=1400 audit(1583.164:3084): avc: denied { watch_sb } for pid=26580 comm="syz.5.4959" path="/237" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1583.315281][ T1787] kernel write not supported for file /773/clear_refs (pid: 1787 comm: kworker/1:3) [ 1583.502215][T26596] veth0_to_bridge: entered promiscuous mode [ 1583.519828][T26595] veth0_to_bridge: left promiscuous mode [ 1583.893252][T26622] kvm: pic: single mode not supported [ 1583.895466][T26622] kvm: pic: single mode not supported [ 1584.944163][T26668] tipc: Started in network mode [ 1584.964669][T26668] tipc: Node identity 7aa5169061f5, cluster identity 4711 [ 1584.978011][T26668] tipc: Enabled bearer , priority 0 [ 1584.990233][T26668] tipc: Resetting bearer [ 1585.029255][T26667] tipc: Disabling bearer [ 1585.111846][ T30] audit: type=1400 audit(1585.074:3085): avc: denied { mounton } for pid=26675 comm="syz.3.4998" path="/151/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1585.656925][T26729] loop2: detected capacity change from 0 to 7 [ 1585.665272][T26729] Dev loop2: unable to read RDB block 7 [ 1585.671237][T26729] loop2: AHDI p1 p2 [ 1585.675147][T26729] loop2: partition table partially beyond EOD, truncated [ 1585.958947][T12782] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1586.110346][T12782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.137216][T12782] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1586.149938][T12782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1586.168695][T12782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1586.181076][T12782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1586.211298][T12782] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1586.220675][T12782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1586.228785][T12782] usb 2-1: Product: syz [ 1586.238390][T12782] usb 2-1: Manufacturer: syz [ 1586.244343][T12782] usb 2-1: SerialNumber: syz [ 1586.265654][T12782] usb 2-1: config 0 descriptor?? [ 1586.359672][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1586.475148][T12782] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1586.485243][T12782] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1586.525703][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 1586.532082][ T5912] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.544203][ T5912] usb 7-1: config 0 has no interface number 0 [ 1586.557518][ T5912] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1586.566739][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.590803][ T5912] usb 7-1: Product: syz [ 1586.594971][ T5912] usb 7-1: Manufacturer: syz [ 1586.603009][ T5912] usb 7-1: SerialNumber: syz [ 1586.616992][ T5912] usb 7-1: config 0 descriptor?? [ 1586.627290][ T5912] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1586.676178][T12782] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1586.684669][T12782] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1586.698714][T12782] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1586.755759][ T30] audit: type=1400 audit(1586.714:3086): avc: denied { module_load } for pid=26756 comm="syz.2.5033" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1586.876667][T12782] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1587.172846][T26774] syzkaller0: entered promiscuous mode [ 1587.185432][T26774] syzkaller0: entered allmulticast mode [ 1587.411439][ T30] audit: type=1400 audit(1587.374:3087): avc: denied { create } for pid=26788 comm="syz.5.5048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1587.658952][T17866] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1587.846020][T17866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.858687][T17866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1587.879180][T17866] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1587.888949][T12782] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1587.893434][T17866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1587.907301][T17866] usb 6-1: SerialNumber: syz [ 1587.907795][T12782] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1587.964550][T12782] usb 2-1: USB disconnect, device number 110 [ 1588.131214][T17866] usb 6-1: 0:2 : does not exist [ 1588.151392][T17866] usb 6-1: USB disconnect, device number 35 [ 1588.183378][T24222] udevd[24222]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1588.466366][ T5912] gspca_spca1528: reg_r err -71 [ 1588.471565][ T5912] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1588.494687][ T5912] usb 7-1: USB disconnect, device number 7 [ 1588.534898][ T30] audit: type=1400 audit(1588.494:3088): avc: denied { connect } for pid=26808 comm="syz.1.