last executing test programs: 2m4.053161127s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 1m41.524410404s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 1m14.330726861s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 58.643715086s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 34.09530844s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 13.156931127s ago: executing program 1 (id=1610): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1260, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000300)="acdce6ce0f7e737abc7c3092262edcc49594f6e7cf3fa7661ec502fc9349b9d157adbd34288317057bf63223be332e6bbe4412495d56f98599dabeb3eab07183e75096041eedd49419b683ef6c8638569e3035ba3fc55760e1a10fe13bf14830e491c7000a4b100db9f56b05ab6253978dfb2e3cf08463b54f6a14b89a8eeacb044317074172276b3dfa26654a672d40a292cdaad052e989dc1c1db00dfd705c938b3aad7b", 0xa5, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f00000001c0)={r2}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a31000000000500010007000087050005000a0000000c00078008001240fffffffc11000300686173683a6e65742c6e657400000000050004"], 0x58}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) 12.21096865s ago: executing program 1 (id=1615): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) bind$bt_sco(r1, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x2) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 11.554438282s ago: executing program 2 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) 10.504221882s ago: executing program 1 (id=1618): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f00005c4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5319) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x68034) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000011) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001680)={{r0}, "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"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="b98804005b00060065004000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 8.409485438s ago: executing program 0 (id=1624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setsig(r0, 0xa, 0x41f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], &(0x7f0000000380)=""/102, 0x1d, 0x66, 0x1, 0x7ff, 0x0, @void, @value}, 0x28) madvise(&(0x7f00000b0000/0x4000)=nil, 0x4000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) close(0x3) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) 7.1043436s ago: executing program 1 (id=1625): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000080)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="32c9bd3b4af9f3bc3f21b20f04e548a73ab8f7eabbc89fc23d0fea5c8dc78f0c0987bdd481a0ed25f1f1f448cd793c09ee6169c931a8c9e759b98c71cccea81782", 0x41, r3) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card3/oss_mixer\x00', 0x4000, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='..:}!:\\%}\'?@*:\x00', r4) r5 = syz_open_dev$I2C(&(0x7f0000000440), 0x3, 0x400000) ioctl$I2C_SLAVE(r5, 0x703, 0x1d7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000004c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x10001, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card2/oss_mixer\x00', 0x206001, 0x0) ioctl$KDDELIO(r7, 0x4b35, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000580)={0x2, 0x4e21, @loopback}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r7) r11 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x9, 0x101000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r11, 0xc0045516, &(0x7f0000000640)=0x2) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x1000080, &(0x7f0000000700)={[{@inode64}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x25, 0x25, 0x33, 0x39, 0x78]}}, {@grpquota}, {@inode64}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37, 0x0]}}, {@grpquota}], [{@euid_gt={'euid>', r1}}, {@hash}, {@subj_user={'subj_user', 0x3d, 'big_key\x00'}}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x1a, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0x413}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x54, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x5, 0xff, 0x80, 0x0, 0x7d}, 0xa2, &(0x7f0000000840)={0x5, 0xf, 0xa2, 0x5, [@generic={0x75, 0x10, 0x2, "e6e3730c843cbacd6b861e1546da58e0a2d133040332f0b02a3b68120baeb2a4249fabcf0ff62bf39e6e0d4f75ed29ea110ba58519be8d1d3c6498b981bf7df40dc446a4f503fdba41f2863e077f4bd49ea76e25ad89dfbb23a932b1ef1fdb879ab95820068285d5850fe19c2c98f200597c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x81}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0e1c6f6ecd30dda614bfc71bb28dd24d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3}]}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x280a}}]}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) symlinkat(&(0x7f0000000980)='./file0\x00', r7, &(0x7f00000009c0)='./file0\x00') getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000a00)={@remote, @multicast2, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb0, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x504e}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0xb0}}, 0x0) chdir(&(0x7f0000000c00)='./file0\x00') 7.048849577s ago: executing program 4 (id=1626): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x38) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 6.946578094s ago: executing program 0 (id=1627): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="eeffffe400040000000000"]) bind$packet(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r3, &(0x7f0000000280)="d788fa1511a968116e1fbb1387a116", 0xf, 0x40000, &(0x7f0000000380)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r4, {0x1f, 0x3}, {}, {0x0, 0xffff}}}, 0x24}}, 0x4000000) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) 5.543239088s ago: executing program 4 (id=1629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000100"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) bind$bt_sco(r1, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x2) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 4.574147266s ago: executing program 4 (id=1631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x6, 0x4}) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="dcd0fe682734258438f69b8f364093d846ec6107b2df8f836b81003b007bf592321b8c70aef4ec75f62ab40a0e5c641d181591446766655bcd21a14e1861607813203024c5652f9a", 0x0, 0x48) accept(r0, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) 3.920124605s ago: executing program 1 (id=1632): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000001d80)={'sit0\x00', 0x0, 0x1, 0x700, 0x9, 0xc, {{0x2a, 0x4, 0x0, 0x1b, 0xa8, 0x64, 0x0, 0xb5, 0x29, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x27, 0xbd, [@empty, @multicast1, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xb1, 0x0, 0xe, [0x8, 0xb, 0x8, 0xff]}, @timestamp_addr={0x44, 0x2c, 0x82, 0x1, 0x5, [{@loopback, 0xd65}, {@empty, 0xfe8}, {@multicast1, 0x80000001}, {@loopback, 0x101}, {@empty, 0x40}]}, @timestamp_addr={0x44, 0x24, 0xfe, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@rand_addr=0x64010102, 0x58}, {@local, 0x9}, {@empty, 0x3}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0x6c}]}}}}}) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000340)="af2aa725f92fe5834092dfce5bee", 0xe}, {&(0x7f0000000c40)="cb6bc972186d0725b89f0f53233c21a49c7ecce663fa351e0525216dcea0d84e56acdfb12ea679ab3978b5477cddb3d756bb447718bee21510d3b617083d0d7993704f463a4db49cd1f283b8c624eabc6680823aae5b798c6a191e2557f6d92f9a26eeda8df28eda37b5337d59cd1cd959cc46783e46dea0164d53087093bd54217e57cbf224b446479e93c8f00f0de25d3508a7ff1d3482d85b57c5f0926f927b3a740fbff189c7ee9bc5179f9296167c8de7a53081009771460591969e7f204c00f1", 0xc3}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0x80}, 0x8000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000840)) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) sendto$inet(r1, &(0x7f0000000100)="e0", 0x1, 0x0, 0x0, 0xf) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="dd404d01bc092ffb9a18d0c122a2619ba0a66ab2260935d8dd7807a6a101394daab2a19359375e32480f761825fd6a43a02d6821ef28f993c9e244c91a80e9bad2c7c7852791c4decccb58ff8274b13d4cfbbcd49677d96b3ca08ee73441147b1fdd32ca765042a91daeeca367cb69245905899ce6f423f4fbd5f62819200b7af0acf31ee965fef962d73f19ae12f52434536f52709f0c45e6f67f54caacd1b51246e4d525d18173cd5d544f28b04f24736ab3a35242e1811f5da6e10f5b4d8a26f7ff0c2ee57d05ac216415a7f11a8116995c20d0a03d98b5a270d5", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYBLOB="e8162e08ced127a9e13559193c8aa500000000000060b0dafb86054cc65fceae041a1d7fdd62c7870633", @ANYBLOB="e9a46604cc43a54dd9fa5705d3dad37b86e526c43c304fde943f216c1f300dc92fe74c6cad9de5eb1c108aa2f044d25b558943fa81030438d36caebe02b8643ab553eeb85fe1fe3bd202de848eb28772f833fe9fc736674c27299478b87697651c50298434c014f9666ad8c593a1fa2c48d8ae8752c645", @ANYRESHEX=r0], 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000280)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x20a803, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.713050654s ago: executing program 3 (id=1634): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f00000001c0)={r1}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 2.91169019s ago: executing program 0 (id=1635): mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000004180), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.833064552s ago: executing program 4 (id=1636): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x8, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.778769584s ago: executing program 3 (id=1637): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="30000000969551d5a0f6bd2fa9db11703bad12f35a093a82cbd34d439514e527994f11560e158aef243497331b2977e5e133ac731b951f7e56fb6cfdb02c33ea66757b773ef0836ac9389bc88bc2cb1b6fa3eb08072d1ebaee17adf5dea4d858567eb5951d037555a2dcbdad33cf8ae689560aee0b66fcb9fee23043d9da56a42c9e39faa380b8ae87c9e28faf58d1f0f51838616c1e4ee85430b879019e629852753d52f761b971f3c1dc97b2385bc139b3a44b0a9d7ede39026b0b93675dca5a4027173853eac4c21a", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000001c00028008000100fdffffff080002007c0e00000800020008000000"], 0x30}, 0x1, 0x0, 0x0, 0x48005}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000e356a2000000068004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x8080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r6, &(0x7f0000000300)=""/150, 0x96, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @dev, @void, {@arp={0x806, @generic={0x335, 0xf8, 0x6, 0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, "", @random="0cfd8f01121a", "b990b1723735eb02"}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.640823927s ago: executing program 0 (id=1638): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ef830000ffffff7f0300000088000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000002000000010000000e00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, 0xffffffffffffffff, 0x0, 0x5c0900a0}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 2.38067072s ago: executing program 3 (id=1639): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="14000100fe8000000000000000000000000000aa"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.632420336s ago: executing program 0 (id=1640): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001840)=[{&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f00000014c0)=""/156, 0x9c}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/250, 0xfa}, {&(0x7f0000001380)=""/12, 0xc}, {&(0x7f0000001700)=""/76, 0x4c}, {&(0x7f0000001780)=""/173, 0xad}], 0xa, &(0x7f00000013c0)=""/140, 0x8c}, 0x12100) clock_gettime(0x0, &(0x7f0000006bc0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000006a40)=[{{&(0x7f0000001900), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001580)=""/2, 0x2}, {&(0x7f0000001980)=""/197, 0xc5}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/120, 0x78}, {&(0x7f0000002b00)=""/243, 0xf3}, {&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000002d00)=""/234, 0xea}], 0x8, &(0x7f0000002e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000002f80), 0x6e, &(0x7f0000003100)=[{&(0x7f0000003000)=""/120, 0x78}, {&(0x7f0000003080)=""/122, 0x7a}], 0x2, &(0x7f0000003140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000004240)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000004280), 0x6e, &(0x7f0000006400)=[{&(0x7f0000004300)=""/241, 0xf1}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x3, &(0x7f0000006440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000006500), 0x6e, &(0x7f0000006680)=[{&(0x7f0000006580)=""/49, 0x31}, {&(0x7f00000065c0)=""/138, 0x8a}], 0x2, &(0x7f00000066c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000006740), 0x6e, &(0x7f0000006980)=[{&(0x7f00000067c0)=""/79, 0x4f}, {&(0x7f0000006840)=""/148, 0x94}, {&(0x7f0000006900)=""/80, 0x50}], 0x3, &(0x7f00000069c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x6, 0x0, &(0x7f0000006c00)={r1, r2+60000000}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x6e8b80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000001c0)=""/232) 1.557951558s ago: executing program 3 (id=1641): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000100"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) bind$bt_sco(r1, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x2) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.340324902s ago: executing program 0 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x88000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="ba2100edea91588d00bad104b80e00eff30f0fa03700a6660f38f61366b9800000c00f326635010000000f300f23ccf081b68b8100000f20e06635000200000f22e0da7300", 0x45}], 0x1, 0x10, &(0x7f0000000340), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x5d925000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000040c0)=[{{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1, &(0x7f0000000540)=""/5, 0x5}, 0x6}, {{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000007c0)=""/254, 0xfe}, {&(0x7f00000008c0)=""/50, 0x32}, {&(0x7f0000000900)=""/88, 0x58}, {&(0x7f0000000980)=""/6, 0x6}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/46, 0x2e}], 0xa, &(0x7f0000000c80)=""/183, 0xb7}, 0x3}, {{&(0x7f0000000d40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/208, 0xd0}], 0x1, &(0x7f0000000f00)=""/116, 0x74}, 0x7}, {{&(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001000)=""/66, 0x42}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/163, 0xa3}, {&(0x7f0000002140)=""/139, 0x8b}, {&(0x7f0000002200)=""/136, 0x88}, {&(0x7f00000022c0)=""/157, 0x9d}, {&(0x7f0000002380)=""/44, 0x2c}, {&(0x7f00000023c0)=""/118, 0x76}], 0x8, &(0x7f00000024c0)=""/124, 0x7c}, 0x3}, {{&(0x7f0000002540)=@qipcrtr, 0x80, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/49, 0x31}, {&(0x7f0000002600)=""/110, 0x6e}, {&(0x7f0000002680)=""/11, 0xb}, {&(0x7f00000026c0)=""/193, 0xc1}], 0x4, &(0x7f0000002800)=""/7, 0x7}, 0xa}, {{&(0x7f0000002840)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000028c0)=""/175, 0xaf}, {&(0x7f0000002980)=""/61, 0x3d}, {&(0x7f00000029c0)=""/109, 0x6d}, {&(0x7f0000002a40)=""/73, 0x49}, {&(0x7f0000002ac0)=""/54, 0x36}, {&(0x7f0000002b00)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/63, 