last executing test programs: 4.839264809s ago: executing program 0 (id=75): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0400000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f00004dab14140000000000000000000084200400000000000000000000000041554449540000bcb92dfff07fca0000004600f58f5dc8438b000000000000000800"/376]}, 0x1f0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 3.975452941s ago: executing program 0 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="46cf"], 0x40}}, 0x0) 3.913562311s ago: executing program 0 (id=84): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) 3.891076495s ago: executing program 0 (id=86): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 3.363685665s ago: executing program 1 (id=92): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090244000101000000090400001902020000052406000005240000000d240f0100000000000000000009058103ff0300000309058202080000000009050302"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpgid(0x0, 0x0) 3.00318666s ago: executing program 0 (id=93): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x7}, @cond}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.884402378s ago: executing program 2 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="46cf"], 0x40}}, 0x0) 2.583481024s ago: executing program 2 (id=97): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)) 1.833510949s ago: executing program 4 (id=106): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 1.717629237s ago: executing program 1 (id=109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 1.674633614s ago: executing program 1 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1.641159109s ago: executing program 1 (id=113): syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2}) write$eventfd(r2, &(0x7f0000000140), 0x8) 1.526785996s ago: executing program 1 (id=116): unshare(0x20000400) r0 = io_uring_setup(0xaa1, &(0x7f0000000280)) syz_io_uring_setup(0xbec, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000100)) 1.506386229s ago: executing program 1 (id=117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="000049000000be483e8165c1ccad5e09b548c73e17dc3b9f7026c7392336e256e529220907323ac27b3ebde9801f548c8f3b4b0a69cdc0ae8bee5b9f2a96dc566c1948ad89b814eb8e3f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.30673269s ago: executing program 0 (id=118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 701.790402ms ago: executing program 3 (id=119): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2/file0\x00', r0, &(0x7f0000000100)='./file2\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 595.221529ms ago: executing program 3 (id=120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 539.687957ms ago: executing program 3 (id=121): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 498.003374ms ago: executing program 2 (id=122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 476.572137ms ago: executing program 3 (id=123): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r0, &(0x7f00000002c0)=""/203, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 458.20612ms ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 445.087322ms ago: executing program 2 (id=125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 434.785014ms ago: executing program 4 (id=126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 363.789435ms ago: executing program 4 (id=127): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) socket(0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000580)='./control\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x8774, &(0x7f0000000600)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xd5bc}}, {@noblock_validity}, {@quota}, {@noinit_itable}, {@i_version}, {@nobarrier}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@data_err_ignore}, {@abort}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0xfe, 0x46a, &(0x7f0000000d00)="$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") 323.91288ms ago: executing program 3 (id=128): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 254.740761ms ago: executing program 2 (id=129): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[], 0x0) 100.752214ms ago: executing program 2 (id=130): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 100.140465ms ago: executing program 4 (id=131): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 440.81µs ago: executing program 4 (id=132): read$FUSE(0xffffffffffffffff, &(0x7f0000006940)={0x2020}, 0x2020) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x3, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 0s ago: executing program 3 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 20.055818][ T23] audit: type=1400 audit(1719373074.779:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.057287][ T341] cgroup1: Unknown subsys name 'net' [ 20.078255][ T23] audit: type=1400 audit(1719373074.779:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.083517][ T341] cgroup1: Unknown subsys name 'net_prio' [ 20.111410][ T341] cgroup1: Unknown subsys name 'devices' [ 20.117697][ T23] audit: type=1400 audit(1719373074.849:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.289713][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 20.295310][ T341] cgroup1: Unknown subsys name 'rlimit' [ 20.301115][ T23] audit: type=1400 audit(1719373075.029:69): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 20.478033][ T23] audit: type=1400 audit(1719373075.209:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.501102][ T23] audit: type=1400 audit(1719373075.209:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.508779][ T342] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.525591][ T23] audit: type=1400 audit(1719373075.209:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.556850][ T23] audit: type=1400 audit(1719373075.259:73): avc: denied { relabelto } for pid=342 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.582037][ T23] audit: type=1400 audit(1719373075.259:74): avc: denied { write } for pid=342 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.607516][ T23] audit: type=1400 audit(1719373075.309:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.632924][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.932611][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.939485][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.946691][ T351] device bridge_slave_0 entered promiscuous mode [ 20.968719][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.975544][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.982873][ T351] device bridge_slave_1 entered promiscuous mode [ 21.017720][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.024545][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.031960][ T353] device bridge_slave_0 entered promiscuous mode [ 21.042080][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.048918][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.056276][ T353] device bridge_slave_1 entered promiscuous mode [ 21.100301][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.107124][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.114477][ T352] device bridge_slave_0 entered promiscuous mode [ 21.124559][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.131483][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.138691][ T352] device bridge_slave_1 entered promiscuous mode [ 21.145061][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.152023][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.159255][ T349] device bridge_slave_0 entered promiscuous mode [ 21.178813][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.185643][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.192983][ T349] device bridge_slave_1 entered promiscuous mode [ 21.222693][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.229565][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.236923][ T354] device bridge_slave_0 entered promiscuous mode [ 21.243837][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.250719][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.257961][ T354] device bridge_slave_1 entered promiscuous mode [ 