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1589.260231][T26836] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1589.266956][T26836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1589.329804][T26836] vhci_hcd vhci_hcd.0: Device attached [ 1589.345034][T26843] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 1589.351549][T26843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1589.370774][T26843] vhci_hcd vhci_hcd.0: Device attached [ 1589.395363][T26836] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(6) [ 1589.401875][T26836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1589.410348][T26836] vhci_hcd vhci_hcd.0: Device attached [ 1589.423947][T26836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1589.445957][T26836] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 1589.452553][T26836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1589.482303][T26836] vhci_hcd vhci_hcd.0: Device attached [ 1589.499804][T26843] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 1589.506397][T26843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1589.519736][T26843] vhci_hcd vhci_hcd.0: Device attached [ 1589.532770][T26836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1589.562759][T12782] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1589.572606][T26836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1589.592148][T26836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1589.616976][T26836] vhci_hcd vhci_hcd.0: port 0 already used [ 1589.625029][T26849] vhci_hcd: connection closed [ 1589.625794][T26852] vhci_hcd: connection closed [ 1589.632933][T26847] vhci_hcd: connection closed [ 1589.632989][T26837] vhci_hcd: connection reset by peer [ 1589.637978][T26845] vhci_hcd: connection closed [ 1589.654254][T24579] vhci_hcd: stop threads [ 1589.665789][T24579] vhci_hcd: release socket [ 1589.677288][T24579] vhci_hcd: disconnect device [ 1589.683802][T24579] vhci_hcd: stop threads [ 1589.688250][T24579] vhci_hcd: release socket [ 1589.696257][T24579] vhci_hcd: disconnect device [ 1589.706337][T24579] vhci_hcd: stop threads [ 1589.713914][T24579] vhci_hcd: release socket [ 1589.718590][T24579] vhci_hcd: disconnect device [ 1589.726060][T24579] vhci_hcd: stop threads [ 1589.734068][T24579] vhci_hcd: release socket [ 1589.743557][T24579] vhci_hcd: disconnect device [ 1589.754926][T24579] vhci_hcd: stop threads [ 1589.759237][T24579] vhci_hcd: release socket [ 1589.763713][T24579] vhci_hcd: disconnect device [ 1590.664970][ T30] audit: type=1326 audit(1590.614:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1590.697625][ T30] audit: type=1326 audit(1590.614:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1590.740968][ T30] audit: type=1326 audit(1590.654:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1590.800120][ T30] audit: type=1326 audit(1590.654:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1590.852253][ T30] audit: type=1326 audit(1590.664:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1590.959017][ T30] audit: type=1326 audit(1590.664:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1591.001498][T26891] tmpfs: Bad value for 'nr_inodes' [ 1591.014391][ T30] audit: type=1326 audit(1590.664:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1591.105495][ T30] audit: type=1326 audit(1590.664:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1591.189030][ T30] audit: type=1326 audit(1590.664:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1591.253170][ T30] audit: type=1326 audit(1590.664:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26875 comm="syz.2.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8ebe9 code=0x7ffc0000 [ 1591.408960][ T5912] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1591.599117][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 1591.614479][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1591.623263][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1591.643557][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.667650][ T5912] usb 3-1: Product: syz [ 1591.688923][ T5912] usb 3-1: Manufacturer: syz [ 1591.693541][ T5912] usb 3-1: SerialNumber: syz [ 1591.735824][ T5912] usb 3-1: config 0 descriptor?? [ 1591.772177][ T5912] hub 3-1:0.0: bad descriptor, ignoring hub [ 1591.778078][ T5912] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1591.827851][ T5912] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1591.985066][ T5912] gspca_zc3xx: reg_w_i err -71 [ 1592.639393][ T5912] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1592.645714][ T5912] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1592.879294][ T5912] usb 3-1: reset high-speed USB device number 113 using dummy_hcd [ 1593.039015][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1593.189016][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1593.199507][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1593.217484][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.253850][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1593.262198][T17866] libceph: connect (1)[c::]:6789 error -101 [ 1593.272778][T17866] libceph: mon0 (1)[c::]:6789 connect error [ 1593.275728][ T24] pvrusb2: ********** [ 1593.287594][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1593.299730][ T5912] usb 3-1: failed to restore interface 0 altsetting 6 (error=-71) [ 1593.301245][ T24] pvrusb2: Important functionality might not be entirely working. [ 1593.311392][ T5912] usb 3-1: USB disconnect, device number 113 [ 