last executing test programs: 29.73565709s ago: executing program 0 (id=2927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 28.360327844s ago: executing program 0 (id=2932): socket$can_j1939(0x1d, 0x2, 0x7) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 26.855651864s ago: executing program 0 (id=2938): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 26.429262554s ago: executing program 0 (id=2940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 25.259560969s ago: executing program 0 (id=2945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x10000) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x80000) recvmsg(r5, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) 23.654376688s ago: executing program 0 (id=2950): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 8.369830769s ago: executing program 2 (id=2988): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={0x0, 0x534}, 0x1, 0x0, 0x0, 0x1d}, 0x4000044) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4b, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001000000", @ANYRES32, @ANYBLOB="001841d122a7aaa96131c08fda478786247ec3f6c38cdb000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket(0x1, 0x3, 0x0) socket(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e27, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) io_uring_enter(0xffffffffffffffff, 0x2dbe, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.229031997s ago: executing program 3 (id=2989): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) socket$inet6(0xa, 0x80001, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.911609524s ago: executing program 3 (id=2991): socket$can_j1939(0x1d, 0x2, 0x7) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.898906214s ago: executing program 4 (id=2992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 7.125322576s ago: executing program 1 (id=2995): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x80010, r2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 6.155243022s ago: executing program 4 (id=2996): prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.114565462s ago: executing program 3 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x10000) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvmsg(r4, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) 5.982594081s ago: executing program 1 (id=2998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.584266293s ago: executing program 2 (id=2999): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x204000, 0x0) ioctl$int_out(r3, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.905695277s ago: executing program 1 (id=3000): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.889788673s ago: executing program 4 (id=3001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x29, 0xd4, 0xf2, 0x6, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x8, 0xb7f8}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xc8, 0x0, 0x3f, 0x5}, @ptr={0x5, 0x0, 0x0, 0x2, 0x8}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0, 0x6f, 0x5f, 0x2e, 0x2e, 0x0, 0x30]}}, &(0x7f0000000c00)=""/138, 0x5c, 0x8a, 0x1, 0xc000000, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f0000000080)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}], &(0x7f0000000380)='GPL\x00', 0xfffff001, 0x8d, &(0x7f00000006c0)=""/141, 0x41000, 0x40, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r3, r3, r3, r3, r7, r3, r3, r3, r3], &(0x7f0000000a00)=[{0x5, 0x1, 0xd, 0x3}, {0x1, 0x4, 0x5, 0x2}, {0x4, 0x3, 0x0, 0x5}, {0x4, 0x1, 0x2, 0x7}, {0x1, 0x30dd6536, 0xa, 0x8}], 0x10, 0xcc, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000bd3f00008cf8f70bd3841f4f563f94ad45e36fe89f195021b0f245ff2aeba585aa308a85257dd329becd14887860758fa43da326074f463f3fc11e8a07494a28887ebeb0e552026e162c07ccac24027ab9ac501dc2685a50c74393997100210a009a16b6c1ea733f96ad45f56d", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[]) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x2) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r10, &(0x7f0000005480)=""/213, 0xd5) 4.715119722s ago: executing program 3 (id=3002): ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.067720459s ago: executing program 2 (id=3003): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) epoll_create(0xe7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.842834509s ago: executing program 1 (id=3004): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r3], 0x60}}, 0x0) 3.692197802s ago: executing program 4 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0xf], [0x5, 0x0, 0xffffffff, 0x46], [0x400000000000001, 0x0, 0x0, 0x1]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 3.686251012s ago: executing program 1 (id=3006): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "6906007722366ccee4ba568eb4f80102f5372f2c74f6024305f11fd3454ad23d", 0x2036315a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x0, 0xf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r6}, 0x38) 2.831971101s ago: executing program 3 (id=3007): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) timer_gettime(0x0, &(0x7f0000003bc0)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 2.567394718s ago: executing program 4 (id=3008): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x7, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(&(0x7f0000000000)='./file0\x00', 0x5) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000280), 0x1808c00, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) umount2(0x0, 0xb) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}, {&(0x7f0000000a40)="b67d7280fc", 0xffffff7a}, {&(0x7f0000000a80)="8b3e57880715c0aa8eb054", 0xb}], 0x4, 0x0, 0x0, 0x4008800}, 0x4000880) 2.490837564s ago: executing program 2 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.451530691s ago: executing program 1 (id=3010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000001c0)='(^*(\x00') prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000033a40)=""/102391, 0x18ff7) openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0500000000000000dbdf2507000000", @ANYRES32=r5, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x80041}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0x3}, &(0x7f0000000540)=0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200"], 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\t\x00\x00\x00@\x00\x00\x00B'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r8, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.122229022s ago: executing program 2 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 650.199672ms ago: executing program 3 (id=3012): unshare(0x20000600) r0 = syz_io_uring_setup(0x6778, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) 405.057674ms ago: executing program 4 (id=3013): socket$can_j1939(0x1d, 0x2, 0x7) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=3014): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) socket$inet6(0xa, 0x80001, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5946f2ab39 code=0x7ffc0000 [ 462.964343][ T5860] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 463.544785][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 463.555225][ T5860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.565462][ T5860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 463.602044][ T5860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 463.614130][ T5860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 463.625569][ T5860] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 463.635721][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.665509][ T5860] hub 2-1:1.0: bad descriptor, ignoring hub [ 463.680182][ T5860] hub 2-1:1.0: probe with driver hub failed with error -5 [ 463.698864][ T5860] cdc_wdm 2-1:1.0: skipping garbage [ 463.706618][ T5860] cdc_wdm 2-1:1.0: skipping garbage [ 463.718922][ T5860] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 463.731908][ T5860] cdc_wdm 2-1:1.0: Unknown control protocol [ 465.115828][T11839] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 465.137411][T11876] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.579297][T11876] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.760743][T11876] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.066209][T11876] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.091804][ T5943] usb 2-1: USB disconnect, device number 51 [ 466.168099][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 466.168115][ T30] audit: type=1326 audit(1746324494.057:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.691024][ T30] audit: type=1326 audit(1746324494.057:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.717436][ T30] audit: type=1326 audit(1746324494.057:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.741347][ T30] audit: type=1326 audit(1746324494.057:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.768116][ T30] audit: type=1326 audit(1746324494.057:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.782909][T11876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.845725][T11876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.881862][T11876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.901000][ T30] audit: type=1326 audit(1746324494.057:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.926831][ T30] audit: type=1326 audit(1746324494.057:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 466.976104][T11876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.984415][ T30] audit: type=1326 audit(1746324494.057:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 467.026779][ T30] audit: type=1326 audit(1746324494.057:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 467.307646][ T30] audit: type=1326 audit(1746324494.057:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 470.884279][ T5943] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 471.034450][ T5943] usb 2-1: device descriptor read/64, error -71 [ 471.183419][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 471.183434][ T30] audit: type=1326 audit(1746324499.067:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 471.216710][ T30] audit: type=1326 audit(1746324499.067:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e92ab39 code=0x7ffc0000 [ 471.241458][ T30] audit: type=1326 audit(1746324499.067:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 471.267805][ T30] audit: type=1326 audit(1746324499.107:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 471.291854][ T30] audit: type=1326 audit(1746324499.107:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e92ab39 code=0x7ffc0000 [ 471.317932][ T30] audit: type=1326 audit(1746324499.107:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 471.341614][ T5943] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 471.341973][ T30] audit: type=1326 audit(1746324499.137:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 471.390242][ T30] audit: type=1326 audit(1746324499.137:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e92ab39 code=0x7ffc0000 [ 471.416331][ T30] audit: type=1326 audit(1746324499.137:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 471.440520][ T30] audit: type=1326 audit(1746324499.157:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 471.474188][ T5943] usb 2-1: device descriptor read/64, error -71 [ 471.584386][ T5943] usb usb2-port1: attempt power cycle [ 471.934049][ T5943] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 471.955579][ T5943] usb 2-1: device descriptor read/8, error -71 [ 472.465411][ T5943] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 472.494771][ T5943] usb 2-1: device descriptor read/8, error -71 [ 473.157872][ T5943] usb usb2-port1: unable to enumerate USB device [ 473.209161][T11958] hub 9-0:1.0: USB hub found [ 473.214048][T11958] hub 9-0:1.0: 1 port detected [ 473.876251][T11971] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.837488][T11971] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.909457][T11971] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.071747][T11971] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.303588][T11971] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.332969][T11971] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.352663][T11971] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.370063][T11971] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.619457][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 475.643680][T11998] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 476.084535][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 476.215367][ T9] usb 5-1: device descriptor read/64, error -71 [ 476.367136][ T5812] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 476.467986][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 476.546670][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.570841][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.610826][ T5812] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 476.625974][ T9] usb 5-1: device descriptor read/64, error -71 [ 476.640103][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.752032][ T5812] usb 2-1: config 0 descriptor?? [ 476.762142][ T9] usb usb5-port1: attempt power cycle [ 477.147679][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 477.232697][ T9] usb 5-1: device descriptor read/8, error -71 [ 477.372745][ T5812] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 477.388108][ T5812] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 477.435193][ T5812] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 477.511267][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 478.033912][ T9] usb 5-1: device descriptor read/8, error -71 [ 478.144476][ T9] usb usb5-port1: unable to enumerate USB device [ 478.275679][ T5812] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 478.296166][ T5812] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 478.318946][ T5812] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 478.345709][ T5812] usb 2-1: USB disconnect, device number 56 [ 479.271783][T12039] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.892681][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 479.892696][ T30] audit: type=1326 audit(1746324507.777:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 479.932680][T12039] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.942901][ T30] audit: type=1326 audit(1746324507.777:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 479.969275][ T30] audit: type=1326 audit(1746324507.777:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 479.998883][ T30] audit: type=1326 audit(1746324507.777:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.040956][ T30] audit: type=1326 audit(1746324507.777:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.097866][ T30] audit: type=1326 audit(1746324507.777:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.128979][ T30] audit: type=1326 audit(1746324507.777:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.155825][ T30] audit: type=1326 audit(1746324507.777:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.180247][ T30] audit: type=1326 audit(1746324507.777:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.182458][T12039] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.237252][ T30] audit: type=1326 audit(1746324507.777:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 480.396438][T12039] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.762854][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 481.774682][T12072] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 482.625907][T12039] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.656601][T12039] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.676071][T12039] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.698397][T12039] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.724061][ T5863] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 482.980247][ T5863] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 482.990297][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.004031][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.013901][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.053645][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.071545][ T5863] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 483.083667][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 483.094017][ T5863] usb 2-1: Product: syz [ 483.098403][ T5863] usb 2-1: Manufacturer: syz [ 483.167521][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 483.173211][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 483.227446][ T5863] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 483.252770][ T5863] cdc_wdm 2-1:1.0: Unknown control protocol [ 484.003648][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.036883][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.905304][ T5812] usb 2-1: USB disconnect, device number 57 [ 487.155825][ T5943] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 487.367803][T12141] hub 9-0:1.0: USB hub found [ 487.372725][T12141] hub 9-0:1.0: 1 port detected [ 487.465755][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.486140][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.505417][ T5943] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 487.523798][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.544418][ T5943] usb 3-1: config 0 descriptor?? [ 488.257904][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 488.763010][ T5943] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 488.777355][ T5943] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 488.786207][ T5943] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 489.393818][ T5943] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 489.506202][ T5943] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 489.715289][ T5943] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 489.749926][ T5943] usb 3-1: USB disconnect, device number 39 [ 492.395549][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 494.264032][ T5923] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 494.445508][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.479233][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.489505][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 494.502856][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.601064][ T5923] usb 2-1: config 0 descriptor?? [ 494.642153][T12219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.739375][T12219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.976381][T12219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.628399][ T5923] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 495.679114][T12219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.690169][ T5923] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 495.757838][ T5923] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 496.023633][T12219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.191646][T12219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.415897][ T5923] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 496.449771][ T5923] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 496.453915][T12219] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.458048][ T5923] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 496.474974][T12219] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.487594][ T5923] usb 2-1: USB disconnect, device number 58 [ 500.824135][ T5943] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 501.004014][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 501.033641][ T5943] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 501.055205][ T5862] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 501.201239][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.212563][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.237958][ T5943] usb 2-1: config 0 has no interface number 0 [ 501.277823][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 501.305352][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.365136][ T5943] usb 2-1: Product: syz [ 501.387865][ T5943] usb 2-1: Manufacturer: syz [ 501.424664][ T5943] usb 2-1: SerialNumber: syz [ 501.432557][ T5943] usb 2-1: config 0 descriptor?? [ 501.441355][ T5943] smsc95xx v2.0.0 [ 501.447533][ T5862] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.456655][ T5862] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 501.467870][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.524119][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 501.535925][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 501.555202][ T5862] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.565125][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.573254][ T5862] usb 5-1: Product: syz [ 501.577581][ T5862] usb 5-1: Manufacturer: syz [ 501.609173][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 501.619974][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 501.633281][ T5862] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 501.869509][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 501.893644][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 502.193501][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.202253][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.858022][ T5863] usb 5-1: USB disconnect, device number 51 [ 504.829465][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 504.864248][ T5943] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 505.174887][ T5923] usb 2-1: USB disconnect, device number 59 [ 506.413125][ T5812] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 506.606334][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.624654][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.554107][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 507.554124][ T30] audit: type=1400 audit(1746324535.427:2338): avc: denied { mount } for pid=12353 comm="syz.1.1838" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 507.595434][ T5812] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 508.294039][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.425237][ T5812] usb 5-1: config 0 descriptor?? [ 508.451440][ T5812] usb 5-1: can't set config #0, error -71 [ 508.816084][ T5812] usb 5-1: USB disconnect, device number 52 [ 510.700301][ T30] audit: type=1400 audit(1746324538.587:2339): avc: denied { ioctl } for pid=12379 comm="syz.0.1846" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34150 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 512.633793][ T30] audit: type=1400 audit(1746324540.257:2340): avc: denied { write } for pid=12393 comm="syz.4.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 514.469714][ T30] audit: type=1326 audit(1746324542.357:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 514.524331][ T30] audit: type=1326 audit(1746324542.357:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 514.553354][ T30] audit: type=1326 audit(1746324542.387:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 514.768596][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 514.807381][ T30] audit: type=1326 audit(1746324542.387:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 514.990876][ T30] audit: type=1326 audit(1746324542.387:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 515.017359][ T30] audit: type=1326 audit(1746324542.387:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 515.185513][ T30] audit: type=1326 audit(1746324542.387:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 515.969646][ T30] audit: type=1326 audit(1746324542.387:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 515.993212][ T30] audit: type=1326 audit(1746324542.387:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 517.884703][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'. [ 519.591403][T12473] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.691335][T12473] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.861800][T12473] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.886050][ T5863] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 520.131595][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.175390][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.196580][ T5863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 520.208632][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.326534][ T5863] usb 5-1: config 0 descriptor?? [ 520.393403][T12473] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.542610][T12473] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.615249][T12473] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.652647][T12473] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.671272][T12473] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.039497][ T5863] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 521.046402][ T5863] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 521.075294][ T5863] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 522.426970][ T5863] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 523.405088][ T5863] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 523.456772][ T5863] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71 [ 524.418660][ T5863] usb 5-1: USB disconnect, device number 53 [ 524.932943][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 530.350546][T12570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.499059][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 