last executing test programs: 8.857398663s ago: executing program 3 (id=2963): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='-'], 0x28) 8.602356396s ago: executing program 3 (id=2969): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x80111500, 0x0) 8.384665107s ago: executing program 3 (id=2972): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) writev(r8, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 6.099128051s ago: executing program 3 (id=2983): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000002880)=""/147, 0x93}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) r1 = creat(&(0x7f0000002840)='./file0\x00', 0x10) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000540)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3fe, 0xb, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.717749463s ago: executing program 0 (id=2993): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 4.47761236s ago: executing program 0 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0), 0x496, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_usb_connect$cdc_ncm(0x0, 0xcc, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x40, 0x0, 0xff}, {0x6, 0x24, 0x1a, 0x311, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0xfc00, [0x9, 0x1, 0x7ff, 0x7f, 0x6]}, @country_functional={0xc, 0x24, 0x7, 0xd9, 0x0, [0x3, 0x17c, 0x543]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mdlm_detail={0x27, 0x24, 0x13, 0x7f, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0xbf, 0xf3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x4d}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x0, 0x10, 0x40}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000510100a012100000000ff01010000ff000a1003020600070003000710021232090003100b0b10010c100008050400e9"], 0x1, [{0x101, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}]}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB="2e00c70001040703880308020003400001067f0608070806ff011004f9020507800505070803371d8a982b292cd60000"], 0x4c}}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="0024f8000000f823b718f59a3ac120a29be448eb20ffd4a1cbdbe751e8391e6c0aac82810bb4a414eef45bd1234ea4e31bfa60c7f49fd515440d887370b8a17623b1491b01173d6ba4deea3bb8a110c80f50bb2b3326188d515e3e0252286c7925fe187b81bcfd9213e9664003581865dda608032290b5a4782f737226d6a702d7a54dd73430b6abebbc544992090138430c7899f4b55ab523a1361d702de958d94f6b7c6c3ea9be39b012c06f9b9e8ed026d1a798bd6e455ab7d6cff785d87147da89ba9024093579898f970e13543cc3fd1026e5dcf788175506c47ed627da6b9fcb741f78436abc46d90d9360314bc3837dc097dc07f0ee16e1f67879"], &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x9, 0x18, "39629046a25102e9b18ba51e183aa0291da28610314dd76c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x4a8c, 0x3ff, 0x8, 0xfff}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020}, 0x2020) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 4.088650695s ago: executing program 3 (id=2999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) unshare(0x28060200) r1 = geteuid() r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r5 = accept4$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, &(0x7f0000000780)=0xe, 0x80800) fstat(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x18, {0x40, 0x0, 0x8}, 0x30, r1, r6, 0xff, 0x3ff, 0xfc, 0x5, 0x2, 0x8000, 0x40, 0x3, 0x0, 0x7fffffff, 0x5, 0x101, 0x8, 0xffffffffffffff92, 0x401}}, 0xa0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d15, 0xfffffffb, 0x0, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000340)={@local, @random="b6b7cd1e38be", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc0, 0x0, @gue={{0x2}, "d90fe9a5c141f13fec996f7c70abc8dbfa50aebf118028724a76a310105ffd2040208f5a7995f72cebdb4fd3d488845174bcb9f77cf111072b5a9a2ad1897857cacaabb93ceef4c16f8646dcb9b36cb917e56a8e6bdec128f06efdaa97cdf014a2cdb30ad6e2266b7920860bda2ae435892adc0af1cce004fb6ad560c928455592cee8fd4202fcc62d67ec703d9bb7af4f556fd1cdc6df9cf9e0f9ee298991205f6416bc239d22365cbf3dfd5bf1f0e6"}}}}}}, 0x0) read(r7, &(0x7f0000000140)=""/183, 0xb7) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000dc0)=0xd) 3.982964134s ago: executing program 2 (id=3001): write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x3e) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xffc1) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.822361148s ago: executing program 2 (id=3004): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x7}, 0x0) 3.765673881s ago: executing program 0 (id=3005): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 3.764702777s ago: executing program 4 (id=3006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}]}, 0x3c}}, 0x0) 3.64232285s ago: executing program 4 (id=3008): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 3.460039986s ago: executing program 0 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000002880)=""/147, 0x93}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) r1 = creat(&(0x7f0000002840)='./file0\x00', 0x10) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000540)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3fe, 0xb, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.413359238s ago: executing program 4 (id=3011): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) r2 = dup(r1) listen(r2, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) tkill(r0, 0xb) 3.163829239s ago: executing program 4 (id=3014): write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x3e) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xffc1) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.096123765s ago: executing program 3 (id=3015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0), 0x496, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa3264e3951dd318363e02d36fa69ecaa3978b6c471c9dde0052632d1ebe277982fb0c900dd3f461257ad46a69b8f1e9bc36d8992426aa4adddc024bb74a39539f1cf801502cbd0d7acb8b2c5d9778a8253d2c8746d5b252a32f67c94cb8916a6310c1af0c0eb6f09a07d5020948a9c0f147c01d4a8b3af25686eadef9eaed2623cb012521ab86453e71bf351c130b6d33ffc388afdb5b2b7c16c1002a0640dd73e7a7e6a852dd2c75209d711a50363e46116ad2a14483c3729a81e4ef2fed2f18732f0038e079e561eea96eb665219070f42139c627dd5f185d23fdc316d38eb99826bcb63938d6cd1af3b5274f57009f87854ad98bef03025c32e7aa4a721d28e94ec5feff3a279c2e1c18002e39eaaefec3dfd1eae45a61e4283e8a7ef1eaf70d93a0333a9ff9ef048332f3fcc797076f8c02858548418e34a9967282de2eb4cc6438f0b6c9dcc204cdd732dd88624b39c16e8f80819cb72be6ab07492ed05ade4caf1ae3d723830523e32c02786c50ac1f47b994ed49fc4b9b318a4c86b4f7fb0d3c6a8763ef27cd52936cc55ef5ac50935a7f706464be90ea4b5f894ad92910de17889a6236a4bda8aac5e1daa70a8fcf248360cdd4e86f854f23e3e4792d91c85f1ed6cf7c36bbe9d879fc86b55e55e0566b6451aad55b1b24156d5735d1ee7064b07bde3a7643cb7631057346202cad2bf48adc717df4d77cf46fcb20c5bdfd317b1b665041d9254ae8d88732fbbe90ad508"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_usb_connect$cdc_ncm(0x0, 0xcc, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x40, 0x0, 0xff}, {0x6, 0x24, 0x1a, 0x311, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0xfc00, [0x9, 0x1, 0x7ff, 0x7f, 0x6]}, @country_functional={0xc, 0x24, 0x7, 0xd9, 0x0, [0x3, 0x17c, 0x543]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mdlm_detail={0x27, 0x24, 0x13, 0x7f, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0xbf, 0xf3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x4d}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x0, 0x10, 0x40}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000510100a012100000000ff01010000ff000a1003020600070003000710021232090003100b0b10010c100008050400e9"], 0x1, [{0x101, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}]}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB="2e00c70001040703880308020003400001067f0608070806ff011004f9020507800505070803371d8a982b292cd60000"], 0x4c}}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x9, 0x18, "39629046a25102e9b18ba51e183aa0291da28610314dd76c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x4a8c, 0x3ff, 0x8, 0xfff}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020}, 0x2020) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 2.917596611s ago: executing program 1 (id=3016): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6}, 0x10) sendto$packet(r2, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 2.848991256s ago: executing program 4 (id=3017): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0xe4}]}, 0x10) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') dup(0xffffffffffffffff) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000001440)=""/228, 0xe4) 2.816693042s ago: executing program 1 (id=3018): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0xd1f9, 0x0, 0x3ffc0000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x5}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.607128248s ago: executing program 1 (id=3019): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.479752471s ago: executing program 2 (id=3020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = epoll_create1(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000002700)=""/4096, 0x1000}, 0x40000103) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000004c0)={0x10000000}) shutdown(r0, 0x0) 2.378257034s ago: executing program 1 (id=3021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f00000016c0)=""/4068, &(0x7f00000004c0)=0xfe4) 2.078170744s ago: executing program 1 (id=3022): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030000130000000000000000000000030006000000000002000000e00000020000000000000000030001000000000002000000ac1414bb0000000000000000030005000000000002000000ac1e000100000000000000000400040000000000000000000000000000000000000000000000000000000000040003bb"], 0x98}}, 0x0) 2.077264746s ago: executing program 2 (id=3023): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x0, 'dh\x00'}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x24000001, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.929741716s ago: executing program 1 (id=3024): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {}], 0xa, "59b2c1542f2698999d75f8d4972e99fd"}, 0x25) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semop(0x0, &(0x7f0000000440), 0x0) semop(0x0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0xaaaabe9, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xd869, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5], 0x0, 0x200394}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.845120623s ago: executing program 2 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x96e9, 0xa00000000000, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x10006}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 1.649858441s ago: executing program 4 (id=3026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ptrace$getregs(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000700)=""/49) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50800, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 219.767527ms ago: executing program 2 (id=3027): bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) 127.018887ms ago: executing program 0 (id=3028): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=rdma,', {}, 0x2c, {[{@rq}]}}) 0s ago: executing program 0 (id=3029): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001801000020207325000000ee483e0eaf4c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000300)="2e000300010003", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) eventfd(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f6, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x25b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x252}) io_uring_enter(r9, 0x0, 0x5557, 0x1, 0x0, 0x0) write(r7, &(0x7f0000000200)='~', 0x1) kernel console output (not intermixed with test programs): c 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 718.309896][T11672] orangefs_mount: mount request failed with -4 [ 718.819050][T11697] hub 6-0:1.0: USB hub found [ 718.825119][T11697] hub 6-0:1.0: 1 port detected [ 719.188457][T10344] Bluetooth: hci5: command 0x0406 tx timeout [ 719.680620][T11699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.766414][ T30] audit: type=1400 audit(2000000010.729:1015): avc: denied { read } for pid=11702 comm="syz.1.1840" dev="sockfs" ino=43363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 723.949215][ T30] audit: type=1326 audit(2000000012.909:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.2.1851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c5775b59 code=0x0 [ 724.514286][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.564485][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.582367][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.600925][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.710540][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.717977][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.742087][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.760988][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.774096][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.789224][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.869449][ T5205] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 724.879435][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.886867][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 724.970688][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.033442][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.071230][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.115404][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.137047][ T5205] usb 1-1: config 0 has no interfaces? [ 725.159295][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.168753][ T5205] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 725.196351][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.214552][ T5205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.251995][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.302079][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.322421][T11759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.335783][ T5205] usb 1-1: config 0 descriptor?? [ 725.339772][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.352658][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.369574][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.397360][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.492431][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.577622][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.591167][T11759] sctp: [Deprecated]: syz.1.1854 (pid 11759) Use of int in maxseg socket option. [ 725.591167][T11759] Use struct sctp_assoc_value instead [ 725.598382][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.667451][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.697667][T11759] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.1854'. [ 725.718819][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.841053][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.971243][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 