0x3f}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/139, 0x8b}], 0x9}, 0xfffffff5}, {{&(0x7f0000003d80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/231, 0xe7}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)=""/2, 0x2}], 0x3, &(0x7f0000003fc0)=""/254, 0xfe}, 0xab}], 0x7, 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$kcm(0x23, 0x5, 0x0) 664.214057ms ago: executing program 1 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000440), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e1c, 0x0, @empty}, 0x1c) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x120, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001c80), 0x14d080, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000001fc0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 655.220509ms ago: executing program 4 (id=1644): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_setup(0x7bec, &(0x7f0000000000)={0x0, 0xb187, 0x8, 0x3, 0x13, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) times(0x0) 567.613377ms ago: executing program 3 (id=1645): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="eeffffe400040000000000"]) bind$packet(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r3, &(0x7f0000000280)="d788fa1511a968116e1fbb1387a116", 0xf, 0x40000, &(0x7f0000000380)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r4, {0x1f, 0x3}, {}, {0x0, 0xffff}}}, 0x24}}, 0x4000000) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) 48.527341ms ago: executing program 4 (id=1646): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ef830000ffffff7f0300000088000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000002000000010000000e00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, 0xffffffffffffffff, 0x0, 0x5c0900a0}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) 0s ago: executing program 3 (id=1647): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ef830000ffffff7f0300000088000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000002000000010000000e00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, 0xffffffffffffffff, 0x0, 0x5c0900a0}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) kernel console output (not intermixed with test programs): { read } for pid=11439 comm="syz.4.1373" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 447.118596][T10318] Bluetooth: hci1: command 0x040f tx timeout [ 447.124882][ T5843] usb 4-1: SerialNumber: syz [ 447.172678][ T5843] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 447.181243][ T29] audit: type=1400 audit(1732709134.194:15224): avc: denied { open } for pid=11439 comm="syz.4.1373" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 447.207816][ T29] audit: type=1400 audit(1732709134.204:15225): avc: denied { ioctl } for pid=11439 comm="syz.4.1373" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 447.286370][ T29] audit: type=1400 audit(1732709134.224:15226): avc: denied { create } for pid=11439 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.306111][ T29] audit: type=1400 audit(1732709134.224:15227): avc: denied { create } for pid=11439 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.327856][ T29] audit: type=1400 audit(1732709134.224:15228): avc: denied { write } for pid=11439 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.348624][ T29] audit: type=1400 audit(1732709134.224:15229): avc: denied { setopt } for pid=11439 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.369380][ T29] audit: type=1400 audit(1732709134.734:15230): avc: denied { ioctl } for pid=11431 comm="syz.3.1371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.395332][ T29] audit: type=1400 audit(1732709134.734:15231): avc: denied { ioctl } for pid=11431 comm="syz.3.1371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.420458][ T29] audit: type=1400 audit(1732709134.734:15232): avc: denied { read write } for pid=5834 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.924335][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.135809][T11453] binder: 11448:11453 ioctl c00c620f 200001c0 returned -22 [ 448.566307][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1371'. [ 448.833428][ T12] team0 (unregistering): Port device team_slave_1 removed [ 448.925478][ T12] team0 (unregistering): Port device team_slave_0 removed [ 448.960386][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.636736][T10318] Bluetooth: hci1: command 0x040f tx timeout [ 450.004549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.235463][ T5843] vp7045: USB control message 'in' went wrong. [ 450.258034][ T5843] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 450.279797][ T5843] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 450.586194][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.654100][ T46] usb 4-1: USB disconnect, device number 22 [ 450.706904][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.034707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.675212][T10318] Bluetooth: hci1: command 0x040f tx timeout [ 452.008295][ T5175] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 452.078956][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.095169][ T29] kauditd_printk_skb: 2250 callbacks suppressed [ 452.095184][ T29] audit: type=1400 audit(1732709139.663:17468): avc: denied { ioctl } for pid=11478 comm="syz.1.1382" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.128392][ T29] audit: type=1400 audit(1732709139.663:17469): avc: denied { map_create } for pid=11487 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.154890][ T5175] usb 2-1: device descriptor read/64, error -71 [ 452.163496][ T29] audit: type=1400 audit(1732709139.663:17470): avc: denied { bpf } for pid=11487 comm="syz.3.1384" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 452.184379][ T29] audit: type=1400 audit(1732709139.663:17471): avc: denied { map_read map_write } for pid=11487 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.204658][ T29] audit: type=1400 audit(1732709139.663:17472): avc: denied { prog_load } for pid=11487 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.290123][ T29] audit: type=1400 audit(1732709139.663:17473): avc: denied { perfmon } for pid=11487 comm="syz.3.1384" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 452.326036][ T29] audit: type=1400 audit(1732709139.663:17474): avc: denied { prog_run } for pid=11487 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.369786][ T29] audit: type=1400 audit(1732709139.723:17475): avc: denied { read write } for pid=5834 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.478262][T11494] binder: 11491:11494 ioctl c00c620f 200001c0 returned -22 [ 452.503773][ T5175] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 452.645182][ T5175] usb 2-1: device descriptor read/64, error -71 [ 452.758538][ T5175] usb usb2-port1: attempt power cycle [ 452.891837][ T29] audit: type=1400 audit(1732709139.723:17476): avc: denied { open } for pid=5834 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.923107][ T29] audit: type=1400 audit(1732709139.723:17477): avc: denied { ioctl } for pid=5834 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.117715][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.155016][ T5175] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 453.182927][ T5175] usb 2-1: device descriptor read/8, error -71 [ 453.425043][ T5175] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 453.446621][ T5175] usb 2-1: device descriptor read/8, error -71 [ 453.559391][ T5175] usb usb2-port1: unable to enumerate USB device [ 453.759904][T10318] Bluetooth: hci1: command 0x040f tx timeout [ 454.158762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.244626][T11334] team0: Port device team_slave_0 added [ 454.295990][T11334] team0: Port device team_slave_1 added [ 454.579171][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.595071][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.825526][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.982981][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.991652][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.017643][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.068553][T11502] ipvlan2: entered promiscuous mode [ 455.150324][T11334] hsr_slave_0: entered promiscuous mode [ 455.168333][T11334] hsr_slave_1: entered promiscuous mode [ 455.185020][T11334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.195166][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.201014][T11334] Cannot create hsr debugfs directory [ 455.599574][T11533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 455.925403][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 456.085757][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 456.128486][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.178482][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.234567][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 456.243939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.279685][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.306623][ T5890] usb 1-1: config 0 descriptor?? [ 456.508229][T11334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.559804][T11334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.581245][T11334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.602964][T11334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.744095][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.775494][ T8] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 456.784743][ T5890] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000C/input/input28 [ 456.821192][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.850071][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.857214][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.893247][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.900421][ T7382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.920485][ T5890] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 456.965509][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 456.989730][T11334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.031666][T11334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.045630][ T8] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 457.059846][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.081531][ T5958] usb 1-1: USB disconnect, device number 29 [ 457.095402][ T8] usb 5-1: Product: syz [ 457.099599][ T8] usb 5-1: Manufacturer: syz [ 457.132034][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 457.132051][ T29] audit: type=1400 audit(1732709144.703:17812): avc: denied { search } for pid=11567 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.145479][ T8] usb 5-1: SerialNumber: syz [ 457.223415][ T8] usb 5-1: config 0 descriptor?? [ 457.238682][ T29] audit: type=1400 audit(1732709144.733:17813): avc: denied { search } for pid=11567 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.285360][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.319454][ T29] audit: type=1400 audit(1732709144.743:17814): avc: denied { module_request } for pid=11334 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 457.383078][ T29] audit: type=1400 audit(1732709144.813:17815): avc: denied { ioctl } for pid=11555 comm="syz.4.1393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.482768][ T29] audit: type=1400 audit(1732709144.813:17816): avc: denied { sys_module } for pid=11334 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 457.570587][ T29] audit: type=1400 audit(1732709144.813:17817): avc: denied { module_request } for pid=11334 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 457.577347][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.661123][ T29] audit: type=1400 audit(1732709144.843:17818): avc: denied { search } for pid=11568 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.749058][ T29] audit: type=1400 audit(1732709144.843:17819): avc: denied { read } for pid=11568 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.774033][T11334] veth0_vlan: entered promiscuous mode [ 457.789236][T11334] veth1_vlan: entered promiscuous mode [ 457.804338][ T29] audit: type=1400 audit(1732709144.843:17820): avc: denied { read open } for pid=11568 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.844281][T11334] veth0_macvtap: entered promiscuous mode [ 457.871850][T11334] veth1_macvtap: entered promiscuous mode [ 457.896324][ T8] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 457.897236][ T29] audit: type=1400 audit(1732709144.843:17821): avc: denied { getattr } for pid=11568 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.926997][ T8] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 457.940474][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.962729][ T8] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 457.973870][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.060576][T11334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.072927][T11334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.087458][T11334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.154265][T11334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.315474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.458627][ T8] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 458.734387][ T8] usb 5-1: USB disconnect, device number 45 [ 458.965586][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.000813][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.045867][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.055712][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.355747][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.432134][T11615] Illegal XDP return value 4294967294 on prog (id 374) dev N/A, expect packet loss! [ 459.645828][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 460.395812][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.578312][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 460.965961][ T5843] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 461.116266][ T5843] usb 5-1: device descriptor read/64, error -71 [ 461.365970][ T5843] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 461.405831][ T5958] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 461.435894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.495960][ T5843] usb 5-1: device descriptor read/64, error -71 [ 461.618097][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 461.638480][ T5958] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 461.647930][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.663968][ T5843] usb usb5-port1: attempt power cycle [ 461.669514][ T5958] usb 1-1: Product: syz [ 461.688717][ T5958] usb 1-1: Manufacturer: syz [ 461.704081][ T5958] usb 1-1: SerialNumber: syz [ 461.711794][ T5958] usb 1-1: config 0 descriptor?? [ 461.800424][T11665] binder: 11660:11665 ioctl c00c620f 200001c0 returned -22 [ 461.956107][ T5175] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 462.006127][ T5843] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 462.043632][ T5843] usb 5-1: device descriptor read/8, error -71 [ 462.127276][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 462.141641][ T5175] usb 2-1: no configurations [ 462.149781][ T5175] usb 