530.816778][T12570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.974964][T12570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.233372][T12570] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.701699][T12570] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.758362][T12570] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.798767][T12570] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.840828][T12570] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.654304][ T5860] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 538.844493][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 538.860594][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.900872][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 538.937634][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 538.968017][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 538.988741][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.772656][ T5860] usb 3-1: config 0 descriptor?? [ 539.863605][T12639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.890364][ T5860] hub 3-1:0.0: USB hub found [ 539.986974][ T5923] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 540.054383][ T5923] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.118361][ T5860] hub 3-1:0.0: 2 ports detected [ 540.909550][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 540.909566][ T30] audit: type=1400 audit(1746324568.777:2352): avc: denied { write } for pid=12673 comm="syz.1.1924" name="tcp" dev="proc" ino=4026533699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 541.995975][ T5860] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 542.022923][ T5860] usb 3-1: USB disconnect, device number 40 [ 542.029062][ T5923] usb 3-1: Failed to suspend device, error -19 [ 543.716190][T12713] hub 9-0:1.0: USB hub found [ 543.721140][T12713] hub 9-0:1.0: 1 port detected [ 550.406818][T12789] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 550.544287][ T911] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 550.694100][ T911] usb 5-1: Using ep0 maxpacket: 32 [ 550.700634][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.723972][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.754136][ T911] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.763187][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.835875][ T911] usb 5-1: config 0 descriptor?? [ 550.850321][ T911] hub 5-1:0.0: USB hub found [ 551.273774][ T911] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 551.291541][ T911] usbhid 5-1:0.0: can't add hid device: -71 [ 551.299064][ T30] audit: type=1400 audit(1746324579.187:2353): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.328286][ T911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 551.364822][ T911] usb 5-1: USB disconnect, device number 54 [ 552.154050][ T30] audit: type=1400 audit(1746324579.977:2354): avc: denied { ioctl } for pid=12806 comm="syz.1.1957" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 552.434872][ T30] audit: type=1400 audit(1746324579.977:2355): avc: denied { set_context_mgr } for pid=12806 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.804464][ T5900] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 553.854129][ T30] audit: type=1326 audit(1746324581.677:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 554.064142][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 554.337881][ T30] audit: type=1326 audit(1746324581.677:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 554.880205][ T30] audit: type=1326 audit(1746324581.677:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 554.904133][ T30] audit: type=1326 audit(1746324581.697:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 554.933247][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.946914][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 554.977457][ T30] audit: type=1326 audit(1746324581.707:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 555.024045][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.174546][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 555.183625][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.191706][ T30] audit: type=1326 audit(1746324581.707:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 555.216670][ T30] audit: type=1326 audit(1746324581.717:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 555.241228][ T5900] usb 5-1: config 0 descriptor?? [ 555.254288][T12827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.301226][ T5900] hub 5-1:0.0: USB hub found [ 555.722202][ T5900] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 556.068591][ T5900] usbhid 5-1:0.0: can't add hid device: -32 [ 556.086350][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 556.562769][ T5900] usb 5-1: USB disconnect, device number 55 [ 557.685583][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 557.685599][ T30] audit: type=1326 audit(1746324585.567:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c1ff85927 code=0x7ffc0000 [ 557.715915][ T30] audit: type=1326 audit(1746324585.567:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c1ff2ab39 code=0x7ffc0000 [ 557.752961][ T30] audit: type=1326 audit(1746324585.577:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c1ff85927 code=0x7ffc0000 [ 557.782389][ T30] audit: type=1326 audit(1746324585.577:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c1ff2ab39 code=0x7ffc0000 [ 557.810537][ T30] audit: type=1326 audit(1746324585.577:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 557.933378][ T30] audit: type=1326 audit(1746324585.577:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 557.960383][ T30] audit: type=1326 audit(1746324585.577:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c1ff85927 code=0x7ffc0000 [ 558.046809][ T30] audit: type=1326 audit(1746324585.577:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c1ff2ab39 code=0x7ffc0000 [ 558.502887][ T30] audit: type=1326 audit(1746324585.577:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 558.543284][ T30] audit: type=1326 audit(1746324585.577:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3c1ff8e969 code=0x7ffc0000 [ 562.464544][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.470867][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.218137][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 569.218154][ T30] audit: type=1400 audit(1746324596.577:2447): avc: denied { mount } for pid=12951 comm="syz.4.1998" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 569.438161][ T30] audit: type=1400 audit(1746324597.327:2448): avc: denied { unmount } for pid=8037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 572.771359][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 579.706979][T13064] ======================================================= [ 579.706979][T13064] WARNING: The mand mount option has been deprecated and [ 579.706979][T13064] and is ignored by this kernel. Remove the mand [ 579.706979][T13064] option from the mount to silence this warning. [ 579.706979][T13064] ======================================================= [ 579.782186][ T30] audit: type=1400 audit(1746324607.667:2449): avc: denied { mount } for pid=13059 comm="syz.0.2020" name="/" dev="ramfs" ino=35620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 582.861680][T13099] hub 9-0:1.0: USB hub found [ 583.004525][T13099] hub 9-0:1.0: 1 port detected [ 584.665895][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 586.104437][ T911] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 586.658314][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.695073][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.706517][ T911] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 586.719361][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.731034][ T911] usb 3-1: config 0 descriptor?? [ 588.389600][ T911] usbhid 3-1:0.0: can't add hid device: -71 [ 588.400311][ T911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 589.425205][ T911] usb 3-1: USB disconnect, device number 41 [ 590.346851][ T30] audit: type=1326 audit(1746324618.237:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.2044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d2e98e969 code=0x0 [ 590.398366][ T30] audit: type=1400 audit(1746324618.287:2451): avc: denied { append } for pid=13152 comm="syz.2.2044" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 592.497356][T13177] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 592.510124][ T30] audit: type=1400 audit(1746324620.367:2452): avc: denied { setopt } for pid=13180 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 592.551565][T13177] kvm: pic: level sensitive irq not supported [ 592.557846][T13177] kvm: pic: non byte read [ 595.802876][ T30] audit: type=1400 audit(1746324623.117:2453): avc: denied { listen } for pid=13203 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 595.823020][ T30] audit: type=1400 audit(1746324623.117:2454): avc: denied { write } for pid=13203 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 595.852214][ T30] audit: type=1400 audit(1746324623.127:2455): avc: denied { accept } for pid=13203 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 598.602026][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 599.831424][ T30] audit: type=1400 audit(1746324627.717:2456): avc: denied { read } for pid=13237 comm="syz.1.2065" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 599.884797][ T30] audit: type=1400 audit(1746324627.747:2457): avc: denied { open } for pid=13237 comm="syz.1.2065" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 599.914660][ T30] audit: type=1400 audit(1746324627.747:2458): avc: denied { ioctl } for pid=13237 comm="syz.1.2065" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 605.264652][ T911] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 605.992020][ T30] audit: type=1400 audit(1746324633.397:2459): avc: denied { getopt } for pid=13291 comm="syz.0.2076" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.149879][ T911] usb 3-1: Using ep0 maxpacket: 32 [ 606.162404][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.201862][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.232013][ T911] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 606.250077][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.272167][ T911] usb 3-1: config 0 descriptor?? [ 606.283687][ T911] hub 3-1:0.0: USB hub found [ 607.610582][ T911] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 607.670567][ T911] usbhid 3-1:0.0: can't add hid device: -71 [ 607.698392][ T911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 607.755277][ T911] usb 3-1: USB disconnect, device number 42 [ 609.432958][T13349] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 609.442136][T13349] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.826940][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 612.912693][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 613.143367][T13382] hub 9-0:1.0: USB hub found [ 613.148539][T13382] hub 9-0:1.0: 1 port detected [ 613.983886][T13393] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 613.992956][T13393] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.987263][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 614.996426][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 615.067423][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 615.076863][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 617.393866][T13424] hub 9-0:1.0: USB hub found [ 617.399361][T13424] hub 9-0:1.0: 1 port detected [ 617.994168][ T5943] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 618.229145][T13430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 619.227977][ T5943] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 619.237164][ T5943] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 619.244875][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 619.253843][ T5943] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.269820][ T5943] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 619.446761][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 619.455026][ T5943] usb 5-1: Product: syz [ 619.493285][ T5943] usb 5-1: Manufacturer: syz [ 619.535682][ T5943] cdc_wdm 5-1:1.0: skipping garbage [ 619.820245][ T5943] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 619.855260][T13451] hub 9-0:1.0: USB hub found [ 619.860205][T13451] hub 9-0:1.0: 1 port detected [ 619.925210][T13454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.933992][T13454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 620.010119][ T5943] usb 5-1: USB disconnect, device number 56 [ 621.244376][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 622.934639][T13479] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2120'. [ 622.943678][T13479] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2120'. [ 623.955743][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.969576][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.373186][T13501] overlayfs: failed to clone upperpath [ 624.520860][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 