last executing test programs: 46.235784855s ago: executing program 1 (id=707): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) rt_sigreturn() write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30}, 0x30) 45.225066309s ago: executing program 1 (id=713): fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0xa0044400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 44.821948698s ago: executing program 1 (id=715): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x4}, {@empty}, {@private}]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @ssrr={0x89, 0x3}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket(0x8, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x8935, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000ffffffe5000000000000000600000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x90) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaeaaac4bc5e9cac968686dd6003000000180600fe800000000000000000aa84776e4a00000000d71556aa7fd41b8600004e575d108b62d510e77d13481ecb6b9ce6f9e765137c6bdf01eaca33ef54bcf6ec9d2be487f9168513296b96dba4a1d571cccc5a3d163dc01eab6a82d806b3427564f287ee910ef9812d360ede86fcc221612e84e3742bc6c13956f8a60f5cd5e8bc46442224a1dd3d6dde019cf501e8cfb5fd91a2cb755f1632a7d3ebf34ae877c8f7a17cbd265d74616cac9d0790e86021a1e680c3996f27f834b44735aeef9f32746684a17e842fd40cddf44e4c9737693ddc1bab57"], 0x0) 44.599971774s ago: executing program 1 (id=717): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 44.098285293s ago: executing program 1 (id=720): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x239}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r1, r0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) sendto$packet(r2, &(0x7f00000002c0)="45d215d88d8bddcb83978de457a7b829b2140baf48486e7bdfe523ad81bc1e975ffe856d93092fda0b1fcdb0ccce614c26225ab8f0e8777e9589b8dc36d923", 0x3f, 0x0, 0x0, 0x0) 39.690679493s ago: executing program 1 (id=733): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x0, 0x0, {}, {0x0, 0xff}}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}, {}], 0x60) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 9.96343903s ago: executing program 4 (id=845): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) chdir(&(0x7f0000000100)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0xfffe) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x20000, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) write(r4, &(0x7f0000000540), 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x3f8, 0x0, 0x128, 0x128, 0x318, 0x318, 0x318, 0x4000000, 0x0, {[{{@arp={@private, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'dvmrp1\x00'}, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "886becedefdc92a26648599b18109fed6be55a8014368421c704adcbaef237500a486b87197c6f165e32259a33a0a0a090e0ba150ced6c00"}}}, {{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'hsr0\x00'}, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x40043d14, &(0x7f0000000440)) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002b80)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)="19360a8d03b6b94859", 0x9}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1412000084000000ddff000007000020800009006d0303988100000000009cfa8f57a0cded47bb55c21e84f5fc2cdddfee45fed6ea6cce7541aabe22ea6e51256cd10491bbe14c4f205236e8068ea4047124a46c51c67fd0f8b32da2ac23ea77b6670ff420f0422fa70a44f169a75d30940415596fb7545101ca4be5d54ee17dac49b6cf5856"], 0x14}], 0x1, 0x20040801) 9.071785131s ago: executing program 2 (id=851): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0), 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004200cd2a00000000000000000a009d"], 0x1c}}, 0x0) 8.797881206s ago: executing program 2 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140), 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 8.501405415s ago: executing program 4 (id=855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x6, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x75, 0x121301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0x0, @prog_id}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 8.100910174s ago: executing program 3 (id=856): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback, @empty}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) 5.668916519s ago: executing program 0 (id=864): socket$igmp6(0xa, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0xa3, 0x0) 5.555614955s ago: executing program 0 (id=865): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x80000000) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107400009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x3f}, &(0x7f0000000040)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x204, 0xfa7f, 0x400, r7}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000500)={r10, 0x80000000, 0x101, 0x3b8f, 0x3, 0x9, 0x9, 0x100, {r10, @in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x9, 0x0, 0x4, 0x2, 0x5}}, &(0x7f00000005c0)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.204061115s ago: executing program 0 (id=866): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x0, 0x0, {0x0, 0xfe}, {0x0, 0xff}}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}}, {}], 0x60) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.123421767s ago: executing program 4 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 4.116223041s ago: executing program 2 (id=868): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0x4a, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 4.114965782s ago: executing program 3 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 3.783789607s ago: executing program 3 (id=870): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 3.777713326s ago: executing program 4 (id=871): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ee0000000000000000008500000017000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@ifindex, 0xffffffffffffffff, 0x9, 0x1018, 0x0, @prog_fd}, 0x20) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r4, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) 3.505073289s ago: executing program 2 (id=872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 3.436886788s ago: executing program 0 (id=873): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100e60008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f180011800e000100636f6ee6b4696d6974000000040002800c00098008000140000050"], 0xa8}}, 0x0) 3.307253211s ago: executing program 4 (id=874): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000feffffffb704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0x1004, &(0x7f0000004440)=""/4100}, 0x90) 3.135690451s ago: executing program 0 (id=875): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x80000000) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107400009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x3f}, &(0x7f0000000040)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x204, 0xfa7f, 0x400, r7}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000500)={r10, 0x80000000, 0x101, 0x3b8f, 0x3, 0x9, 0x9, 0x100, {r10, @in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x9, 0x0, 0x4, 0x2, 0x5}}, &(0x7f00000005c0)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.125806878s ago: executing program 2 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4018aee1, &(0x7f00000006c0)) 3.043886419s ago: executing program 4 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 2.812647768s ago: executing program 0 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x6, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x75, 0x121301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0x0, @prog_id}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 2.491816303s ago: executing program 2 (id=879): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r5, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x46) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x42}, @rr={0x7, 0x3, 0x50}]}}, @echo}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/50, 0x32}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.225090902s ago: executing program 3 (id=880): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) chdir(&(0x7f0000000100)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0xfffe) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x20000, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) write(r3, &(0x7f0000000540), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x3f8, 0x0, 0x128, 0x128, 0x318, 0x318, 0x318, 0x4000000, 0x0, {[{{@arp={@private, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'dvmrp1\x00'}, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "886becedefdc92a26648599b18109fed6be55a8014368421c704adcbaef237500a486b87197c6f165e32259a33a0a0a090e0ba150ced6c00"}}}, {{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'hsr0\x00'}, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) 266.449376ms ago: executing program 3 (id=881): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0x1, 0x0, &(0x7f0000000600)="16", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 0s ago: executing program 3 (id=882): dup(0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04050400"], 0x7) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): d { unmount } for pid=5093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.241794][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.254739][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.267239][ T29] audit: type=1400 audit(1721233928.609:119): avc: denied { mounton } for pid=5093 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 111.291136][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.306165][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.316899][ T29] audit: type=1400 audit(1721233928.609:120): avc: denied { mount } for pid=5093 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.341633][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.402458][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.415591][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.426381][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.439425][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.451699][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.464623][ T29] audit: type=1400 audit(1721233928.969:121): avc: denied { read write } for pid=5093 comm="syz-executor" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.495378][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.511924][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.536962][ T29] audit: type=1400 audit(1721233928.969:122): avc: denied { open } for pid=5093 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.575028][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.580952][ T5176] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.583186][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.655816][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.691204][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.707580][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.720532][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.733906][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.748182][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.844301][ T5091] veth0_macvtap: entered promiscuous mode [ 111.981626][ T5091] veth1_macvtap: entered promiscuous mode [ 112.010501][ T2433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.022081][ T2433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.211828][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.257139][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.290188][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.308806][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.318972][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.331275][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.341779][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.358058][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.370969][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.428981][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.449439][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.478093][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.520041][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.556762][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.579060][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.618538][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.677992][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.707843][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.815070][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.867759][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.891894][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.908037][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.962081][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 112.962105][ T29] audit: type=1400 audit(1721233930.479:138): avc: denied { create } for pid=5196 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.035779][ T29] audit: type=1400 audit(1721233930.529:139): avc: denied { write } for pid=5196 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.061858][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.129804][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.241426][ T29] audit: type=1400 audit(1721233930.759:140): avc: denied { create } for pid=5202 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.314244][ T29] audit: type=1400 audit(1721233930.779:141): avc: denied { create } for pid=5202 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.366837][ T5203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.388793][ T29] audit: type=1400 audit(1721233930.789:142): avc: denied { block_suspend } for pid=5202 comm="syz.1.11" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.454051][ T5173] IPVS: starting estimator thread 0... [ 113.483936][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.509187][ T29] audit: type=1400 audit(1721233930.909:143): avc: denied { map_create } for pid=5204 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.546472][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.558609][ T5207] IPVS: using max 15 ests per chain, 36000 per kthread [ 113.596492][ T29] audit: type=1400 audit(1721233930.909:144): avc: denied { perfmon } for pid=5204 comm="syz.3.