21.420075][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.426905][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.434053][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.440808][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.450058][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.456890][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.464042][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.470786][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.495348][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.502201][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.509325][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.516167][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.546402][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.553254][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.560368][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.567117][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.598978][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.606056][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.613287][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.620712][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.628262][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.635273][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.642451][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.649551][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.657069][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.664385][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.678114][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.686074][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.692921][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.700093][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.708414][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.715224][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.752918][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.761571][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.769595][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.776406][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.784181][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.792286][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.799117][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.806250][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.813976][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.827618][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.852559][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.860870][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.867705][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.875121][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.883159][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.890968][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.898907][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.905707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.935892][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.948089][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.955397][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.964082][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.970926][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.978234][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.986166][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.992995][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.000240][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.008183][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.015855][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.023739][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.037605][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.045357][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.061526][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.070119][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.078297][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.086063][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.098624][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.105956][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.130902][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.138928][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.146621][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.154982][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.162879][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.171054][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.179106][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.185915][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.193213][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.201307][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.209430][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216236][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.223475][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.231351][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.239300][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.269231][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.277687][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.285596][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.294192][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.302190][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.310184][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.318448][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.326402][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.334681][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.342836][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.351082][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.359057][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.366732][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.374913][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.383254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.391568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.411193][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.419701][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.438991][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.446797][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.454633][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.462504][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.487350][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.495518][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.516808][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.525008][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.533799][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.541837][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.589856][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.599367][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.607671][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.615782][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.624191][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.632339][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.640581][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.648651][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.656712][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.664922][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.693800][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.704563][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.713043][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.721757][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.730108][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.738287][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.357052][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 23.477361][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.737359][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 23.857357][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.873901][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 23.898702][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 23.927578][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 23.945431][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 24.047475][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.066459][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 24.076545][ T13] usb 4-1: SerialNumber: syz [ 24.107720][ T402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 24.128019][ T13] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 24.140216][ T13] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 24.241717][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 24.353556][ T13] usb 4-1: USB disconnect, device number 2 [ 24.934839][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 25.097661][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 25.428213][ T23] kauditd_printk_skb: 36 callbacks suppressed [ 25.428221][ T23] audit: type=1400 audit(1719373080.159:112): avc: denied { create } for pid=452 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.497296][ T23] audit: type=1400 audit(1719373080.219:113): avc: denied { ioctl } for pid=452 comm="syz.3.32" path="socket:[11776]" dev="sockfs" ino=11776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.794669][ T23] audit: type=1400 audit(1719373080.519:114): avc: denied { ioctl } for pid=471 comm="syz.4.38" path="socket:[11792]" dev="sockfs" ino=11792 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.971833][ T474] syz.1.39 (474) used greatest stack depth: 21848 bytes left [ 26.045939][ T23] audit: type=1400 audit(1719373080.769:115): avc: denied { read } for pid=486 comm="syz.1.44" path="socket:[11825]" dev="sockfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.103130][ T23] audit: type=1400 audit(1719373080.819:116): avc: denied { block_suspend } for pid=492 comm="syz.1.48" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.239655][ T23] audit: type=1400 audit(1719373080.969:117): avc: denied { bind } for pid=502 