624.632809][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 625.882963][T13523] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2131'. [ 635.297056][ T30] audit: type=1326 audit(1746324663.187:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.324132][ T30] audit: type=1326 audit(1746324663.187:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.348756][ T30] audit: type=1326 audit(1746324663.217:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11baf85927 code=0x7ffc0000 [ 635.393259][ T30] audit: type=1326 audit(1746324663.217:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11baf2ab39 code=0x7ffc0000 [ 635.519361][ T30] audit: type=1326 audit(1746324663.217:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.550915][ T30] audit: type=1326 audit(1746324663.217:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.585361][ T30] audit: type=1326 audit(1746324663.217:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.620934][ T30] audit: type=1326 audit(1746324663.217:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 635.837296][ T30] audit: type=1326 audit(1746324663.217:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 636.815339][ T30] audit: type=1326 audit(1746324663.237:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11baf85927 code=0x7ffc0000 [ 637.486958][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 638.642740][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 640.848648][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 640.848664][ T30] audit: type=1326 audit(1746324668.737:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 640.996633][ T30] audit: type=1326 audit(1746324668.867:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 641.502026][ T30] audit: type=1326 audit(1746324668.867:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 641.526077][ T30] audit: type=1326 audit(1746324668.867:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 641.560871][ T30] audit: type=1326 audit(1746324668.867:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 642.325155][ T30] audit: type=1326 audit(1746324668.867:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 642.549179][ T30] audit: type=1326 audit(1746324668.867:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 643.082549][ T30] audit: type=1326 audit(1746324668.867:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 643.135793][ T30] audit: type=1326 audit(1746324668.867:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 643.187105][ T30] audit: type=1326 audit(1746324668.867:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 643.217229][ T5943] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 643.565442][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.586178][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.489188][ T5943] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 644.498808][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.509265][ T5943] usb 3-1: config 0 descriptor?? [ 645.465858][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 646.243544][ T5943] usbhid 3-1:0.0: can't add hid device: -71 [ 646.263433][ T5943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 647.744272][ T5943] usb 3-1: USB disconnect, device number 43 [ 649.274086][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 651.401051][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 654.646531][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 656.514677][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 656.544903][ T30] audit: type=1400 audit(1746324684.137:2578): avc: denied { connect } for pid=13756 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 656.645385][ T30] audit: type=1400 audit(1746324684.137:2579): avc: denied { write } for pid=13756 comm="syz.2.2194" path="socket:[37748]" dev="sockfs" ino=37748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 657.494027][ T30] audit: type=1400 audit(1746324684.147:2580): avc: denied { read } for pid=13756 comm="syz.2.2194" path="socket:[37748]" dev="sockfs" ino=37748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 658.136531][T13773] tipc: Started in network mode [ 658.141426][T13773] tipc: Node identity 7f000001, cluster identity 4711 [ 658.149664][T13773] tipc: Enabled bearer , priority 10 [ 658.289045][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 659.265382][ T911] tipc: Node number set to 2130706433 [ 661.763964][ T30] audit: type=1400 audit(1746324689.647:2581): avc: denied { unmount } for pid=7425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 662.754411][ T30] audit: type=1400 audit(1746324690.287:2582): avc: denied { append } for pid=13793 comm="syz.2.2204" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 662.796094][T13796] No such timeout policy "syz1" [ 663.224169][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 663.873998][ T30] audit: type=1400 audit(1746324691.757:2583): avc: denied { write } for pid=13804 comm="syz.4.2205" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 666.223452][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 666.276942][T13795] ubi31: attaching mtd0 [ 666.282302][T13795] ubi31: scanning is finished [ 666.287016][T13795] ubi31: empty MTD device detected [ 666.773878][T13795] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 667.272859][T13838] syz.4.2212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 668.264930][T13843] futex_wake_op: syz.0.2214 tries to shift op by 36; fix this program [ 668.290926][T13846] futex_wake_op: syz.3.2215 tries to shift op by 36; fix this program [ 668.392927][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 668.402093][T13849] gretap0: left allmulticast mode [ 668.407201][T13849] gretap0: left promiscuous mode [ 668.412750][T13849] bridge0: port 1(gretap0) entered disabled state [ 671.565217][T13858] tipc: Enabling of bearer rejected, already enabled [ 671.642935][T13863] tipc: Enabling of bearer rejected, already enabled [ 671.671051][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 671.715180][T13865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.808018][T13874] futex_wake_op: syz.3.2226 tries to shift op by 36; fix this program [ 673.711562][T13887] futex_wake_op: syz.1.2228 tries to shift op by 36; fix this program [ 674.466243][ T30] audit: type=1400 audit(1746324702.347:2584): avc: denied { ioctl } for pid=13895 comm="syz.4.2234" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 674.509144][T13900] tipc: Started in network mode [ 674.514802][T13900] tipc: Node identity 7f000001, cluster identity 4711 [ 674.524746][T13900] tipc: Enabled bearer , priority 10 [ 675.447504][T13904] ubi31: attaching mtd0 [ 675.462295][T13904] ubi31: scanning is finished [ 675.589881][T13898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=13898 comm=syz.3.2233 [ 675.663864][ T5860] tipc: Node number set to 2130706433 [ 675.669711][T13898] sctp: [Deprecated]: syz.3.2233 (pid 13898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.669711][T13898] Use struct sctp_sack_info instead [ 676.248622][T13904] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 676.260442][T13904] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 676.813690][T13904] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 676.846382][T13904] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 676.857684][T13904] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 676.867691][T13904] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 676.889008][T13904] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1577076825 [ 676.900939][T13904] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 676.912594][T13915] ubi31: background thread "ubi_bgt31d" started, PID 13915 [ 677.150261][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'. [ 677.694014][T13927] hub 9-0:1.0: USB hub found [ 677.702327][T13927] hub 9-0:1.0: 1 port detected [ 678.185103][T13928] nvme_fabrics: missing parameter 'transport=%s' [ 678.196902][ T30] audit: type=1400 audit(1746324705.697:2585): avc: denied { append } for pid=13922 comm="syz.1.2239" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 678.668221][T13937] ubi: mtd0 is already attached to ubi31 [ 678.676708][T13928] nvme_fabrics: missing parameter 'nqn=%s' [ 678.741230][ T30] audit: type=1400 audit(1746324705.727:2586): avc: denied { read } for pid=13922 comm="syz.1.2239" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 678.744881][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2242'. [ 678.778506][ T30] audit: type=1400 audit(1746324705.727:2587): avc: denied { open } for pid=13922 comm="syz.1.2239" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 678.806726][ T30] audit: type=1400 audit(1746324705.747:2588): avc: denied { ioctl } for pid=13922 comm="syz.1.2239" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 679.008544][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2244'. [ 679.018900][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 679.041629][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2244'. [ 679.050587][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 679.447399][T13944] nvme_fabrics: missing parameter 'transport=%s' [ 679.455291][T13944] nvme_fabrics: missing parameter 'nqn=%s' [ 679.573160][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'. [ 679.696267][ T30] audit: type=1400 audit(1746324707.587:2589): avc: denied { bind } for pid=13940 comm="syz.1.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.844279][ T5860] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 680.742845][ T5860] usb 5-1: device descriptor read/64, error -71 [ 680.772477][T13964] tipc: Started in network mode [ 680.777888][T13964] tipc: Node identity 7f000001, cluster identity 4711 [ 680.893005][T13964] tipc: Enabling of bearer rejected, failed to enable media [ 681.664434][ T5860] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 681.826609][ T5860] usb 5-1: device descriptor read/64, error -71 [ 682.520773][ T5860] usb usb5-port1: attempt power cycle [ 684.764730][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 684.773866][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 684.833456][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 684.842654][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 685.098173][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 685.393737][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.575925][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.360214][T14003] ubi: mtd0 is already attached to ubi31 [ 690.573848][T14046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14046 comm=syz.4.2273 [ 690.590473][T14046] sctp: [Deprecated]: syz.4.2273 (pid 14046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.590473][T14046] Use struct sctp_sack_info instead [ 692.767988][ T30] audit: type=1326 audit(1746324720.657:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 692.829777][ T30] audit: type=1326 audit(1746324720.657:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 693.546050][ T30] audit: type=1326 audit(1746324720.657:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11baf85927 code=0x7ffc0000 [ 693.648007][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2276'. [ 693.669212][ T30] audit: type=1326 audit(1746324720.657:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11baf2ab39 code=0x7ffc0000 [ 693.844284][ T30] audit: type=1326 audit(1746324720.657:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 693.908628][ T30] audit: type=1326 audit(1746324720.657:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 694.076704][ T30] audit: type=1326 audit(1746324720.657:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 694.569899][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2281'. [ 694.590044][ T30] audit: type=1326 audit(1746324720.657:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 694.627500][ T30] audit: type=1326 audit(1746324720.657:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 694.997044][T14085] nvme_fabrics: missing parameter 'transport=%s' [ 694.997119][ T30] audit: type=1326 audit(1746324720.657:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 695.143847][T14085] nvme_fabrics: missing parameter 'nqn=%s' [ 698.297223][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 698.297239][ T30] audit: type=1326 audit(1746324726.167:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 698.384526][ T30] audit: type=1326 audit(1746324726.167:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e92ab39 code=0x7ffc0000 [ 698.408031][ T30] audit: type=1326 audit(1746324726.167:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 698.498156][ T30] audit: type=1326 audit(1746324726.167:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 698.525101][ T30] audit: type=1326 audit(1746324726.177:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 