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.688468][ T29] audit: type=1400 audit(1721233930.909:145): avc: denied { map_read map_write } for pid=5204 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.797537][ T29] audit: type=1400 audit(1721233930.919:146): avc: denied { prog_load } for pid=5204 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.852680][ T2398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.889572][ T29] audit: type=1400 audit(1721233930.919:147): avc: denied { bpf } for pid=5204 comm="syz.3.12" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.896691][ T2398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.201808][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.253728][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.339318][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 115.575632][ T5248] Zero length message leads to an empty skb [ 115.860182][ T5256] fuse: Unknown parameter 'use00000000000000000000' [ 117.004868][ T5280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.090871][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 117.534000][ T5287] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 117.998148][ T5289] fuse: Bad value for 'fd' [ 118.089110][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.278736][ T25] usb 1-1: device descriptor read/64, error -71 [ 118.463305][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 118.463327][ T29] audit: type=1400 audit(1721233935.979:176): avc: denied { connect } for pid=5302 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.501049][ T29] audit: type=1400 audit(1721233935.989:177): avc: denied { name_connect } for pid=5302 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.568353][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.739220][ T25] usb 1-1: device descriptor read/64, error -71 [ 118.866762][ T25] usb usb1-port1: attempt power cycle [ 118.908028][ T29] audit: type=1400 audit(1721233936.419:178): avc: denied { create } for pid=5310 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.960372][ T29] audit: type=1400 audit(1721233936.449:179): avc: denied { write } for pid=5310 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.034681][ T29] audit: type=1400 audit(1721233936.529:180): avc: denied { setopt } for pid=5310 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.308141][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.318109][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.612697][ T25] usb 1-1: device descriptor read/8, error -71 [ 121.038064][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 121.046966][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 121.067573][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.128374][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.168313][ T29] audit: type=1400 audit(1721233938.669:181): avc: denied { read write } for pid=5323 comm="syz.1.58" name="video36" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.227842][ T46] usb 4-1: string descriptor 0 read error: -22 [ 121.256596][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.282027][ T29] audit: type=1400 audit(1721233938.679:182): avc: denied { open } for pid=5323 comm="syz.1.58" path="/dev/video36" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.316430][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.427701][ T29] audit: type=1400 audit(1721233938.719:183): avc: denied { ioctl } for pid=5323 comm="syz.1.58" path="/dev/video36" dev="devtmpfs" ino=960 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.526330][ T29] audit: type=1400 audit(1721233939.039:184): avc: denied { create } for pid=5338 comm="syz.2.60" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.952563][ T5341] syz.2.60: attempt to access beyond end of device [ 121.952563][ T5341] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 121.968073][ T5341] syz.2.60: attempt to access beyond end of device [ 121.968073][ T5341] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 121.984606][ T29] audit: type=1400 audit(1721233939.469:185): avc: denied { create } for pid=5343 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.009223][ T5341] syz.2.60: attempt to access beyond end of device [ 122.009223][ T5341] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 122.047726][ T5341] syz.2.60: attempt to access beyond end of device [ 122.047726][ T5341] loop2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 122.067187][ T5341] syz.2.60: attempt to access beyond end of device [ 122.067187][ T5341] loop2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 122.091630][ T5341] syz.2.60: attempt to access beyond end of device [ 122.091630][ T5341] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 122.110770][ T5341] VFS: unable to find oldfs superblock on device loop2 [ 122.179084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.334872][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 123.508623][ T46] cdc_ncm 4-1:1.0: bind() failure [ 123.579060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.793807][ T46] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 123.877758][ T46] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 123.908477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.926926][ T46] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 124.038138][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 124.038161][ T29] audit: type=1326 audit(1721233941.549:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.098721][ T46] usb 4-1: USB disconnect, device number 2 [ 124.176568][ T29] audit: type=1326 audit(1721233941.559:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.277058][ T29] audit: type=1326 audit(1721233941.589:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.384984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.409078][ T29] audit: type=1326 audit(1721233941.589:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.521960][ T29] audit: type=1326 audit(1721233941.589:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.588349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.609730][ T29] audit: type=1326 audit(1721233941.609:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.720759][ T29] audit: type=1326 audit(1721233941.609:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.823074][ T29] audit: type=1326 audit(1721233941.609:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 124.914772][ T29] audit: type=1326 audit(1721233941.609:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 125.025068][ T29] audit: type=1326 audit(1721233941.609:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed61175a99 code=0x7ffc0000 [ 125.101910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.113011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.404779][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 125.768756][ T1058] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.978090][ T1058] usb 5-1: Using ep0 maxpacket: 32 [ 125.987116][ T1058] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 126.016812][ T1058] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 126.050325][ T1058] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 126.080656][ T1058] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 126.104390][ T1058] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.131537][ T1058] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 126.166370][ T1058] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 126.197295][ T1058] usb 5-1: Product: syz [ 126.207820][ T1058] usb 5-1: Manufacturer: syz [ 126.239920][ T1058] usb 5-1: SerialNumber: syz [ 126.336128][ T1058] usb 5-1: config 0 descriptor?? [ 126.403650][ T1058] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.198933][ T1058] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 127.640620][ T1058] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.896940][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.942802][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.983172][ T1058] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.006590][ T1058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.041181][ T1058] usb 3-1: config 0 descriptor?? [ 128.544891][ T5159] usb 5-1: USB disconnect, device number 2 [ 128.616817][ T5159] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 129.126889][ T1058] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 129.176192][ T5494] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 129.369514][ T1058] usb 3-1: USB disconnect, device number 2 [ 129.466550][ T5497] netlink: 248 bytes leftover after parsing attributes in process `syz.0.99'. [ 129.491919][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 129.491941][ T29] audit: type=1400 audit(1721233947.009:220): avc: denied { write } for pid=5496 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 129.718167][ T29] audit: type=1326 audit(1721233947.219:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 129.794292][ T29] audit: type=1326 audit(1721233947.239:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 129.900104][ T29] audit: type=1326 audit(1721233947.239:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 129.971597][ T29] audit: type=1326 audit(1721233947.239:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 129.998892][ T29] audit: type=1326 audit(1721233947.239:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 130.073466][ T29] audit: type=1326 audit(1721233947.239:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 130.140604][ T29] audit: type=1326 audit(1721233947.269:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 130.218533][ T29] audit: type=1326 audit(1721233947.269:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 130.306207][ T5509] syz.0.106[5509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.306452][ T5509] syz.0.106[5509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.090471][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.112389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 132.484898][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.492872][ T29] audit: type=1400 audit(1721233949.799:229): avc: denied { write } for pid=5534 comm="syz.1.115" name="vlan0" dev="proc" ino=4026533826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.638027][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 132.678624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 132.688075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.844170][ T5541] syz.3.116: attempt to access beyond end of device [ 132.844170][ T5541] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 132.880739][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 132.896367][ T5541] syz.3.116: attempt to access beyond end of device [ 132.896367][ T5541] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 132.918016][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.942046][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 132.978206][ T5541] syz.3.116: attempt to access beyond end of device [ 132.978206][ T5541] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 133.009817][ T46] usb 1-1: string descriptor 0 read error: -22 [ 133.016315][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.043491][ T5541] syz.3.116: attempt to access beyond end of device [ 133.043491][ T5541] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 133.083816][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.110176][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.357888][ T5541] syz.3.116: attempt to access beyond end of device [ 133.357888][ T5541] loop3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 133.373633][ T5541] syz.3.116: attempt to access beyond end of device [ 133.373633][ T5541] loop3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 133.427352][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.450021][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.292263][ T5541] VFS: unable to find oldfs superblock on device loop3 [ 134.338689][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.364825][ T25] usb 5-1: config 0 descriptor?? [ 134.662960][ T46] cdc_ncm 1-1:1.0: bind() failure [ 134.822704][ T46] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 134.907565][ T46] cdc_ncm 1-1:1.1: bind() failure [ 134.913258][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 134.921533][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.045754][ T46] usb 1-1: USB disconnect, device number 6 [ 135.118105][ T25] usb 5-1: USB disconnect, device number 3 [ 137.317101][ T5601] Cannot find set identified by id 0 to match [ 138.509406][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.530245][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.298494][ T5143] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.618475][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.698831][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.761083][ T5143] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.795168][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.863539][ T29] audit: type=1400 audit(1721233957.369:230): avc: denied { mount } for pid=5614 comm="syz.3.131" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.165175][ T5143] usb 2-1: config 0 descriptor?? [ 142.197242][ T5143] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 142.886670][ T5143] usb 2-1: USB disconnect, device number 2 [ 143.605022][ T5658] syz.2.146: attempt to access beyond end of device [ 143.605022][ T5658] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 143.666892][ T5658] syz.2.146: attempt to access beyond end of device [ 143.666892][ T5658] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.687001][ T5658] syz.2.146: attempt