725.998435][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 726.031059][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 726.081348][ T5147] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 726.120675][ T5147] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 726.132707][ T5108] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 727.942064][T11783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.999529][ T5094] usb 1-1: USB disconnect, device number 13 [ 728.527957][T11792] ALSA: mixer_oss: invalid OSS volume '%I' [ 728.534370][T11792] ALSA: mixer_oss: invalid OSS volume 'k~Ky(1kn`Y' [ 728.541914][T11792] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 728.550527][T11792] ALSA: mixer_oss: invalid OSS volume 'lg' [ 728.556465][T11792] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 728.564976][T11792] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 728.573376][T11792] ALSA: mixer_oss: invalid OSS volume '' [ 728.579157][T11792] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 728.586937][T11792] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 728.595444][T11792] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 728.603943][T11792] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 728.613125][T11792] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 728.623856][T11792] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 728.632351][T11792] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 729.818474][ T30] audit: type=1400 audit(2000000000.909:1017): avc: denied { create } for pid=11796 comm="syz.1.1869" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 729.923569][ T5108] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 730.170317][T11802] input: syz0 as /devices/virtual/input/input27 [ 730.220008][ T5108] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 730.230495][ T5108] Bluetooth: hci3: Injecting HCI hardware error event [ 730.240096][T10344] Bluetooth: hci3: hardware error 0x00 [ 731.734374][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.160508][T11826] hub 6-0:1.0: USB hub found [ 732.169769][T11826] hub 6-0:1.0: 1 port detected [ 732.835403][T10344] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 732.888943][T11821] sctp: [Deprecated]: syz.3.1875 (pid 11821) Use of int in maxseg socket option. [ 732.888943][T11821] Use struct sctp_assoc_value instead [ 733.013069][T11821] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.1875'. [ 733.061256][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 733.115321][ T30] audit: type=1400 audit(2000000004.209:1018): avc: denied { read } for pid=11828 comm="syz.0.1878" path="socket:[44290]" dev="sockfs" ino=44290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 733.151409][T11828] delete_channel: no stack [ 734.750015][ T30] audit: type=1400 audit(2000000000.689:1019): avc: denied { unlink } for pid=10083 comm="syz-executor" name="file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 735.491763][ T30] audit: type=1400 audit(2000000001.429:1020): avc: denied { create } for pid=11855 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 735.695868][ T30] audit: type=1400 audit(2000000001.459:1021): avc: denied { setopt } for pid=11855 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 736.475756][T11875] input: syz0 as /devices/virtual/input/input28 [ 736.529977][T11876] 9pnet_fd: Insufficient options for proto=fd [ 740.068897][ T5205] libceph: connect (1)[c::]:6789 error -101 [ 740.079203][ T5205] libceph: mon0 (1)[c::]:6789 connect error [ 740.088390][ T5205] libceph: connect (1)[c::]:6789 error -101 [ 740.098103][ T5205] libceph: mon0 (1)[c::]:6789 connect error [ 740.374809][ T5205] libceph: connect (1)[c::]:6789 error -101 [ 741.058622][ T5205] libceph: mon0 (1)[c::]:6789 connect error [ 741.247509][ T30] audit: type=1400 audit(2000000007.179:1022): avc: denied { getopt } for pid=11915 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 741.424770][T11904] ceph: No mds server is up or the cluster is laggy [ 741.570129][ T5205] libceph: connect (1)[c::]:6789 error -101 [ 741.576283][ T5205] libceph: mon0 (1)[c::]:6789 connect error [ 741.760102][T11716] IPVS: starting estimator thread 0... [ 742.124385][T11934] IPVS: using max 18 ests per chain, 43200 per kthread [ 742.981205][ T30] audit: type=1400 audit(2000000008.929:1023): avc: denied { map } for pid=11948 comm="syz.4.1916" path="socket:[43782]" dev="sockfs" ino=43782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 743.208847][T11954] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 743.404528][ T30] audit: type=1400 audit(2000000009.339:1024): avc: denied { map } for pid=11949 comm="syz.0.1915" path="socket:[44518]" dev="sockfs" ino=44518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 743.551539][ T30] audit: type=1400 audit(2000000009.409:1025): avc: denied { ioctl } for pid=11949 comm="syz.0.1915" path="socket:[44524]" dev="sockfs" ino=44524 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 743.636000][ T30] audit: type=1400 audit(2000000009.409:1026): avc: denied { read } for pid=11949 comm="syz.0.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 744.105630][T11716] libceph: connect (1)[c::]:6789 error -101 [ 744.112048][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 744.370669][ T5145] libceph: connect (1)[c::]:6789 error -101 [ 744.401810][ T5145] libceph: mon0 (1)[c::]:6789 connect error [ 745.677577][ T30] audit: type=1326 audit(2000000011.519:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11966 comm="syz.4.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x0 [ 745.788461][T11716] libceph: connect (1)[c::]:6789 error -101 [ 745.824515][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 745.915490][T11973] ceph: No mds server is up or the cluster is laggy [ 746.475848][T12001] hub 9-0:1.0: USB hub found [ 746.482999][T12001] hub 9-0:1.0: 8 ports detected [ 747.459931][ T30] audit: type=1400 audit(2000000013.399:1028): avc: denied { map } for pid=12006 comm="syz.1.1931" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 747.544140][T12007] nullb0: AHDI p1 p2 [ 747.568842][ T30] audit: type=1400 audit(2000000013.399:1029): avc: denied { execute } for pid=12006 comm="syz.1.1931" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 747.592246][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.895579][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.707537][T12020] binder: 12016:12020 ioctl ae41 0 returned -22 [ 748.755224][T12029] syz_tun: tun_net_xmit 86 [ 748.892974][T12028] sp0: Synchronizing with TNC [ 748.909547][ T30] audit: type=1400 audit(2000000014.819:1030): avc: denied { map } for pid=12027 comm="syz.4.1940" path="/dev/sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 749.097751][T12020] hub 9-0:1.0: USB hub found [ 749.103797][T12020] hub 9-0:1.0: 8 ports detected [ 749.785362][T12041] hub 9-0:1.0: USB hub found [ 749.791462][T12041] hub 9-0:1.0: 8 ports detected [ 749.823801][ C1] syz_tun: tun_net_xmit 86 [ 750.212305][T12040] netlink: 'syz.3.1943': attribute type 2 has an invalid length. [ 750.295590][T12040] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1943'. [ 750.666012][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.693359][T12048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.709781][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.749727][T12055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.785777][T12051] nullb0: AHDI p1 p2 [ 750.849593][ C1] syz_tun: tun_net_xmit 86 [ 751.103408][T12048] sctp: [Deprecated]: syz.0.1947 (pid 12048) Use of int in maxseg socket option. [ 751.103408][T12048] Use struct sctp_assoc_value instead [ 751.263068][T12048] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.1947'. [ 754.475265][T12095] hub 9-0:1.0: USB hub found [ 754.480559][T12095] hub 9-0:1.0: 8 ports detected [ 755.438613][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1965'. [ 755.486632][T12106] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1965'. [ 755.522760][T12106] netlink: 'syz.1.1965': attribute type 3 has an invalid length. [ 755.734756][T12106] netlink: 'syz.1.1965': attribute type 2 has an invalid length. [ 755.782656][T12106] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1965'. [ 757.774312][T12131] netlink: 'syz.1.1972': attribute type 11 has an invalid length. [ 758.052122][ T30] audit: type=1326 audit(2000000023.979:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.3.1968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9271375b59 code=0x0 [ 758.419706][T12137] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1973'. [ 759.759915][ T30] audit: type=1400 audit(2000000025.699:1032): avc: denied { getopt } for pid=12148 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.027332][ T30] audit: type=1400 audit(2000000026.969:1033): avc: denied { module_load } for pid=12160 comm="syz.2.1982" path="/sys/power/wakeup_count" dev="sysfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 761.272433][T12163] can: request_module (can-proto-0) failed. [ 761.297667][T12161] netlink: 'syz.2.1982': attribute type 29 has an invalid length. [ 762.682230][T12174] xt_CT: No such helper "snmp" [ 764.557230][ C1] eth0: bad gso: type: 1, size: 1408 [ 764.694030][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 765.247913][T12196] syz_tun: tun_net_xmit 86 [ 765.304452][T12196] kvm: kvm [12194]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x94500000000 [ 766.015249][T10344] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 766.289691][ C0] syz_tun: tun_net_xmit 86 [ 766.469875][ T30] audit: type=1400 audit(2000000032.319:1034): avc: denied { setopt } for pid=12223 comm="syz.4.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 767.174196][ C1] eth0: bad gso: type: 1, size: 1408 [ 767.329740][ C0] syz_tun: tun_net_xmit 86 [ 770.359795][T12277] nullb0: AHDI p1 p2 [ 770.404724][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 770.438611][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 770.836548][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'. [ 772.442075][T12302] binder: 12299:12302 ioctl c0306201 0 returned -14 [ 773.141596][T12308] hub 9-0:1.0: USB hub found [ 773.147793][T12308] hub 9-0:1.0: 8 ports detected [ 774.076733][T12324] pimreg: entered allmulticast mode [ 774.266081][T12324] pimreg: left allmulticast mode [ 775.197863][T12332] xt_CT: No such helper "snmp" [ 775.414626][ T5145] libceph: connect (1)[c::]:6789 error -101 [ 775.437357][ T5145] libceph: mon0 (1)[c::]:6789 connect error [ 775.664829][T12329] ceph: No mds server is up or the cluster is laggy [ 775.721667][T11716] libceph: connect (1)[c::]:6789 error -101 [ 775.732482][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 775.780169][ T5145] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 775.887476][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2044'. [ 776.003108][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.037650][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 776.063958][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 776.091111][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.137953][ T5145] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 776.166875][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.219474][ T5145] usb 1-1: config 0 descriptor?? [ 776.467680][ T30] audit: type=1400 audit(2000000042.409:1035): avc: denied { ioctl } for pid=12359 comm="syz.1.2051" path="socket:[45533]" dev="sockfs" ino=45533 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 776.590076][T12366] netlink: 'syz.4.2054': attribute type 3 has an invalid length. [ 776.638619][T12366] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2054'. [ 776.743646][ T5145] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 776.959679][ T5145] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 777.252882][ T5145] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0011/input/input29 [ 777.394073][ T5145] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 777.417659][ T5145] usb 1-1: USB disconnect, device number 14 [ 777.491004][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 777.531230][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 777.703457][T11716] libceph: connect (1)[c::]:6789 error -101 [ 777.761494][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 778.040887][T11716] libceph: connect (1)[c::]:6789 error -101 [ 778.098660][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 778.123920][ T30] audit: type=1400 audit(2000000000.619:1036): avc: denied { getopt } for pid=12385 comm="syz.1.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 778.784551][T12402] hub 9-0:1.0: USB hub found [ 778.825876][T12402] hub 9-0:1.0: 8 ports detected [ 779.168915][ T5094] libceph: connect (1)[c::]:6789 error -101 [ 779.176903][ T5094] libceph: mon0 (1)[c::]:6789 connect error [ 779.618050][T12379] ceph: No mds server is up or the cluster is laggy [ 779.676271][ T30] audit: type=1400 audit(2000000002.209:1037): avc: denied { execute } for pid=12404 comm="syz.3.2066" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 780.087379][T12413] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 780.116228][T12413] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2070'. [ 780.415472][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 780.445485][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 780.496475][ T30] audit: type=1400 audit(2000000003.029:1038): avc: denied { connect } for pid=12424 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 780.990424][T10344] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 781.317399][T12428] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 781.446552][T12428] input: syz1 as /devices/virtual/input/input30 [ 781.853899][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 783.734545][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 783.865098][T10344] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 784.086584][ T30] audit: type=1400 audit(2000000006.619:1039): avc: denied { append } for pid=12487 comm="syz.0.2095" name="userio" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.217194][T12483] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 784.347542][T12483] input: syz1 as /devices/virtual/input/input31 [ 784.822684][ T30] audit: type=1400 audit(2000000007.349:1040): avc: denied { name_bind } for pid=12507 comm="syz.0.2103" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 784.981100][ T30] audit: type=1400 audit(2000000007.509:1041): avc: denied { setopt } for pid=12503 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 785.630405][T12522] usb usb1: usbfs: process 12522 (syz.2.2108) did not claim interface 0 before use [ 785.715926][ T30] audit: type=1400 audit(2000000008.239:1042): avc: denied { getopt } for pid=12520 comm="syz.3.