2-1: can't read configurations, error -22 [ 462.285973][ T5843] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 462.296198][ T5175] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 462.307852][ T5843] usb 5-1: device descriptor read/8, error -71 [ 462.393678][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 462.393694][ T29] audit: type=1400 audit(1732709149.962:18255): avc: denied { ioctl } for pid=11652 comm="syz.0.1408" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.425840][ T5958] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 462.435990][ T5843] usb usb5-port1: unable to enumerate USB device [ 462.436781][ T5958] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 462.455977][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 462.456782][ T5958] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 462.475761][ T5175] usb 2-1: no configurations [ 462.476589][ T29] audit: type=1400 audit(1732709150.002:18256): avc: denied { read write } for pid=5837 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.482724][ T5175] usb 2-1: can't read configurations, error -22 [ 462.504783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.505533][ T29] audit: type=1400 audit(1732709150.002:18257): avc: denied { open } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.543181][ T29] audit: type=1400 audit(1732709150.002:18258): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.547118][ T5175] usb usb2-port1: attempt power cycle [ 462.568922][ T29] audit: type=1400 audit(1732709150.012:18259): avc: denied { read } for pid=5194 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 462.568954][ T29] audit: type=1400 audit(1732709150.012:18260): avc: denied { search } for pid=5194 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.568982][ T29] audit: type=1400 audit(1732709150.012:18261): avc: denied { append } for pid=5194 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 462.569008][ T29] audit: type=1400 audit(1732709150.012:18262): avc: denied { open } for pid=5194 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 462.672991][ T5958] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 462.694732][ T5843] usb 1-1: USB disconnect, device number 30 [ 462.712579][ T29] audit: type=1400 audit(1732709150.012:18263): avc: denied { getattr } for pid=5194 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 462.740744][ T29] audit: type=1400 audit(1732709150.032:18264): avc: denied { ioctl } for pid=11633 comm="syz.4.1405" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.966075][ T5175] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 462.987697][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 462.997806][ T5175] usb 2-1: no configurations [ 463.002424][ T5175] usb 2-1: can't read configurations, error -22 [ 463.136071][ T5175] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 463.167538][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 463.173335][ T5175] usb 2-1: no configurations [ 463.178463][ T5175] usb 2-1: can't read configurations, error -22 [ 463.185031][ T5175] usb usb2-port1: unable to enumerate USB device [ 463.250432][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 463.286517][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 463.311970][T11678] No control pipe specified [ 463.448091][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.465207][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.479536][ T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.489842][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.500826][ T46] usb 4-1: SerialNumber: syz [ 463.526078][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.138992][ T2921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.239463][ T2921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.315031][ T2921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.390709][ T2921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.507485][ T2921] bridge_slave_1: left allmulticast mode [ 464.515694][ T2921] bridge_slave_1: left promiscuous mode [ 464.524832][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.533581][ T2921] bridge_slave_0: left allmulticast mode [ 464.539980][ T2921] bridge_slave_0: left promiscuous mode [ 464.545615][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.556260][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.825935][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.837906][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.847876][ T2921] bond0 (unregistering): Released all slaves [ 465.596369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.929497][ T2921] hsr_slave_0: left promiscuous mode [ 465.963018][ T2921] hsr_slave_1: left promiscuous mode [ 465.981071][ T46] usb 4-1: 0:2 : does not exist [ 465.985987][ T46] usb 4-1: unit 5 not found! [ 466.000659][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.046444][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.131119][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.131764][ T46] usb 4-1: USB disconnect, device number 23 [ 466.143903][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.300381][ T2921] veth1_macvtap: left promiscuous mode [ 466.319020][ T2921] veth0_macvtap: left promiscuous mode [ 466.344388][ T2921] veth1_vlan: left promiscuous mode [ 466.353541][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.381304][ T2921] veth0_vlan: left promiscuous mode [ 466.399907][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.416606][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.526882][T11732] binder: 11721:11732 ioctl c00c620f 200001c0 returned -22 [ 466.582684][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.595113][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 466.609698][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.636401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.781030][T11537] udevd[11537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.982572][T11733] openvswitch: netlink: Key type 29 is not supported [ 467.423953][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 467.423992][ T29] audit: type=1400 audit(1732709154.991:18585): avc: denied { ioctl } for pid=11736 comm="syz.0.1424" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.458011][ T29] audit: type=1400 audit(1732709155.031:18586): avc: denied { read } for pid=5194 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 467.484072][ T46] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 467.672873][ T46] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 467.685653][ T46] usb 1-1: config 4 has no interface number 0 [ 467.686514][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.756153][ T29] audit: type=1400 audit(1732709155.031:18587): avc: denied { search } for pid=5194 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.797154][ T46] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 467.818295][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.834274][ T29] audit: type=1400 audit(1732709155.031:18588): avc: denied { append } for pid=5194 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 467.867516][ T46] usb 1-1: Product: syz [ 467.871732][ T46] usb 1-1: Manufacturer: syz [ 467.876335][ T46] usb 1-1: SerialNumber: syz [ 467.897787][ T46] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 467.916717][ T29] audit: type=1400 audit(1732709155.031:18589): avc: denied { open } for pid=5194 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 467.941556][ T29] audit: type=1400 audit(1732709155.031:18590): avc: denied { getattr } for pid=5194 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 467.964938][ T29] audit: type=1400 audit(1732709155.031:18591): avc: denied { module_request } for pid=11739 comm="syz.4.1426" kmod="netdev-aaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 467.988117][ T29] audit: type=1400 audit(1732709155.061:18592): avc: denied { create } for pid=11741 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.007852][ T29] audit: type=1400 audit(1732709155.061:18593): avc: denied { create } for pid=11741 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.028079][ T29] audit: type=1400 audit(1732709155.061:18594): avc: denied { setopt } for pid=11741 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.172451][ T5924] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 468.278478][ T2921] team0 (unregistering): Port device team_slave_1 removed [ 468.333478][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1424'. [ 468.342900][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 468.342941][ T2921] team0 (unregistering): Port device team_slave_0 removed [ 468.350908][ T5924] usb 5-1: no configurations [ 468.360351][ T5924] usb 5-1: can't read configurations, error -22 [ 468.496674][ T5924] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 468.716624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.958270][ T5853] Bluetooth: hci1: command tx timeout [ 469.197489][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 469.211021][ T5924] usb 5-1: no configurations [ 469.215711][ T5924] usb 5-1: can't read configurations, error -22 [ 469.223523][ T5924] usb usb5-port1: attempt power cycle [ 469.567358][ T5924] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 469.626799][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 469.632663][ T5924] usb 5-1: no configurations [ 469.642186][ T5924] usb 5-1: can't read configurations, error -22 [ 469.766738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.040681][ T5924] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 470.068300][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 470.088508][ T5924] usb 5-1: no configurations [ 470.093140][ T5924] usb 5-1: can't read configurations, error -22 [ 470.108272][ T5924] usb usb5-port1: unable to enumerate USB device [ 470.231445][ T46] vp7045: USB control message 'in' went wrong. [ 470.237809][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 470.249571][ T46] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 470.292062][ T46] usb 1-1: USB disconnect, device number 31 [ 470.684640][T11787] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1438'. [ 470.796857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.875821][T11720] chnl_net:caif_netlink_parms(): no params data found [ 471.031583][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.038121][ T5853] Bluetooth: hci1: command tx timeout [ 471.090352][T11809] tmpfs: Bad value for 'mpol' [ 471.118906][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.130314][T11720] bridge_slave_0: entered allmulticast mode [ 471.148923][T11720] bridge_slave_0: entered promiscuous mode [ 471.157299][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.166111][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.175251][T11720] bridge_slave_1: entered allmulticast mode [ 471.182478][T11720] bridge_slave_1: entered promiscuous mode [ 471.218058][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.252633][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.299665][T11720] team0: Port device team_slave_0 added [ 471.311140][T11720] team0: Port device team_slave_1 added [ 471.480054][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.492504][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.579703][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.834733][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.841767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.851971][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.878057][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.974871][T11720] hsr_slave_0: entered promiscuous mode [ 471.999089][T11720] hsr_slave_1: entered promiscuous mode [ 472.117950][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.140068][T11720] Cannot create hsr debugfs directory [ 472.456298][ T29] kauditd_printk_skb: 6154 callbacks suppressed [ 472.456319][ T29] audit: type=1400 audit(1732709160.021:24749): avc: denied { read } for pid=11838 comm="syz.3.1448" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.525831][ T29] audit: type=1400 audit(1732709160.021:24750): avc: denied { open } for pid=11838 comm="syz.3.1448" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.655393][ T29] audit: type=1400 audit(1732709160.031:24751): avc: denied { read } for pid=5506 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 472.687530][ T29] audit: type=1400 audit(1732709160.031:24752): avc: denied { ioctl } for pid=11838 comm="syz.3.1448" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.713385][ T29] audit: type=1400 audit(1732709160.051:24753): avc: denied { read } for pid=5194 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 472.735451][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.782425][ T29] audit: type=1400 audit(1732709160.051:24754): avc: denied { search } for pid=5194 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.853513][ T29] audit: type=1400 audit(1732709160.061:24755): avc: denied { append } for pid=5194 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 472.877151][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.915585][T11860] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.915722][T11857] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.927091][T11860] audit: audit_lost=109 audit_rate_limit=0 audit_backlog_limit=64 [ 473.117225][ T5853] Bluetooth: hci1: command tx timeout [ 473.257459][ T5958] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 473.277850][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 473.285881][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 473.417199][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 473.433855][ T5958] usb 5-1: no configurations [ 473.445122][ T5958] usb 5-1: can't read configurations, error -22 [ 473.447891][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 473.468150][ T46] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 473.483560][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.500397][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.518171][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.522100][T11720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.542885][ T46] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 473.546283][T11720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.562616][T11720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.569581][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 473.576211][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 473.586316][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.596610][ T46] usb 4-1: Product: syz [ 473.596813][T11720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.618087][ T5958] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 473.745551][ T46] usb 4-1: Manufacturer: syz [ 473.887464][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 473.901467][ T5958] usb 5-1: no configurations [ 473.906498][ T5958] usb 5-1: can't read configurations, error -22 [ 473.927196][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.995484][ T5958] usb usb5-port1: attempt power cycle [ 474.177480][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.186151][ T46] usb 4-1: SerialNumber: syz [ 474.192245][ T25] usb 1-1: config 0 descriptor?? [ 474.199506][ T46] usb 4-1: config 0 descriptor?? [ 474.213770][ T46] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 474.221469][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 474.233001][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 474.243925][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 474.246884][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.258524][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 474.268535][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 474.276589][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 474.297806][ T46] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 474.303935][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.311938][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 474.320482][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 474.339256][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 474.351696][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 474.382279][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.389396][ T7019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.392725][ T46] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 474.428100][ T5958] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 474.451560][ T46] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 474.453729][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.466651][ T7019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.481762][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 474.484742][ T46] usb 4-1: USB disconnect, device number 24 [ 474.497925][ T5958] usb 5-1: no configurations [ 474.510023][ T5958] usb 5-1: can't read configurations, error -22 [ 474.530048][ T46] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 474.579751][ T46] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 474.596218][ T46] keyspan 4-1:0.0: device disconnected [ 474.621621][ T25] kye 0003:0458:5010.