698.586727][ T30] audit: type=1326 audit(1746324726.177:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 698.610811][ T30] audit: type=1326 audit(1746324726.177:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 698.637306][ T30] audit: type=1326 audit(1746324726.177:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 699.157862][T14121] ubi: mtd0 is already attached to ubi31 [ 699.200543][ T30] audit: type=1326 audit(1746324726.177:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 699.369557][ T30] audit: type=1326 audit(1746324726.177:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 701.009254][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 701.492253][T14137] ubi: mtd0 is already attached to ubi31 [ 701.650373][T14138] ubi: mtd0 is already attached to ubi31 [ 704.905872][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2302'. [ 705.428664][T14168] nvme_fabrics: missing parameter 'transport=%s' [ 705.435058][T14168] nvme_fabrics: missing parameter 'nqn=%s' [ 709.131063][T14203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.534816][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 710.040573][T14211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.293529][T14232] ubi: mtd0 is already attached to ubi31 [ 714.081227][T14253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14253 comm=syz.4.2323 [ 714.262058][T14248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14248 comm=syz.2.2322 [ 714.893389][T14257] tipc: Enabling of bearer rejected, failed to enable media [ 714.930459][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 714.930474][ T30] audit: type=1400 audit(1746324742.807:2627): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.968542][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2326'. [ 714.990672][ T30] audit: type=1400 audit(1746324742.807:2628): avc: denied { remove_name } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.095673][ T30] audit: type=1400 audit(1746324742.807:2629): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.127793][T14266] futex_wake_op: syz.0.2324 tries to shift op by 36; fix this program [ 715.316909][T14263] nvme_fabrics: missing parameter 'transport=%s' [ 715.323435][T14263] nvme_fabrics: missing parameter 'nqn=%s' [ 716.024024][ T5860] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 716.604273][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 716.682459][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 717.179056][ T5860] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 717.206333][ T5860] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 717.244329][ T5860] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 717.373768][ T5860] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 717.944186][ T5860] usb 5-1: config 1 interface 0 has no altsetting 0 [ 717.950886][ T5860] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 717.960608][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.975746][ T5860] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 718.223708][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 718.376011][ T5860] scsi host1: usb-storage 5-1:1.0 [ 718.487695][T14310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 719.445861][ T5860] usb 5-1: USB disconnect, device number 60 [ 720.923561][T14315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14315 comm=syz.0.2342 [ 720.938453][T14315] sctp: [Deprecated]: syz.0.2342 (pid 14315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.938453][T14315] Use struct sctp_sack_info instead [ 721.374310][ T5860] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 721.624699][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 722.195997][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.254844][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.398519][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 722.436168][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.936480][ T5860] usb 3-1: config 0 descriptor?? [ 722.945738][ T5860] hub 3-1:0.0: USB hub found [ 723.934239][ T5860] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 723.974547][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 724.031699][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 724.145002][ T5860] usb 3-1: USB disconnect, device number 44 [ 724.163276][T14352] futex_wake_op: syz.0.2352 tries to shift op by 36; fix this program [ 724.443827][ C0] Unknown status report in ack skb [ 726.645992][T14381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14381 comm=syz.0.2361 [ 726.659795][T14381] sctp: [Deprecated]: syz.0.2361 (pid 14381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.659795][T14381] Use struct sctp_sack_info instead [ 728.509531][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 729.247815][ T30] audit: type=1400 audit(1746324757.137:2630): avc: denied { ioctl } for pid=14402 comm="syz.3.2368" path="socket:[40134]" dev="sockfs" ino=40134 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 729.357171][T14404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14404 comm=syz.0.2369 [ 729.559401][T14410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14410 comm=syz.3.2371 [ 729.650047][T14414] ubi: mtd0 is already attached to ubi31 [ 732.313457][T14441] tipc: Enabling of bearer rejected, already enabled [ 732.764052][ T5900] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 733.203666][T14454] futex_wake_op: syz.2.2384 tries to shift op by 36; fix this program [ 733.214139][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 733.335327][ T5900] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 733.357904][ T5900] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.370155][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.379960][ T5900] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 733.392918][ T5900] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.402806][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.841352][ T5900] usbtmc 5-1:16.0: bulk endpoints not found [ 734.154988][ T30] audit: type=1326 audit(1746324762.037:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 734.201883][ T30] audit: type=1326 audit(1746324762.037:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 734.242793][ T30] audit: type=1326 audit(1746324762.067:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 734.477863][ T30] audit: type=1326 audit(1746324762.067:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 734.501475][ T30] audit: type=1326 audit(1746324762.067:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.142364][ T30] audit: type=1326 audit(1746324762.067:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.181081][ T30] audit: type=1326 audit(1746324762.077:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.244115][ T30] audit: type=1326 audit(1746324762.077:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.268499][ T30] audit: type=1326 audit(1746324762.077:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb188f85927 code=0x7ffc0000 [ 735.292461][ T30] audit: type=1326 audit(1746324762.077:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb188f2ab39 code=0x7ffc0000 [ 735.420217][ T30] audit: type=1326 audit(1746324762.077:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.446238][ T30] audit: type=1326 audit(1746324762.077:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 735.478100][ T30] audit: type=1326 audit(1746324762.077:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb188f8e969 code=0x7ffc0000 [ 736.923125][ T5812] usb 5-1: USB disconnect, device number 61 [ 737.253598][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2401'. [ 737.895079][T14517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.920695][T14521] bond2: option mode: unable to set because the bond device is up [ 738.831602][T14549] hub 9-0:1.0: USB hub found [ 738.837236][T14549] hub 9-0:1.0: 1 port detected [ 740.003460][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2414'. [ 740.209129][T14557] nvme_fabrics: missing parameter 'transport=%s' [ 740.236749][ C0] Unknown status report in ack skb [ 740.268728][T14557] nvme_fabrics: missing parameter 'nqn=%s' [ 745.195679][T14610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14610 comm=syz.4.2430 [ 745.214848][T14610] sctp: [Deprecated]: syz.4.2430 (pid 14610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.214848][T14610] Use struct sctp_sack_info instead [ 746.794109][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.801089][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.379277][ T5812] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 748.785056][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.051202][ T5812] usb 5-1: string descriptor 0 read error: -71 [ 750.065381][ T5812] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 750.076510][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.296367][ T5812] usb 5-1: config 0 descriptor?? [ 751.344569][ T5812] usb 5-1: can't set config #0, error -71 [ 751.361406][ T5812] usb 5-1: USB disconnect, device number 62 [ 758.891569][T14724] hub 9-0:1.0: USB hub found [ 758.896964][T14724] hub 9-0:1.0: 1 port detected [ 758.960202][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2462'. [ 759.709075][T14739] tipc: Enabling of bearer rejected, already enabled [ 759.747715][T14730] nvme_fabrics: missing parameter 'transport=%s' [ 759.754170][T14730] nvme_fabrics: missing parameter 'nqn=%s' [ 765.412507][T14782] hub 9-0:1.0: USB hub found [ 765.417537][T14782] hub 9-0:1.0: 1 port detected [ 766.233976][T14805] ubi: mtd0 is already attached to ubi31 [ 766.274353][T14809] input: syz0 as /devices/virtual/input/input56 [ 768.749219][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 768.749234][ T30] audit: type=1400 audit(2000000026.300:2695): avc: denied { bind } for pid=14812 comm="syz.3.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.777016][ T30] audit: type=1400 audit(2000000026.320:2696): avc: denied { listen } for pid=14812 comm="syz.3.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.797117][ T30] audit: type=1400 audit(2000000026.320:2697): avc: denied { accept } for pid=14812 comm="syz.3.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.824417][T14811] tipc: Started in network mode [ 768.832809][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 768.854974][T14811] tipc: Node identity 7f000001, cluster identity 4711 [ 768.876040][T14811] tipc: Enabling of bearer rejected, failed to enable media [ 768.917902][T14818] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.926285][T14818] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.934803][T14818] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.942952][T14818] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.973354][ T30] audit: type=1400 audit(2000000026.520:2698): avc: denied { create } for pid=14821 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 769.665170][T14829] hub 9-0:1.0: USB hub found [ 769.669961][T14829] hub 9-0:1.0: 1 port detected [ 769.863426][T14836] ubi: mtd0 is already attached to ubi31 [ 772.369113][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 772.930911][T14863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=14863 comm=syz.1.2503 [ 772.950648][T14863] sctp: [Deprecated]: syz.1.2503 (pid 14863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.950648][T14863] Use struct sctp_sack_info instead [ 773.695924][ T30] audit: type=1400 audit(2000000031.240:2699): avc: denied { append } for pid=14874 comm="syz.2.2509" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 774.293420][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2509'. [ 774.346042][T14880] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.354733][T14880] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.363113][T14880] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.371659][T14880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.139038][T14896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2513'. [ 776.520872][ T30] audit: type=1326 audit(2000000034.070:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 776.685971][ T30] audit: type=1326 audit(2000000034.070:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 777.655974][ T30] audit: type=1326 audit(2000000034.070:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 777.680395][ T30] audit: type=1326 audit(2000000034.070:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 778.504187][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 778.703957][ T30] audit: type=1326 audit(2000000034.070:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 779.642549][ T30] audit: type=1326 audit(2000000034.070:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 779.667637][ T30] audit: type=1326 audit(2000000034.070:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 779.921572][ T30] audit: type=1326 