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 786.258998][T12539] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2109'. [ 786.609760][T12540] syzkaller0: entered allmulticast mode [ 787.472707][T12547] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 788.273343][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.349957][ T30] audit: type=1400 audit(2000000010.889:1043): avc: denied { setopt } for pid=12563 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 788.474055][ T30] audit: type=1400 audit(2000000011.009:1044): avc: denied { bind } for pid=12563 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 789.204519][T12576] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2122'. [ 789.307714][T12574] usb usb1: usbfs: process 12574 (syz.3.2121) did not claim interface 0 before use [ 789.366780][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.638736][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 789.822462][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2124'. [ 792.312453][ T30] audit: type=1400 audit(2000000014.839:1045): avc: denied { map } for pid=12599 comm="syz.2.2128" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 792.616787][T12618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2133'. [ 792.850777][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.303508][ T30] audit: type=1326 audit(2000000016.839:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12633 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9271375b59 code=0x7ffc0000 [ 794.408611][ T30] audit: type=1326 audit(2000000016.869:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12633 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9271375b59 code=0x7ffc0000 [ 794.484063][ T30] audit: type=1326 audit(2000000016.879:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12633 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f9271375b59 code=0x7ffc0000 [ 794.570773][ T30] audit: type=1326 audit(2000000016.879:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12633 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9271375b59 code=0x7ffc0000 [ 794.649810][ T30] audit: type=1326 audit(2000000016.879:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12633 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9271375b59 code=0x7ffc0000 [ 795.042300][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2140'. [ 795.114224][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.372931][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.763995][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.897212][T12663] pimreg: entered allmulticast mode [ 796.933382][T12667] pimreg: left allmulticast mode [ 796.948791][T12673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'. [ 797.131811][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.220949][T12674] tun0: tun_chr_ioctl cmd 2148553947 [ 797.262638][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.347047][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.372905][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.384852][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.473347][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.491898][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.501203][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 797.508751][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.745470][ T30] audit: type=1326 audit(2000000020.269:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.4.2150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x0 [ 798.374719][ T12] bridge_slave_1: left allmulticast mode [ 798.389361][ T12] bridge_slave_1: left promiscuous mode [ 798.395184][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.413889][ T12] bridge_slave_0: left allmulticast mode [ 798.460611][ T12] bridge_slave_0: left promiscuous mode [ 798.466474][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.753469][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.030868][T10344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.164315][T10344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.175806][T10344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.184874][T10344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.192877][T10344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 799.200232][T10344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.863589][T10344] Bluetooth: hci0: command tx timeout [ 800.494351][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.520629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.552644][ T12] bond0 (unregistering): Released all slaves [ 801.227674][T12682] chnl_net:caif_netlink_parms(): no params data found [ 801.250665][T10344] Bluetooth: hci3: command tx timeout [ 801.269268][ T12] hsr_slave_0: left promiscuous mode [ 801.279582][T12558] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 801.296401][ T12] hsr_slave_1: left promiscuous mode [ 801.312783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.336583][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.358179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.367033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.240289][T10344] Bluetooth: hci0: command tx timeout [ 802.400278][ T12] veth1_macvtap: left promiscuous mode [ 802.411922][ T12] veth0_macvtap: left promiscuous mode [ 802.434328][ T12] veth1_vlan: left promiscuous mode [ 802.434330][T12558] usb 1-1: Using ep0 maxpacket: 8 [ 802.441276][T12558] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 802.473248][ T12] veth0_vlan: left promiscuous mode [ 802.488570][T12558] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.498693][T12558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 802.507156][T12558] usb 1-1: SerialNumber: syz [ 802.531746][T12558] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 803.012943][T12712] raw-gadget.0 gadget.0: fail, usb_ep_set_halt returned -11 [ 803.040836][T12558] usb 1-1: USB disconnect, device number 15 [ 803.258568][ T12] team0 (unregistering): Port device team_slave_1 removed [ 803.317923][ T12] team0 (unregistering): Port device team_slave_0 removed [ 803.339672][T10344] Bluetooth: hci3: command tx timeout [ 804.344925][T10344] Bluetooth: hci0: command tx timeout [ 805.249222][T12746] syzkaller1: entered promiscuous mode [ 805.262348][T12746] syzkaller1: entered allmulticast mode [ 805.409595][T10344] Bluetooth: hci3: command tx timeout [ 806.198541][T10344] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 806.369477][T10344] Bluetooth: hci0: command tx timeout [ 806.469753][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.486415][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.650062][T12682] bridge_slave_0: entered allmulticast mode [ 807.025053][T12682] bridge_slave_0: entered promiscuous mode [ 807.050513][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.057706][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.071228][T12682] bridge_slave_1: entered allmulticast mode [ 807.122858][T12682] bridge_slave_1: entered promiscuous mode [ 807.489705][T10344] Bluetooth: hci3: command tx timeout [ 807.496956][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.511392][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.842364][T12682] team0: Port device team_slave_0 added [ 807.868702][T12682] team0: Port device team_slave_1 added [ 808.210174][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.465571][T12703] chnl_net:caif_netlink_parms(): no params data found [ 808.634990][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.695585][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.706420][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.753762][ T30] audit: type=1326 audit(2000000031.279:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.2182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x0 [ 808.781604][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.816489][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.848241][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.934570][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.176437][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.264390][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.381265][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.911118][T12682] hsr_slave_0: entered promiscuous mode [ 809.930528][T12682] hsr_slave_1: entered promiscuous mode [ 809.952607][T12682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.961668][ T5145] kernel write not supported for file /amidi2 (pid: 5145 comm: kworker/0:5) [ 809.974200][T12682] Cannot create hsr debugfs directory [ 810.076024][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.100079][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.309751][T12703] bridge_slave_0: entered allmulticast mode [ 810.318993][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.322312][T12703] bridge_slave_0: entered promiscuous mode [ 810.444410][ T30] audit: type=1400 audit(2000000032.979:1053): avc: denied { setopt } for pid=12809 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 811.029659][ T30] audit: type=1400 audit(2000000032.999:1054): avc: denied { getopt } for pid=12807 comm="syz.1.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 811.086961][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.111194][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.128360][ T30] audit: type=1400 audit(2000000033.659:1055): avc: denied { listen } for pid=12820 comm="syz.4.2192" laddr=0:0:0:1:: faddr=::ffff:100:0:0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.131992][T12703] bridge_slave_1: entered allmulticast mode [ 811.188620][T12703] bridge_slave_1: entered promiscuous mode [ 811.308733][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.492641][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.540154][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.563737][T12830] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.758225][ T12] bridge_slave_1: left allmulticast mode [ 811.765141][ T12] bridge_slave_1: left promiscuous mode [ 811.767939][ T30] audit: type=1400 audit(2000000034.309:1056): avc: denied { accept } for pid=12831 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.775470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.804535][T10344] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 811.815515][ T12] bridge_slave_0: left allmulticast mode [ 811.822481][ T12] bridge_slave_0: left promiscuous mode [ 811.828400][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.143989][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.992600][ T5094] kernel write not supported for file /amidi2 (pid: 5094 comm: kworker/0:3) [ 813.774252][T12853] futex_wake_op: syz.0.2204 tries to shift op by -1; fix this program [ 813.869123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.922389][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.944097][ T12] bond0 (unregistering): Released all slaves [ 813.956737][ T30] audit: type=1400 audit(2000000036.489:1057): avc: denied { ioctl } for pid=12854 comm="syz.0.2205" path="socket:[48560]" dev="sockfs" ino=48560 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 814.150413][ T12] bond1 (unregistering): Released all slaves [ 814.193818][T12703] team0: Port device team_slave_0 added [ 815.207558][T12863] Bluetooth: MGMT ver 1.23 [ 815.213502][T12703] team0: Port device team_slave_1 added [ 815.693093][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.722679][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.795962][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.911181][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.918152][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.007070][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.142289][ T12] hsr_slave_0: left promiscuous mode [ 816.148184][ T12] hsr_slave_1: left promiscuous mode [ 816.159683][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.176864][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.191989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.208848][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.285235][ T12] veth1_macvtap: left promiscuous mode [ 816.291029][ T12] veth0_macvtap: left promiscuous mode [ 816.297720][ T12] veth1_vlan: left promiscuous mode [ 816.303249][ T12] veth0_vlan: left promiscuous mode [ 817.781013][ T12] team0 (unregistering): Port device team_slave_1 removed [ 817.938438][ T12] team0 (unregistering): Port device team_slave_0 removed [ 819.200442][ T1150] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 819.255468][T12703] hsr_slave_0: entered promiscuous mode [ 819.274565][T12703] hsr_slave_1: entered promiscuous mode [ 819.399673][ T1150] usb 1-1: Using ep0 maxpacket: 8 [ 819.411365][ T1150] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.435582][ T1150] usb 1-1: config 0 has no interface number 0 [ 819.444910][ T1150] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.466790][ T1150] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 819.478357][ T1150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.502175][ T1150] usb 1-1: config 0 descriptor?? [ 819.536179][ T1150] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 819.902511][ T5147] usb 1-1: USB disconnect, device number 16 [ 819.948434][ T12] IPVS: stop unused estimator thread 0... [ 819.955203][ T5147] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 820.150086][T12682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 820.955358][T12682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 821.061816][T12682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 821.129387][ T30] audit: type=1400 audit(2000000043.659:1058): avc: denied { shutdown } for pid=12917 comm="syz.1.2227" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 821.136821][T12920] input: syz0 as /devices/virtual/input/input33 [ 821.175526][T12682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.050653][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.889389][T12951] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2238'. [ 823.756412][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.798114][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.805383][T10418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.847500][T12960] xt_l2tp: v2 doesn't support IP mode [ 824.806466][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.813729][T10418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.861895][T12703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 824.961522][T12703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 825.006273][T12703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 825.027784][T12968] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2244'. [ 825.037164][T12968] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2244'. [ 825.051088][T12703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 825.061063][T12968] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2244'. [ 825.452689][T12979] ALSA: seq fatal error: cannot create timer (-22) [ 825.555900][T12703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.675748][T12703] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.722170][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.729384][T12558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.812483][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.819810][T12558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.998529][ T30] audit: type=1400 audit(2000000048.529:1059): avc: denied { mount } for pid=12987 comm="syz.0.2249" name="/" dev="rpc_pipefs" ino=49023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 826.286802][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.501660][T12682] veth0_vlan: entered promiscuous mode [ 826.575831][ T30] audit: type=1326 audit(2000000049.109:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.4.2251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x0 [ 826.639821][T12682] veth1_vlan: entered promiscuous mode [ 826.798471][T12682] veth0_macvtap: entered promiscuous mode [ 826.840187][T12682] veth1_macvtap: entered promiscuous mode [ 826.946147][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.949967][ T30] audit: type=1400 audit(2000000049.479:1061): avc: denied { unmount } for pid=10062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 826.986054][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.006707][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.022897][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.034819][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.045448][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.071066][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.087474][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.100721][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.111335][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.123734][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.149091][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.160446][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.172027][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.184074][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.198214][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.211302][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.228016][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.244986][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.262605][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.273839][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.297085][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.325427][T12682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.344476][T12682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.358529][T12682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.368613][T12682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.463468][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.638305][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.661757][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.885579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.926469][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.978835][T12703] veth0_vlan: entered promiscuous mode [ 828.040668][T12703] veth1_vlan: entered promiscuous mode [ 828.209425][T12703] veth0_macvtap: entered promiscuous mode [ 828.302256][T12703] veth1_macvtap: entered promiscuous mode [ 828.411362][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.540469][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.600348][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.690339][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.745191][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.829344][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.829853][ T30] audit: type=1400 audit(2000000051.349:1062): avc: denied { read } for pid=13049 comm="syz.3.2261" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 828.847621][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.888984][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.984382][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.997234][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.049762][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.130460][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.176505][T10344] Bluetooth: hci0: Malformed Event: 0x2f [ 829.187298][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.296180][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.350158][T13053] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2262'. [ 829.353655][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.360990][T13053] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2262'. [ 829.379701][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.379725][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.379748][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.379765][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.379787][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.379804][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.379818][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.379835][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.379860][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.379878][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.381826][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.734865][ T30] audit: type=1326 audit(2000000052.199:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.4.2263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f453d575b59 code=0x0 [ 829.774996][T13059] autofs4:pid:13059:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 829.779595][ T30] audit: type=1400 audit(2000000052.309:1064): avc: denied { read } for pid=13054 comm="syz.4.2263" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 829.792721][T13059] autofs4:pid:13059:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 829.814296][T12703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.854244][T12703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.441574][ T30] audit: type=1400 audit(2000000052.309:1065): avc: denied { ioctl } for pid=13054 comm="syz.4.2263" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 830.462423][T12703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.475972][T12703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.102284][ T1150] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 831.149762][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.157888][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.309829][ T1150] usb 5-1: Using ep0 maxpacket: 8 [ 831.318505][ T1150] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 831.337327][ T1150] usb 5-1: config 179 has no interface number 0 [ 831.368855][ T1150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 831.392272][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.419621][ T1150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 831.431151][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.454580][ T1150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 831.476455][ T1150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 831.506972][ T1150] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 831.544953][ T1150] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 831.581190][ T1150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.630081][T13063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 831.646784][ T1150] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 831.668148][T13073] Cannot find add_set index 0 as target [ 831.905465][ T30] audit: type=1400 audit(2000000054.439:1066): avc: denied { connect } for pid=13078 comm="syz.0.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 831.962408][ T30] audit: type=1400 audit(2000000054.449:1067): avc: denied { read } for pid=13078 comm="syz.0.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 832.200846][ C1] eth0: bad gso: type: 1, size: 1408 [ 832.899716][T12557] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 833.436717][T12557] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 833.462344][T13104] overlayfs: missing 'workdir' [ 833.609060][T12557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.041451][T12557] usb 4-1: config 0 descriptor?? [ 834.181741][T12558] usb 5-1: USB disconnect, device number 14 [ 834.343985][T12557] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 834.360149][T12557] asix 4-1:0.0: probe with driver asix failed with error -61 [ 834.533855][ T5097] Bluetooth: hci3: command 0x0405 tx timeout [ 835.093057][ T5108] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 835.314578][T13138] binder: 13135:13138 ioctl c0306201 0 returned -14 [ 835.778669][T13140] hub 9-0:1.0: USB hub found [ 835.784869][T13140] hub 9-0:1.0: 8 ports detected [ 836.701996][ T30] audit: type=1326 audit(2000000059.239:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13144 comm="syz.1.2293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32d0d75b59 code=0x0 [ 836.723003][T12558] usb 4-1: USB disconnect, device number 15 [ 836.761681][T13146] autofs4:pid:13146:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 836.777477][T13146] autofs4:pid:13146:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 837.740531][ T30] audit: type=1400 audit(2000000060.279:1069): avc: denied { read write } for pid=13151 comm="syz.1.2296" name="file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 838.041615][ T30] audit: type=1400 audit(2000000060.279:1070): avc: denied { ioctl open } for pid=13151 comm="syz.1.2296" path="/193/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 838.735658][T13160] input: syz0 as /devices/virtual/input/input34 [ 839.251932][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 839.264493][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 839.429237][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 839.448929][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 839.462675][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 839.479197][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.084608][T10344] Bluetooth: hci5: Opcode 0x0c39 failed: -110 [ 842.113546][ T5108] Bluetooth: hci5: unexpected event for opcode 0x0c39 [ 842.120638][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.699085][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.743827][ T30] audit: type=1400 audit(2000000065.269:1071): avc: denied { write } for pid=13184 comm="syz.2.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 843.056009][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.273688][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.503604][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.599151][T10344] Bluetooth: hci0: sending frame failed (-49) [ 843.608534][ T5108] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 843.623794][T13204] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 844.275757][T13169] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 844.541827][T13200] input: syz0 as /devices/virtual/input/input35 [ 844.756801][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.969658][ T5094] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 845.153483][ T12] bridge_slave_1: left allmulticast mode [ 845.166302][ T12] bridge_slave_1: left promiscuous mode [ 845.192611][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.211876][ T5094] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.245876][ T12] bridge_slave_0: left allmulticast mode [ 845.248128][ T5094] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.265516][ T12] bridge_slave_0: left promiscuous mode [ 845.295903][ T5094] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.299908][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.342643][ T5094] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.403977][ T5094] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.439332][ T5094] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.458530][ T5094] usb 3-1: Product: syz [ 845.462870][ T5094] usb 3-1: Manufacturer: syz [ 845.488571][ T5094] cdc_wdm 3-1:1.0: skipping garbage [ 845.498697][ T5094] cdc_wdm 3-1:1.0: skipping garbage [ 845.523640][ T5094] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 845.530368][T13221] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 845.538235][ T5094] cdc_wdm 3-1:1.0: Unknown control protocol [ 845.732137][ T5147] usb 3-1: USB disconnect, device number 5 [ 845.921864][T10344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.930754][T10344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.948243][T10344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.978801][T10344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 846.093212][T10344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 846.102668][T10344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 846.125843][T13229] sock: sock_set_timeout: `syz.4.2322' (pid 13229) tries to set negative timeout [ 846.372995][T13233] CIFS: Unable to determine destination address [ 848.214487][ T5108] Bluetooth: hci0: command tx timeout [ 848.297610][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.328186][ T5108] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 848.347535][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.373551][ T12] bond0 (unregistering): Released all slaves [ 848.578945][T13252] overlayfs: missing 'workdir' [ 849.207754][T13247] input: syz0 as /devices/virtual/input/input36 [ 849.336250][T13256] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 849.550397][ T30] audit: type=1400 audit(2000000072.089:1072): avc: denied { bind } for pid=13261 comm="syz.1.