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 474.648713][ T5958] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 474.666025][ T25] kye 0003:0458:5010.000D: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 474.686503][ T25] kye 0003:0458:5010.000D: tablet-enabling feature report not found [ 474.712927][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 474.715984][ T25] kye 0003:0458:5010.000D: tablet enabling failed [ 474.725385][ T5958] usb 5-1: no configurations [ 474.743765][ T5958] usb 5-1: can't read configurations, error -22 [ 474.752164][ T5958] usb usb5-port1: unable to enumerate USB device [ 474.821525][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.843848][ T25] usb 1-1: USB disconnect, device number 32 [ 474.957353][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.990375][T11720] veth0_vlan: entered promiscuous mode [ 475.019984][T11720] veth1_vlan: entered promiscuous mode [ 475.046295][T11720] veth0_macvtap: entered promiscuous mode [ 475.072471][T11720] veth1_macvtap: entered promiscuous mode [ 475.125511][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.149550][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.164611][T11720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.178986][T11720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.197503][T10318] Bluetooth: hci1: command tx timeout [ 475.200318][T11720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.236235][T11720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.476852][T11913] Process accounting resumed [ 475.496197][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.504836][ T7019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.533628][ T7019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.542905][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.645578][T11913] Process accounting resumed [ 475.836176][T11927] trusted_key: encrypted_key: master key parameter is missing [ 475.857106][T11928] trusted_key: encrypted_key: master key parameter is missing [ 475.997485][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.328353][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 476.357749][ T46] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 476.387516][ T5175] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 476.598363][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 476.604431][ T5175] usb 2-1: Using ep0 maxpacket: 16 [ 476.664827][T11971] binder: 11960:11971 ioctl c00c620f 200001c0 returned -22 [ 476.698692][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 476.715090][ T5175] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 476.732813][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 476.745278][ T46] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 476.841527][ T5175] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.906843][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.944059][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.003632][ T5175] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.013369][ T25] usb 5-1: Product: syz [ 477.018845][ T25] usb 5-1: Manufacturer: syz [ 477.023725][ T25] usb 5-1: SerialNumber: syz [ 477.032102][ T5175] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.045766][ T5175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.047539][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.054476][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.072915][ T5175] usb 2-1: Product: syz [ 477.078039][ T25] usb 5-1: config 0 descriptor?? [ 477.097237][ T5175] usb 2-1: Manufacturer: syz [ 477.102005][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.110360][ T5175] usb 2-1: SerialNumber: syz [ 477.115842][ T46] usb 1-1: Product: ⠊ [ 477.123853][ T46] usb 1-1: Manufacturer: 쎢뵡䜌牱䢄ꪌ䕂ⶖ鎧ﶯ搉뙳疨鱂ᙆ憐켉ଃ趤읫ꥹ㬖 [ 477.142487][ T46] usb 1-1: SerialNumber: syz [ 477.297660][T10318] Bluetooth: hci1: command 0x0405 tx timeout [ 477.398394][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 477.462245][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 477.462261][ T29] audit: type=1400 audit(1732709165.030:25449): avc: denied { read write } for pid=5837 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.494574][ T29] audit: type=1400 audit(1732709165.030:25450): avc: denied { open } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.518783][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.539134][ T29] audit: type=1400 audit(1732709165.030:25451): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.566855][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.575757][ T29] audit: type=1400 audit(1732709165.040:25452): avc: denied { search } for pid=11989 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.580191][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.605825][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.633154][ T29] audit: type=1400 audit(1732709165.040:25453): avc: denied { read } for pid=11989 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 477.692956][ T29] audit: type=1400 audit(1732709165.040:25454): avc: denied { open } for pid=11989 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 477.756839][ T29] audit: type=1400 audit(1732709165.040:25455): avc: denied { getattr } for pid=11989 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 477.788159][ T29] audit: type=1400 audit(1732709165.060:25456): avc: denied { read } for pid=5194 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 477.810461][ T29] audit: type=1400 audit(1732709165.060:25457): avc: denied { search } for pid=5194 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.814824][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1471'. [ 477.832091][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.832243][ T29] audit: type=1400 audit(1732709165.060:25458): avc: denied { append } for pid=5194 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 477.869618][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.077716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.477736][ T5958] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 478.628524][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 478.635312][ T5958] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 478.647017][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 478.657852][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.668687][ T5958] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.681860][ T5958] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.690953][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.714575][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 478.734204][ T25] usb 5-1: USB disconnect, device number 58 [ 478.914070][ T5958] usb 4-1: GET_CAPABILITIES returned 0 [ 478.919938][ T5958] usbtmc 4-1:16.0: can't read capabilities [ 479.127776][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.153256][ T5843] usb 4-1: USB disconnect, device number 25 [ 479.308335][ T7382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.415885][ T7382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.428949][ T5175] usb 2-1: 0:2 : does not exist [ 479.458710][ T5175] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 479.481080][ T46] usb 1-1: 0:2 : does not exist [ 479.487505][ T5175] usb 2-1: USB disconnect, device number 31 [ 479.522921][ T7382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.525476][ T46] usb 1-1: USB disconnect, device number 33 [ 479.627254][ T7382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.642480][T12011] netlink: 'syz.0.1473': attribute type 29 has an invalid length. [ 479.651256][T12011] netlink: 'syz.0.1473': attribute type 29 has an invalid length. [ 479.740056][T11537] udevd[11537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.778712][T11499] udevd[11499]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 479.798486][ T7382] bridge_slave_1: left allmulticast mode [ 479.808627][ T7382] bridge_slave_1: left promiscuous mode [ 479.814387][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.827347][ T7382] bridge_slave_0: left allmulticast mode [ 479.833728][ T7382] bridge_slave_0: left promiscuous mode [ 479.839722][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.075301][ T7382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.085813][ T7382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.095453][ T7382] bond0 (unregistering): Released all slaves [ 480.167905][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.441294][T12024] netlink: 'syz.3.1476': attribute type 10 has an invalid length. [ 480.463088][T12024] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1476'. [ 480.876213][T12024] team0: entered promiscuous mode [ 480.882731][T12024] team_slave_0: entered promiscuous mode [ 480.899277][T12024] team_slave_1: entered promiscuous mode [ 480.907171][T12024] bridge0: port 3(team0) entered blocking state [ 480.926309][T12024] bridge0: port 3(team0) entered disabled state [ 480.945062][T12024] team0: entered allmulticast mode [ 480.950721][T12024] team_slave_0: entered allmulticast mode [ 480.966703][T12024] team_slave_1: entered allmulticast mode [ 480.990468][T12024] bridge0: port 3(team0) entered blocking state [ 480.996821][T12024] bridge0: port 3(team0) entered forwarding state [ 481.054496][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.149486][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.161235][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.183797][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.197333][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.204397][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.212605][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.457748][T12059] binder: 12044:12059 ioctl c00c620f 200001c0 returned -22 [ 482.238134][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.970371][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 482.971427][ T29] audit: type=1400 audit(1732709169.900:25731): avc: denied { read } for pid=12050 comm="syz.3.1480" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.172830][ T29] audit: type=1400 audit(1732709169.900:25732): avc: denied { open } for pid=12050 comm="syz.3.1480" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.278264][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.305983][ T29] audit: type=1400 audit(1732709169.900:25733): avc: denied { read write } for pid=12050 comm="syz.3.1480" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 483.385257][ T29] audit: type=1400 audit(1732709169.900:25734): avc: denied { open } for pid=12050 comm="syz.3.1480" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 483.398274][ T5853] Bluetooth: hci1: command tx timeout [ 483.409057][ T29] audit: type=1400 audit(1732709169.910:25735): avc: denied { read write } for pid=5837 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.427934][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 483.439639][ T29] audit: type=1400 audit(1732709169.910:25736): avc: denied { open } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.707316][ T29] audit: type=1400 audit(1732709169.910:25737): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.095888][ T29] audit: type=1400 audit(1732709170.100:25738): avc: denied { read write } for pid=12061 comm="syz.0.1482" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 484.098550][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'. [ 484.119397][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.207878][ T29] audit: type=1400 audit(1732709170.100:25739): avc: denied { open } for pid=12061 comm="syz.0.1482" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 484.262899][T12081] overlayfs: failed to resolve './file0': -2 [ 484.288703][ T29] audit: type=1400 audit(1732709170.130:25740): avc: denied { read append } for pid=12061 comm="syz.0.1482" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 484.318450][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.799520][T12076] syz.1.1485 (12076): drop_caches: 2 [ 484.928673][ T7382] hsr_slave_0: left promiscuous mode [ 484.947055][ T7382] hsr_slave_1: left promiscuous mode [ 484.990622][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.998116][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.023316][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.030898][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.067113][ T7382] veth1_macvtap: left promiscuous mode [ 485.073172][ T7382] veth0_macvtap: left promiscuous mode [ 485.078815][ T7382] veth1_vlan: left promiscuous mode [ 485.084104][ T7382] veth0_vlan: left promiscuous mode [ 485.368465][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.449405][ T5853] Bluetooth: hci1: command tx timeout [ 486.106820][T12135] binder: 12119:12135 ioctl c00c620f 200001c0 returned -22 [ 486.408602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.493939][ T7382] team0 (unregistering): Port device team_slave_1 removed [ 486.540168][ T7382] team0 (unregistering): Port device team_slave_0 removed [ 487.441405][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.522626][ T5853] Bluetooth: hci1: command tx timeout [ 488.050553][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 488.050689][ T29] audit: type=1400 