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.277250][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.287063][ T23] audit: type=1400 audit(1719373080.969:118): avc: denied { write } for pid=502 comm="syz.3.53" path="socket:[11868]" dev="sockfs" ino=11868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.298706][ T513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 26.394480][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 26.537276][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 26.645584][ T531] [ 26.651435][ T531] ********************************************************** [ 26.667396][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.682017][ T531] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 26.683485][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 26.698977][ T23] audit: type=1400 audit(1719373081.419:119): avc: denied { create } for pid=532 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.717849][ T531] ** ** [ 26.724993][ T531] ** trace_printk() being used. Allocating extra memory. ** [ 26.729617][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 26.742591][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 26.742738][ T531] ** ** [ 26.766279][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 26.793012][ T531] ** This means that this is a DEBUG kernel and it is ** [ 26.806940][ T531] ** unsafe for production use. ** [ 26.829919][ T531] ** ** [ 26.846768][ T531] ** If you see this message and you are not debugging ** [ 26.864771][ T531] ** the kernel, report this immediately to your vendor! ** [ 26.872095][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.881505][ T23] audit: type=1400 audit(1719373081.609:120): avc: denied { name_bind } for pid=538 comm="syz.2.68" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.917254][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.935170][ T13] usb 5-1: SerialNumber: syz [ 26.943773][ T531] ** ** [ 26.943982][ T23] audit: type=1400 audit(1719373081.659:121): avc: denied { create } for pid=530 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.958315][ T531] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 27.000469][ T483] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 27.017335][ T531] ********************************************************** [ 27.017705][ T13] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 27.035294][ T13] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 27.063973][ T549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.71'. [ 27.283957][ T13] usb 5-1: USB disconnect, device number 2 [ 27.997269][ T577] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue [ 28.014098][ T582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'. [ 28.033276][ T577] ext4 filesystem being mounted at /root/syzkaller.I0nvxk/9/bus supports timestamps until 2038 (0x7fffffff) [ 28.778042][ T597] ====================================================== [ 28.778042][ T597] WARNING: the mand mount option is being deprecated and [ 28.778042][ T597] will be removed in v5.15! [ 28.778042][ T597] ====================================================== [ 28.854148][ T597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.877252][ T18] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.962702][ T597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.994343][ T597] attempt to access beyond end of device [ 28.994343][ T597] loop4: rw=2049, want=45224, limit=40427 [ 29.008045][ T602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.055448][ T602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.078241][ T353] attempt to access beyond end of device [ 29.078241][ T353] loop2: rw=2049, want=45104, limit=40427 [ 29.127318][ T18] usb 2-1: Using ep0 maxpacket: 32 [ 29.247406][ T18] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.258119][ T372] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.266892][ T18] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 29.276828][ T18] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 29.287073][ T18] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 29.296722][ T18] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 29.365681][ T624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 29.387336][ T18] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.401862][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.417248][ T18] usb 2-1: SerialNumber: syz [ 29.447326][ T604] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.467784][ T18] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 29.479864][ T18] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 29.509730][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 29.515049][ T354] attempt to access beyond end of device [ 29.515049][ T354] loop4: rw=2049, want=45232, limit=40427 [ 29.627380][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 29.643420][ T372] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 29.691849][ T18] usb 2-1: USB disconnect, device number 2 [ 29.817402][ T372] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 29.837613][ T372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.845433][ T372] usb 1-1: Product: syz [ 29.865769][ T372] usb 1-1: Manufacturer: syz [ 29.874379][ T372] usb 1-1: SerialNumber: syz [ 29.888290][ T372] usb 1-1: config 0 descriptor?? [ 29.937754][ T372] hub 1-1:0.0: bad descriptor, ignoring hub [ 29.943510][ T372] hub: probe of 1-1:0.0 failed with error -5 [ 29.987490][ T635] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.082525][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.103'. [ 30.178797][ T649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 30.199228][ T649] device team_slave_0 entered promiscuous mode [ 30.257356][ T13] usb 1-1: USB disconnect, device number 2 [ 30.296531][ T658] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 30.344839][ T660] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.466287][ T23] kauditd_printk_skb: 23 callbacks suppressed [ 30.466296][ T23] audit: type=1400 audit(1719373085.189:145): avc: denied { sys_admin } for pid=666 comm="syz.3.115" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 30.727263][ T355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.927281][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.097314][ T355] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 31.116336][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.137887][ T355] usb 2-1: config 0 descriptor?? [ 31.177250][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 31.290401][ T682] process 'syz.3.119' launched './file2' with NULL argv: empty string added [ 31.306277][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.336409][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.356225][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.372726][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.394029][ T13] usb 1-1: config 0 descriptor?? [ 31.447949][ T13] hub 1-1:0.0: USB hub found [ 31.539698][ T23] audit: type=1400 audit(1719373086.269:146): avc: denied { connect } for pid=693 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.570329][ T23] audit: type=1400 audit(1719373086.299:147): avc: denied { read } for pid=693 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.609447][ T23] audit: type=1400 audit(1719373086.339:148): avc: denied { remount } for pid=699 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.627142][ T700] EXT4-fs error (device sda1): ext4_remount:5517: Abort forced by user [ 31.643532][ T700] EXT4-fs (sda1): Remounting filesystem read-only [ 31.648900][ T23] audit: type=1400 audit(1719373086.359:149): avc: denied { write } for pid=693 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.657225][ T700] Aborting journal on device sda1-8. [ 31.668969][ T13] hub 1-1:0.0: 1 port detected [ 31.679563][ T23] audit: type=1400 audit(1719373086.379:150): avc: denied { read write } for pid=703 comm="syz.3.128" name="uhid" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.711166][ T23] audit: type=1400 audit(1719373086.379:151): avc: denied { open } for pid=703 comm="syz.3.128" path="/dev/uhid" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.769438][ T703] EXT4-fs error (device sda1): ext4_journal_check_start:61: Detected aborted journal [ 31.777459][ T353] syz-executor (353) used greatest stack depth: 20760 bytes left [ 31.799292][ T703] EXT4-fs (sda1): Remounting filesystem read-only [ 31.805673][ T699] EXT4-fs error (device sda1): ext4_journal_check_start:61: Detected aborted journal [ 31.814964][ T341] EXT4-fs error (device sda1): ext4_journal_check_start:61: Detected aborted journal [ 31.828532][ T341] EXT4-fs (sda1): Remounting filesystem read-only [ 31.927963][ T13] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 31.938251][ T13] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 31.951997][ T351] syz-executor (351) used greatest stack depth: 20632 bytes left [ 32.047891][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 32.059875][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 32.097981][ T13] usb 1-1: USB disconnect, device number 3 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=2 req=130 state=1 status=67 (errno 9: Bad file descriptor)