1593.327313][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5111'. [ 1593.336332][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1593.339634][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5111'. [ 1593.349843][T26963] ceph: No mds server is up or the cluster is laggy [ 1593.366381][ T24] pvrusb2: ********** [ 1593.455894][ T2338] pvrusb2: Invalid write control endpoint [ 1593.536721][ T2338] pvrusb2: Invalid write control endpoint [ 1593.545820][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1593.557320][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1593.565169][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1593.578230][ T2338] pvrusb2: Device being rendered inoperable [ 1593.585470][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1593.593258][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1593.605563][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1593.615950][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1593.630442][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1593.708670][T26941] pvrusb2: Attempted to execute control transfer when device not ok [ 1593.805277][T26981] netdevsim netdevsim1: Direct firmware load for . [ 1593.805277][T26981] failed with error -2 [ 1593.817457][T26981] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1593.817457][T26981] [ 1593.848151][T21051] usb 4-1: USB disconnect, device number 105 [ 1594.398925][T22155] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1594.460457][T21051] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1594.769200][T12782] vhci_hcd: vhci_device speed not set [ 1594.778905][T22155] usb 3-1: Using ep0 maxpacket: 32 [ 1594.785658][T22155] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.790278][T21051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1594.796105][T22155] usb 3-1: config 0 has no interface number 0 [ 1594.815408][T22155] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1594.825857][T22155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.835623][T22155] usb 3-1: Product: syz [ 1594.851906][T22155] usb 3-1: Manufacturer: syz [ 1594.860899][T22155] usb 3-1: SerialNumber: syz [ 1594.875407][T21051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1594.880487][T22155] usb 3-1: config 0 descriptor?? [ 1594.899461][T22155] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1594.909377][T21051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1594.927266][T22155] usb 3-1: selecting invalid altsetting 1 [ 1594.940332][T22155] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1594.944791][T21051] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1594.956767][T22155] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1594.966703][T21051] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.978168][T22155] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1594.987013][T21051] usb 7-1: Product: syz [ 1594.987031][T21051] usb 7-1: Manufacturer: syz [ 1594.987047][T21051] usb 7-1: SerialNumber: syz [ 1595.013543][T21051] usb 7-1: config 0 descriptor?? [ 1595.027662][T22155] usb 3-1: media controller created [ 1595.088008][T22155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1595.215696][T22155] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1595.246563][T21051] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1595.250989][T22155] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1595.286461][T22155] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1595.420062][T22155] usb 3-1: USB disconnect, device number 114 [ 1595.508606][ T43] usb 7-1: USB disconnect, device number 8 [ 1595.774663][T27043] 9pnet_fd: Insufficient options for proto=fd [ 1595.840410][T17866] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1596.012027][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1596.044275][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1596.058630][T17866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1596.076477][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1596.090847][T17866] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1596.093179][ T978] usb usb46-port1: attempt power cycle [ 1596.102779][T17866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.542852][T22155] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1596.553639][T17866] usb 2-1: Product: syz [ 1596.557805][T17866] usb 2-1: Manufacturer: syz [ 1596.562443][T17866] usb 2-1: SerialNumber: syz [ 1596.571144][T17866] usb 2-1: config 0 descriptor?? [ 1596.577218][T27033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1596.593909][T17866] usb 2-1: ucan: probing device on interface #0 [ 1596.596561][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1596.596575][ T30] audit: type=1400 audit(1596.554:3122): avc: denied { create } for pid=27062 comm="syz.3.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1596.605420][T17866] usb 2-1: ucan: invalid endpoint configuration [ 1596.615102][ T30] audit: type=1400 audit(1596.564:3123): avc: denied { bind } for pid=27063 comm="syz.6.