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 849.638067][T13258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 849.644643][T13258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 849.765679][T13258] vhci_hcd vhci_hcd.0: Device attached [ 850.064780][ T12] hsr_slave_0: left promiscuous mode [ 850.339380][ T5108] Bluetooth: hci0: command tx timeout [ 850.929523][ T46] usb 18-1: SetAddress Request (2) to port 0 [ 850.936263][ T46] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 850.944717][ T12] hsr_slave_1: left promiscuous mode [ 850.975114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.009753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.040643][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.048058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.085727][ T12] veth1_macvtap: left promiscuous mode [ 851.092811][ T12] veth0_macvtap: left promiscuous mode [ 851.114821][ T12] veth1_vlan: left promiscuous mode [ 851.146537][ T12] veth0_vlan: left promiscuous mode [ 851.331680][T13272] vhci_hcd: connection reset by peer [ 851.370624][ T1085] vhci_hcd: stop threads [ 851.374913][ T1085] vhci_hcd: release socket [ 851.409092][ T1085] vhci_hcd: disconnect device [ 851.573536][ T30] audit: type=1400 audit(2000000074.109:1073): avc: denied { ioctl } for pid=13286 comm="syz.2.2337" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 852.369689][T10344] Bluetooth: hci0: command tx timeout [ 852.369810][ T5108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 852.385349][ T5108] Bluetooth: hci1: Injecting HCI hardware error event [ 852.394486][T10344] Bluetooth: hci1: hardware error 0x00 [ 852.788034][ T12] team0 (unregistering): Port device team_slave_1 removed [ 852.893799][ T12] team0 (unregistering): Port device team_slave_0 removed [ 853.986114][ T5108] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 854.137418][T13306] input: syz0 as /devices/virtual/input/input37 [ 854.449977][ T5108] Bluetooth: hci0: command tx timeout [ 854.456193][T10344] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 854.629227][T13224] chnl_net:caif_netlink_parms(): no params data found [ 856.051301][ T46] usb 18-1: device descriptor read/8, error -110 [ 856.092439][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.111275][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.118526][T13224] bridge_slave_0: entered allmulticast mode [ 856.149490][T13224] bridge_slave_0: entered promiscuous mode [ 856.168401][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.186777][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.213764][T13224] bridge_slave_1: entered allmulticast mode [ 856.268572][T13224] bridge_slave_1: entered promiscuous mode [ 856.444578][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.524100][ T46] usb usb18-port1: attempt power cycle [ 856.622198][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.687930][T13346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 856.694504][T13346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 856.711420][T13346] vhci_hcd vhci_hcd.0: Device attached [ 856.808479][T13224] team0: Port device team_slave_0 added [ 856.858593][T13224] team0: Port device team_slave_1 added [ 857.003216][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.029514][T12558] usb 14-1: SetAddress Request (2) to port 0 [ 857.040184][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.049537][T12558] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 857.133824][T13352] vhci_hcd: connection closed [ 857.134669][ T12] vhci_hcd: stop threads [ 857.142562][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.177269][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.192589][ T12] vhci_hcd: release socket [ 857.198814][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.228710][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.248029][ T12] vhci_hcd: disconnect device [ 857.255165][ T46] usb usb18-port1: unable to enumerate USB device [ 857.676185][T13224] hsr_slave_0: entered promiscuous mode [ 857.707922][T13224] hsr_slave_1: entered promiscuous mode [ 857.730660][T13224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.749446][T13224] Cannot create hsr debugfs directory [ 859.033964][ T30] audit: type=1400 audit(2000000081.559:1074): avc: denied { setattr } for pid=13383 comm="syz.1.2371" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 859.057037][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.877674][T13224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 860.960006][T10344] Bluetooth: hci3: unexpected cc 0x0403 length: 65 > 1 [ 860.960840][T13224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 860.971498][T10344] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 861.209666][ T30] audit: type=1400 audit(2000000083.609:1075): avc: denied { map } for pid=13404 comm="syz.1.2375" path="/dev/usbmon0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 861.306817][ T1092] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 861.659402][T13224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 861.721506][T13224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 861.945091][T13414] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 861.951741][T13414] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 861.980266][T13414] vhci_hcd vhci_hcd.0: Device attached [ 862.132555][T13435] vhci_hcd: connection closed [ 862.134188][ T6873] vhci_hcd: stop threads [ 862.167625][ T6873] vhci_hcd: release socket [ 862.178223][ T6873] vhci_hcd: disconnect device [ 862.358041][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.444051][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.475122][T12558] usb 14-1: device descriptor read/8, error -110 [ 862.511048][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.518240][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.983765][T12558] usb usb14-port1: attempt power cycle [ 863.353318][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.360573][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.734517][ T5335] bridge_slave_1: left allmulticast mode [ 863.742019][T12558] usb usb14-port1: unable to enumerate USB device [ 863.749361][ T5335] bridge_slave_1: left promiscuous mode [ 863.765038][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.845058][ T5335] bridge_slave_0: left allmulticast mode [ 863.867581][ T5335] bridge_slave_0: left promiscuous mode [ 863.874900][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.239743][T11716] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 864.460829][T11716] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 864.491387][T11716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.583981][T11716] usb 1-1: config 0 descriptor?? [ 864.651848][T11716] ldusb 1-1:0.0: Interrupt in endpoint not found [ 865.010449][T10344] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 865.022858][T10344] Bluetooth: hci3: Injecting HCI hardware error event [ 865.038819][ T5108] Bluetooth: hci3: hardware error 0x00 [ 865.059231][T12558] usb 1-1: USB disconnect, device number 17 [ 865.686303][ T5335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.699676][ T5335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.712722][ T5335] bond0 (unregistering): Released all slaves [ 867.626317][ T5108] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 868.118499][ T5335] hsr_slave_0: left promiscuous mode [ 868.332278][ T5335] hsr_slave_1: left promiscuous mode [ 868.355463][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.363355][ T5335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.133627][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.151804][ T5335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.248456][ T5335] veth1_macvtap: left promiscuous mode [ 869.265777][ T5335] veth0_macvtap: left promiscuous mode [ 869.282729][ T5335] veth1_vlan: left promiscuous mode [ 869.288139][ T5335] veth0_vlan: left promiscuous mode [ 869.480103][T13524] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 869.512893][T13524] vhci_hcd: invalid port number 117 [ 869.635831][T13524] vhci_hcd: default hub control req: 656c v6e69 i0075 l24879 [ 870.696257][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.614439][ T5335] team0 (unregistering): Port device team_slave_1 removed [ 871.755542][ T5335] team0 (unregistering): Port device team_slave_0 removed [ 872.555609][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.825045][T13224] veth0_vlan: entered promiscuous mode [ 872.831298][ T30] audit: type=1400 audit(2000000095.369:1076): avc: denied { setopt } for pid=13541 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 872.864901][T13224] veth1_vlan: entered promiscuous mode [ 873.018577][T13224] veth0_macvtap: entered promiscuous mode [ 873.066682][T13224] veth1_macvtap: entered promiscuous mode [ 873.225879][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.257062][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.310113][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.371287][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.584472][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.660033][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.728253][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.863063][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.884004][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.904654][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.928411][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.078239][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.134216][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.162585][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.177661][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 874.198662][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.224306][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.243148][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.266514][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.287507][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.307880][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.319078][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.348128][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.388450][T13224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.411865][T13224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.426612][ T30] audit: type=1400 audit(2000000096.969:1077): avc: denied { listen } for pid=13557 comm="syz.0.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 874.431065][T13224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.478557][T13224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.488402][ T30] audit: type=1400 audit(2000000096.969:1078): avc: denied { accept } for pid=13557 comm="syz.0.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 874.562467][ T30] audit: type=1400 audit(2000000096.989:1079): avc: denied { shutdown } for pid=13557 comm="syz.0.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 874.676074][T13565] Cannot find del_set index 2 as target [ 874.819354][ T30] audit: type=1326 audit(2000000097.299:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.1.2431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32d0d75b59 code=0x0 [ 874.869582][T13573] autofs4:pid:13573:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 874.883639][T13573] autofs4:pid:13573:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 880.282837][ T5335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.331943][ T5335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.703489][T13587] xt_CT: No such helper "netbios-ns" [ 882.002788][ T5335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.022006][ T5335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.233892][ C1] eth0: bad gso: type: 1, size: 1408 [ 882.307394][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 883.311963][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 884.533810][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 884.580535][T13640] Bluetooth: MGMT ver 1.23 [ 884.628245][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 884.675883][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 885.623151][T13657] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 885.639462][T13657] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 886.667324][T13674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.724199][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'. [ 887.799802][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 887.814983][ T30] audit: type=1400 audit(2000000110.349:1081): avc: denied { watch watch_reads } for pid=13687 comm="syz.4.2465" path="/proc/timer_list" dev="proc" ino=4026532104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 887.844701][T11153] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 888.019420][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 888.037055][ T46] usb 4-1: config 0 has no interfaces? [ 888.059110][ T46] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 888.076201][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.137422][ T46] usb 4-1: config 0 descriptor?? [ 888.537114][ T30] audit: type=1326 audit(2000000111.049:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7fc00000 [ 888.618940][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.641841][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.712635][T13701] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.2469'. [ 888.822587][ T46] usb 4-1: USB disconnect, device number 16 [ 890.929066][ T30] audit: type=1326 audit(2000000113.459:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.020818][ T30] audit: type=1326 audit(2000000113.499:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.130072][ T30] audit: type=1326 audit(2000000113.509:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.199374][ T30] audit: type=1326 audit(2000000113.519:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.269650][ T30] audit: type=1326 audit(2000000113.519:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.309091][ T30] audit: type=1326 audit(2000000113.519:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.440387][ T30] audit: type=1326 audit(2000000113.519:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 891.525504][ T30] audit: type=1326 audit(2000000113.519:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7ffc0000 [ 892.237168][T13743] tc_dump_action: action bad kind [ 894.911627][T13778] trusted_key: syz.1.2496 sent an empty control message without MSG_MORE. [ 895.091362][ T5108] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 895.100507][ T5108] Bluetooth: hci0: Injecting HCI hardware error event [ 895.504916][T10344] Bluetooth: hci0: hardware error 0x00 [ 895.945002][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 895.945021][ T30] audit: type=1400 audit(2000000118.469:1124): avc: denied { map } for pid=13779 comm="syz.2.2499" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 898.054242][T13803] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 898.459738][T10344] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 904.564641][T13860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.576663][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 904.588186][T13860] program syz.1.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.772467][ T30] audit: type=1326 audit(2000000127.299:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x7fc00000 [ 906.074080][T13880] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 906.389498][T13878] Process accounting resumed [ 908.229878][ T1150] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 908.490935][ T30] audit: type=1400 audit(2000000130.969:1126): avc: denied { write } for pid=13930 comm="syz.2.2547" name="task" dev="proc" ino=54619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 908.549537][ T1150] usb 5-1: Using ep0 maxpacket: 16 [ 909.188372][ T1150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 909.209877][ T30] audit: type=1400 audit(2000000130.969:1127): avc: denied { add_name } for pid=13930 comm="syz.2.2547" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 909.265888][ T30] audit: type=1400 audit(2000000130.979:1128): avc: denied { create } for pid=13930 comm="syz.2.2547" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 909.322361][ T1150] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 909.350519][ T1150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.365400][ T1150] usb 5-1: config 0 descriptor?? [ 909.397417][ T30] audit: type=1400 audit(2000000130.979:1129): avc: denied { associate } for pid=13930 comm="syz.2.2547" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 909.485718][ T30] audit: type=1400 audit(2000000131.899:1130): avc: denied { listen } for pid=13923 comm="syz.3.