audit(1732709175.619:26055): avc: denied { read write } for pid=5836 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.347632][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 488.398855][ T29] audit: type=1400 audit(1732709175.679:26057): avc: denied { read } for pid=12151 comm="syz.4.1498" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.454140][ T29] audit: type=1400 audit(1732709175.679:26058): avc: denied { open } for pid=12151 comm="syz.4.1498" path="net:[4026533382]" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.481574][T12161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.488871][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.494755][T12043] chnl_net:caif_netlink_parms(): no params data found [ 488.517627][T12166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.540501][ T29] audit: type=1400 audit(1732709175.689:26059): avc: denied { create } for pid=12151 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.556257][T12166] audit: audit_lost=135 audit_rate_limit=0 audit_backlog_limit=64 [ 488.563481][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.575511][T12168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.579425][T12167] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.598864][ T5924] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 488.649434][ T5965] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 488.750444][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.757555][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.791786][ T5924] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 488.809369][ T5924] usb 2-1: config 4 has no interface number 0 [ 488.816609][T12043] bridge_slave_0: entered allmulticast mode [ 488.822612][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 488.851972][ T5965] usb 4-1: config 0 has no interfaces? [ 488.864308][T12043] bridge_slave_0: entered promiscuous mode [ 488.944459][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.952041][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.959902][T12043] bridge_slave_1: entered allmulticast mode [ 488.966689][T12043] bridge_slave_1: entered promiscuous mode [ 489.069232][ T5924] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 489.078320][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.086739][ T5924] usb 2-1: Product: syz [ 489.091041][ T5924] usb 2-1: Manufacturer: syz [ 489.095991][ T5924] usb 2-1: SerialNumber: syz [ 489.104414][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.113682][ T5965] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 489.123732][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.131789][ T5965] usb 4-1: Product: syz [ 489.135960][ T5965] usb 4-1: Manufacturer: syz [ 489.140629][ T5965] usb 4-1: SerialNumber: syz [ 489.160539][ T5965] usb 4-1: config 0 descriptor?? [ 489.170888][ T5924] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 489.172053][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.300061][T12043] team0: Port device team_slave_0 added [ 489.324353][T12043] team0: Port device team_slave_1 added [ 489.412679][ T46] usb 4-1: USB disconnect, device number 26 [ 489.433014][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.458900][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.516010][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.526716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.559981][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.577392][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.585694][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 489.612490][ T5853] Bluetooth: hci1: command tx timeout [ 489.661671][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.836308][T12043] hsr_slave_0: entered promiscuous mode [ 489.867830][T12043] hsr_slave_1: entered promiscuous mode [ 489.915010][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.932844][T12043] Cannot create hsr debugfs directory [ 490.559092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.220171][T12226] binder: 12215:12226 ioctl c00c620f 200001c0 returned -22 [ 491.396598][ T5924] vp7045: USB control message 'in' went wrong. [ 491.403187][ T5924] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 491.420064][ T5924] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 491.480699][ T5924] usb 2-1: USB disconnect, device number 32 [ 491.599152][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.810042][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 492.290929][T12043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.326023][T12043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.345546][T12259] input: syz1 as /devices/virtual/input/input29 [ 492.354711][T12043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.361512][ T5958] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 492.369260][ T5843] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 492.392139][T12043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.529742][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 492.529763][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 492.541155][ T5958] usb 2-1: config 0 has no interfaces? [ 492.548828][ T5958] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 492.559789][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.566397][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.579788][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.627699][ T5958] usb 2-1: Product: syz [ 492.629620][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.639702][ T5958] usb 2-1: Manufacturer: syz [ 492.649263][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.659772][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.669616][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 492.682593][ T5843] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 492.685710][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.691741][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.694086][ T5843] usb 5-1: config 0 descriptor?? [ 492.706553][ T5958] usb 2-1: SerialNumber: syz [ 492.717696][ T5958] usb 2-1: config 0 descriptor?? [ 492.731394][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.738493][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.768921][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.776058][ T7382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.034015][ T5958] usb 2-1: USB disconnect, device number 33 [ 493.087090][ T29] kauditd_printk_skb: 3524 callbacks suppressed [ 493.087157][ T29] audit: type=1400 audit(1732709180.649:29526): avc: denied { read write } for pid=5837 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.259723][ T29] audit: type=1400 audit(1732709180.699:29527): avc: denied { create } for pid=12267 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.514452][ T29] audit: type=1400 audit(1732709180.699:29528): avc: denied { connect } for pid=12267 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.548749][ T29] audit: type=1400 audit(1732709180.699:29529): avc: denied { name_connect } for pid=12267 comm="syz.0.1519" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 493.689411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.748731][T12286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.755380][T12286] audit: audit_lost=156 audit_rate_limit=0 audit_backlog_limit=64 [ 493.761066][T12237] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.764749][T12286] audit: backlog limit exceeded [ 493.770290][T12237] audit: audit_lost=157 audit_rate_limit=0 audit_backlog_limit=64 [ 493.776685][T12286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 494.719543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.306348][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.333347][T12043] veth0_vlan: entered promiscuous mode [ 495.342479][T12043] veth1_vlan: entered promiscuous mode [ 495.413564][T12043] veth0_macvtap: entered promiscuous mode [ 495.422579][T12043] veth1_macvtap: entered promiscuous mode [ 495.477773][ T5843] usbhid 5-1:0.0: can't add hid device: -71 [ 495.483897][ T5843] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 495.640325][ T5843] usb 5-1: USB disconnect, device number 59 [ 495.704704][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.759657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.849532][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.289071][T12043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.459337][T12043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.529523][T12043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.593016][T12043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.771340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.789733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.799804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.821929][T12323] FAULT_INJECTION: forcing a failure. [ 496.821929][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 496.897778][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.4.1528 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 496.908237][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 496.918268][T12323] Call Trace: [ 496.921536][T12323] [ 496.924443][T12323] dump_stack_lvl+0x16c/0x1f0 [ 496.929098][T12323] should_fail_ex+0x497/0x5b0 [ 496.933756][T12323] ? fs_reclaim_acquire+0xae/0x150 [ 496.938859][T12323] should_failslab+0xc2/0x120 [ 496.943533][T12323] __kmalloc_noprof+0xcb/0x510 [ 496.948270][T12323] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 496.953878][T12323] tomoyo_realpath_from_path+0xb9/0x720 [ 496.959400][T12323] ? tomoyo_path_number_perm+0x235/0x590 [ 496.965007][T12323] ? tomoyo_path_number_perm+0x235/0x590 [ 496.970625][T12323] tomoyo_path_number_perm+0x248/0x590 [ 496.976056][T12323] ? tomoyo_path_number_perm+0x235/0x590 [ 496.981668][T12323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 496.987631][T12323] ? __pfx_lock_release+0x10/0x10 [ 496.992629][T12323] ? trace_lock_acquire+0x146/0x1e0 [ 496.997804][T12323] ? lock_acquire+0x2f/0xb0 [ 497.002280][T12323] ? __fget_files+0x40/0x3a0 [ 497.006844][T12323] ? __fget_files+0x206/0x3a0 [ 497.011494][T12323] security_file_ioctl+0x9b/0x240 [ 497.016508][T12323] __x64_sys_ioctl+0xb7/0x200 [ 497.021163][T12323] do_syscall_64+0xcd/0x250 [ 497.025644][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.031524][T12323] RIP: 0033:0x7f4393580809 [ 497.035913][T12323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.055510][T12323] RSP: 002b:00007f4394301058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.063901][T12323] RAX: ffffffffffffffda RBX: 00007f4393745fa0 RCX: 00007f4393580809 [ 497.071848][T12323] RDX: 00000000200004c0 RSI: 00000000c0905664 RDI: 0000000000000003 [ 497.079797][T12323] RBP: 00007f43943010a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.087753][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.095697][T12323] R13: 0000000000000000 R14: 00007f4393745fa0 R15: 00007ffe5a5b4c88 [ 497.103650][T12323] [ 497.117931][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.141149][T12323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.149839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.380472][T12330] overlay: ./bus is not a directory [ 497.593656][T12310] binder: 12304:12310 ioctl c00c620f 200001c0 returned -22 [ 497.839871][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.221646][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 498.221663][ T29] audit: type=1400 audit(1732709185.768:29887): avc: denied { create } for pid=12344 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 498.283529][ T29] audit: type=1400 audit(1732709185.768:29888): avc: denied { create } for pid=12344 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 498.308437][ T29] audit: type=1400 audit(1732709185.768:29889): avc: denied { write } for pid=12344 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 498.329197][ T29] audit: type=1400 audit(1732709185.768:29890): avc: denied { read } for pid=12344 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 498.349984][ T29] audit: type=1400 audit(1732709185.778:29891): avc: denied { read } for pid=12344 comm="syz.3.1532" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 498.374030][ T29] audit: type=1400 audit(1732709185.778:29892): avc: denied { open } for pid=12344 comm="syz.3.1532" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 498.400028][ T29] audit: type=1400 audit(1732709185.778:29893): avc: denied { read write } for pid=12344 comm="syz.3.1532" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.424335][ T29] audit: type=1400 audit(1732709185.778:29894): avc: denied { open } for pid=12344 comm="syz.3.1532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.448051][ T29] audit: type=1400 audit(1732709185.778:29895): avc: denied { ioctl } for pid=12344 comm="syz.3.1532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.473359][ T29] audit: type=1400 audit(1732709185.788:29896): avc: denied { ioctl } for pid=12344 comm="syz.3.1532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 498.889951][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.190396][ T5962] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 499.360925][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 499.372397][ T5962] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 499.382690][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.391025][ T5962] usb 4-1: Product: syz [ 499.395339][ T5962] usb 4-1: Manufacturer: syz [ 499.427279][ T5962] usb 4-1: SerialNumber: syz [ 499.463680][ T5962] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 499.920184][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.970186][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.131366][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.138198][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.010294][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.441929][ T5962] gspca_stk1135: reg_w 0x7 err -71 [ 502.448111][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.454678][ T5962] gspca_stk1135: Sensor write failed [ 502.460027][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.466412][ T5962] gspca_stk1135: Sensor write failed [ 502.471912][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.478216][ T5962] gspca_stk1135: Sensor read failed [ 502.483789][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.490128][ T5962] gspca_stk1135: Sensor read failed [ 502.495527][ T5962] gspca_stk1135: Detected sensor type unknown (0x0) [ 502.502469][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.509024][ T5962] gspca_stk1135: Sensor read failed [ 502.514543][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.521178][ T5962] gspca_stk1135: Sensor read failed [ 502.526413][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.535153][ T5962] gspca_stk1135: Sensor write failed [ 502.546973][ T5962] gspca_stk1135: serial bus timeout: status=0x00 [ 502.553579][ T5962] gspca_stk1135: Sensor write failed [ 502.559156][ T5962] stk1135 4-1:64.0: probe with driver stk1135 failed with error -71 [ 502.597649][ T5962] usb 4-1: USB disconnect, device number 27 [ 502.759672][T12403] FAULT_INJECTION: forcing a failure. [ 