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1596.628765][T17866] usb 2-1: ucan: probe failed; try to update the device firmware [ 1596.632044][ T30] audit: type=1400 audit(1596.564:3124): avc: denied { bind } for pid=27062 comm="syz.3.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1596.651230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.698982][T22155] usb 6-1: Using ep0 maxpacket: 16 [ 1596.703222][ T978] usb usb46-port1: unable to enumerate USB device [ 1596.705349][T22155] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.748858][T22155] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1596.773453][T22155] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1596.782929][T22155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.792832][T22155] usb 6-1: Product: syz [ 1596.799224][T22155] usb 6-1: Manufacturer: syz [ 1596.811569][T22155] usb 6-1: SerialNumber: syz [ 1596.884079][T21051] usb 2-1: USB disconnect, device number 111 [ 1596.993821][T27074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5157'. [ 1596.999864][ T5912] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1597.010789][ T30] audit: type=1400 audit(1596.964:3125): avc: denied { create } for pid=27073 comm="syz.3.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1597.062984][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1597.070733][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1597.079802][T22155] usb 6-1: cannot find UAC_HEADER [ 1597.105978][T22155] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1597.126745][T22155] usb 6-1: USB disconnect, device number 36 [ 1597.136548][T24222] udevd[24222]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1597.191260][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.202404][ T5912] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1597.211557][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.245180][ T5912] usb 7-1: config 0 descriptor?? [ 1597.288883][ T978] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1597.298573][ T30] audit: type=1400 audit(1597.254:3126): avc: denied { write } for pid=27079 comm="syz.2.5159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1597.333814][T27080] ------------[ cut here ]------------ [ 1597.339591][T27080] 'send_pkt()' returns 0, but 65536 expected [ 1597.346132][T27080] WARNING: CPU: 1 PID: 27080 at net/vmw_vsock/virtio_transport_common.c:426 virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.358711][T27080] Modules linked in: [ 1597.362862][T27080] CPU: 1 UID: 0 PID: 27080 Comm: syz.2.5159 Not tainted syzkaller #0 PREEMPT(full) [ 1597.372319][T27080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1597.382422][T27080] RIP: 0010:virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.389519][T27080] Code: 49 e9 47 f6 84 db 75 26 e8 60 ee 47 f6 c6 05 d4 19 20 05 01 90 48 8b 54 24 10 44 89 ee 48 c7 c7 a0 52 13 8d e8 04 94 06 f6 90 <0f> 0b 90 90 e8 3a ee 47 f6 31 ff 44 89 e6 e8 70 e9 47 f6 45 85 e4 [ 1597.409185][T27080] RSP: 0018:ffffc9000d2f7730 EFLAGS: 00010282 [ 1597.415356][T27080] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900104e1000 [ 1597.423391][T27080] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1597.431406][T27080] RBP: ffff888057bed400 R08: 0000000000000001 R09: 0000000000000000 [ 1597.439412][T27080] R10: 0000000000000001 R11: 0000000000049620 R12: 0000000000010000 [ 1597.447378][T27080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000010000 [ 1597.455388][T27080] FS: 00007f69b0cb86c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 1597.464464][T27080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1597.471152][T27080] CR2: fffffffffffffffd CR3: 000000005d5ab000 CR4: 00000000003526f0 [ 1597.479250][T27080] Call Trace: [ 1597.482524][T27080] [ 1597.485455][T27080] virtio_transport_seqpacket_enqueue+0x13c/0x1c0 [ 1597.491903][T27080] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 1597.498956][T27080] ? mark_held_locks+0x49/0x80 [ 1597.503725][T27080] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1597.509577][T27080] vsock_connectible_sendmsg+0xf9e/0x1280 [ 1597.515298][T27080] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 1597.521487][T27080] ? __pfx_woken_wake_function+0x10/0x10 [ 1597.527125][T27080] ____sys_sendmsg+0xa98/0xc70 [ 1597.531943][T27080] ? copy_msghdr_from_user+0x10a/0x160 [ 1597.537399][T27080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.542719][T27080] ? find_held_lock+0x2b/0x80 [ 1597.547393][T27080] ? futex_unqueue+0x133/0x2c0 [ 1597.552191][T27080] ___sys_sendmsg+0x134/0x1d0 [ 1597.556860][T27080] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.562130][T27080] ? find_held_lock+0x2b/0x80 [ 1597.566826][T27080] __sys_sendmmsg+0x200/0x420 [ 1597.571538][T27080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1597.576726][T27080] ? vsock_connectible_setsockopt+0x226/0x770 [ 1597.582819][T27080] ? __pfx_do_futex+0x10/0x10 [ 1597.587494][T27080] ? rcu_is_watching+0x12/0xc0 [ 1597.592304][T27080] ? __pfx___x64_sys_futex+0x10/0x10 [ 1597.597595][T27080] ? __sys_setsockopt+0x1c0/0x230 [ 1597.602637][T27080] __x64_sys_sendmmsg+0x9c/0x100 [ 1597.607573][T27080] ? lockdep_hardirqs_on+0x7c/0x110 [ 1597.612793][T27080] do_syscall_64+0xcd/0x4c0 [ 1597.617297][T27080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.623208][T27080] RIP: 0033:0x7f69afd8ebe9 [ 1597.627628][T27080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.647298][T27080] RSP: 002b:00007f69b0cb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1597.655750][T27080] RAX: ffffffffffffffda RBX: 00007f69affb5fa0 RCX: 00007f69afd8ebe9 [ 1597.663756][T27080] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 1597.671755][T27080] RBP: 00007f69afe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1597.677506][ T5912] hid_parser_main: 3 callbacks suppressed [ 1597.677521][ T5912] aquacomputer_d5next 0003:0C70:F00B.003D: unknown main item tag 0x0 [ 1597.679742][T27080] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 1597.679783][T27080] R13: 00007f69affb6038 R14: 00007f69affb5fa0 R15: 00007fffe3d02c08 [ 1597.679812][T27080] [ 1597.679822][T27080] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1597.679835][T27080] CPU: 1 UID: 0 PID: 27080 Comm: syz.2.5159 Not tainted syzkaller #0 PREEMPT(full) [ 1597.679857][T27080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1597.679869][T27080] Call Trace: [ 1597.679875][T27080] [ 1597.679883][T27080] dump_stack_lvl+0x3d/0x1f0 [ 1597.679907][T27080] vpanic+0x6e8/0x7a0 [ 1597.679936][T27080] ? __pfx_vpanic+0x10/0x10 [ 1597.679972][T27080] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.680000][T27080] panic+0xca/0xd0 [ 1597.680023][T27080] ? __pfx_panic+0x10/0x10 [ 1597.680056][T27080] check_panic_on_warn+0xab/0xb0 [ 1597.680072][T27080] __warn+0xf6/0x3c0 [ 1597.680086][T27080] ? preempt_schedule_notrace+0x62/0xe0 [ 1597.680103][T27080] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.680129][T27080] report_bug+0x3c3/0x580 [ 1597.680145][T27080] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.680171][T27080] handle_bug+0x184/0x210 [ 1597.680192][T27080] exc_invalid_op+0x17/0x50 [ 1597.680212][T27080] asm_exc_invalid_op+0x1a/0x20 [ 1597.680228][T27080] RIP: 0010:virtio_transport_send_pkt_info+0x91d/0x1020 [ 1597.680254][T27080] Code: 49 e9 47 f6 84 db 75 26 e8 60 ee 47 f6 c6 05 d4 19 20 05 01 90 48 8b 54 24 10 44 89 ee 48 c7 c7 a0 52 13 8d e8 04 94 06 f6 90 <0f> 0b 90 90 e8 3a ee 47 f6 31 ff 44 89 e6 e8 70 e9 47 f6 45 85 e4 [ 1597.680269][T27080] RSP: 0018:ffffc9000d2f7730 EFLAGS: 00010282 [ 1597.680283][T27080] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900104e1000 [ 1597.680294][T27080] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1597.680304][T27080] RBP: ffff888057bed400 R08: 0000000000000001 R09: 0000000000000000 [ 1597.680314][T27080] R10: 0000000000000001 R11: 0000000000049620 R12: 0000000000010000 [ 1597.680325][T27080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000010000 [ 1597.680343][T27080] ? __warn_printk+0x1a5/0x350 [ 1597.680383][T27080] virtio_transport_seqpacket_enqueue+0x13c/0x1c0 [ 1597.680409][T27080] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 1597.680441][T27080] ? mark_held_locks+0x49/0x80 [ 1597.680465][T27080] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1597.680485][T27080] vsock_connectible_sendmsg+0xf9e/0x1280 [ 1597.680508][T27080] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 1597.680529][T27080] ? __pfx_woken_wake_function+0x10/0x10 [ 1597.680556][T27080] ____sys_sendmsg+0xa98/0xc70 [ 1597.680578][T27080] ? copy_msghdr_from_user+0x10a/0x160 [ 1597.680596][T27080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.680620][T27080] ? find_held_lock+0x2b/0x80 [ 1597.680640][T27080] ? futex_unqueue+0x133/0x2c0 [ 1597.680668][T27080] ___sys_sendmsg+0x134/0x1d0 [ 1597.680687][T27080] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.680715][T27080] ? find_held_lock+0x2b/0x80 [ 1597.680749][T27080] __sys_sendmmsg+0x200/0x420 [ 1597.680770][T27080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1597.680786][T27080] ? vsock_connectible_setsockopt+0x226/0x770 [ 1597.680809][T27080] ? __pfx_do_futex+0x10/0x10 [ 1597.680833][T27080] ? rcu_is_watching+0x12/0xc0 [ 1597.680863][T27080] ? __pfx___x64_sys_futex+0x10/0x10 [ 1597.680888][T27080] ? __sys_setsockopt+0x1c0/0x230 [ 1597.680908][T27080] __x64_sys_sendmmsg+0x9c/0x100 [ 1597.680926][T27080] ? lockdep_hardirqs_on+0x7c/0x110 [ 1597.680943][T27080] do_syscall_64+0xcd/0x4c0 [ 1597.680962][T27080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.680979][T27080] RIP: 0033:0x7f69afd8ebe9 [ 1597.680992][T27080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.681007][T27080] RSP: 002b:00007f69b0cb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1597.681022][T27080] RAX: ffffffffffffffda RBX: 00007f69affb5fa0 RCX: 00007f69afd8ebe9 [ 1597.681033][T27080] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 1597.681043][T27080] RBP: 00007f69afe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1597.681054][T27080] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 1597.681064][T27080] R13: 00007f69affb6038 R14: 00007f69affb5fa0 R15: 00007fffe3d02c08 [ 1597.681086][T27080] [ 1597.685836][T27080] Kernel Offset: disabled