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 909.911142][ T30] audit: type=1400 audit(2000000132.209:1131): avc: denied { execmem } for pid=13943 comm="syz.0.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 909.995129][T13948] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 910.671387][ T5108] Bluetooth: hci4: command 0x0406 tx timeout [ 910.968360][ T1150] usbhid 5-1:0.0: can't add hid device: -71 [ 911.009590][ T1150] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 911.038180][ T1150] usb 5-1: USB disconnect, device number 15 [ 911.129965][T12557] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 911.450851][T12557] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 911.478885][T13962] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 912.084478][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.099438][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.131643][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.151119][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.169740][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.217235][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.231338][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.240715][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.264640][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.294706][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.324001][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.354531][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.399703][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.408819][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.422238][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.454044][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.484489][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.533307][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.560936][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.573876][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.597491][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.639342][T12557] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.658603][T12557] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.709367][T12557] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.732148][T12557] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 912.903571][T12557] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 912.912212][T12557] usb 1-1: Product: syz [ 912.917323][T12557] usb 1-1: Manufacturer: syz [ 912.922300][T12557] usb 1-1: SerialNumber: syz [ 913.028089][T12557] usb 1-1: config 0 descriptor?? [ 913.492489][T12557] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 913.939482][ T1150] usb 1-1: USB disconnect, device number 18 [ 913.970892][ T1150] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 913.977755][T13986] netem: change failed [ 916.021186][ T30] audit: type=1400 audit(2000000138.559:1132): avc: denied { create } for pid=13999 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.053943][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'. [ 916.329782][ T30] audit: type=1400 audit(2000000138.589:1133): avc: denied { write } for pid=13999 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.406297][ T30] audit: type=1400 audit(2000000138.589:1134): avc: denied { nlmsg_write } for pid=13999 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 918.689854][T14032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2581'. [ 918.699068][T14032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2581'. [ 920.185374][ T30] audit: type=1400 audit(2000000142.719:1135): avc: denied { map } for pid=14064 comm="syz.2.2591" path="/proc/192/net/vlan/vlan1" dev="proc" ino=4026533153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 921.331804][ T30] audit: type=1400 audit(2000000143.859:1136): avc: denied { ioctl } for pid=14077 comm="syz.1.2595" path="socket:[54023]" dev="sockfs" ino=54023 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 921.336660][T14079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2594'. [ 921.465103][T14079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2594'. [ 921.880379][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'. [ 924.242139][T14112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.623962][T14121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2609'. [ 924.659755][T14121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2609'. [ 924.870618][T14126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.982343][T14165] nbd2: detected capacity change from 0 to 12 [ 929.044419][T14167] block nbd2: NBD_DISCONNECT [ 929.080373][T14167] block nbd2: Send disconnect failed -89 [ 929.111612][T14165] block nbd2: Send control failed (result -89) [ 929.164354][T14165] block nbd2: Request send failed, requeueing [ 929.233257][T14171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.262957][T14165] block nbd2: Disconnected due to user request. [ 929.309567][ T41] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.323304][ T41] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.371750][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.499329][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.528277][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.570598][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.588896][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.650129][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.707946][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.742978][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.758978][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.832853][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 929.850002][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 930.070029][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 930.650855][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 930.704539][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 930.746248][T14165] ldm_validate_partition_table(): Disk read failed. [ 930.776152][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 930.798409][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 930.817354][T14165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 930.839629][T14165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 930.858471][T14165] Dev nbd2: unable to read RDB block 0 [ 930.868157][T14165] nbd2: unable to read partition table [ 931.063559][T14165] nbd2: partition table beyond EOD, truncated [ 932.365514][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.952798][T14223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.105175][T14230] netlink: 'syz.0.2643': attribute type 2 has an invalid length. [ 936.129522][T14230] netlink: 'syz.0.2643': attribute type 4 has an invalid length. [ 936.230039][T14235] nbd3: detected capacity change from 0 to 12 [ 936.244953][T14235] block nbd3: NBD_DISCONNECT [ 936.258376][T14235] block nbd3: Send disconnect failed -89 [ 936.351533][T14235] block nbd3: Send control failed (result -89) [ 936.374068][T14235] block nbd3: Request send failed, requeueing [ 936.389442][T14235] block nbd3: Disconnected due to user request. [ 936.406038][ T41] blk_print_req_error: 5 callbacks suppressed [ 936.406057][ T41] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.423377][ T41] buffer_io_error: 5 callbacks suppressed [ 936.423394][ T41] Buffer I/O error on dev nbd3, logical block 0, async page read [ 936.444300][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.455580][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 936.469768][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.486869][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 936.522641][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.531871][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 936.539828][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.548907][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 936.638294][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.299498][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 937.307450][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.321262][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 937.341699][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.382024][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 937.411753][T14235] ldm_validate_partition_table(): Disk read failed. [ 937.430338][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.461725][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 937.508315][T14235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.659322][T14235] Buffer I/O error on dev nbd3, logical block 0, async page read [ 937.669665][T14235] Dev nbd3: unable to read RDB block 0 [ 937.699755][T14235] nbd3: unable to read partition table [ 937.719818][T14235] nbd3: partition table beyond EOD, truncated [ 937.948276][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 939.399432][ T30] audit: type=1400 audit(2000000161.929:1137): avc: denied { read } for pid=14288 comm="syz.4.2662" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.502551][ T30] audit: type=1400 audit(2000000161.929:1138): avc: denied { open } for pid=14288 comm="syz.4.2662" path="/429/file0" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.589471][ T30] audit: type=1326 audit(2000000162.089:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.4.2662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f453d575b59 code=0x0 [ 939.689412][ T30] audit: type=1400 audit(2000000162.159:1140): avc: granted { setsecparam } for pid=14288 comm="syz.4.2662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 940.192697][ T30] audit: type=1400 audit(2000000162.169:1141): avc: denied { write } for pid=14288 comm="syz.4.2662" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.738783][ T30] audit: type=1326 audit(2000000168.269:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.0.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x0 [ 947.320404][T14370] sch_fq: defrate 0 ignored. [ 948.642794][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 951.484343][ T30] audit: type=1326 audit(2000000174.019:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.2703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37fd375b59 code=0x0 [ 951.598198][T14406] sp0: Synchronizing with TNC [ 951.709425][ T5147] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 952.825688][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.858766][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.893112][ T5147] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 953.029814][T14406] libceph: resolve '0.0' (ret=-3): failed [ 953.037784][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 953.100179][ T5147] usb 5-1: Product: syz [ 953.132419][ T5147] usb 5-1: config 0 descriptor?? [ 953.384588][ T5147] usbhid 5-1:0.0: can't add hid device: -71 [ 953.401605][ T5147] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 953.415548][ T30] audit: type=1400 audit(2000000175.949:1144): avc: denied { write } for pid=14443 comm="syz.1.2714" path="socket:[55853]" dev="sockfs" ino=55853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 953.456978][ T5147] usb 5-1: USB disconnect, device number 16 [ 953.509975][ T30] audit: type=1400 audit(2000000176.039:1145): avc: denied { ioctl } for pid=14443 comm="syz.1.2714" path="socket:[55853]" dev="sockfs" ino=55853 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 953.729396][T11716] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 953.831158][T14459] netlink: 'syz.4.2718': attribute type 2 has an invalid length. [ 953.922490][T11716] usb 4-1: not running at top speed; connect to a high speed hub [ 953.967731][T11716] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 954.024336][T11716] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 954.099540][T11716] usb 4-1: config 1 interface 0 has no altsetting 0 [ 954.255836][T11716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 954.415945][T11716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.546817][T11716] usb 4-1: Product: 㠊 [ 954.556348][T11716] usb 4-1: Manufacturer: ࠧ [ 954.579528][T11716] usb 4-1: SerialNumber: syz [ 954.622384][T14444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 954.650997][T14444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 954.858634][T14469] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 925 (only 8 groups) [ 955.073999][T14442] netlink: 'syz.3.2713': attribute type 5 has an invalid length. [ 955.450154][T14480] sp0: Synchronizing with TNC [ 955.537673][T11716] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 955.592637][T11716] usb 4-1: USB disconnect, device number 17 [ 955.638666][T11716] usblp0: removed [ 955.804532][ T5147] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 955.849321][T12557] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 955.863493][T14494] netlink: 'syz.2.2733': attribute type 2 has an invalid length. [ 955.866725][T14480] libceph: resolve '0.0' (ret=-3): failed [ 956.066528][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.095678][T12557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.108661][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.128868][T12557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.159525][T12557] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 956.169741][ T5147] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 956.190721][T12557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.209388][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 956.240147][T14497] input: syz0 as /devices/virtual/input/input38 [ 956.266771][ T5147] usb 5-1: Product: syz [ 956.271981][T12557] usb 1-1: config 0 descriptor?? [ 956.293191][ T5147] usb 5-1: config 0 descriptor?? [ 957.788998][T14489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 957.798653][T14489] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 958.467048][T12557] wacom 0003:056A:00F8.0012: collection stack underflow [ 958.666519][ T30] audit: type=1326 audit(2000000181.199:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.4.2729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575b59 code=0x0 [ 958.689335][T12557] wacom 0003:056A:00F8.0012: item 0 0 0 12 parsing failed [ 958.732444][T12557] wacom 0003:056A:00F8.0012: parse failed [ 958.765433][T12557] wacom 0003:056A:00F8.0012: probe with driver wacom failed with error -22 [ 959.526303][ T5147] usbhid 5-1:0.0: can't add hid device: -71 [ 959.536334][ T5147] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 959.594624][ T5147] usb 5-1: USB disconnect, device number 17 [ 959.858221][T14522] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 925 (only 8 groups) [ 960.269013][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 961.225930][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.623550][ T5147] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 961.650045][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 961.952653][ T5147] usb 2-1: not running at top speed; connect to a high speed hub [ 961.979843][ T5147] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 962.627985][ T5147] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.641081][ T5147] usb 2-1: config 1 interface 0 has no altsetting 0 [ 962.667588][ T5147] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 962.677071][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.685297][ T5147] usb 2-1: Product: 㠊 [ 962.690867][ T5147] usb 2-1: Manufacturer: ࠧ [ 962.696306][ T5147] usb 2-1: SerialNumber: syz [ 962.711714][T14542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 962.718956][T14542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 963.015107][T14561] netlink: 'syz.4.2750': attribute type 4 has an invalid length. [ 963.097415][T14538] netlink: 'syz.1.2745': attribute type 5 has an invalid length. [ 963.144956][ T30] audit: type=1400 audit(2000000185.679:1147): avc: denied { listen } for pid=14563 comm="syz.0.