to access beyond end of device [ 143.687001][ T5658] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.719954][ T5658] syz.2.146: attempt to access beyond end of device [ 143.719954][ T5658] loop2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 143.789920][ T5658] syz.2.146: attempt to access beyond end of device [ 143.789920][ T5658] loop2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 143.844830][ T5658] syz.2.146: attempt to access beyond end of device [ 143.844830][ T5658] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 143.859340][ T5658] VFS: unable to find oldfs superblock on device loop2 [ 144.332109][ T5668] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.339800][ T29] audit: type=1400 audit(1721233961.849:231): avc: denied { map } for pid=5669 comm="syz.4.153" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.466039][ T29] audit: type=1400 audit(1721233961.879:232): avc: denied { execute } for pid=5669 comm="syz.4.153" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.799523][ T29] audit: type=1400 audit(1721233964.309:233): avc: denied { read } for pid=5696 comm="syz.0.165" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.837103][ T5107] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 146.928269][ T29] audit: type=1400 audit(1721233964.309:234): avc: denied { open } for pid=5696 comm="syz.0.165" path="/dev/input/event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.982795][ T29] audit: type=1400 audit(1721233964.349:235): avc: denied { ioctl } for pid=5696 comm="syz.0.165" path="/dev/input/event0" dev="devtmpfs" ino=834 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.155144][ T29] audit: type=1400 audit(1721233964.669:236): avc: denied { read } for pid=5704 comm="syz.1.168" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.226685][ T5713] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 147.544887][ T29] audit: type=1400 audit(1721233964.669:237): avc: denied { open } for pid=5704 comm="syz.1.168" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.047608][ T29] audit: type=1400 audit(1721233966.559:238): avc: denied { create } for pid=5730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.193178][ T29] audit: type=1400 audit(1721233966.589:239): avc: denied { setopt } for pid=5730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.254885][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 149.302189][ T29] audit: type=1400 audit(1721233966.599:240): avc: denied { bind } for pid=5730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.360018][ T29] audit: type=1400 audit(1721233966.599:241): avc: denied { write } for pid=5730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.406014][ T29] audit: type=1400 audit(1721233966.609:242): avc: denied { ioctl } for pid=5730 comm="syz.0.177" path="socket:[8785]" dev="sockfs" ino=8785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.908547][ T1058] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.962243][ T5761] IPv6: addrconf: prefix option has invalid lifetime [ 151.108196][ T1058] usb 3-1: Using ep0 maxpacket: 32 [ 151.154664][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.196629][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.200640][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 151.248903][ T1058] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.278659][ T1058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.336469][ T1058] usb 3-1: config 0 descriptor?? [ 151.370726][ T1058] hub 3-1:0.0: USB hub found [ 151.513846][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 151.699999][ T1058] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 151.742429][ T1058] usbhid 3-1:0.0: can't add hid device: -71 [ 151.767603][ T1058] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.823945][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 151.823969][ T29] audit: type=1400 audit(1721233969.339:246): avc: denied { ioctl } for pid=5779 comm="syz.0.196" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8056 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.863156][ T1058] usb 3-1: USB disconnect, device number 3 [ 152.192265][ T29] audit: type=1400 audit(1721233969.709:247): avc: denied { create } for pid=5786 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.257503][ T29] audit: type=1400 audit(1721233969.739:248): avc: denied { bind } for pid=5786 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.319231][ T29] audit: type=1400 audit(1721233969.739:249): avc: denied { name_bind } for pid=5786 comm="syz.3.198" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 152.404129][ T29] audit: type=1400 audit(1721233969.739:250): avc: denied { node_bind } for pid=5786 comm="syz.3.198" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 152.465979][ T29] audit: type=1400 audit(1721233969.839:251): avc: denied { listen } for pid=5786 comm="syz.3.198" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.507183][ T29] audit: type=1400 audit(1721233969.879:252): avc: denied { connect } for pid=5786 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.568166][ T29] audit: type=1400 audit(1721233969.879:253): avc: denied { name_connect } for pid=5786 comm="syz.3.198" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 152.690565][ T29] audit: type=1400 audit(1721233969.949:254): avc: denied { read } for pid=5779 comm="syz.0.196" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.908122][ T29] audit: type=1400 audit(1721233969.949:255): avc: denied { open } for pid=5779 comm="syz.0.196" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.710213][ T5794] Cannot find set identified by id 0 to match [ 154.433035][ T5805] warning: `syz.4.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.517247][ T5807] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.500674][ T5816] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 156.325573][ T5107] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 156.325873][ T5107] CPU: 0 PID: 5107 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 156.325929][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.325953][ T5107] Workqueue: hci0 hci_rx_work [ 156.326033][ T5107] Call Trace: [ 156.326047][ T5107] [ 156.326066][ T5107] dump_stack_lvl+0x16c/0x1f0 [ 156.326130][ T5107] sysfs_warn_dup+0x7f/0xa0 [ 156.326182][ T5107] sysfs_create_dir_ns+0x24d/0x2b0 [ 156.326240][ T5107] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.326305][ T5107] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.326363][ T5107] ? do_raw_spin_unlock+0x172/0x230 [ 156.326413][ T5107] kobject_add_internal+0x2c8/0x990 [ 156.326493][ T5107] kobject_add+0x16f/0x240 [ 156.326566][ T5107] ? __pfx_kobject_add+0x10/0x10 [ 156.326633][ T5107] ? do_raw_spin_unlock+0x172/0x230 [ 156.326678][ T5107] ? kobject_put+0xbe/0x5b0 [ 156.326734][ T5107] device_add+0x289/0x1a70 [ 156.326790][ T5107] ? __pfx_dev_set_name+0x10/0x10 [ 156.326882][ T5107] ? __pfx_device_add+0x10/0x10 [ 156.326941][ T5107] ? mgmt_send_event_skb+0x2f2/0x460 [ 156.327005][ T5107] hci_conn_add_sysfs+0x17e/0x230 [ 156.327076][ T5107] le_conn_complete_evt+0x1078/0x1d80 [ 156.327146][ T5107] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.327204][ T5107] ? trace_contention_end+0xea/0x140 [ 156.327264][ T5107] ? __mutex_lock+0x1a6/0x9c0 [ 156.327349][ T5107] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 156.327419][ T5107] ? skb_pull_data+0x166/0x210 [ 156.327473][ T5107] hci_le_meta_evt+0x2e2/0x5d0 [ 156.327530][ T5107] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 156.327583][ T5107] hci_event_packet+0x666/0x1180 [ 156.327637][ T5107] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.327694][ T5107] ? __pfx_hci_event_packet+0x10/0x10 [ 156.327742][ T5107] ? mark_held_locks+0x9f/0xe0 [ 156.327783][ T5107] ? kcov_remote_start+0x3d1/0x6e0 [ 156.327848][ T5107] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.327935][ T5107] hci_rx_work+0x2c6/0x1610 [ 156.327993][ T5107] process_one_work+0x9c5/0x1b40 [ 156.328054][ T5107] ? __pfx_lock_acquire+0x10/0x10 [ 156.328097][ T5107] ? __pfx_process_one_work+0x10/0x10 [ 156.328153][ T5107] ? assign_work+0x1a0/0x250 [ 156.328205][ T5107] worker_thread+0x6c8/0xf20 [ 156.328257][ T5107] ? __pfx_worker_thread+0x10/0x10 [ 156.328310][ T5107] kthread+0x2c1/0x3a0 [ 156.328365][ T5107] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.328419][ T5107] ? __pfx_kthread+0x10/0x10 [ 156.328479][ T5107] ret_from_fork+0x45/0x80 [ 156.328551][ T5107] ? __pfx_kthread+0x10/0x10 [ 156.328611][ T5107] ret_from_fork_asm+0x1a/0x30 [ 156.328680][ T5107] [ 156.329105][ T5107] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.329196][ T5107] Bluetooth: hci0: failed to register connection device [ 157.027801][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 157.123699][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 157.123724][ T29] audit: type=1400 audit(1721233974.639:268): avc: denied { ioctl } for pid=5831 comm="syz.3.211" path="socket:[9019]" dev="sockfs" ino=9019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 157.170009][ T5834] batman_adv: batadv1: Adding interface: netdevsim0 [ 157.170038][ T5834] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.170234][ T5834] batman_adv: batadv1: Interface activated: netdevsim0 [ 158.316528][ T29] audit: type=1400 audit(1721233975.799:269): avc: denied { name_bind } for pid=5846 comm="syz.4.215" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.359625][ T5107] Bluetooth: hci0: command tx timeout [ 158.421980][ T5848] netlink: 'syz.4.215': attribute type 10 has an invalid length. [ 158.440903][ T29] audit: type=1400 audit(1721233975.959:270): avc: denied { ioctl } for pid=5849 comm="syz.0.216" path="socket:[9047]" dev="sockfs" ino=9047 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.504750][ T5853] netlink: 224 bytes leftover after parsing attributes in process `syz.4.215'. [ 158.504982][ T5853] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.215'. [ 158.505009][ T5853] netlink: 2640 bytes leftover after parsing attributes in process `syz.4.215'. [ 158.552947][ T5848] team0: Port device wlan1 added [ 158.593124][ T5848] netlink: 'syz.4.215': attribute type 10 has an invalid length. [ 159.058255][ T5848] syz.4.215 (5848) used greatest stack depth: 21504 bytes left [ 159.719591][ T5871] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 159.899132][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 159.963787][ T29] audit: type=1400 audit(1721233977.469:271): avc: denied { mounton } for pid=5873 comm="syz.4.226" path="/proc/121/task" dev="proc" ino=9126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 160.029915][ T5877] batman_adv: batadv1: Adding interface: netdevsim0 [ 160.052394][ T5877] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.078283][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.129666][ T5877] batman_adv: batadv1: Interface activated: netdevsim0 [ 161.024892][ T5893] trusted_key: syz.2.233 sent an empty control message without MSG_MORE. [ 161.118980][ T29] audit: type=1400 audit(1721233978.629:272): avc: denied { read } for pid=5892 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.205774][ T29] audit: type=1400 audit(1721233978.699:273): avc: denied { read } for pid=5890 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.679684][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.875282][ T46] usb 1-1: device descriptor read/64, error -71 [ 162.052119][ T5159] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.158326][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.266923][ T5159] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.300419][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.324459][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.347460][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.368293][ T46] usb 1-1: device descriptor read/64, error -71 [ 162.386654][ T5159] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.408288][ T5159] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.430194][ T5159] usb 3-1: Manufacturer: syz [ 162.451612][ T5159] usb 3-1: config 0 descriptor?? [ 162.499367][ T46] usb usb1-port1: attempt power cycle [ 162.702156][ T5908] loop0: detected capacity change from 0 to 1 [ 162.793550][ T5159] usbhid 3-1:0.0: can't add hid device: -71 [ 162.802562][ T5159] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.823093][ T5159] usb 3-1: USB disconnect, device number 4 [ 162.948097][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.993673][ T46] usb 1-1: device descriptor read/8, error -71 [ 163.265337][ T5931] syzkaller0: entered promiscuous mode [ 163.270964][ T5931] syzkaller0: entered allmulticast mode [ 163.291172][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.331493][ T46] usb 1-1: device descriptor read/8, error -71 [ 163.488546][ T46] usb usb1-port1: unable to enumerate USB device [ 163.636506][ T29] audit: type=1400 audit(1721233981.149:274): avc: denied { connect } for pid=5936 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.656097][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.958353][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.166282][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 164.186172][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.234986][ T8] usb 3-1: config 0 descriptor?? [ 164.248675][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 164.785043][ T8] gspca_spca508: reg_read err -110 [ 164.818236][ T8] gspca_spca508: reg_read err -32 [ 164.825418][ T29] audit: type=1400 audit(1721233982.339:275): avc: denied { execute } for pid=5948 comm="syz.0.250" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 164.838640][ T8] gspca_spca508: reg_read err -32 [ 164.896941][ T8] gspca_spca508: reg_read err -32 [ 164.915182][ T8] gspca_spca508: reg_read err -32 [ 164.925624][ T8] gspca_spca508: reg write: error -32 [ 164.953386][ T8] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 166.030255][ T1682] usb 3-1: USB disconnect, device number 5 [ 169.628185][ T5143] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.715523][ T5993] syz.2.265: attempt to access beyond end of device [ 169.715523][ T5993] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 169.757507][ T5993] syz.2.265: attempt to access beyond end of device [ 169.757507][ T5993] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 169.785871][ T5993] syz.2.265: attempt to access beyond end of device [ 169.785871][ T5993] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 169.808499][ T5143] usb 2-1: device descriptor read/64, error -71 [ 169.879173][ T5993] syz.2.265: attempt to access beyond end of device [ 169.879173][ T5993] loop2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 169.907884][ T5993] syz.2.265: attempt to access beyond end of device [ 169.907884][ T5993] loop2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 169.914332][ T29] audit: type=1326 audit(1721233987.419:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.007275][ T5993] syz.2.265: attempt to access beyond end of device [ 170.007275][ T5993] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 170.051270][ T29] audit: type=1326 audit(1721233987.519:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.077041][ T5993] VFS: unable to find oldfs superblock on device loop2 [ 170.148015][ T5143] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.155239][ T29] audit: type=1326 audit(1721233987.519:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.238023][ T29] audit: type=1326 audit(1721233987.519:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.328009][ T29] audit: type=1326 audit(1721233987.519:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.338370][ T5143] usb 2-1: device descriptor read/64, error -71 [ 170.440430][ T29] audit: type=1326 audit(1721233987.519:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.498250][ T29] audit: type=1326 audit(1721233987.519:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.528737][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.549278][ T5143] usb usb2-port1: attempt power cycle [ 170.591942][ T29] audit: type=1326 audit(1721233987.519:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.639115][ T29] audit: type=1326 audit(1721233987.549:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.675404][ T29] audit: type=1326 audit(1721233987.559:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x7ffc0000 [ 170.890253][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.988019][ T5143] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.019105][ T5143] usb 2-1: device descriptor read/8, error -71 [ 171.299737][ T5143] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.353375][ T5143] usb 2-1: device descriptor read/8, error -71 [ 171.510624][ T5143] usb usb2-port1: unable to enumerate USB device [ 171.571574][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 172.243268][ T5107] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 172.836431][ T6037] syz.1.280: attempt to access beyond end of device [ 172.836431][ T6037] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 172.874893][ T6037] syz.1.280: attempt to access beyond end of device [ 172.874893][ T6037] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 172.911849][ T6037] syz.1.280: attempt to access beyond end of device [ 172.911849][ T6037] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 172.975219][ T6037] syz.1.280: attempt to access beyond end of device [ 172.975219][ T6037] loop1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 173.072528][ T6037] VFS: unable to find oldfs superblock on device loop1 [ 173.566648][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 173.959820][ T6056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.961805][ T6059] capability: warning: `syz.0.290' uses 32-bit capabilities (legacy support in use) [ 174.154873][ T6065] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 174.328041][ T5141] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.358513][ T6070] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55595 sclass=netlink_xfrm_socket pid=6070 comm=syz.2.293 [ 174.559230][ T5141] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 174.624750][ T5141] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 174.663492][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.704056][ T5141] usb 5-1: config 0 descriptor?? [ 174.866297][ T5107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 175.009204][ T6056] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 175.009420][ T6056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.031063][ T6056] vhci_hcd vhci_hcd.0: Device attached [ 175.099622][ T6085] vhci_hcd: connection closed [ 175.104369][ T2398] vhci_hcd: stop threads [ 175.104963][ T2398] vhci_hcd: release socket [ 175.105125][ T2398] vhci_hcd: disconnect device [ 175.128186][ T5141] usb 5-1: string descriptor 0 read error: -71 [ 175.156622][ T5141] usb 5-1: USB disconnect, device number 4 [ 175.246226][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6090 comm=syz.3.301 [ 176.524752][ T4484] Bluetooth: hci0: link tx timeout [ 176.531308][ T4484] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.546296][ T6124] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 177.881225][ T6133] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.198038][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.414847][ T46] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 178.598228][ T4484] Bluetooth: hci0: command 0x0406 tx timeout [ 179.132753][ T46] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 179.161965][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.199817][ T46] usb 5-1: config 0 descriptor?? [ 179.282314][ T5107] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 179.282473][ T5107] CPU: 1 PID: 5107 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 179.282516][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.282539][ T5107] Workqueue: hci4 hci_rx_work [ 179.282589][ T5107] Call Trace: [ 179.282603][ T5107] [ 179.282616][ T5107] dump_stack_lvl+0x16c/0x1f0 [ 179.282670][ T5107] sysfs_warn_dup+0x7f/0xa0 [ 179.282712][ T5107] sysfs_create_dir_ns+0x24d/0x2b0 [ 179.282755][ T5107] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 179.282798][ T5107] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.282842][ T5107] ? do_raw_spin_unlock+0x172/0x230 [ 179.282885][ T5107] kobject_add_internal+0x2c8/0x990 [ 179.282941][ T5107] kobject_add+0x16f/0x240 [ 179.283015][ T5107] ? __pfx_kobject_add+0x10/0x10 [ 179.283073][ T5107] ? do_raw_spin_unlock+0x172/0x230 [ 179.283129][ T5107] ? kobject_put+0xbe/0x5b0 [ 179.283182][ T5107] device_add+0x289/0x1a70 [ 179.283234][ T5107] ? __pfx_dev_set_name+0x10/0x10 [ 179.283285][ T5107] ? __pfx_device_add+0x10/0x10 [ 179.283331][ T5107] ? mgmt_send_event_skb+0x2f2/0x460 [ 179.283376][ T5107] hci_conn_add_sysfs+0x17e/0x230 [ 179.283425][ T5107] le_conn_complete_evt+0x1078/0x1d80 [ 179.283471][ T5107] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 179.283512][ T5107] ? trace_contention_end+0xea/0x140 [ 179.283551][ T5107] ? __mutex_lock+0x1a6/0x9c0 [ 179.283606][ T5107] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 179.283670][ T5107] ? skb_pull_data+0x166/0x210 [ 179.283718][ T5107] hci_le_meta_evt+0x2e2/0x5d0 [ 179.283766][ T5107] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 179.283813][ T5107] hci_event_packet+0x666/0x1180 [ 179.283856][ T5107] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 179.283905][ T5107] ? __pfx_hci_event_packet+0x10/0x10 [ 179.283948][ T5107] ? mark_held_locks+0x9f/0xe0 [ 179.283984][ T5107] ? kcov_remote_start+0x3d1/0x6e0 [ 179.284027][ T5107] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.284085][ T5107] hci_rx_work+0x2c6/0x1610 [ 179.284136][ T5107] process_one_work+0x9c5/0x1b40 [ 179.284181][ T5107] ? __pfx_lock_acquire+0x10/0x10 [ 179.284224][ T5107] ? __pfx_process_one_work+0x10/0x10 [ 179.284268][ T5107] ? assign_work+0x1a0/0x250 [ 179.284304][ T5107] worker_thread+0x6c8/0xf20 [ 179.284350][ T5107] ? __pfx_worker_thread+0x10/0x10 [ 179.284390][ T5107] kthread+0x2c1/0x3a0 [ 179.284438][ T5107] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.284485][ T5107] ? __pfx_kthread+0x10/0x10 [ 179.284533][ T5107] ret_from_fork+0x45/0x80 [ 179.284587][ T5107] ? __pfx_kthread+0x10/0x10 [ 179.284636][ T5107] ret_from_fork_asm+0x1a/0x30 [ 179.284694][ T5107] [ 179.284808][ T5107] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 179.284897][ T5107] Bluetooth: hci4: failed to register connection device [ 179.434673][ T6133] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 179.434719][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.434868][ T6133] vhci_hcd vhci_hcd.0: Device attached [ 179.435440][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 179.457351][ T5107] Bluetooth: hci3: link tx timeout [ 179.457479][ T5107] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.554899][ T6152] vhci_hcd: connection closed [ 179.565505][ T2481] vhci_hcd: stop threads [ 179.565534][ T2481] vhci_hcd: release socket [ 179.565558][ T2481] vhci_hcd: disconnect device [ 179.588898][ T46] usb 5-1: string descriptor 0 read error: -71 [ 179.629547][ T46] usb 5-1: USB disconnect, device number 5 [ 180.879749][ T6175] bio_check_eod: 2 callbacks suppressed [ 180.879784][ T6175] syz.3.325: attempt to access beyond end of device [ 180.879784][ T6175] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 180.879916][ T6175] syz.3.325: attempt to access beyond end of device [ 180.879916][ T6175] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 180.879991][ T6175] syz.3.325: attempt to access beyond end of device [ 180.879991][ T6175] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 180.880283][ T6175] syz.3.325: attempt to access beyond end of device [ 180.880283][ T6175] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 180.880569][ T6175] syz.3.325: attempt to access beyond end of device [ 180.880569][ T6175] loop3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 180.880951][ T6175] syz.3.325: attempt to access beyond end of device [ 180.880951][ T6175] loop3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 180.880992][ T6175] VFS: unable to find oldfs superblock on device loop3 [ 181.289937][ T4484] Bluetooth: hci3: link tx timeout [ 181.289966][ T4484] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.300458][ T4484] Bluetooth: hci4: command tx timeout [ 181.563151][ T4484] Bluetooth: hci3: command 0x0406 tx timeout [ 182.012683][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 182.299955][ T6195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.598200][ T1682] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.785901][ T1682] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 182.833499][ T1682] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 182.873649][ T1682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.962882][ T1682] usb 4-1: config 0 descriptor?? [ 184.008074][ T6195] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 184.015095][ T6195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.233636][ T6195] vhci_hcd vhci_hcd.0: Device attached [ 184.409460][ T6218] vhci_hcd: connection closed [ 184.410299][ T2398] vhci_hcd: stop threads [ 184.421688][ T1682] usb 4-1: string descriptor 0 read error: -71 [ 184.438219][ T2398] vhci_hcd: release socket [ 184.450210][ T1682] usb 4-1: USB disconnect, device number 3 [ 184.458475][ T2398] vhci_hcd: disconnect device [ 184.508333][ T5173] vhci_hcd: vhci_device speed not set [ 184.859845][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 184.859869][ T29] audit: type=1400 audit(1721234002.379:296): avc: denied { read } for pid=6226 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.957179][ T5107] Bluetooth: hci4: link tx timeout [ 184.963837][ T5107] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.219535][ T5145] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 185.404814][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 185.451447][ T5145] usb 3-1: No LPM exit latency info found, disabling LPM. [ 185.464321][ T5145] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 185.481649][ T5145] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.388846][ T5145] usb 3-1: config 1 interface 0 has no altsetting 0 [ 186.401461][ T5145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.410907][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.428001][ T5145] usb 3-1: Product: ߬ [ 186.432152][ T5145] usb 3-1: SerialNumber: ᐊ [ 186.480301][ T6230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.800414][ T5145] usb 3-1: USB disconnect, device number 6 [ 187.040517][ T5107] Bluetooth: hci4: command 0x0406 tx timeout [ 188.219431][ T4484] Bluetooth: hci0: link tx timeout [ 188.429980][ T6274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.500047][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 188.758094][ T1058] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.982275][ T1058] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 189.088592][ T1058] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 189.149623][ T6286] syz.0.360: attempt to access beyond end of device [ 189.149623][ T6286] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 189.163253][ T1058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.026198][ T1058] usb 4-1: config 0 descriptor?? [ 190.032475][ T6286] syz.0.360: attempt to access beyond end of device [ 190.032475][ T6286] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 190.046636][ T6286] syz.0.360: attempt to access beyond end of device [ 190.046636][ T6286] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 190.061455][ T6286] syz.0.360: attempt to access beyond end of device [ 190.061455][ T6286] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 190.074975][ T6286] syz.0.360: attempt to access beyond end of device [ 190.074975][ T6286] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 190.088766][ T6286] syz.0.360: attempt to access beyond end of device [ 190.088766][ T6286] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 190.101867][ T6286] VFS: unable to find oldfs superblock on device loop0 [ 190.281261][ T6274] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 190.287962][ T6274] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.356626][ T6274] vhci_hcd vhci_hcd.0: Device attached [ 190.598502][ T8] vhci_hcd: vhci_device speed not set [ 190.629103][ T6300] vhci_hcd: connection closed [ 190.630216][ T2481] vhci_hcd: stop threads [ 190.640778][ T1058] usb 4-1: string descriptor 0 read error: -71 [ 190.670581][ T2481] vhci_hcd: release socket [ 190.695693][ T8] usb 15-2: new full-speed USB device number 3 using vhci_hcd [ 190.703997][ T1058] usb 4-1: USB disconnect, device number 4 [ 190.710675][ T2481] vhci_hcd: disconnect device [ 190.721457][ T4484] Bluetooth: hci1: link tx timeout [ 190.727605][ T4484] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.730677][ T8] usb 15-2: enqueue for inactive port 1 [ 190.888303][ T8] vhci_hcd: vhci_device speed not set [ 191.141788][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 191.343347][ T6327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.372'. [ 191.667866][ T5159] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.903183][ T5159] usb 3-1: Using ep0 maxpacket: 8 [ 191.914412][ T5159] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 191.953775][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.021515][ T5159] usb 3-1: config 0 descriptor?? [ 192.248315][ T5159] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 192.393415][ T6349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.453489][ T29] audit: type=1400 audit(1721234009.959:297): avc: denied { create } for pid=6324 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.502679][ T29] audit: type=1400 audit(1721234009.969:298): avc: denied { bind } for pid=6324 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.573848][ T29] audit: type=1400 audit(1721234010.009:299): avc: denied { connect } for pid=6324 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.628347][ T8] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 192.706181][ T6327] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 192.714184][ T29] audit: type=1400 audit(1721234010.219:300): avc: denied { setattr } for pid=6324 comm="syz.2.372" name="RXRPC" dev="sockfs" ino=11016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.747344][ T5173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.808511][ T29] audit: type=1400 audit(1721234010.299:301): avc: denied { ioctl } for pid=6324 comm="syz.2.372" path="socket:[11016]" dev="sockfs" ino=11016 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.834008][ T4484] Bluetooth: hci1: command 0x0406 tx timeout [ 192.868394][ T8] usb 2-1: No LPM exit latency info found, disabling LPM. [ 192.892449][ T5159] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 192.892769][ T6327] team0: Device veth1_macvtap failed to register rx_handler [ 192.918379][ T8] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 192.938610][ T5159] asix 3-1:0.0: probe with driver asix failed with error -61 [ 192.956320][ T8] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.989522][ T5173] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 192.995071][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 193.026224][ T5173] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 193.032480][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 193.048543][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.061961][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.075218][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 193.104790][ T8] usb 2-1: Product: ߬ [ 193.109706][ T5173] usb 1-1: config 0 descriptor?? [ 193.124911][ T8] usb 2-1: SerialNumber: ᐊ [ 193.153667][ T6350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.358059][ T6349] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 193.364672][ T6349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.392299][ T6349] vhci_hcd vhci_hcd.0: Device attached [ 193.459394][ T8] usb 2-1: USB disconnect, device number 7 [ 193.581697][ T6362] vhci_hcd: connection closed [ 193.582274][ T2398] vhci_hcd: stop threads [ 193.591833][ T5173] usb 1-1: string descriptor 0 read error: -71 [ 193.618291][ T46] vhci_hcd: vhci_device speed not set [ 193.624054][ T2398] vhci_hcd: release socket [ 193.632792][ T5173] usb 1-1: USB disconnect, device number 11 [ 193.639187][ T2398] vhci_hcd: disconnect device [ 193.698736][ T46] usb 9-2: new full-speed USB device number 2 using vhci_hcd [ 193.731344][ T46] usb 9-2: enqueue for inactive port 1 [ 193.818206][ T46] vhci_hcd: vhci_device speed not set [ 194.558539][ T6327] syz.2.372 (6327) used greatest stack depth: 21224 bytes left [ 194.607639][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 194.665820][ T5145] usb 3-1: USB disconnect, device number 7 [ 194.907077][ T29] audit: type=1400 audit(1721234012.399:302): avc: denied { create } for pid=6394 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.998441][ T29] audit: type=1400 audit(1721234012.459:303): avc: denied { setattr } for pid=6394 comm="syz.1.397" name="PINGv6" dev="sockfs" ino=11090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.134416][ T6404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.316798][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.404946][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.491038][ T29] audit: type=1400 audit(1721234013.009:304): avc: denied { create } for pid=6411 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.512795][ T5082] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.537120][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 195.714673][ T5082] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 195.769861][ T5082] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 195.808384][ T5082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.811716][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'. [ 195.841063][ T5082] usb 1-1: config 0 descriptor?? [ 196.046608][ T6426] syz.3.409: attempt to access beyond end of device [ 196.046608][ T6426] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 196.073712][ T6426] syz.3.409: attempt to access beyond end of device [ 196.073712][ T6426] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 196.090826][ T6426] syz.3.409: attempt to access beyond end of device [ 196.090826][ T6426] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 196.105581][ T6404] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 196.112226][ T6404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.122188][ T6426] syz.3.409: attempt to access beyond end of device [ 196.122188][ T6426] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 196.135710][ T6404] vhci_hcd vhci_hcd.0: Device attached [ 196.144628][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.160155][ T6426] syz.3.409: attempt to access beyond end of device [ 196.160155][ T6426] loop3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 196.198627][ T6426] syz.3.409: attempt to access beyond end of device [ 196.198627][ T6426] loop3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 196.229829][ T6426] VFS: unable to find oldfs superblock on device loop3 [ 196.274080][ T5082] usb 1-1: string descriptor 0 read error: -71 [ 196.276921][ T6427] vhci_hcd: connection closed [ 196.281103][ T2398] vhci_hcd: stop threads [ 196.308434][ T2398] vhci_hcd: release socket [ 196.320078][ T5082] usb 1-1: USB disconnect, device number 12 [ 196.329471][ T2398] vhci_hcd: disconnect device [ 196.348111][ T5159] vhci_hcd: vhci_device speed not set [ 196.353816][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 196.396933][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.407180][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.441287][ T8] usb 2-1: config 0 descriptor?? [ 196.670787][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 197.206376][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 197.254514][ T8] asix 2-1:0.0: probe with driver asix failed with error -61 [ 197.278279][ T6421] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 197.889386][ T6421] team0: Device veth1_macvtap failed to register rx_handler [ 198.451490][ T6466] syz.3.421: attempt to access beyond end of device [ 198.451490][ T6466] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 198.513498][ T6466] syz.3.421: attempt to access beyond end of device [ 198.513498][ T6466] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 198.556514][ T6466] syz.3.421: attempt to access beyond end of device [ 198.556514][ T6466] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 198.580056][ T6466] syz.3.421: attempt to access beyond end of device [ 198.580056][ T6466] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 198.600635][ T6466] VFS: unable to find oldfs superblock on device loop3 [ 199.209464][ T6482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.569237][ T5173] usb 2-1: USB disconnect, device number 8 [ 199.808319][ T1058] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.943108][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.949932][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.148244][ T1058] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 200.245472][ T1058] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 200.318124][ T1058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.418938][ T1058] usb 5-1: config 0 descriptor?? [ 200.699444][ T6482] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 200.706059][ T6482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.744752][ T6482] vhci_hcd vhci_hcd.0: Device attached [ 200.831305][ T6511] 9pnet_fd: Insufficient options for proto=fd [ 200.938090][ T5173] vhci_hcd: vhci_device speed not set [ 200.948453][ T6501] vhci_hcd: connection closed [ 200.949031][ T2456] vhci_hcd: stop threads [ 200.968825][ T1058] usb 5-1: string descriptor 0 read error: -71 [ 200.988684][ T2456] vhci_hcd: release socket [ 201.009784][ T2456] vhci_hcd: disconnect device [ 201.038530][ T5173] usb 17-2: new full-speed USB device number 2 using vhci_hcd [ 201.047376][ T5173] usb 17-2: enqueue for inactive port 1 [ 201.053687][ T1058] usb 5-1: USB disconnect, device number 6 [ 201.158965][ T5173] vhci_hcd: vhci_device speed not set [ 202.769003][ T46] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 203.001797][ T46] usb 2-1: No LPM exit latency info found, disabling LPM. [ 203.054801][ T46] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 203.121081][ T46] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.209864][ T46] usb 2-1: config 1 interface 0 has no altsetting 0 [ 203.270998][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.293156][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.666306][ T6549] syz.2.448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 204.298706][ T46] usb 2-1: Product: ߬ [ 204.308129][ T46] usb 2-1: SerialNumber: ᐊ [ 204.372899][ T46] usb 2-1: can't set config #1, error -71 [ 204.423297][ T46] usb 2-1: USB disconnect, device number 9 [ 204.539771][ T6555] bio_check_eod: 2 callbacks suppressed [ 204.539796][ T6555] syz.0.454: attempt to access beyond end of device [ 204.539796][ T6555] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 204.750567][ T6555] syz.0.454: attempt to access beyond end of device [ 204.750567][ T6555] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 205.570486][ T6555] syz.0.454: attempt to access beyond end of device [ 205.570486][ T6555] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 205.678577][ T6555] syz.0.454: attempt to access beyond end of device [ 205.678577][ T6555] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 205.758326][ T6555] syz.0.454: attempt to access beyond end of device [ 205.758326][ T6555] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 205.782045][ T6555] syz.0.454: attempt to access beyond end of device [ 205.782045][ T6555] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 205.848547][ T6555] VFS: unable to find oldfs superblock on device loop0 [ 206.307408][ T29] audit: type=1400 audit(1721234023.819:305): avc: denied { getopt } for pid=6586 comm="syz.3.467" laddr=127.0.0.1 lport=40282 faddr=127.0.0.