502.759672][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 502.779130][T12403] CPU: 0 UID: 0 PID: 12403 Comm: syz.4.1541 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 502.789555][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.799622][T12403] Call Trace: [ 502.802911][T12403] [ 502.805855][T12403] dump_stack_lvl+0x16c/0x1f0 [ 502.810550][T12403] should_fail_ex+0x497/0x5b0 [ 502.815242][T12403] ? fs_reclaim_acquire+0xae/0x150 [ 502.820366][T12403] should_failslab+0xc2/0x120 [ 502.825149][T12403] __kmalloc_noprof+0xcb/0x510 [ 502.829929][T12403] ? d_absolute_path+0x137/0x1b0 [ 502.834875][T12403] ? rcu_is_watching+0x12/0xc0 [ 502.839625][T12403] tomoyo_encode2+0x100/0x3e0 [ 502.844634][T12403] tomoyo_encode+0x29/0x50 [ 502.849030][T12403] tomoyo_realpath_from_path+0x19d/0x720 [ 502.854646][T12403] tomoyo_path_number_perm+0x248/0x590 [ 502.860083][T12403] ? tomoyo_path_number_perm+0x235/0x590 [ 502.865694][T12403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.871669][T12403] ? __pfx_lock_release+0x10/0x10 [ 502.876683][T12403] ? trace_lock_acquire+0x146/0x1e0 [ 502.881874][T12403] ? lock_acquire+0x2f/0xb0 [ 502.886352][T12403] ? __fget_files+0x40/0x3a0 [ 502.890929][T12403] ? __fget_files+0x206/0x3a0 [ 502.895630][T12403] security_file_ioctl+0x9b/0x240 [ 502.900662][T12403] __x64_sys_ioctl+0xb7/0x200 [ 502.905334][T12403] do_syscall_64+0xcd/0x250 [ 502.909831][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.915738][T12403] RIP: 0033:0x7f4393580809 [ 502.920144][T12403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.939739][T12403] RSP: 002b:00007f4394301058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.948136][T12403] RAX: ffffffffffffffda RBX: 00007f4393745fa0 RCX: 00007f4393580809 [ 502.956088][T12403] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000003 [ 502.964039][T12403] RBP: 00007f43943010a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.971991][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.979942][T12403] R13: 0000000000000000 R14: 00007f4393745fa0 R15: 00007ffe5a5b4c88 [ 502.987915][T12403] [ 503.009403][T12403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.040455][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.079683][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 503.230858][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 503.230874][ T29] audit: type=1400 audit(1732709190.797:30170): avc: denied { prog_run } for pid=12419 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 503.399144][ T29] audit: type=1400 audit(1732709190.827:30171): avc: denied { create } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 503.424765][ T29] audit: type=1400 audit(1732709190.827:30172): avc: denied { listen } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.080530][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.117627][ T7019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.140648][ T29] audit: type=1400 audit(1732709190.837:30173): avc: denied { create } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.191433][ T29] audit: type=1400 audit(1732709190.837:30174): avc: denied { connect } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.213050][ T29] audit: type=1400 audit(1732709190.837:30175): avc: denied { accept } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.233104][ T29] audit: type=1400 audit(1732709190.847:30176): avc: denied { execmem } for pid=12419 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 504.252721][ T29] audit: type=1400 audit(1732709190.917:30177): avc: denied { map_create } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 504.272355][ T29] audit: type=1400 audit(1732709190.917:30178): avc: denied { map_read map_write } for pid=12415 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 504.292525][ T29] audit: type=1400 audit(1732709190.947:30179): avc: denied { search } for pid=12418 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.783313][ T7019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.933098][ T7019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.993434][ T7019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.120681][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.212021][ T7019] bridge_slave_1: left allmulticast mode [ 505.217704][ T7019] bridge_slave_1: left promiscuous mode [ 505.228028][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.239705][ T7019] bridge_slave_0: left allmulticast mode [ 505.246190][ T7019] bridge_slave_0: left promiscuous mode [ 505.253224][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.359494][T12457] overlayfs: failed to resolve './file1': -2 [ 505.533586][T10318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.543230][T10318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.551447][T10318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.561276][T10318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.570592][T10318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 505.578150][T10318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.750977][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 505.761705][ T8] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 505.772475][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 505.778339][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 505.927471][ T8] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 505.930815][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 505.936300][ T8] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 505.951864][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 505.954537][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 505.960922][ T5924] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 505.972580][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 505.990252][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 505.998506][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 506.017544][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 506.019660][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.035324][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 506.049303][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.063906][ T7019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.075301][ T7019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.082021][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 506.085088][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.106628][ T7019] bond0 (unregistering): Released all slaves [ 506.111480][ T8] usb 5-1: language id specifier not provided by device, defaulting to English [ 506.121824][T12456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1551'. [ 506.155324][ T8] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 506.164483][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.175019][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 506.184009][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.193700][ T8] usb 5-1: Manufacturer: ㎛皕䢩賍젴螰ϛ㢽辉ힳ䭼᚜ⴠ⦾됵牞諟辥辄欇璘梥茖ᑩᦍ퉩媖锟Ԟ扆僳繱鬄丄韕㉅혐ᆡ픅᭔ý [ 506.217657][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 506.236096][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.254701][ T5924] usb 2-1: Product: syz [ 506.259103][ T5924] usb 2-1: Manufacturer: syz [ 506.265176][ T5924] usb 2-1: SerialNumber: syz [ 506.270523][ T8] usb 5-1: config 0 descriptor?? [ 506.279872][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 506.290972][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 506.303242][ T5924] usb 2-1: config 0 descriptor?? [ 506.319082][ T8] input: ㎛皕䢩賍젴螰ϛ㢽辉ힳ䭼᚜ⴠ⦾됵牞諟辥辄欇璘梥茖ᑩᦍ퉩媖锟Ԟ扆僳繱鬄丄韕㉅혐ᆡ픅᭔ as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 506.346231][ T46] usb 4-1: GET_CAPABILITIES returned 0 [ 506.364288][ T46] usbtmc 4-1:16.0: can't read capabilities [ 506.567204][ T5843] usb 4-1: USB disconnect, device number 28 [ 506.590151][ T5924] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 506.849029][T12498] binder: 12489:12498 ioctl c00c620f 200001c0 returned -22 [ 507.118487][ T5843] usb 5-1: USB disconnect, device number 60 [ 507.151004][ T7019] hsr_slave_0: left promiscuous mode [ 507.187624][ T7019] hsr_slave_1: left promiscuous mode [ 507.200880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.217235][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.239458][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.273418][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.319912][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.598834][T12503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1555'. [ 507.651057][ T7019] veth1_macvtap: left promiscuous mode [ 507.667811][ T7019] veth0_macvtap: left promiscuous mode [ 507.674579][ T7019] veth1_vlan: left promiscuous mode [ 507.681088][ T5853] Bluetooth: hci1: command tx timeout [ 507.699868][ T7019] veth0_vlan: left promiscuous mode [ 507.771276][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 508.241013][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.346567][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 508.346594][ T29] audit: type=1400 audit(1732709195.787:30681): avc: denied { execmem } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 508.555955][ T29] audit: type=1400 audit(1732709196.017:30682): avc: denied { read } for pid=12538 comm="syz.3.1559" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 509.001418][ T29] audit: type=1400 audit(1732709196.017:30683): avc: denied { open } for pid=12538 comm="syz.3.1559" path="net:[4026532949]" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 509.025595][ T29] audit: type=1400 audit(1732709196.027:30684): avc: denied { create } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.046741][ T29] audit: type=1400 audit(1732709196.027:30685): avc: denied { create } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 509.071850][ T29] audit: type=1400 audit(1732709196.027:30686): avc: denied { write } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 509.092618][ T29] audit: type=1400 audit(1732709196.107:30687): avc: denied { bind } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.117969][ T29] audit: type=1400 audit(1732709196.107:30688): avc: denied { read } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.140374][ T29] audit: type=1400 audit(1732709196.107:30689): avc: denied { create } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 509.164987][ T5924] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 509.219521][ T29] audit: type=1400 audit(1732709196.107:30690): avc: denied { create } for pid=12538 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.291125][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.382894][ T7019] team0 (unregistering): Port device team_slave_1 removed [ 509.711263][ T7019] team0 (unregistering): Port device team_slave_0 removed [ 509.806683][ T5853] Bluetooth: hci1: command tx timeout [ 510.158853][T12463] chnl_net:caif_netlink_parms(): no params data found [ 510.185081][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 510.284601][ T5924] usb 2-1: USB disconnect, device number 34 [ 510.321259][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.436950][T12463] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.499624][T12463] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.510478][T12463] bridge_slave_0: entered allmulticast mode [ 510.520948][T12463] bridge_slave_0: entered promiscuous mode [ 510.534748][T12463] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.543849][T12463] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.551017][T12463] bridge_slave_1: entered allmulticast mode [ 510.566944][T12463] bridge_slave_1: entered promiscuous mode [ 511.224755][T12463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.362004][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.425704][T12576] FAULT_INJECTION: forcing a failure. [ 511.425704][T12576] name failslab, interval 1, probability 0, space 0, times 0 [ 511.438515][T12576] CPU: 0 UID: 0 PID: 12576 Comm: syz.4.1567 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 511.448938][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 511.458973][T12576] Call Trace: [ 511.462246][T12576] [ 511.465167][T12576] dump_stack_lvl+0x16c/0x1f0 [ 511.469837][T12576] should_fail_ex+0x497/0x5b0 [ 511.474528][T12576] ? fs_reclaim_acquire+0xae/0x150 [ 511.479649][T12576] should_failslab+0xc2/0x120 [ 511.484314][T12576] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 511.489667][T12576] ? __pfx_mark_lock+0x10/0x10 [ 511.494423][T12576] ? vm_area_dup+0x53/0x2f0 [ 511.498938][T12576] vm_area_dup+0x53/0x2f0 [ 511.503247][T12576] __split_vma+0x181/0x1160 [ 511.507731][T12576] ? __pfx___split_vma+0x10/0x10 [ 511.512653][T12576] ? hlock_class+0x4e/0x130 [ 511.517155][T12576] vms_gather_munmap_vmas+0x38b/0x1730 [ 511.522608][T12576] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 511.528489][T12576] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 511.535082][T12576] ? __pfx_lock_release+0x10/0x10 [ 511.540118][T12576] ? mark_held_locks+0x9f/0xe0 [ 511.544891][T12576] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.550707][T12576] do_vmi_align_munmap+0x27f/0x890 [ 511.555834][T12576] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 511.561482][T12576] do_vmi_munmap+0x20b/0x3e0 [ 511.566063][T12576] move_vma+0x8ff/0x1c60 [ 511.570300][T12576] ? __pfx_move_vma+0x10/0x10 [ 511.574966][T12576] ? __pfx_mtree_load+0x10/0x10 [ 511.579806][T12576] ? selinux_mmap_addr+0x2b/0x110 [ 511.584817][T12576] ? bpf_lsm_mmap_addr+0x9/0x10 [ 511.589656][T12576] ? security_mmap_addr+0x6c/0x1e0 [ 511.594759][T12576] __do_sys_mremap+0xfc7/0x15e0 [ 511.599604][T12576] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 511.605574][T12576] ? __pfx___do_sys_mremap+0x10/0x10 [ 511.610849][T12576] ? __fget_files+0x206/0x3a0 [ 511.615534][T12576] ? fput+0x67/0x440 [ 511.619416][T12576] ? ksys_write+0x1ba/0x250 [ 511.623903][T12576] ? __pfx_ksys_write+0x10/0x10 [ 511.628742][T12576] do_syscall_64+0xcd/0x250 [ 511.633240][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.639118][T12576] RIP: 0033:0x7f4393580809 [ 511.643518][T12576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.663111][T12576] RSP: 002b:00007f43942e0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 511.671509][T12576] RAX: ffffffffffffffda RBX: 00007f4393746080 RCX: 00007f4393580809 [ 511.679465][T12576] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 511.687437][T12576] RBP: 00007f43942e00a0 R08: 0000000020fff000 R09: 0000000000000000 [ 511.695392][T12576] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 511.703347][T12576] R13: 0000000000000000 R14: 00007f4393746080 R15: 00007ffe5a5b4c88 [ 511.711321][T12576] [ 511.777733][T12463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.791388][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 511.801357][ T5924] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 511.888062][ T5853] Bluetooth: hci1: command tx timeout [ 512.054261][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 512.076211][T12463] team0: Port device team_slave_0 added [ 512.083403][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.094391][ T8] usb 1-1: device descriptor read/64, error -71 [ 512.106106][ T5924] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=e1.8c [ 512.123610][T12463] team0: Port device team_slave_1 added [ 512.129222][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.158183][ T5924] usb 2-1: Product: syz [ 512.178103][ T5924] usb 2-1: Manufacturer: syz [ 512.187485][ T5924] usb 2-1: SerialNumber: syz [ 512.252918][ T5924] usb 2-1: config 0 descriptor?? [ 512.262605][T12463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.277221][T12463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.314458][ T5924] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 512.343829][ T5924] cyphidcom ttyUSB0: required endpoint is missing [ 512.361486][T12463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.391499][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 512.401439][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.530734][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 512.558109][T12463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.567209][T12463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.937330][T12463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.180666][ T46] usb 2-1: USB disconnect, device number 35 [ 513.189769][ T46] cypress_m8 2-1:0.0: device disconnected [ 513.205338][ T8] usb 1-1: device descriptor read/64, error -71 [ 513.325760][T12604] binder: 12584:12604 ioctl c00c620f 200001c0 returned -22 [ 513.336893][ T8] usb usb1-port1: attempt power cycle [ 513.398111][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 513.398130][ T29] audit: type=1400 audit(1732709200.866:30949): avc: denied { read write } for pid=5841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.441563][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.522697][T12463] hsr_slave_0: entered promiscuous mode [ 513.566288][ T29] audit: type=1400 audit(1732709200.866:30950): avc: denied { open } for pid=5841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.592822][ T29] audit: type=1400 audit(1732709200.866:30951): avc: denied { ioctl } for pid=5841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.626436][ T29] audit: type=1400 audit(1732709200.866:30952): avc: denied { read } for pid=5506 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 513.647963][ T29] audit: type=1400 audit(1732709200.866:30953): avc: denied { search } for pid=5506 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.669889][ T29] audit: type=1400 audit(1732709200.876:30954): avc: denied { read } for pid=5506 comm="dhcpcd" name="n188" dev="tmpfs" ino=7114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.692523][ T29] audit: type=1400 audit(1732709200.876:30955): avc: denied { read open } for pid=5506 comm="dhcpcd" path="/run/udev/data/n188" dev="tmpfs" ino=7114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.716552][ T29] audit: type=1400 audit(1732709200.876:30956): avc: denied { getattr } for pid=5506 comm="dhcpcd" path="/run/udev/data/n188" dev="tmpfs" ino=7114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.740065][ T29] audit: type=1400 audit(1732709200.886:30957): avc: denied { read } for pid=12584 comm="syz.3.1568" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 513.779845][ T29] audit: type=1400 audit(1732709200.886:30958): avc: denied { open } for pid=12584 comm="syz.3.1568" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 513.887494][T12616] cifs: Unknown parameter 'fd' [ 513.932791][ T5853] Bluetooth: hci1: command tx timeout [ 513.996334][T12463] hsr_slave_1: entered promiscuous mode [ 513.997519][ T8] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 514.012320][T12463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.019888][T12463] Cannot create hsr debugfs directory [ 514.152886][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 514.192596][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 514.199613][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.219175][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.240540][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.260208][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.293989][ T8] usb 1-1: config 0 descriptor?? [ 514.309263][ T8] hub 1-1:0.0: USB hub found [ 514.481667][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.695284][ T8] hub 1-1:0.0: 1 port detected [ 515.022486][T12637] cifs: Unknown parameter 'fd' [ 515.069965][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 515.332672][ T5843] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 515.516588][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 515.531822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.543088][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 515.705693][ T5843] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=8d.5a [ 515.863218][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.898933][ T5843] usb 4-1: Product: syz [ 515.926818][ T5843] usb 4-1: Manufacturer: syz [ 515.946418][ T5843] usb 4-1: SerialNumber: syz [ 515.968676][ T5843] usb 4-1: config 0 descriptor?? [ 515.980222][T12463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.998860][ T5843] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 516.012288][T12463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.032240][T12463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.037807][ T8] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 516.058911][T12463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.176407][T12463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.223784][T12463] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.231939][ T8] usb 4-1: USB disconnect, device number 29 [ 516.247326][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.254451][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.561910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.845809][T12463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.860985][T12463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.879837][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.886951][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.261686][T12683] binder: 12674:12683 ioctl c00c620f 200001c0 returned -22 [ 517.612055][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 517.737406][ T5958] usb 1-1: USB disconnect, device number 37 [ 517.776711][T12463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.816915][T12463] veth0_vlan: entered promiscuous mode [ 517.827706][T12463] veth1_vlan: entered promiscuous mode [ 517.849610][T12463] veth0_macvtap: entered promiscuous mode [ 517.935435][T12463] veth1_macvtap: entered promiscuous mode [ 518.049842][T12463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.101429][T12463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.170763][T12463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.199733][T12463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.332252][T12463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.341208][T12463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.414758][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 518.414774][ T29] audit: type=1400 audit(1732709205.976:31420): avc: denied { connect } for pid=12688 comm="syz.4.1585" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 518.652120][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.004178][ T29] audit: type=1400 audit(1732709205.976:31421): avc: denied { ioctl } for pid=12688 comm="syz.4.1585" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41415 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 519.098796][ T29] audit: type=1400 audit(1732709206.006:31422): avc: denied { read } for pid=5194 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 519.146569][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.177084][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.213411][ T29] audit: type=1400 audit(1732709206.006:31423): avc: denied { search } for pid=5194 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.257434][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.264589][T12716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.268724][T12714] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.271734][T12716] audit: audit_lost=159 audit_rate_limit=0 audit_backlog_limit=64 [ 519.278800][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.286214][T12716] audit: backlog limit exceeded [ 519.294689][T12714] audit: audit_lost=160 audit_rate_limit=0 audit_backlog_limit=64 [ 519.298680][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 519.306585][T12714] audit: backlog limit exceeded [ 519.472518][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 519.692323][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.780053][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.790560][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.822433][ T25] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 519.831510][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.839956][ T25] usb 2-1: Product: syz [ 519.844364][ T25] usb 2-1: Manufacturer: syz [ 519.848970][ T25] usb 2-1: SerialNumber: syz [ 519.863643][ T25] usb 2-1: config 0 descriptor?? [ 520.732367][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.772464][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.184932][ T8] usb 2-1: USB disconnect, device number 36 [ 522.524194][T12775] binder: 12767:12775 ioctl c00c620f 200001c0 returned -22 [ 522.802582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.270562][T12792] evm: overlay not supported [ 523.842707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.991800][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 523.991816][ T29] audit: type=1400 audit(1732709210.985:31856): avc: denied { map_create } for pid=12797 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.030397][ T29] audit: type=1400 audit(1732709210.985:31857): avc: denied { bpf } for pid=12797 comm="syz.4.1602" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.072806][ T29] audit: type=1400 audit(1732709210.985:31858): avc: denied { map_read map_write } for pid=12797 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.093257][ T29] audit: type=1400 audit(1732709210.985:31859): avc: denied { prog_load } for pid=12797 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.112780][ T29] audit: type=1400 audit(1732709210.985:31860): avc: denied { perfmon } for pid=12797 comm="syz.4.1602" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.195752][ T29] audit: type=1400 audit(1732709210.985:31861): avc: denied { prog_run } for pid=12797 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.271962][ T29] audit: type=1400 audit(1732709211.045:31862): avc: denied { read } for pid=12785 comm="syz.1.1599" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.300364][ T29] audit: type=1400 audit(1732709211.055:31863): avc: denied { open } for pid=12785 comm="syz.1.1599" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.323742][ T29] audit: type=1400 audit(1732709211.055:31864): avc: denied { ioctl } for pid=12785 comm="syz.1.1599" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.348492][ T29] audit: type=1400 audit(1732709211.065:31865): avc: denied { bind } for pid=12785 comm="syz.1.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 524.519248][T12810] cifs: Unknown parameter 'fd' [ 524.595054][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 524.673920][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 524.882811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 525.043904][T12830] binder: 12821:12830 ioctl c00c620f 200001c0 returned -22 [ 525.922930][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.100719][T12826] tmpfs: Bad value for 'gid' [ 526.105391][T12826] tmpfs: Bad value for 'gid' [ 526.260633][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 526.398106][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.500691][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.585204][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.665329][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.832443][ T12] bridge_slave_1: left allmulticast mode [ 526.843198][ T12] bridge_slave_1: left promiscuous mode [ 526.850384][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.882826][ T12] bridge_slave_0: left allmulticast mode [ 526.888890][ T12] bridge_slave_0: left promiscuous mode [ 526.899125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.963040][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 527.228209][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.238595][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.248860][ T12] bond0 (unregistering): Released all slaves [ 527.643598][T12880] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 527.897127][T12884] overlay: ./file0 is not a directory [ 528.013200][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.993092][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 529.002452][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 529.002466][ T29] audit: type=1400 audit(1732709216.195:32203): avc: denied { write } for pid=12875 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 529.030512][ T29] audit: type=1400 audit(1732709216.205:32204): avc: denied { prog_load } for pid=12875 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 529.035903][T10318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.049810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.049946][ T29] audit: type=1400 audit(1732709216.205:32205): avc: denied { bpf } for pid=12875 comm="syz.0.1617" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 529.049973][ T29] audit: type=1400 audit(1732709216.205:32206): avc: denied { perfmon } for pid=12875 comm="syz.0.1617" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 529.061046][T10318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.064079][ T29] audit: type=1400 audit(1732709216.205:32207): avc: denied { prog_run } for pid=12875 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 529.064110][ T29] audit: type=1400 audit(1732709216.225:32208): avc: denied { write } for pid=12875 comm="syz.0.1617" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 529.064142][ T29] audit: type=1400 audit(1732709216.535:32209): avc: denied { create } for pid=12887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.064169][ T29] audit: type=1400 audit(1732709216.535:32210): avc: denied { read write } for pid=12887 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 529.064199][ T29] audit: type=1400 audit(1732709216.535:32211): avc: denied { open } for pid=12887 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 529.064229][ T29] audit: type=1400 audit(1732709216.545:32212): avc: denied { create } for pid=12874 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.086922][T10318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.156464][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'. [ 529.179376][T10318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.348167][T10318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 529.355521][T10318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.083380][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.123489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.775315][ T5853] Bluetooth: hci1: command tx timeout [ 531.873266][ T12] hsr_slave_0: left promiscuous mode [ 531.932065][ T5843] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 531.978985][ T12] hsr_slave_1: left promiscuous mode [ 531.998414][T12923] tmpfs: Bad value for 'gid' [ 532.003135][T12923] tmpfs: Bad value for 'gid' [ 532.044472][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 532.163598][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.336209][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.344660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.477014][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.485696][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.496034][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 532.527500][ T12] veth1_macvtap: left promiscuous mode [ 532.533069][ T12] veth0_macvtap: left promiscuous mode [ 532.545912][ T12] veth1_vlan: left promiscuous mode [ 532.577624][ T12] veth0_vlan: left promiscuous mode [ 533.106315][ T5843] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 533.117639][ T5843] usb 2-1: config 1 interface 0 has no altsetting 0 [ 533.127413][ T5843] usb 2-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.40 [ 533.136611][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.144721][ T5843] usb 2-1: Product: syz [ 533.148897][ T5843] usb 2-1: Manufacturer: syz [ 533.153505][ T5843] usb 2-1: SerialNumber: syz [ 533.210183][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.391650][ T5843] usbhid 2-1:1.0: can't add hid device: -71 [ 533.405077][ T5843] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 533.433947][ T5843] usb 2-1: USB disconnect, device number 37 [ 533.687254][ T12] team0 (unregistering): Port device team_slave_1 removed [ 533.729023][ T12] team0 (unregistering): Port device team_slave_0 removed [ 533.844026][ T5853] Bluetooth: hci1: command tx timeout [ 534.016330][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 534.016347][ T29] audit: type=1400 audit(1732709221.574:32482): avc: denied { create } for pid=12956 comm="syz.3.1633" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 534.045328][ T29] audit: type=1400 audit(1732709221.574:32483): avc: denied { map } for pid=12956 comm="syz.3.1633" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 534.071465][ T29] audit: type=1400 audit(1732709221.574:32484): avc: denied { read write } for pid=12956 comm="syz.3.1633" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 534.131103][ T29] audit: type=1400 audit(1732709221.634:32485): avc: denied { read } for pid=12956 comm="syz.3.1633" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 534.178716][ T29] audit: type=1400 audit(1732709221.634:32486): avc: denied { open } for pid=12956 comm="syz.3.1633" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 534.210997][ T29] audit: type=1400 audit(1732709221.664:32487): avc: denied { read } for pid=12956 comm="syz.3.1633" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 534.243933][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.251363][ T5958] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 534.275406][ T29] audit: type=1400 audit(1732709221.664:32488): avc: denied { read open } for pid=12956 comm="syz.3.1633" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 534.302070][ T29] audit: type=1400 audit(1732709221.664:32489): avc: denied { read write } for pid=12956 comm="syz.3.1633" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 534.329738][ T29] audit: type=1400 audit(1732709221.664:32490): avc: denied { open } for pid=12956 comm="syz.3.1633" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 534.377943][ T29] audit: type=1400 audit(1732709221.664:32491): avc: denied { create } for pid=12956 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 534.482367][T12962] trusted_key: encrypted_key: insufficient parameters specified [ 534.508195][T12962] binder: 12959:12962 ioctl c00c620f 200001c0 returned -22 [ 534.947267][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 534.993933][ T5958] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 535.005154][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.029797][ T5958] usb 2-1: Product: syz [ 535.075971][ T5958] usb 2-1: Manufacturer: syz [ 535.091676][ T5958] usb 2-1: SerialNumber: syz [ 535.119204][T12968] overlayfs: failed to resolve './file0': -2 [ 535.157078][ T5958] usb 2-1: config 0 descriptor?? [ 535.184555][T12887] chnl_net:caif_netlink_parms(): no params data found [ 535.293946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.389225][T12887] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.396904][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.514138][ T5175] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 535.757617][T12887] bridge_slave_0: entered allmulticast mode [ 535.804289][ T5175] usb 5-1: Using ep0 maxpacket: 8 [ 535.893635][ T5175] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.916653][T12887] bridge_slave_0: entered promiscuous mode [ 535.976049][T10318] Bluetooth: hci1: command tx timeout [ 536.009511][T12887] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.029347][ T5958] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 536.032210][ T5175] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 536.039457][ T5958] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 536.039499][ T5958] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 536.059549][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.068608][ T5175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.079101][ T5175] usb 5-1: Product: syz [ 536.083278][ T5175] usb 5-1: Manufacturer: syz [ 536.088188][ T5175] usb 5-1: SerialNumber: syz [ 536.094907][T12887] bridge_slave_1: entered allmulticast mode [ 536.101762][ T5175] usb 5-1: config 0 descriptor?? [ 536.109502][T12997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36116 sclass=netlink_route_socket pid=12997 comm=syz.3.1639 [ 536.125729][ T5175] usb 5-1: bad CDC descriptors [ 536.130818][ T5175] usb 5-1: unsupported MDLM descriptors [ 536.132713][T12887] bridge_slave_1: entered promiscuous mode [ 536.136743][ T5175] cdc_acm 5-1:0.0: Zero length descriptor references [ 536.149105][ T5175] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 536.281384][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.293566][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.310364][ T5958] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 536.334058][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.344557][ T5958] usb 2-1: USB disconnect, device number 38 [ 536.509558][T12887] team0: Port device team_slave_0 added [ 536.552094][T12887] team0: Port device team_slave_1 added [ 536.572933][ T5924] usb 5-1: USB disconnect, device number 61 [ 536.903375][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.932768][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.134812][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.147578][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.154599][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.195473][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.364165][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.425044][T12887] hsr_slave_0: entered promiscuous mode [ 537.466608][T12887] hsr_slave_1: entered promiscuous mode [ 537.518008][T12887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.522411][T13022] tmpfs: Bad value for 'gid' [ 537.530822][T13022] tmpfs: Bad value for 'gid' [ 537.569835][T12887] Cannot create hsr debugfs directory [ 537.768837][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 538.414303][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.937418][T10318] Bluetooth: hci1: command 0x0419 tx timeout [ 539.115169][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 539.121947][ T29] audit: type=1400 audit(1732709226.524:32770): avc: denied { read } for pid=13025 comm="syz.4.1646" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 539.444442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 539.908102][ T29] audit: type=1400 audit(1732709226.524:32771): avc: denied { open } for pid=13025 comm="syz.4.1646" path="net:[4026533382]" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.034474][ T29] audit: type=1400 audit(1732709226.524:32772): avc: denied { create } for pid=13025 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.059515][ T29] audit: type=1400 audit(1732709226.664:32773): avc: denied { read } for pid=13027 comm="syz.3.1647" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.081331][ T29] audit: type=1400 audit(1732709226.664:32774): avc: denied { open } for pid=13027 comm="syz.3.1647" path="net:[4026532949]" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.105655][ T29] audit: type=1400 audit(1732709226.704:32775): avc: denied { create } for pid=13027 comm="syz.3.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.125767][ T29] audit: type=1400 audit(1732709226.704:32776): avc: denied { connect } for pid=13025 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.146043][ T29] audit: type=1400 audit(1732709226.864:32777): avc: denied { ioctl } for pid=13025 comm="syz.4.1646" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.170996][ T29] audit: type=1400 audit(1732709227.103:32778): avc: denied { map_create } for pid=13025 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.190452][ T29] audit: type=1400 audit(1732709227.303:32779): avc: denied { prog_load } for pid=13025 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.222890][T10318] ------------[ cut here ]------------ [ 540.228690][T10318] WARNING: CPU: 1 PID: 10318 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 540.238901][T10318] Modules linked in: [ 540.242801][T10318] CPU: 1 UID: 0 PID: 10318 Comm: kworker/u9:0 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 540.253640][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.264001][T10318] Workqueue: hci1 hci_conn_timeout [ 540.269449][T10318] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 540.275170][T10318] Code: 00 e8 fa c6 6d f7 4c 89 f1 4c 89 e2 48 c7 c6 00 85 b4 8c 48 c7 c7 58 54 5c 90 e8 c1 88 a2 fa e9 4d ff ff ff e8 d7 c6 6d f7 90 <0f> 0b 90 e8 ce c6 6d f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 540.294878][T10318] RSP: 0018:ffffc9000407fc98 EFLAGS: 00010293 [ 540.300952][T10318] RAX: 0000000000000000 RBX: ffff8880794448e8 RCX: ffffffff8a21051f [ 540.308973][T10318] RDX: ffff888029702440 RSI: ffffffff8a2105c9 RDI: 0000000000000005 [ 540.316993][T10318] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 540.325050][T10318] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888079444000 [ 540.333025][T10318] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88805c61c400 [ 540.341089][T10318] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 540.350050][T10318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.356704][T10318] CR2: 0000001b309f3ff8 CR3: 00000000292bc000 CR4: 00000000003526f0 [ 540.364826][T10318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 540.372778][T10318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 540.381054][T10318] Call Trace: [ 540.384329][T10318] [ 540.387278][T10318] ? __warn+0xea/0x3c0 [ 540.391341][T10318] ? hci_conn_timeout+0x11a/0x210 [ 540.396425][T10318] ? report_bug+0x3c0/0x580 [ 540.400932][T10318] ? handle_bug+0x54/0xa0 [ 540.405325][T10318] ? exc_invalid_op+0x17/0x50 [ 540.410002][T10318] ? asm_exc_invalid_op+0x1a/0x20 [ 540.415077][T10318] ? hci_conn_timeout+0x6f/0x210 [ 540.420452][T10318] ? hci_conn_timeout+0x119/0x210 [ 540.425521][T10318] ? hci_conn_timeout+0x11a/0x210 [ 540.430551][T10318] ? hci_conn_timeout+0x119/0x210 [ 540.435622][T10318] process_one_work+0x9c5/0x1ba0 [ 540.440564][T10318] ? __pfx_hci_cmd_work+0x10/0x10 [ 540.445667][T10318] ? __pfx_process_one_work+0x10/0x10 [ 540.451049][T10318] ? rcu_is_watching+0x12/0xc0 [ 540.455898][T10318] ? assign_work+0x1a0/0x250 [ 540.460484][T10318] worker_thread+0x6c8/0xf00 [ 540.465362][T10318] ? __kthread_parkme+0x148/0x220 [ 540.470422][T10318] ? __pfx_worker_thread+0x10/0x10 [ 540.475834][T10318] kthread+0x2c1/0x3a0 [ 540.479907][T10318] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.485175][T10318] ? __pfx_kthread+0x10/0x10 [ 540.489774][T10318] ret_from_fork+0x45/0x80 [ 540.494185][T10318] ? __pfx_kthread+0x10/0x10 [ 540.494501][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.498840][T10318] ret_from_fork_asm+0x1a/0x30 [ 540.510411][T10318] [ 540.513503][T10318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 540.520760][T10318] CPU: 1 UID: 0 PID: 10318 Comm: kworker/u9:0 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 540.531339][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.541377][T10318] Workqueue: hci1 hci_conn_timeout [ 540.546488][T10318] Call Trace: [ 540.549755][T10318] [ 540.552673][T10318] dump_stack_lvl+0x3d/0x1f0 [ 540.557244][T10318] panic+0x71d/0x800 [ 540.561120][T10318] ? __pfx_panic+0x10/0x10 [ 540.565522][T10318] ? show_trace_log_lvl+0x29d/0x3d0 [ 540.570721][T10318] ? check_panic_on_warn+0x1f/0xb0 [ 540.575821][T10318] ? hci_conn_timeout+0x11a/0x210 [ 540.580835][T10318] check_panic_on_warn+0xab/0xb0 [ 540.585754][T10318] __warn+0xf6/0x3c0 [ 540.589630][T10318] ? hci_conn_timeout+0x11a/0x210 [ 540.594661][T10318] report_bug+0x3c0/0x580 [ 540.598986][T10318] handle_bug+0x54/0xa0 [ 540.603140][T10318] exc_invalid_op+0x17/0x50 [ 540.607631][T10318] asm_exc_invalid_op+0x1a/0x20 [ 540.612471][T10318] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 540.618094][T10318] Code: 00 e8 fa c6 6d f7 4c 89 f1 4c 89 e2 48 c7 c6 00 85 b4 8c 48 c7 c7 58 54 5c 90 e8 c1 88 a2 fa e9 4d ff ff ff e8 d7 c6 6d f7 90 <0f> 0b 90 e8 ce c6 6d f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 540.637688][T10318] RSP: 0018:ffffc9000407fc98 EFLAGS: 00010293 [ 540.643740][T10318] RAX: 0000000000000000 RBX: ffff8880794448e8 RCX: ffffffff8a21051f [ 540.651709][T10318] RDX: ffff888029702440 RSI: ffffffff8a2105c9 RDI: 0000000000000005 [ 540.659664][T10318] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 540.667620][T10318] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888079444000 [ 540.675574][T10318] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88805c61c400 [ 540.683532][T10318] ? hci_conn_timeout+0x6f/0x210 [ 540.688464][T10318] ? hci_conn_timeout+0x119/0x210 [ 540.693480][T10318] ? hci_conn_timeout+0x119/0x210 [ 540.698493][T10318] process_one_work+0x9c5/0x1ba0 [ 540.703423][T10318] ? __pfx_hci_cmd_work+0x10/0x10 [ 540.708431][T10318] ? __pfx_process_one_work+0x10/0x10 [ 540.713784][T10318] ? rcu_is_watching+0x12/0xc0 [ 540.718545][T10318] ? assign_work+0x1a0/0x250 [ 540.723119][T10318] worker_thread+0x6c8/0xf00 [ 540.727697][T10318] ? __kthread_parkme+0x148/0x220 [ 540.732710][T10318] ? __pfx_worker_thread+0x10/0x10 [ 540.737803][T10318] kthread+0x2c1/0x3a0 [ 540.741858][T10318] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.747043][T10318] ? __pfx_kthread+0x10/0x10 [ 540.751621][T10318] ret_from_fork+0x45/0x80 [ 540.756020][T10318] ? __pfx_kthread+0x10/0x10 [ 540.760595][T10318] ret_from_fork_asm+0x1a/0x30 [ 540.765357][T10318] [ 540.768551][T10318] Kernel Offset: disabled [ 540.772925][T10318] Rebooting in 86400 seconds..