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 963.177586][T14566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.722296][T14565] netlink: 'syz.4.2750': attribute type 17 has an invalid length. [ 963.853995][ T30] audit: type=1400 audit(2000000186.389:1148): avc: denied { connect } for pid=14563 comm="syz.0.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 963.860205][T14572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2751'. [ 963.931518][T14565] syz.4.2750 (14565) used greatest stack depth: 21280 bytes left [ 964.069992][ T5147] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 964.094019][T14566] tipc: Started in network mode [ 964.104611][T14566] tipc: Node identity 080211, cluster identity 4711 [ 964.113788][ T5147] usb 2-1: USB disconnect, device number 13 [ 964.146309][ T5147] usblp0: removed [ 964.168136][T14566] tipc: Enabled bearer , priority 10 [ 965.162691][T12557] tipc: Node number set to 134353152 [ 965.225787][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 966.264240][T14591] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 966.748471][T14601] netlink: 'syz.1.2765': attribute type 4 has an invalid length. [ 966.938755][T14601] netlink: 'syz.1.2765': attribute type 17 has an invalid length. [ 966.967754][T14610] nftables ruleset with unbound chain [ 967.470197][ T9642] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 967.621108][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2773'. [ 967.728242][ T9642] usb 4-1: not running at top speed; connect to a high speed hub [ 967.743989][ T9642] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 967.790075][ T9642] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 967.840696][ T9642] usb 4-1: config 1 interface 0 has no altsetting 0 [ 967.855574][ T9642] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 967.865998][ T9642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.874583][ T9642] usb 4-1: Product: 㠊 [ 967.882654][ T9642] usb 4-1: Manufacturer: ࠧ [ 967.887443][ T9642] usb 4-1: SerialNumber: syz [ 967.908943][T14614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 967.932352][T14614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 969.147964][T14613] netlink: 'syz.3.2769': attribute type 5 has an invalid length. [ 969.227957][ T30] audit: type=1400 audit(2000000191.759:1149): avc: denied { execute } for pid=14638 comm="syz.1.2778" path="/dev/bsg/cpuacct.usage_all" dev="devtmpfs" ino=2637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 969.496204][ T9642] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 969.522778][ T9642] usb 4-1: USB disconnect, device number 18 [ 969.549708][ T9642] usblp0: removed [ 969.909596][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 970.621087][T14658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2785'. [ 970.629124][T14659] netlink: 632 bytes leftover after parsing attributes in process `syz.0.2784'. [ 970.648403][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.671828][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.684133][T14662] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 970.689090][ T30] audit: type=1326 audit(2000000193.219:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 970.735113][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 970.759574][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.780428][ T30] audit: type=1326 audit(2000000193.219:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 970.811890][ T46] usb 3-1: config 0 descriptor?? [ 970.855459][ T30] audit: type=1326 audit(2000000193.239:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 970.912998][T14666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2788'. [ 970.999482][T14668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2787'. [ 971.008884][T14668] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 971.093771][ T30] audit: type=1326 audit(2000000193.239:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 971.521465][ T30] audit: type=1326 audit(2000000193.239:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 971.871678][ T30] audit: type=1326 audit(2000000193.249:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 971.999419][ T30] audit: type=1326 audit(2000000193.249:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 972.669302][T14669] syz_tun: tun_net_xmit 42 [ 973.307234][ T30] audit: type=1326 audit(2000000193.249:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 973.730366][ C1] syz_tun: tun_net_xmit 42 [ 974.113163][ T30] audit: type=1326 audit(2000000193.249:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 974.465091][ T30] audit: type=1326 audit(2000000193.249:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 974.769527][ C1] syz_tun: tun_net_xmit 42 [ 975.549460][ T30] audit: type=1326 audit(2000000193.249:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 975.639441][ T30] audit: type=1326 audit(2000000193.249:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 975.799462][ T30] audit: type=1326 audit(2000000193.249:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 975.846269][ T30] audit: type=1326 audit(2000000193.249:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 975.933158][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 975.941042][ T30] audit: type=1326 audit(2000000193.249:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 975.967625][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 976.037666][ T46] usb 3-1: USB disconnect, device number 6 [ 976.059336][ T30] audit: type=1326 audit(2000000193.249:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 976.325666][ T30] audit: type=1326 audit(2000000193.249:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 976.889572][ T30] audit: type=1326 audit(2000000193.269:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 976.997711][ T30] audit: type=1326 audit(2000000193.269:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14657 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd7cd75b59 code=0x7ffc0000 [ 977.602611][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.054429][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.073552][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.081214][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.096132][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.105153][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.114264][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.136888][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.151675][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.179369][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.199573][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.217212][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.242322][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.269379][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.287878][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.309703][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.317131][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.336803][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.345495][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.354330][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.379363][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.393603][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.409394][T12557] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 978.423661][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.437569][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.466292][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.488954][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.515203][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.546821][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.589348][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.618931][T12557] usb 2-1: config 0 has no interfaces? [ 978.625351][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.656422][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.669089][T12557] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 978.685264][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 978.693201][T12557] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 979.515638][ T5147] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 979.532387][ T46] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 979.547101][T12557] usb 2-1: Product: syz [ 979.556193][T12557] usb 2-1: Manufacturer: syz [ 979.561308][ T46] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 979.570985][T12557] usb 2-1: SerialNumber: syz [ 979.578993][T12557] usb 2-1: config 0 descriptor?? [ 979.721657][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.506966][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.531621][ T5147] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 980.551050][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 980.585138][ T5147] usb 4-1: Product: syz [ 980.610337][ T5147] usb 4-1: config 0 descriptor?? [ 980.677607][ T8] usb 2-1: USB disconnect, device number 14 [ 981.368302][T14763] 9pnet_fd: Insufficient options for proto=fd [ 981.433723][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 981.433769][ T30] audit: type=1326 audit(2000000203.959:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.3.2805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef4ad75b59 code=0x0 [ 981.972279][T14768] bridge0: port 3(hsr0) entered blocking state [ 981.979163][T14768] bridge0: port 3(hsr0) entered disabled state [ 982.019665][T14768] hsr0: entered allmulticast mode [ 982.041587][T14768] hsr_slave_0: entered allmulticast mode [ 982.071730][T14768] hsr_slave_1: entered allmulticast mode [ 982.112495][T14768] hsr0: entered promiscuous mode [ 982.141341][T14768] bridge0: port 3(hsr0) entered blocking state [ 982.147792][T14768] bridge0: port 3(hsr0) entered forwarding state [ 982.511841][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'. [ 982.558275][T14778] bridge_slave_1: left allmulticast mode [ 982.647205][T14778] bridge_slave_1: left promiscuous mode [ 982.666919][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.928011][ T30] audit: type=1400 audit(2000000205.459:1197): avc: denied { accept } for pid=14776 comm="syz.4.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 983.866147][ T30] audit: type=1400 audit(2000000206.399:1198): avc: denied { connect } for pid=14775 comm="syz.2.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 983.940664][T14778] bridge_slave_0: left allmulticast mode [ 983.974261][T14791] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 983.989528][T14778] bridge_slave_0: left promiscuous mode [ 984.018171][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.029198][T14791] netlink: 9392 bytes leftover after parsing attributes in process `syz.1.2822'. [ 984.070526][ T5147] usbhid 4-1:0.0: can't add hid device: -71 [ 984.078434][ T5147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 984.090736][ T5147] usb 4-1: USB disconnect, device number 19 [ 984.560248][T14808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=14808 comm=syz.1.2826 [ 985.964923][T14826] bridge0: port 3(hsr0) entered blocking state [ 985.995144][T14826] bridge0: port 3(hsr0) entered disabled state [ 986.013794][T14826] hsr0: entered allmulticast mode [ 986.025155][T14826] hsr_slave_0: entered allmulticast mode [ 986.040863][T14826] hsr_slave_1: entered allmulticast mode [ 986.066914][T14826] hsr0: entered promiscuous mode [ 986.102983][T14826] bridge0: port 3(hsr0) entered blocking state [ 986.109408][T14826] bridge0: port 3(hsr0) entered forwarding state [ 986.238543][T14833] i2c i2c-0: Invalid block write size 34 [ 987.636504][T14865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=14865 comm=syz.3.2844 [ 987.709992][ T30] audit: type=1400 audit(2000000210.249:1199): avc: denied { write } for pid=14850 comm="syz.0.2841" path="socket:[57880]" dev="sockfs" ino=57880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 988.426993][T14879] xt_policy: too many policy elements [ 988.700434][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'. [ 989.916043][T14901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=14901 comm=syz.3.2862 [ 990.389501][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 990.454733][T14924] netlink: 'syz.1.2870': attribute type 4 has an invalid length. [ 990.592723][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.613424][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.626045][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 990.642820][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.667431][ T9] usb 5-1: config 0 descriptor?? [ 991.228293][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 991.290093][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 991.332666][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0014/input/input39 [ 991.366606][ T9] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 991.369369][ C1] eth0: bad gso: type: 1, size: 1408 [ 991.530821][ T5176] usb 5-1: USB disconnect, device number 18 [ 991.943885][ T30] audit: type=1400 audit(2000000214.479:1200): avc: denied { map } for pid=14954 comm="syz.1.2879" path="socket:[58888]" dev="sockfs" ino=58888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 992.198417][ T30] audit: type=1400 audit(2000000214.519:1201): avc: denied { read } for pid=14954 comm="syz.1.2879" path="socket:[58888]" dev="sockfs" ino=58888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 993.400545][T14978] netlink: 'syz.0.2882': attribute type 9 has an invalid length. [ 993.408318][T14978] netlink: 134712 bytes leftover after parsing attributes in process `syz.0.2882'. [ 993.577802][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.076188][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 994.136981][ T30] audit: type=1400 audit(2000000216.649:1202): avc: denied { bind } for pid=15006 comm="syz.4.