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 206.338969][ T6587] syz.3.467 uses obsolete (PF_INET,SOCK_PACKET) [ 206.346143][ T4484] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 206.439472][ T29] audit: type=1400 audit(1721234023.819:306): avc: denied { create } for pid=6586 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 206.808250][ T5173] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 206.921417][ T6607] syz.0.476: attempt to access beyond end of device [ 206.921417][ T6607] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 206.968093][ T6607] syz.0.476: attempt to access beyond end of device [ 206.968093][ T6607] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 207.018549][ T6607] syz.0.476: attempt to access beyond end of device [ 207.018549][ T6607] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 207.043637][ T5173] usb 3-1: No LPM exit latency info found, disabling LPM. [ 207.055084][ T5173] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 207.076199][ T5173] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.094323][ T6607] syz.0.476: attempt to access beyond end of device [ 207.094323][ T6607] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 207.117773][ T5173] usb 3-1: config 1 interface 0 has no altsetting 0 [ 207.126400][ T6607] VFS: unable to find oldfs superblock on device loop0 [ 207.149328][ T5173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.160205][ T5173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.178082][ T5173] usb 3-1: Product: ߬ [ 207.185710][ T5173] usb 3-1: SerialNumber: ᐊ [ 207.245779][ T6593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.358396][ T1058] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 207.510556][ T5173] usb 3-1: USB disconnect, device number 8 [ 207.559604][ T1058] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 207.575651][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.605258][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.649795][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.659963][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.670161][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.698274][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.720020][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.761691][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.793042][ T4484] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 207.809877][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.824800][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.834656][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.851742][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.865553][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.877703][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.891228][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.900075][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.909199][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.920328][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.926631][ T29] audit: type=1400 audit(1721234025.449:307): avc: denied { rename } for pid=4522 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.929372][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.016471][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.016514][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.018293][ T1058] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.018375][ T1058] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.018426][ T1058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.030095][ T1058] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.047522][ T29] audit: type=1400 audit(1721234025.449:308): avc: denied { unlink } for pid=4522 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.080369][ T1058] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.196735][ T1058] usb 2-1: Product: syz [ 208.204750][ T1058] usb 2-1: Manufacturer: syz [ 208.445430][ T1058] usb 2-1: SerialNumber: syz [ 208.509347][ T1058] usb 2-1: config 0 descriptor?? [ 208.524310][ T1058] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 208.608169][ T29] audit: type=1400 audit(1721234025.449:309): avc: denied { create } for pid=4522 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.693694][ T29] audit: type=1400 audit(1721234025.709:310): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.732507][ T5143] usb 2-1: USB disconnect, device number 10 [ 208.744718][ T5143] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 211.292977][ T29] audit: type=1400 audit(1721234028.809:311): avc: denied { mounton } for pid=6671 comm="syz.1.499" path="/79/file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.398079][ T29] audit: type=1400 audit(1721234028.829:312): avc: denied { bind } for pid=6675 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.477045][ T29] audit: type=1400 audit(1721234028.829:313): avc: denied { name_bind } for pid=6675 comm="syz.2.502" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 211.558106][ T29] audit: type=1400 audit(1721234028.829:314): avc: denied { node_bind } for pid=6675 comm="syz.2.502" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 211.623074][ T29] audit: type=1400 audit(1721234028.839:315): avc: denied { write } for pid=6675 comm="syz.2.502" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.702814][ T29] audit: type=1400 audit(1721234028.839:316): avc: denied { name_connect } for pid=6675 comm="syz.2.502" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 211.823127][ T29] audit: type=1400 audit(1721234029.339:317): avc: denied { setopt } for pid=6685 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.032943][ T29] audit: type=1400 audit(1721234029.549:318): avc: denied { create } for pid=6687 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 212.281174][ T29] audit: type=1400 audit(1721234029.799:319): avc: denied { create } for pid=6690 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.361283][ T6694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.491376][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 212.499069][ T29] audit: type=1400 audit(1721234030.009:320): avc: denied { ioctl } for pid=6696 comm="syz.3.510" path="socket:[11667]" dev="sockfs" ino=11667 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.698247][ T1058] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.909165][ T1058] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 212.967065][ T1058] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 212.995498][ T1058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.032427][ T1058] usb 2-1: config 0 descriptor?? [ 213.272662][ T6694] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 213.279273][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.327713][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 213.486424][ T6716] vhci_hcd: connection closed [ 213.486872][ T2470] vhci_hcd: stop threads [ 213.506301][ T2470] vhci_hcd: release socket [ 213.518840][ T5143] vhci_hcd: vhci_device speed not set [ 213.524777][ T1058] usb 2-1: string descriptor 0 read error: -71 [ 213.532316][ T2470] vhci_hcd: disconnect device [ 213.570192][ T1058] usb 2-1: USB disconnect, device number 11 [ 213.622375][ T5143] usb 11-2: new full-speed USB device number 2 using vhci_hcd [ 213.638335][ T5143] usb 11-2: enqueue for inactive port 1 [ 213.738545][ T5143] vhci_hcd: vhci_device speed not set [ 213.857703][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 215.489132][ T6750] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 215.809955][ T29] audit: type=1400 audit(1721234033.329:321): avc: denied { read } for pid=6758 comm="syz.3.534" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.970761][ T6764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 215.993678][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 216.094812][ T6765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.102882][ T6765] IPv6: NLM_F_CREATE should be set when creating new route [ 216.251661][ T6763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6763 comm=syz.0.535 [ 216.298040][ T5159] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.316066][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 216.509063][ T5159] usb 3-1: too many configurations: 12, using maximum allowed: 8 [ 216.550600][ T5159] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 216.580712][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.602149][ T4484] Bluetooth: hci0: link tx timeout [ 216.619577][ T5159] usb 3-1: config 0 descriptor?? [ 216.835969][ T6764] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 216.842667][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.854551][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 217.012186][ T5159] usb 3-1: string descriptor 0 read error: -71 [ 217.030291][ T6770] vhci_hcd: connection closed [ 217.031552][ T2398] vhci_hcd: stop threads [ 217.061097][ T2398] vhci_hcd: release socket [ 217.073792][ T8] vhci_hcd: vhci_device speed not set [ 217.075984][ T2398] vhci_hcd: disconnect device [ 217.103815][ T5159] usb 3-1: USB disconnect, device number 9 [ 217.174565][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'. [ 217.498159][ T1682] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.707990][ T1682] usb 2-1: Using ep0 maxpacket: 8 [ 217.720855][ T1682] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 217.745051][ T1682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.783508][ T1682] usb 2-1: config 0 descriptor?? [ 218.007101][ T1682] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 218.100904][ T6795] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 218.136698][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 218.136749][ T29] audit: type=1400 audit(1721234035.649:327): avc: denied { create } for pid=6796 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 218.198291][ T29] audit: type=1400 audit(1721234035.719:328): avc: denied { sys_admin } for pid=6796 comm="syz.2.548" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 218.440242][ T6777] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 218.466211][ T6777] team0: Device veth1_macvtap failed to register rx_handler [ 218.483680][ T1682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 218.517040][ T1682] asix 2-1:0.0: probe with driver asix failed with error -61 [ 220.248365][ T5173] usb 2-1: USB disconnect, device number 12 [ 220.311353][ T6819] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 220.364557][ T6822] 9pnet_fd: Insufficient options for proto=fd [ 220.688723][ T1058] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.901168][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 221.000656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 221.007716][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 221.014418][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 221.020940][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 221.027571][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 221.034094][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 221.040763][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 221.047259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.055339][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.063254][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.071317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.079221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.087243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.095164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.103223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.111137][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.119294][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.127163][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.135242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.143416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.151507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.159417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.167449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.175377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.183458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.191471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.199544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.207412][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.215509][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.223431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.231530][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.239443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.247479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.255416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.263482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.271408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.279479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.287350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.295561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.303482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.311563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.319483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.327513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.335454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.343522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.351458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.359516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.367388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.375474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.383393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.391460][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.399362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.407400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.415325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.423412][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.431325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.432446][ T29] audit: type=1400 audit(1721234038.939:329): avc: denied { write } for pid=6841 comm="syz.4.564" name="event2" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.439369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.471238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.471423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.471448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.471602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.471626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.472908][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.472934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.498923][ T1058] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 221.514440][ T1058] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 221.577292][ T1058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.605086][ T1058] usb 4-1: config 0 descriptor?? [ 221.848011][ T6819] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 221.854617][ T6819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.878162][ T6819] vhci_hcd vhci_hcd.0: Device attached [ 222.069030][ T4484] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 222.143649][ T1058] usb 4-1: string descriptor 0 read error: -71 [ 222.168010][ T6848] vhci_hcd: connection closed [ 222.198692][ T2470] vhci_hcd: stop threads [ 222.231483][ T1058] usb 4-1: USB disconnect, device number 5 [ 222.237507][ T2470] vhci_hcd: release socket [ 222.254044][ T2470] vhci_hcd: disconnect device [ 222.497426][ T29] audit: type=1400 audit(1721234039.939:330): avc: denied { connect } for pid=6850 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.577527][ T4484] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 