audit(2000000034.070:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 779.968416][ T30] audit: type=1326 audit(2000000034.070:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 780.018696][ T30] audit: type=1326 audit(2000000034.070:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 780.822376][T14925] ubi: mtd0 is already attached to ubi31 [ 783.953847][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 786.737552][T14973] ubi: mtd0 is already attached to ubi31 [ 791.694429][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 794.223733][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 800.171070][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 801.864984][T15087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=15087 comm=syz.1.2564 [ 801.883313][T15087] sctp: [Deprecated]: syz.1.2564 (pid 15087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 801.883313][T15087] Use struct sctp_sack_info instead [ 804.521175][T15126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=15126 comm=syz.4.2574 [ 804.540154][T15126] sctp: [Deprecated]: syz.4.2574 (pid 15126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.540154][T15126] Use struct sctp_sack_info instead [ 808.217661][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.223983][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.146435][T15171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=15171 comm=syz.0.2589 [ 809.160612][T15171] sctp: [Deprecated]: syz.0.2589 (pid 15171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.160612][T15171] Use struct sctp_sack_info instead [ 809.902884][T15183] input: syz0 as /devices/virtual/input/input57 [ 809.941671][T15183] tipc: Enabling of bearer rejected, failed to enable media [ 810.805153][T15181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=15181 comm=syz.3.2591 [ 810.818541][ T5860] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 810.835301][T15181] sctp: [Deprecated]: syz.3.2591 (pid 15181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.835301][T15181] Use struct sctp_sack_info instead [ 811.006022][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.032107][ T5860] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 811.051953][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.158890][ T5860] usb 5-1: Product: syz [ 811.163816][ T5860] usb 5-1: Manufacturer: syz [ 811.169914][ T5860] usb 5-1: SerialNumber: syz [ 811.176325][ T5860] usb 5-1: config 0 descriptor?? [ 811.195107][ T5860] ims_pcu 5-1:0.0: Zero length descriptor [ 811.212827][ T5860] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 811.284729][T15193] hub 9-0:1.0: USB hub found [ 811.290151][T15193] hub 9-0:1.0: 1 port detected [ 811.679787][ T5860] usb 5-1: USB disconnect, device number 63 [ 813.301509][T15218] ubi: mtd0 is already attached to ubi31 [ 813.901877][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2610'. [ 816.188172][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'. [ 816.357463][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 816.357478][ T30] audit: type=1400 audit(2000000073.910:2712): avc: denied { setopt } for pid=15255 comm="syz.1.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.717004][ T30] audit: type=1326 audit(2000000076.270:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 819.030432][ T30] audit: type=1326 audit(2000000076.270:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 819.151751][ T30] audit: type=1326 audit(2000000076.290:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5946f85927 code=0x7ffc0000 [ 819.197339][ T30] audit: type=1326 audit(2000000076.290:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5946f2ab39 code=0x7ffc0000 [ 819.269924][ T30] audit: type=1326 audit(2000000076.290:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 819.296077][ T30] audit: type=1326 audit(2000000076.290:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 819.361380][ T30] audit: type=1326 audit(2000000076.290:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 820.129094][ T30] audit: type=1326 audit(2000000076.290:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 820.154162][ T30] audit: type=1326 audit(2000000076.290:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 820.488665][T15311] ubi: mtd0 is already attached to ubi31 [ 821.547829][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 821.547851][ T30] audit: type=1400 audit(2000000079.070:2740): avc: denied { read } for pid=15325 comm="syz.4.2636" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 822.084155][ T30] audit: type=1400 audit(2000000079.070:2741): avc: denied { open } for pid=15325 comm="syz.4.2636" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 822.342902][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2637'. [ 822.506095][T15341] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.517431][T15341] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.525887][T15341] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.534228][T15341] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.799800][ T30] audit: type=1326 audit(2000000083.330:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 826.510779][ T30] audit: type=1326 audit(2000000083.340:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 826.535132][ T30] audit: type=1326 audit(2000000083.340:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11baf85927 code=0x7ffc0000 [ 826.562382][ T30] audit: type=1326 audit(2000000083.340:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11baf2ab39 code=0x7ffc0000 [ 826.588023][ T30] audit: type=1326 audit(2000000083.340:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 826.692083][ T30] audit: type=1326 audit(2000000083.540:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11baf85927 code=0x7ffc0000 [ 826.726653][ T30] audit: type=1326 audit(2000000083.540:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11baf2ab39 code=0x7ffc0000 [ 826.822462][ T30] audit: type=1326 audit(2000000083.540:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 827.312866][ T30] audit: type=1326 audit(2000000083.540:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 827.597207][ T30] audit: type=1326 audit(2000000083.540:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 828.624051][ T30] audit: type=1326 audit(2000000083.540:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 828.648533][ T30] audit: type=1326 audit(2000000083.540:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 828.672406][ T30] audit: type=1326 audit(2000000083.540:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 833.845412][T15466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=15466 comm=syz.1.2669 [ 833.864515][T15466] sctp: [Deprecated]: syz.1.2669 (pid 15466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.864515][T15466] Use struct sctp_sack_info instead [ 834.140226][T15468] hub 9-0:1.0: USB hub found [ 834.233832][T15468] hub 9-0:1.0: 1 port detected [ 836.252181][ T5860] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 836.944195][T15501] hub 9-0:1.0: USB hub found [ 837.064366][T15501] hub 9-0:1.0: 1 port detected [ 837.274250][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 837.309287][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 837.386029][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 837.424200][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 837.443393][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 837.452603][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 837.479014][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.341729][T15509] nvme_fabrics: missing parameter 'transport=%s' [ 838.353828][ T5860] usb 5-1: config 0 descriptor?? [ 838.364471][T15488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 838.373480][ T5860] hub 5-1:0.0: USB hub found [ 838.432837][T15509] nvme_fabrics: missing parameter 'nqn=%s' [ 838.583655][ T5860] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 838.732617][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 838.732634][ T30] audit: type=1326 audit(2000000096.280:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 838.809077][ T5860] usbhid 5-1:0.0: can't add hid device: -32 [ 838.824951][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 839.076841][ T5860] usb 5-1: USB disconnect, device number 64 [ 839.192807][ T30] audit: type=1326 audit(2000000096.290:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.216430][ T30] audit: type=1326 audit(2000000096.290:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.240949][ T30] audit: type=1326 audit(2000000096.290:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e985927 code=0x7ffc0000 [ 839.264526][ T30] audit: type=1326 audit(2000000096.290:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e92ab39 code=0x7ffc0000 [ 839.290631][ T30] audit: type=1326 audit(2000000096.290:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.315108][ T30] audit: type=1326 audit(2000000096.290:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.409088][ T30] audit: type=1326 audit(2000000096.290:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.459028][ T30] audit: type=1326 audit(2000000096.290:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 839.553754][ T30] audit: type=1326 audit(2000000096.290:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2e98e969 code=0x7ffc0000 [ 843.925025][T15581] futex_wake_op: syz.2.2702 tries to shift op by 36; fix this program [ 847.175690][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 847.465122][T15607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2708'. [ 847.475018][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2708'. [ 847.484062][T15607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2708'. [ 847.493213][T15607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2708'. [ 847.778095][T15611] input: syz0 as /devices/virtual/input/input58 [ 847.822560][T15611] tipc: Enabled bearer , priority 10 [ 848.592669][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 848.670735][T15632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 848.754439][ T5812] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 849.320966][ T5923] tipc: Node number set to 1830082909 [ 849.664449][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 849.671152][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 849.689413][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 849.814495][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 850.308114][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 850.319318][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.395677][ T5812] usb 3-1: config 0 descriptor?? [ 850.407591][T15626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 850.417057][ T5812] hub 3-1:0.0: USB hub found [ 850.637243][ T5812] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 850.869952][ T5812] usbhid 3-1:0.0: can't add hid device: -32 [ 850.871045][T15670] raw_sendmsg: syz.4.2728 forgot to set AF_INET. Fix it! [ 850.879963][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 850.915584][T15668] hub 9-0:1.0: USB hub found [ 850.920452][T15668] hub 9-0:1.0: 1 port detected [ 850.927520][ T5812] usb 3-1: USB disconnect, device number 45 [ 853.997753][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 859.777795][T15759] hub 9-0:1.0: USB hub found [ 859.782830][T15759] hub 9-0:1.0: 1 port detected [ 861.033913][ T5812] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 861.687855][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.791772][ T5812] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 861.824334][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.837862][ T5812] usb 5-1: Product: syz [ 861.842070][ T5812] usb 5-1: Manufacturer: syz [ 861.853382][ T5812] usb 5-1: SerialNumber: syz [ 861.885218][ T5812] usb 5-1: config 0 descriptor?? [ 861.918285][ T5812] ims_pcu 5-1:0.0: Zero length descriptor [ 861.938182][ T5812] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 862.694383][ T5812] usb 5-1: USB disconnect, device number 65 [ 868.190822][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2779'. [ 868.402088][T15856] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.411975][T15856] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.420335][T15856] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.428667][T15856] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.904508][T15863] hub 9-0:1.0: USB hub found [ 868.909694][T15863] hub 9-0:1.0: 1 port detected [ 869.776576][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.783559][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.100150][T15878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2785'. [ 870.109168][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'. [ 870.118195][T15878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2785'. [ 