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 994.226130][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'. [ 995.719855][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 995.967981][T15023] netlink: 'syz.2.2896': attribute type 9 has an invalid length. [ 995.986235][T15023] netlink: 134712 bytes leftover after parsing attributes in process `syz.2.2896'. [ 996.193412][ C1] eth0: bad gso: type: 1, size: 1408 [ 996.229999][T15032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=15032 comm=syz.3.2899 [ 996.811997][ T30] audit: type=1400 audit(2000000219.349:1203): avc: denied { ioctl } for pid=15049 comm="syz.3.2907" path="socket:[58200]" dev="sockfs" ino=58200 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 998.124255][T15074] netlink: 'syz.1.2914': attribute type 4 has an invalid length. [ 998.182575][T15074] netlink: 'syz.1.2914': attribute type 17 has an invalid length. [ 1000.951049][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 1001.023596][ T30] audit: type=1400 audit(2000000223.559:1204): avc: denied { ioctl } for pid=15121 comm="syz.1.2931" path="socket:[58321]" dev="sockfs" ino=58321 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1001.101026][ T30] audit: type=1326 audit(2000000223.639:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.2931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d0d75b59 code=0x0 [ 1001.256038][T15141] netlink: 'syz.2.2935': attribute type 4 has an invalid length. [ 1001.457261][T15141] netlink: 'syz.2.2935': attribute type 17 has an invalid length. [ 1005.008284][ C1] eth0: bad gso: type: 1, size: 1408 [ 1005.201524][T15205] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 1005.389773][ T30] audit: type=1400 audit(2000000227.879:1206): avc: denied { mount } for pid=15182 comm="syz.0.2950" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1005.441992][T15205] netlink: 'syz.4.2956': attribute type 17 has an invalid length. [ 1006.853435][ T30] audit: type=1400 audit(2000000229.389:1207): avc: denied { unmount } for pid=10062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1007.428108][T15251] netlink: 'syz.3.2972': attribute type 4 has an invalid length. [ 1007.571145][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1007.706223][T15251] netlink: 'syz.3.2972': attribute type 17 has an invalid length. [ 1007.806986][T15253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1009.937026][T15295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2988'. [ 1010.198717][T15298] mkiss: ax0: crc mode is auto. [ 1010.827206][ T30] audit: type=1400 audit(2000000233.359:1208): avc: denied { mounton } for pid=15306 comm="syz.0.2993" path="/363/file0" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1010.886647][T15309] syz.0.2993: attempt to access beyond end of device [ 1010.886647][T15309] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1010.912957][T15309] FAT-fs (loop1): unable to read boot sector [ 1011.004172][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.014112][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.814981][T15341] syz.0.3005: attempt to access beyond end of device [ 1011.814981][T15341] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1011.845095][T15341] FAT-fs (loop1): unable to read boot sector [ 1011.895520][T15347] netlink: set zone limit has 8 unknown bytes [ 1011.916709][T15348] [U] [ 1011.922726][T15348] [U] [ 1011.925470][T15348] [U] [ 1011.928293][T15348] [U] [ 1011.931429][T15348] [U] [ 1011.934169][T15348] [U] [ 1011.936879][T15348] [U] [ 1011.939590][T15348] [U] [ 1011.943206][T15348] [U] [ 1011.945950][T15348] [U] [ 1011.948683][T15348] [U] [ 1011.969058][T15348] [U] [ 1011.995150][T15345] [U] [ 1012.159554][ T30] audit: type=1400 audit(2000000234.689:1209): avc: denied { listen } for pid=15349 comm="syz.4.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1012.809513][ T5094] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1013.029350][ T5094] usb 4-1: Using ep0 maxpacket: 32 [ 1013.044995][ T5094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1013.075725][ T5094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1013.123576][ T5094] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1013.178935][ T5094] usb 4-1: string descriptor 0 read error: -22 [ 1013.185563][ T5094] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1013.207032][ T5094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.532146][ T8] IPVS: starting estimator thread 0... [ 1013.639347][T15381] IPVS: using max 17 ests per chain, 40800 per kthread [ 1015.343040][ T5094] cdc_ncm 4-1:1.0: bind() failure [ 1015.393235][ T5094] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1015.414720][ C1] eth0: bad gso: type: 1, size: 1408 [ 1015.432455][ T5094] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1015.437685][T15383] ================================================================== [ 1015.448787][T15383] BUG: KASAN: slab-use-after-free in filter_chain+0xf6/0x110 [ 1015.456199][T15383] Read of size 8 at addr ffff88807b7d3430 by task syz.1.3024/15383 [ 1015.464106][T15383] [ 1015.465322][ T5094] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1015.466422][T15383] CPU: 1 PID: 15383 Comm: syz.1.3024 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 1015.466456][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1015.494186][T15383] Call Trace: [ 1015.497476][T15383] [ 1015.500423][T15383] dump_stack_lvl+0x116/0x1f0 [ 1015.505137][T15383] print_report+0xc3/0x620 [ 1015.506225][ T5094] usb 4-1: USB disconnect, device number 20 [ 1015.509585][T15383] ? __virt_addr_valid+0x5e/0x590 [ 1015.509622][T15383] ? __phys_addr+0xc6/0x150 [ 1015.509651][T15383] kasan_report+0xd9/0x110 [ 1015.509687][T15383] ? filter_chain+0xf6/0x110 [ 1015.509725][T15383] ? filter_chain+0xf6/0x110 [ 1015.538704][T15383] filter_chain+0xf6/0x110 [ 1015.543146][T15383] uprobe_mmap+0x46b/0x1240 [ 1015.547671][T15383] ? __pfx_uprobe_mmap+0x10/0x10 [ 1015.552639][T15383] ? khugepaged_enter_vma+0x177/0x2e0 [ 1015.558139][T15383] mmap_region+0x1228/0x2760 [ 1015.562743][T15383] ? __pfx_mmap_region+0x10/0x10 [ 1015.567694][T15383] ? security_mmap_addr+0x8e/0xb0 [ 1015.572738][T15383] ? __get_unmapped_area+0x271/0x3a0 [ 1015.578030][T15383] do_mmap+0xbc7/0xf60 [ 1015.582108][T15383] ? security_mmap_file+0x192/0x1d0 [ 1015.587324][T15383] vm_mmap_pgoff+0x1ba/0x360 [ 1015.591933][T15383] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1015.597059][T15383] ksys_mmap_pgoff+0x332/0x5d0 [ 1015.601835][T15383] __x64_sys_mmap+0x125/0x190 [ 1015.606523][T15383] do_syscall_64+0xcd/0x250 [ 1015.611046][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.616946][T15383] RIP: 0033:0x7f32d0d75b59 [ 1015.621369][T15383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.640979][T15383] RSP: 002b:00007f32d1be2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1015.649394][T15383] RAX: ffffffffffffffda RBX: 00007f32d0f05f60 RCX: 00007f32d0d75b59 [ 1015.657364][T15383] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000000020000000 [ 1015.665331][T15383] RBP: 00007f32d0de4e5d R08: 000000000000000a R09: 0000000000000000 [ 1015.673308][T15383] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1015.681297][T15383] R13: 000000000000000b R14: 00007f32d0f05f60 R15: 00007ffce8c30158 [ 1015.689366][T15383] [ 1015.692381][T15383] [ 1015.694697][T15383] Allocated by task 10083: [ 1015.699101][T15383] kasan_save_stack+0x33/0x60 [ 1015.703800][T15383] kasan_save_track+0x14/0x30 [ 1015.708482][T15383] __kasan_kmalloc+0xaa/0xb0 [ 1015.713074][T15383] selinux_netlbl_sock_genattr+0xb0/0x4b0 [ 1015.718801][T15383] selinux_netlbl_socket_post_create+0x79/0x150 [ 1015.725050][T15383] selinux_socket_post_create+0x2f0/0x7e0 [ 1015.730773][T15383] security_socket_post_create+0x8b/0xd0 [ 1015.736408][T15383] __sock_create+0x68d/0x800 [ 1015.740996][T15383] __sys_socket+0x14f/0x260 [ 1015.745496][T15383] __x64_sys_socket+0x72/0xb0 [ 1015.750170][T15383] do_syscall_64+0xcd/0x250 [ 1015.754685][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.760580][T15383] [ 1015.762900][T15383] Freed by task 10083: [ 1015.766956][T15383] kasan_save_stack+0x33/0x60 [ 1015.771646][T15383] kasan_save_track+0x14/0x30 [ 1015.776327][T15383] kasan_save_free_info+0x3b/0x60 [ 1015.781349][T15383] poison_slab_object+0xf7/0x160 [ 1015.786290][T15383] __kasan_slab_free+0x32/0x50 [ 1015.791056][T15383] kfree+0x12a/0x3b0 [ 1015.794952][T15383] selinux_netlbl_sk_security_free+0x12c/0x400 [ 1015.801113][T15383] selinux_sk_free_security+0x46/0x60 [ 1015.806491][T15383] security_sk_free+0x45/0x80 [ 1015.811176][T15383] __sk_destruct+0x461/0x730 [ 1015.815767][T15383] sk_destruct+0xc2/0xf0 [ 1015.820023][T15383] __sk_free+0xf4/0x3e0 [ 1015.824182][T15383] sk_free+0x7c/0xa0 [ 1015.828079][T15383] tcp_close+0xe1/0x130 [ 1015.832246][T15383] inet_release+0x13c/0x280 [ 1015.836755][T15383] inet6_release+0x4f/0x70 [ 1015.841180][T15383] __sock_release+0xb0/0x270 [ 1015.845778][T15383] sock_close+0x1c/0x30 [ 1015.849943][T15383] __fput+0x408/0xbb0 [ 1015.853938][T15383] __fput_sync+0x47/0x50 [ 1015.858466][T15383] __x64_sys_close+0x86/0x100 [ 1015.863142][T15383] do_syscall_64+0xcd/0x250 [ 1015.867657][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.873556][T15383] [ 1015.875876][T15383] The buggy address belongs to the object at ffff88807b7d3400 [ 1015.875876][T15383] which belongs to the cache kmalloc-64 of size 64 [ 1015.889837][T15383] The buggy address is located 48 bytes inside of [ 1015.889837][T15383] freed 64-byte region [ffff88807b7d3400, ffff88807b7d3440) [ 1015.903461][T15383] [ 1015.905781][T15383] The buggy address belongs to the physical page: [ 1015.912188][T15383] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807b7d3380 pfn:0x7b7d3 [ 1015.922247][T15383] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1015.930314][T15383] page_type: 0xffffefff(slab) [ 1015.934988][T15383] raw: 00fff00000000200 ffff8880154418c0 ffffea0000a36450 ffffea0001ee2a50 [ 1015.943571][T15383] raw: ffff88807b7d3380 0000000000200018 00000001ffffefff 0000000000000000 [ 1015.952146][T15383] page dumped because: kasan: bad access detected [ 1015.958552][T15383] page_owner tracks the page as allocated [ 1015.964254][T15383] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5142, tgid 5142 (udevd), ts 79165114932, free_ts 78975089659 [ 1015.982754][T15383] post_alloc_hook+0x2d1/0x350 [ 1015.987520][T15383] get_page_from_freelist+0x1353/0x2e50 [ 1015.993068][T15383] __alloc_pages_noprof+0x22b/0x2460 [ 1015.998353][T15383] alloc_slab_page+0x56/0x110 [ 1016.003028][T15383] new_slab+0x84/0x260 [ 1016.007105][T15383] ___slab_alloc+0xdac/0x1870 [ 1016.011789][T15383] __slab_alloc.constprop.0+0x56/0xb0 [ 1016.017169][T15383] __kmalloc_noprof+0x367/0x400 [ 1016.022027][T15383] tomoyo_encode2+0x100/0x3e0 [ 1016.026711][T15383] tomoyo_encode+0x29/0x50 [ 1016.031136][T15383] tomoyo_realpath_from_path+0x19d/0x720 [ 1016.036780][T15383] tomoyo_check_open_permission+0x2a7/0x3b0 [ 1016.042680][T15383] tomoyo_file_open+0x71/0x90 [ 1016.047364][T15383] security_file_open+0x78/0x8b0 [ 1016.052299][T15383] do_dentry_open+0x5c7/0x15f0 [ 1016.057068][T15383] vfs_open+0x82/0x3f0 [ 1016.061146][T15383] page last free pid 5089 tgid 5089 stack trace: [ 1016.067461][T15383] free_unref_page+0x64a/0xe40 [ 1016.072225][T15383] qlist_free_all+0x4e/0x140 [ 1016.076821][T15383] kasan_quarantine_reduce+0x192/0x1e0 [ 1016.082287][T15383] __kasan_slab_alloc+0x69/0x90 [ 1016.087141][T15383] kmem_cache_alloc_lru_noprof+0x121/0x2f0 [ 1016.092954][T15383] __d_alloc+0x31/0xaa0 [ 1016.097119][T15383] d_alloc+0x4a/0x1e0 [ 1016.101107][T15383] d_alloc_parallel+0xe9/0x12b0 [ 1016.105960][T15383] __lookup_slow+0x194/0x460 [ 1016.110562][T15383] lookup_one_len+0x181/0x1b0 [ 1016.115235][T15383] start_creating.part.0+0x12f/0x3a0 [ 1016.120532][T15383] __debugfs_create_file+0xa5/0x660 [ 1016.125727][T15383] nsim_create+0x372/0xb20 [ 1016.130145][T15383] __nsim_dev_port_add+0x42c/0x7d0 [ 1016.135263][T15383] nsim_drv_probe+0xdbf/0x1490 [ 1016.140032][T15383] really_probe+0x23e/0xa90 [ 1016.144539][T15383] [ 1016.146855][T15383] Memory state around the buggy address: [ 1016.152561][T15383] ffff88807b7d3300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1016.160617][T15383] ffff88807b7d3380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1016.168759][T15383] >ffff88807b7d3400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1016.176811][T15383] ^ [ 1016.182437][T15383] ffff88807b7d3480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1016.190495][T15383] ffff88807b7d3500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1016.198555][T15383] ================================================================== [ 1016.259855][T15383] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1016.267084][T15383] CPU: 0 PID: 15383 Comm: syz.1.3024 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 1016.276993][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1016.287040][T15383] Call Trace: [ 1016.290309][T15383] [ 1016.293228][T15383] dump_stack_lvl+0x3d/0x1f0 [ 1016.297815][T15383] panic+0x6f5/0x7a0 [ 1016.301702][T15383] ? __pfx_panic+0x10/0x10 [ 1016.306107][T15383] ? preempt_schedule_thunk+0x1a/0x30 [ 1016.311474][T15383] ? preempt_schedule_common+0x44/0xc0 [ 1016.316926][T15383] check_panic_on_warn+0xab/0xb0 [ 1016.321856][T15383] end_report+0x117/0x180 [ 1016.326195][T15383] kasan_report+0xe9/0x110 [ 1016.330638][T15383] ? filter_chain+0xf6/0x110 [ 1016.335269][T15383] ? filter_chain+0xf6/0x110 [ 1016.339894][T15383] filter_chain+0xf6/0x110 [ 1016.344342][T15383] uprobe_mmap+0x46b/0x1240 [ 1016.348845][T15383] ? __pfx_uprobe_mmap+0x10/0x10 [ 1016.353773][T15383] ? khugepaged_enter_vma+0x177/0x2e0 [ 1016.359142][T15383] mmap_region+0x1228/0x2760 [ 1016.363727][T15383] ? __pfx_mmap_region+0x10/0x10 [ 1016.368655][T15383] ? security_mmap_addr+0x8e/0xb0 [ 1016.373677][T15383] ? __get_unmapped_area+0x271/0x3a0 [ 1016.378948][T15383] do_mmap+0xbc7/0xf60 [ 1016.383005][T15383] ? security_mmap_file+0x192/0x1d0 [ 1016.388203][T15383] vm_mmap_pgoff+0x1ba/0x360 [ 1016.392782][T15383] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1016.397884][T15383] ksys_mmap_pgoff+0x332/0x5d0 [ 1016.402635][T15383] __x64_sys_mmap+0x125/0x190 [ 1016.407390][T15383] do_syscall_64+0xcd/0x250 [ 1016.411887][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.417767][T15383] RIP: 0033:0x7f32d0d75b59 [ 1016.422167][T15383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.441759][T15383] RSP: 002b:00007f32d1be2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1016.450165][T15383] RAX: ffffffffffffffda RBX: 00007f32d0f05f60 RCX: 00007f32d0d75b59 [ 1016.458126][T15383] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000000020000000 [ 1016.466088][T15383] RBP: 00007f32d0de4e5d R08: 000000000000000a R09: 0000000000000000 [ 1016.474054][T15383] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1016.482014][T15383] R13: 000000000000000b R14: 00007f32d0f05f60 R15: 00007ffce8c30158 [ 1016.489974][T15383] [ 1016.493198][T15383] Kernel Offset: disabled [ 1016.497506][T15383] Rebooting in 86400 seconds..