225.411073][ T6899] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.738474][ T1058] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 225.792395][ T5107] Bluetooth: hci4: link tx timeout [ 226.560371][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 226.718890][ T1058] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 226.793579][ T1058] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 226.815300][ T1058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.852200][ T1058] usb 5-1: config 0 descriptor?? [ 227.030802][ T5107] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 227.079584][ T6899] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 227.086183][ T6899] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.157280][ T6899] vhci_hcd vhci_hcd.0: Device attached [ 227.366608][ T6916] vhci_hcd: connection closed [ 227.367028][ T5402] vhci_hcd: stop threads [ 227.368413][ T5082] vhci_hcd: vhci_device speed not set [ 227.385470][ T1058] usb 5-1: string descriptor 0 read error: -71 [ 227.408620][ T5402] vhci_hcd: release socket [ 227.448698][ T5402] vhci_hcd: disconnect device [ 227.478189][ T5082] usb 17-2: new full-speed USB device number 3 using vhci_hcd [ 227.511188][ T5082] usb 17-2: enqueue for inactive port 1 [ 227.514804][ T1058] usb 5-1: USB disconnect, device number 7 [ 227.622459][ T5107] Bluetooth: hci2: command 0x0406 tx timeout [ 227.628241][ T5082] vhci_hcd: vhci_device speed not set [ 227.756220][ T6924] syz.0.589[6924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.756477][ T6924] syz.0.589[6924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.991032][ T29] audit: type=1400 audit(1721234048.499:331): avc: denied { ioctl } for pid=6946 comm="syz.0.598" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 231.385853][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 231.455232][ T6966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.766764][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.998511][ T8] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 232.026372][ T8] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 232.048022][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.070192][ T29] audit: type=1400 audit(1721234049.589:332): avc: denied { bind } for pid=6980 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.099546][ T8] usb 5-1: config 0 descriptor?? [ 232.280540][ T29] audit: type=1400 audit(1721234049.799:333): avc: denied { create } for pid=6984 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.350087][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 232.366368][ T6966] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 232.373037][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.398999][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 232.592322][ T6986] vhci_hcd: connection closed [ 232.593053][ T5400] vhci_hcd: stop threads [ 232.608087][ T5173] vhci_hcd: vhci_device speed not set [ 232.619653][ T8] usb 5-1: string descriptor 0 read error: -71 [ 232.625034][ T5400] vhci_hcd: release socket [ 232.659404][ T5400] vhci_hcd: disconnect device [ 232.694479][ T8] usb 5-1: USB disconnect, device number 8 [ 232.726483][ T5173] usb 17-2: new full-speed USB device number 4 using vhci_hcd [ 232.758356][ T5173] usb 17-2: enqueue for inactive port 1 [ 232.858698][ T5173] vhci_hcd: vhci_device speed not set [ 233.718102][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.794657][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.020142][ T5107] Bluetooth: hci3: command 0x0406 tx timeout [ 234.455329][ T7033] netlink: 248 bytes leftover after parsing attributes in process `syz.2.626'. [ 234.476210][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 235.059992][ T7042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.368101][ T5082] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.450902][ T29] audit: type=1400 audit(1721234052.969:334): avc: denied { ioctl } for pid=7050 comm="syz.0.634" path="socket:[12270]" dev="sockfs" ino=12270 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 235.554801][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.580779][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.609037][ T5082] usb 3-1: too many configurations: 12, using maximum allowed: 8 [ 235.674371][ T5082] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 235.692042][ T5082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.722693][ T5082] usb 3-1: config 0 descriptor?? [ 235.984326][ T7042] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 235.990939][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.028105][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 236.074663][ T5107] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 236.219651][ T4484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 236.238038][ T1058] vhci_hcd: vhci_device speed not set [ 236.265405][ T7060] vhci_hcd: connection closed [ 236.267217][ T953] vhci_hcd: stop threads [ 236.271981][ T5082] usb 3-1: string descriptor 0 read error: -71 [ 236.298134][ T953] vhci_hcd: release socket [ 236.304937][ T5082] usb 3-1: USB disconnect, device number 10 [ 236.315552][ T953] vhci_hcd: disconnect device [ 236.320960][ T1058] usb 13-2: new full-speed USB device number 3 using vhci_hcd [ 236.360845][ T1058] usb 13-2: enqueue for inactive port 1 [ 236.459824][ T1058] vhci_hcd: vhci_device speed not set [ 237.019733][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.646'. [ 237.451305][ T29] audit: type=1400 audit(1721234054.969:335): avc: denied { write } for pid=7093 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.695685][ T7105] netlink: 2 bytes leftover after parsing attributes in process `syz.3.655'. [ 237.699925][ T7101] pim6reg1: entered promiscuous mode [ 237.718412][ T7101] pim6reg1: entered allmulticast mode [ 237.797353][ T29] audit: type=1400 audit(1721234055.309:336): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 237.998640][ T4484] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 238.218141][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.431149][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.474022][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.546695][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.604270][ T8] usb 3-1: config 0 descriptor?? [ 239.102119][ T7119] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.428088][ T5082] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 239.568730][ T5173] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 239.647756][ T5082] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 239.695302][ T5082] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 239.705560][ T5082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.740572][ T5082] usb 1-1: config 0 descriptor?? [ 239.750009][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.767240][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.780610][ T29] audit: type=1326 audit(1721234057.299:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz.4.664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcaf175a99 code=0x0 [ 239.815701][ T5173] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 239.829216][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.831015][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 239.853369][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.864903][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 239.877974][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.894408][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.908610][ T8] usb 3-1: USB disconnect, device number 11 [ 239.922306][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.961253][ T7119] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 239.967864][ T7119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.975612][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.996839][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.008642][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.010854][ T7119] vhci_hcd vhci_hcd.0: Device attached [ 240.039886][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.052578][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.061997][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.073390][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.082314][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.091705][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.105906][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.140898][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.156285][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.209957][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.242819][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.262586][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.279138][ T5143] vhci_hcd: vhci_device speed not set [ 240.291616][ T7132] vhci_hcd: connection closed [ 240.293704][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.295160][ T953] vhci_hcd: stop threads [ 240.299750][ T5082] usb 1-1: string descriptor 0 read error: -71 [ 240.322556][ T953] vhci_hcd: release socket [ 240.331849][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.337931][ T953] vhci_hcd: disconnect device [ 240.345365][ T5173] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.364489][ T5143] usb 9-2: new full-speed USB device number 4 using vhci_hcd [ 240.365261][ T5082] usb 1-1: USB disconnect, device number 13 [ 240.380531][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.391965][ T5143] usb 9-2: enqueue for inactive port 1 [ 240.393512][ T5173] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 240.422689][ T5173] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 240.438651][ T5173] usb 2-1: Product: syz [ 240.444022][ T5173] usb 2-1: Manufacturer: syz [ 240.457339][ T5173] usb 2-1: SerialNumber: syz [ 240.488336][ T5173] usb 2-1: config 0 descriptor?? [ 240.490024][ T5143] vhci_hcd: vhci_device speed not set [ 240.544445][ T5173] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 240.731696][ T5082] usb 2-1: USB disconnect, device number 13 [ 240.769680][ T5082] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 240.800700][ T7142] Cannot find del_set index 0 as target [ 242.579723][ T7172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.948633][ T5082] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.108764][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 243.159987][ T5082] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 243.233808][ T5082] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 243.256601][ T5082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.289157][ T5082] usb 2-1: config 0 descriptor?? [ 243.309662][ T4484] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 243.320627][ T46] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 243.337107][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.346467][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.367959][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.378288][ T4484] Bluetooth: hci1: command 0x0406 tx timeout [ 243.387806][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.397010][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.408479][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.424833][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.434089][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.445490][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.455615][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.466085][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.483829][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.496606][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.505941][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.546704][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.561301][ T7172] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 243.567894][ T7172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.584831][ T7172] vhci_hcd vhci_hcd.0: Device attached [ 243.586007][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.626668][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.639079][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.648002][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.657273][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.687623][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.697354][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.708259][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.724069][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.797062][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.808437][ T8] vhci_hcd: vhci_device speed not set [ 243.840252][ T4484] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 243.857052][ T46] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.876741][ T46] usb 5-1: Product: syz [ 243.881806][ T46] usb 5-1: Manufacturer: syz [ 243.888881][ T46] usb 5-1: SerialNumber: syz [ 243.888967][ T8] usb 11-2: new full-speed USB device number 3 using vhci_hcd [ 243.899007][ T46] usb 5-1: config 0 descriptor?? [ 243.917584][ T46] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 243.952513][ T7195] vhci_hcd: connection closed [ 243.953234][ T953] vhci_hcd: stop threads [ 243.964308][ T5082] usb 2-1: string descriptor 0 read error: -71 [ 243.996927][ T953] vhci_hcd: release socket [ 244.010782][ T953] vhci_hcd: disconnect device [ 244.068159][ T5082] usb 2-1: USB disconnect, device number 14 [ 244.143470][ T46] usb 5-1: USB disconnect, device number 9 [ 244.170676][ T46] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 244.692388][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 245.481434][ T4484] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 245.609998][ T4484] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 246.329323][ T7241] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.622126][ T5082] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.820013][ T5082] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 