870.127330][T15878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2785'. [ 871.110181][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'. [ 871.178625][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2787'. [ 872.361332][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2787'. [ 872.370362][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2787'. [ 872.379356][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2787'. [ 872.577342][T15894] hub 9-0:1.0: USB hub found [ 872.582283][T15894] hub 9-0:1.0: 1 port detected [ 874.127608][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2793'. [ 874.194790][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2795'. [ 874.218025][T15912] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.227068][T15912] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.235792][T15912] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.244463][T15912] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.453729][T15918] hub 9-0:1.0: USB hub found [ 874.463943][T15918] hub 9-0:1.0: 1 port detected [ 875.896151][T15929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2799'. [ 875.905672][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'. [ 875.914784][T15929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2799'. [ 875.923989][T15929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2799'. [ 882.941425][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'. [ 884.146165][T16011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=16011 comm=syz.1.2822 [ 884.162585][T16011] sctp: [Deprecated]: syz.1.2822 (pid 16011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.162585][T16011] Use struct sctp_sack_info instead [ 885.091347][T16013] ubi: mtd0 is already attached to ubi31 [ 886.275667][T16029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'. [ 886.285475][T16029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 886.295104][T16029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'. [ 886.304331][T16029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'. [ 889.707727][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2838'. [ 890.053520][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2842'. [ 890.062669][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 890.072387][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2842'. [ 890.081725][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2842'. [ 891.974319][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 891.974334][ T30] audit: type=1326 audit(2000000149.510:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 893.218079][ T30] audit: type=1326 audit(2000000149.510:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 893.272179][ T30] audit: type=1326 audit(2000000149.510:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 893.356775][ T30] audit: type=1326 audit(2000000149.510:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 893.417426][ T30] audit: type=1326 audit(2000000149.510:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 894.483115][ T30] audit: type=1326 audit(2000000149.510:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 894.594290][ T30] audit: type=1326 audit(2000000149.510:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 894.620597][ T30] audit: type=1326 audit(2000000149.510:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 894.644729][ T30] audit: type=1326 audit(2000000149.520:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 894.644774][ T30] audit: type=1326 audit(2000000149.520:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946f8e969 code=0x7ffc0000 [ 895.768334][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 897.419952][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 897.419974][ T30] audit: type=1400 audit(2000000154.320:2908): avc: denied { name_bind } for pid=16146 comm="syz.1.2865" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 897.537127][T16160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=16160 comm=syz.0.2869 [ 897.550254][ T30] audit: type=1400 audit(2000000154.390:2909): avc: denied { mount } for pid=16146 comm="syz.1.2865" name="/" dev="rpc_pipefs" ino=45450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 897.580310][T16160] sctp: [Deprecated]: syz.0.2869 (pid 16160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.580310][T16160] Use struct sctp_sack_info instead [ 897.598597][ T30] audit: type=1400 audit(2000000154.400:2910): avc: denied { unmount } for pid=16146 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 897.621511][ T30] audit: type=1400 audit(2000000154.400:2911): avc: denied { mounton } for pid=16146 comm="syz.1.2865" path="/466/file0" dev="rpc_pipefs" ino=45450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 899.685663][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 903.195626][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2887'. [ 903.435758][T16241] hub 9-0:1.0: USB hub found [ 903.441288][T16241] hub 9-0:1.0: 1 port detected [ 905.990301][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2894'. [ 909.814639][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'. [ 911.429559][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2916'. [ 913.268394][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2921'. [ 913.395911][T16353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 913.405100][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2921'. [ 913.438022][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2921'. [ 916.181481][T16379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=16379 comm=syz.2.2931 [ 916.350719][T16379] sctp: [Deprecated]: syz.2.2931 (pid 16379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 916.350719][T16379] Use struct sctp_sack_info instead [ 917.201542][T16392] ubi: mtd0 is already attached to ubi31 [ 919.036201][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 922.222792][T16465] ubi: mtd0 is already attached to ubi31 [ 923.127554][T12769] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 923.136039][T12769] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 923.144091][T12769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 923.154993][T12769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 923.170812][T12769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 924.316581][T16489] binder: 16481:16489 ioctl c0306201 0 returned -14 [ 925.253953][T12769] Bluetooth: hci5: command tx timeout [ 925.510615][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 926.624268][T16512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2967'. [ 926.633285][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2967'. [ 926.642398][T16512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2967'. [ 926.651493][T16512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2967'. [ 927.334019][T12769] Bluetooth: hci5: command tx timeout [ 927.412241][T16477] chnl_net:caif_netlink_parms(): no params data found [ 928.396892][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 929.220662][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.246227][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.273797][T16477] bridge_slave_0: entered allmulticast mode [ 929.283205][T16477] bridge_slave_0: entered promiscuous mode [ 929.301404][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.314035][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.321266][T16477] bridge_slave_1: entered allmulticast mode [ 929.519667][T16477] bridge_slave_1: entered promiscuous mode [ 929.560866][T12769] Bluetooth: hci5: command tx timeout [ 929.820801][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.833119][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.418275][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.424819][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.450470][T16477] team0: Port device team_slave_0 added [ 931.486939][T16477] team0: Port device team_slave_1 added [ 931.583923][T12769] Bluetooth: hci5: command tx timeout [ 931.976212][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.031825][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.260765][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.380126][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.461963][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.583923][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.629012][T16557] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 932.705716][T16477] hsr_slave_0: entered promiscuous mode [ 932.739258][T16477] hsr_slave_1: entered promiscuous mode [ 932.764523][T16477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.773350][T16477] Cannot create hsr debugfs directory [ 934.713759][T16477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.733966][T16477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.919701][T16477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.931526][T16477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.405563][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2986'. [ 935.791843][T16477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.826015][T16477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.114462][ T5812] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 936.164181][T16477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.186749][T16477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.209892][T16594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2990'. [ 936.373888][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 936.388149][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.408488][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.868521][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 936.878266][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.895984][ T5812] usb 3-1: config 0 descriptor?? [ 936.923441][ T5812] hub 3-1:0.0: USB hub found [ 937.762525][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 937.804473][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 937.841863][ T5812] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 937.935206][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 937.941261][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 937.975346][ T5812] usb 3-1: USB disconnect, device number 46 [ 937.998723][T16477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 938.051080][T16477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 938.072377][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 938.098266][T16477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.113570][T16477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.285304][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.302065][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.321260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.328394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.343265][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.350431][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.619629][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.656282][T16477] veth0_vlan: entered promiscuous mode [ 939.285330][T16477] veth1_vlan: entered promiscuous mode [ 939.324562][ T30] audit: type=1326 audit(2000000002.830:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 939.934558][T16637] hub 9-0:1.0: USB hub found [ 939.944278][T16637] hub 9-0:1.0: 1 port detected [ 940.021255][ T30] audit: type=1326 audit(2000000002.830:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.046153][ T30] audit: type=1326 audit(2000000002.830:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.071310][ T30] audit: type=1326 audit(2000000002.830:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.095659][ T30] audit: type=1326 audit(2000000002.830:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.119448][ T30] audit: type=1326 audit(2000000002.830:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.171584][T16477] veth0_macvtap: entered promiscuous mode [ 940.183479][T16477] veth1_macvtap: entered promiscuous mode [ 940.206888][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.236926][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.285496][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.290503][ T30] audit: type=1326 audit(2000000002.830:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.321010][ T30] audit: type=1326 audit(2000000002.830:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.345912][ T30] audit: type=1326 audit(2000000002.830:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.369459][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.369478][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.369492][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.369505][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.369516][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.379047][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.421750][ T30] audit: type=1326 audit(2000000002.830:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11baf8e969 code=0x7ffc0000 [ 940.639198][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.650515][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.661190][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.673596][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.683653][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.211387][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.225373][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.239817][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.251052][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.486494][T16477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.495541][T16477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.504247][T16477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.512939][T16477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.563011][T16662] cgroup: release_agent respecified [ 943.431417][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.674121][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.719303][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.732095][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.765643][T16679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1308 sclass=netlink_route_socket pid=16679 comm=syz.1.3010 [ 943.966913][T16679] sctp: [Deprecated]: syz.1.3010 (pid 16679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.966913][T16679] Use struct sctp_sack_info instead [ 944.119715][T16477] ================================================================== [ 944.127839][T16477] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 [ 944.135565][T16477] Write of size 8 at addr ffff8880320fd408 by task syz-executor/16477 [ 944.143707][T16477] [ 944.146029][T16477] CPU: 0 UID: 0 PID: 16477 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 944.146052][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 944.146062][T16477] Call Trace: [ 944.146068][T16477] [ 944.146076][T16477] dump_stack_lvl+0x116/0x1f0 [ 944.146101][T16477] print_report+0xc3/0x670 [ 944.146118][T16477] ? __virt_addr_valid+0x5e/0x590 [ 944.146140][T16477] ? __phys_addr+0xc6/0x150 [ 944.146162][T16477] ? binder_add_device+0xa4/0xb0 [ 944.146182][T16477] kasan_report+0xe0/0x110 [ 944.146199][T16477] ? binder_add_device+0xa4/0xb0 [ 944.146221][T16477] binder_add_device+0xa4/0xb0 [ 944.146242][T16477] binderfs_binder_device_create.isra.0+0x95f/0xb70 [ 944.146271][T16477] binderfs_fill_super+0x8d4/0x1360 [ 944.146298][T16477] ? __pfx_binderfs_fill_super+0x10/0x10 [ 944.146331][T16477] ? shrinker_register+0x1a8/0x260 [ 944.146350][T16477] ? sget_fc+0x808/0xc20 [ 944.146373][T16477] ? __pfx_set_anon_super_fc+0x10/0x10 [ 944.146395][T16477] ? __pfx_binderfs_fill_super+0x10/0x10 [ 944.146420][T16477] get_tree_nodev+0xda/0x190 [ 944.146444][T16477] vfs_get_tree+0x8b/0x340 [ 944.146464][T16477] path_mount+0x14d4/0x1f20 [ 944.146482][T16477] ? kmem_cache_free+0x2d4/0x4d0 [ 944.146506][T16477] ? __pfx_path_mount+0x10/0x10 [ 944.146523][T16477] ? putname+0x154/0x1a0 [ 944.146541][T16477] __x64_sys_mount+0x28d/0x310 [ 944.146559][T16477] ? __pfx___x64_sys_mount+0x10/0x10 [ 944.146575][T16477] ? rcu_is_watching+0x12/0xc0 [ 944.146596][T16477] do_syscall_64+0xcd/0x260 [ 944.146619][T16477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.146636][T16477] RIP: 0033:0x7f2e6039010a [ 944.146650][T16477] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.146672][T16477] RSP: 002b:00007ffdf318cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 944.146688][T16477] RAX: ffffffffffffffda RBX: 00007f2e60410e74 RCX: 00007f2e6039010a [ 944.146700][T16477] RDX: 00007f2e604208cb RSI: 00007f2e60410e74 RDI: 00007f2e604208cb [ 944.146710][T16477] RBP: 00007f2e604110bd R08: 0000000000000000 R09: 00007f2e605b6738 [ 944.146721][T16477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e603ec1a8 [ 944.146730][T16477] R13: 00007f2e603ec180 R14: 0000000000000009 R15: 0000000000000000 [ 944.146746][T16477] [ 944.146752][T16477] [ 944.380252][T16477] Allocated by task 13269: [ 944.384662][T16477] kasan_save_stack+0x33/0x60 [ 944.389352][T16477] kasan_save_track+0x14/0x30 [ 944.394031][T16477] __kasan_kmalloc+0xaa/0xb0 [ 944.398623][T16477] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 944.404170][T16477] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 944.409970][T16477] batadv_iv_ogm_schedule_buff+0xe77/0x14e0 [ 944.415858][T16477] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 944.422879][T16477] process_one_work+0x9cc/0x1b70 [ 944.427824][T16477] worker_thread+0x6c8/0xf10 [ 944.432438][T16477] kthread+0x3c2/0x780 [ 944.436508][T16477] ret_from_fork+0x45/0x80 [ 944.440919][T16477] ret_from_fork_asm+0x1a/0x30 [ 944.445690][T16477] [ 944.448037][T16477] Freed by task 1133: [ 944.452009][T16477] kasan_save_stack+0x33/0x60 [ 944.456693][T16477] kasan_save_track+0x14/0x30 [ 944.461377][T16477] kasan_save_free_info+0x3b/0x60 [ 944.466422][T16477] __kasan_slab_free+0x51/0x70 [ 944.471198][T16477] kfree+0x2b6/0x4d0 [ 944.475095][T16477] batadv_iv_send_outstanding_bat_ogm_packet+0x26d/0x920 [ 944.482122][T16477] process_one_work+0x9cc/0x1b70 [ 944.487059][T16477] worker_thread+0x6c8/0xf10 [ 944.491644][T16477] kthread+0x3c2/0x780 [ 944.495706][T16477] ret_from_fork+0x45/0x80 [ 944.500120][T16477] ret_from_fork_asm+0x1a/0x30 [ 944.504887][T16477] [ 944.507291][T16477] Last potentially related work creation: [ 944.512994][T16477] kasan_save_stack+0x33/0x60 [ 944.517678][T16477] kasan_record_aux_stack+0xb8/0xd0 [ 944.522873][T16477] insert_work+0x36/0x230 [ 944.527197][T16477] __queue_work+0x3f8/0x10f0 [ 944.531779][T16477] call_timer_fn+0x197/0x620 [ 944.536366][T16477] __run_timers+0x569/0x960 [ 944.540869][T16477] run_timer_base+0x114/0x190 [ 944.545548][T16477] run_timer_softirq+0x1a/0x40 [ 944.550311][T16477] handle_softirqs+0x216/0x8e0 [ 944.555082][T16477] __irq_exit_rcu+0x109/0x170 [ 944.559764][T16477] irq_exit_rcu+0x9/0x30 [ 944.563942][T12769] Bluetooth: hci5: command tx timeout [ 944.563996][T16477] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 944.574971][T16477] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 944.580955][T16477] [ 944.583275][T16477] The buggy address belongs to the object at ffff8880320fd400 [ 944.583275][T16477] which belongs to the cache kmalloc-512 of size 512 [ 944.597326][T16477] The buggy address is located 8 bytes inside of [ 944.597326][T16477] freed 512-byte region [ffff8880320fd400, ffff8880320fd600) [ 944.610947][T16477] [ 944.613265][T16477] The buggy address belongs to the physical page: [ 944.619665][T16477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x320fc [ 944.628421][T16477] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 944.636909][T16477] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 944.644444][T16477] page_type: f5(slab) [ 944.648422][T16477] raw: 00fff00000000040 ffff88801b441c80 ffffea0000ab9400 dead000000000002 [ 944.657024][T16477] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 944.665609][T16477] head: 00fff00000000040 ffff88801b441c80 ffffea0000ab9400 dead000000000002 [ 944.674273][T16477] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 944.682945][T16477] head: 00fff00000000002 ffffea0000c83f01 00000000ffffffff 00000000ffffffff [ 944.691626][T16477] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 944.700288][T16477] page dumped because: kasan: bad access detected [ 944.706688][T16477] page_owner tracks the page as allocated [ 944.712395][T16477] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 59103392434, free_ts 59020651937 [ 944.733758][T16477] post_alloc_hook+0x181/0x1b0 [ 944.738529][T16477] get_page_from_freelist+0x135c/0x3920 [ 944.744075][T16477] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 944.749969][T16477] alloc_pages_mpol+0x1fb/0x550 [ 944.754817][T16477] new_slab+0x244/0x340 [ 944.758971][T16477] ___slab_alloc+0xd9c/0x1940 [ 944.763647][T16477] __slab_alloc.constprop.0+0x56/0xb0 [ 944.769019][T16477] __kmalloc_noprof+0x2f2/0x510 [ 944.773875][T16477] fib6_info_alloc+0x40/0x160 [ 944.778546][T16477] ip6_route_info_create+0x33f/0x18e0 [ 944.783918][T16477] ip6_route_add+0x26/0x1c0 [ 944.788420][T16477] addrconf_prefix_route+0x2fd/0x510 [ 944.793705][T16477] add_v4_addrs+0x6cc/0x9f0 [ 944.798200][T16477] addrconf_init_auto_addrs+0x18a/0x820 [ 944.803760][T16477] addrconf_notify+0xe93/0x19e0 [ 944.808627][T16477] notifier_call_chain+0xb9/0x410 [ 944.813652][T16477] page last free pid 5814 tgid 5814 stack trace: [ 944.819965][T16477] __free_frozen_pages+0x69d/0xff0 [ 944.825081][T16477] qlist_free_all+0x4e/0x120 [ 944.829673][T16477] kasan_quarantine_reduce+0x195/0x1e0 [ 944.835134][T16477] __kasan_slab_alloc+0x69/0x90 [ 944.839977][T16477] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 944.846383][T16477] kmemdup_noprof+0x29/0x60 [ 944.850881][T16477] neigh_sysctl_register+0xb2/0x670 [ 944.856076][T16477] addrconf_sysctl_register+0xb9/0x1f0 [ 944.861540][T16477] addrconf_notify+0x11e/0x19e0 [ 944.866385][T16477] notifier_call_chain+0xb9/0x410 [ 944.871411][T16477] call_netdevice_notifiers_info+0xbe/0x140 [ 944.877304][T16477] netif_change_name+0x554/0x920 [ 944.882245][T16477] do_setlink.constprop.0+0x33fe/0x44b0 [ 944.887787][T16477] rtnl_newlink+0x1446/0x2000 [ 944.892457][T16477] rtnetlink_rcv_msg+0x95b/0xe90 [ 944.897388][T16477] netlink_rcv_skb+0x16a/0x440 [ 944.902149][T16477] [ 944.904467][T16477] Memory state around the buggy address: [ 944.910088][T16477] ffff8880320fd300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 944.918144][T16477] ffff8880320fd380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 944.926197][T16477] >ffff8880320fd400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 944.934247][T16477] ^ [ 944.938562][T16477] ffff8880320fd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 944.946619][T16477] ffff8880320fd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 944.954671][T16477] ================================================================== [ 945.112069][T16477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 945.119295][T16477] CPU: 1 UID: 0 PID: 16477 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 945.131516][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 945.141554][T16477] Call Trace: [ 945.144815][T16477] [ 945.147734][T16477] dump_stack_lvl+0x3d/0x1f0 [ 945.152316][T16477] panic+0x71c/0x800 [ 945.156202][T16477] ? __pfx_panic+0x10/0x10 [ 945.160607][T16477] ? mark_held_locks+0x49/0x80 [ 945.165360][T16477] ? preempt_schedule_thunk+0x16/0x30 [ 945.170712][T16477] ? binder_add_device+0xa4/0xb0 [ 945.175640][T16477] ? preempt_schedule_common+0x44/0xc0 [ 945.181084][T16477] ? check_panic_on_warn+0x1f/0xb0 [ 945.186185][T16477] ? binder_add_device+0xa4/0xb0 [ 945.191106][T16477] check_panic_on_warn+0xab/0xb0 [ 945.196034][T16477] end_report+0x107/0x170 [ 945.200346][T16477] kasan_report+0xee/0x110 [ 945.204742][T16477] ? binder_add_device+0xa4/0xb0 [ 945.209668][T16477] binder_add_device+0xa4/0xb0 [ 945.214418][T16477] binderfs_binder_device_create.isra.0+0x95f/0xb70 [ 945.220998][T16477] binderfs_fill_super+0x8d4/0x1360 [ 945.226186][T16477] ? __pfx_binderfs_fill_super+0x10/0x10 [ 945.231829][T16477] ? shrinker_register+0x1a8/0x260 [ 945.236929][T16477] ? sget_fc+0x808/0xc20 [ 945.241170][T16477] ? __pfx_set_anon_super_fc+0x10/0x10 [ 945.246614][T16477] ? __pfx_binderfs_fill_super+0x10/0x10 [ 945.252236][T16477] get_tree_nodev+0xda/0x190 [ 945.256818][T16477] vfs_get_tree+0x8b/0x340 [ 945.261227][T16477] path_mount+0x14d4/0x1f20 [ 945.265713][T16477] ? kmem_cache_free+0x2d4/0x4d0 [ 945.270644][T16477] ? __pfx_path_mount+0x10/0x10 [ 945.275478][T16477] ? putname+0x154/0x1a0 [ 945.279704][T16477] __x64_sys_mount+0x28d/0x310 [ 945.284452][T16477] ? __pfx___x64_sys_mount+0x10/0x10 [ 945.289718][T16477] ? rcu_is_watching+0x12/0xc0 [ 945.294472][T16477] do_syscall_64+0xcd/0x260 [ 945.298964][T16477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.304844][T16477] RIP: 0033:0x7f2e6039010a [ 945.309244][T16477] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.328866][T16477] RSP: 002b:00007ffdf318cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 945.337262][T16477] RAX: ffffffffffffffda RBX: 00007f2e60410e74 RCX: 00007f2e6039010a [ 945.345218][T16477] RDX: 00007f2e604208cb RSI: 00007f2e60410e74 RDI: 00007f2e604208cb [ 945.353172][T16477] RBP: 00007f2e604110bd R08: 0000000000000000 R09: 00007f2e605b6738 [ 945.361125][T16477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e603ec1a8 [ 945.369081][T16477] R13: 00007f2e603ec180 R14: 0000000000000009 R15: 0000000000000000 [ 945.377053][T16477] [ 945.380244][T16477] Kernel Offset: disabled [ 945.384545][T16477] Rebooting in 86400 seconds..