246.873595][ T5082] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 246.899345][ T5082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.926981][ T5082] usb 5-1: config 0 descriptor?? [ 247.064239][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 247.167439][ T7241] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 247.174053][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.200264][ T7241] vhci_hcd vhci_hcd.0: Device attached [ 247.408147][ T5143] vhci_hcd: vhci_device speed not set [ 247.428223][ T7253] vhci_hcd: connection closed [ 247.428572][ T953] vhci_hcd: stop threads [ 247.428886][ T5082] usb 5-1: string descriptor 0 read error: -71 [ 247.435833][ T953] vhci_hcd: release socket [ 247.498561][ T5082] usb 5-1: USB disconnect, device number 10 [ 247.501280][ T5143] usb 17-2: new full-speed USB device number 5 using vhci_hcd [ 247.512229][ T953] vhci_hcd: disconnect device [ 247.544487][ T5143] usb 17-2: enqueue for inactive port 1 [ 247.550623][ T5145] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 247.658515][ T5143] vhci_hcd: vhci_device speed not set [ 247.769137][ T5145] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 247.795033][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.838314][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.876211][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.903188][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.948411][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.977929][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.005967][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.033952][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.055898][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.064843][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.073999][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.095186][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.104222][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.138378][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.170294][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.205349][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.235544][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.267306][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.286822][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.298916][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.336363][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.345824][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.355902][ T5145] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.387493][ T5145] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.401981][ T5145] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 248.414843][ T5145] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 248.441448][ T5145] usb 1-1: Product: syz [ 248.457198][ T5145] usb 1-1: Manufacturer: syz [ 248.476335][ T5145] usb 1-1: SerialNumber: syz [ 248.510449][ T5145] usb 1-1: config 0 descriptor?? [ 248.563004][ T5145] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 248.770336][ T5145] usb 1-1: USB disconnect, device number 14 [ 248.808503][ T5145] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 249.139362][ T8] vhci_hcd: vhci_device speed not set [ 251.988531][ T4484] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 253.301026][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 253.555105][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.910328][ T8] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 255.929986][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.939753][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.951211][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.962078][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.000947][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.054981][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.158896][ T8] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 256.245069][ T8] usb 1-1: can't read configurations, error -71 [ 258.836792][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 261.384348][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.401490][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.769613][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 262.539227][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 263.064012][ T4484] Bluetooth: hci0: command 0x0406 tx timeout [ 264.261495][ T4484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.274481][ T4484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.290106][ T4484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.300328][ T4484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.309176][ T4484] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.316996][ T4484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.353849][ T29] audit: type=1400 audit(1721234081.859:338): avc: denied { mounton } for pid=7429 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 265.908473][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 266.418127][ T4484] Bluetooth: hci5: command tx timeout [ 267.030832][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 267.805151][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.828349][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.853278][ T7429] bridge_slave_0: entered allmulticast mode [ 267.876035][ T7429] bridge_slave_0: entered promiscuous mode [ 267.914151][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.921926][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 267.930020][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.958670][ T7429] bridge_slave_1: entered allmulticast mode [ 267.986013][ T7429] bridge_slave_1: entered promiscuous mode [ 268.250858][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.346627][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.498281][ T4484] Bluetooth: hci5: command tx timeout [ 269.241928][ T7429] team0: Port device team_slave_0 added [ 269.291041][ T7429] team0: Port device team_slave_1 added [ 270.582405][ T5107] Bluetooth: hci5: command tx timeout [ 272.018233][ T5107] Bluetooth: hci4: command 0x0406 tx timeout [ 272.657984][ T4484] Bluetooth: hci5: command tx timeout [ 273.607090][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.629177][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.695592][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.758835][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.779367][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.839915][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.339322][ T7429] hsr_slave_0: entered promiscuous mode [ 274.370268][ T7429] hsr_slave_1: entered promiscuous mode [ 274.384954][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.408579][ T7429] Cannot create hsr debugfs directory [ 276.395061][ T7429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.701960][ T7429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.105535][ T7429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.913143][ T7429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.436093][ T29] audit: type=1400 audit(1721234095.949:339): avc: denied { read } for pid=7578 comm="syz.0.827" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.462185][ T7580] program syz.0.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.557151][ T29] audit: type=1400 audit(1721234095.949:340): avc: denied { open } for pid=7578 comm="syz.0.827" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 279.060144][ T4484] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 280.375955][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 282.662372][ T29] audit: type=1400 audit(1721234100.179:341): avc: denied { ioctl } for pid=7620 comm="syz.3.843" path="socket:[14332]" dev="sockfs" ino=14332 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.063434][ T7429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.107991][ T46] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 283.155130][ T7429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.216929][ T7429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.266259][ T7429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.343319][ T46] usb 1-1: No LPM exit latency info found, disabling LPM. [ 283.448209][ T46] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 283.568891][ T46] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.608128][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 283.660400][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.704608][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.728411][ T46] usb 1-1: Product: ߬ [ 283.732725][ T46] usb 1-1: SerialNumber: ᐊ [ 283.749864][ T7627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 284.021074][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.076382][ T46] usb 1-1: USB disconnect, device number 17 [ 284.183909][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.307842][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 284.404732][ T29] audit: type=1400 audit(1721234101.919:342): avc: denied { write } for pid=7648 comm="syz.4.855" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 284.492372][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.499939][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.242084][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 288.410178][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.417458][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.502517][ T29] audit: type=1400 audit(1721234106.009:343): avc: denied { unmount } for pid=5091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 288.820825][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 289.663455][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 289.715050][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.962754][ T7719] tipc: Started in network mode [ 289.999437][ T7719] tipc: Node identity 4a4efd1580e3, cluster identity 4711 [ 290.010201][ T7719] tipc: Enabled bearer , priority 0 [ 290.369506][ T7722] tipc: Resetting bearer [ 290.832559][ T5159] tipc: Resetting bearer [ 290.905991][ T7718] tipc: Resetting bearer [ 291.101615][ T1058] tipc: Node number set to 3400400149 [ 397.937819][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 397.944868][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7742/1:b..l P5400/1:b..l [ 397.954356][ C1] rcu: (detected by 1, t=10502 jiffies, g=32717, q=400 ncpus=2) [ 397.962091][ C1] task:kworker/u8:16 state:R running task stack:24368 pid:5400 tgid:5400 ppid:2 flags:0x00004000 [ 397.974857][ C1] Workqueue: bat_events batadv_nc_worker [ 397.980528][ C1] Call Trace: [ 397.983811][ C1] [ 397.986781][ C1] __schedule+0xe37/0x5490 [ 397.991223][ C1] ? __pfx_mark_lock+0x10/0x10 [ 397.996001][ C1] ? __pfx___schedule+0x10/0x10 [ 398.000876][ C1] ? irqentry_exit+0x3b/0x90 [ 398.005492][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.010707][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 398.016786][ C1] preempt_schedule_notrace+0x62/0xe0 [ 398.022198][ C1] preempt_schedule_notrace_thunk+0x1a/0x30 [ 398.028115][ C1] ? batadv_nc_worker+0x8cb/0x10f0 [ 398.033277][ C1] rcu_is_watching+0x8e/0xc0 [ 398.037893][ C1] batadv_nc_worker+0xc0d/0x10f0 [ 398.042889][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 398.048280][ C1] ? __pfx_lock_release+0x10/0x10 [ 398.053334][ C1] process_one_work+0x9c5/0x1b40 [ 398.058288][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 398.063673][ C1] ? __pfx_process_one_work+0x10/0x10 [ 398.069060][ C1] ? assign_work+0x1a0/0x250 [ 398.073674][ C1] worker_thread+0x6c8/0xf20 [ 398.078286][ C1] ? __pfx_worker_thread+0x10/0x10 [ 398.083409][ C1] kthread+0x2c1/0x3a0 [ 398.087510][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.092723][ C1] ? __pfx_kthread+0x10/0x10 [ 398.097328][ C1] ret_from_fork+0x45/0x80 [ 398.101772][ C1] ? __pfx_kthread+0x10/0x10 [ 398.106398][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.111208][ C1] [ 398.114237][ C1] task:modprobe state:R running task stack:25008 pid:7742 tgid:7742 ppid:2456 flags:0x00000002 [ 398.125995][ C1] Call Trace: [ 398.129292][ C1] [ 398.132230][ C1] __schedule+0xe37/0x5490 [ 398.136668][ C1] ? arch_stack_walk+0x118/0x170 [ 398.141642][ C1] ? __pfx_mark_lock+0x10/0x10 [ 398.146438][ C1] ? __pfx___schedule+0x10/0x10 [ 398.151346][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 398.156824][ C1] ? stack_depot_save_flags+0x28/0x8f0 [ 398.162320][ C1] ? __pfx_mark_lock+0x10/0x10 [ 398.167114][ C1] ? mark_held_locks+0x9f/0xe0 [ 398.171904][ C1] preempt_schedule_irq+0x51/0x90 [ 398.176967][ C1] irqentry_exit+0x36/0x90 [ 398.181423][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.187420][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2d/0x60 [ 398.193597][ C1] Code: fa 65 48 8b 15 04 dc 75 7e 65 8b 05 05 dc 75 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 1c 16 00 00 85 c0 74 2b <8b> 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 [ 398.213226][ C1] RSP: 0018:ffffc9000360f748 EFLAGS: 00000246 [ 398.219325][ C1] RAX: 0000000080000000 RBX: ffff88807b64b000 RCX: ffffffff8ad91ff3 [ 398.227304][ C1] RDX: ffff88807ef58000 RSI: ffffffff8ad92005 RDI: 0000000000000007 [ 398.235283][ C1] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 398.243278][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 398.251256][ C1] R13: 000000000000000e R14: 0000000000000001 R15: ffff8880791738b8 [ 398.259255][ C1] ? mt_validate_nulls+0x463/0x9e0 [ 398.264403][ C1] ? mt_validate_nulls+0x475/0x9e0 [ 398.269537][ C1] mt_validate_nulls+0x475/0x9e0 [ 398.274518][ C1] ? __pfx_mt_validate_nulls+0x10/0x10 [ 398.279997][ C1] ? mas_next_node+0x7c1/0xf40 [ 398.284777][ C1] mt_validate+0x3148/0x4390 [ 398.289396][ C1] ? __pfx_mt_validate+0x10/0x10 [ 398.294373][ C1] ? vma_complete+0x496/0xdb0 [ 398.299075][ C1] ? uprobe_mmap+0x12e/0x1240 [ 398.303782][ C1] validate_mm+0x9c/0x4b0 [ 398.308175][ C1] ? __pfx_uprobe_mmap+0x10/0x10 [ 398.313144][ C1] ? __pfx_validate_mm+0x10/0x10 [ 398.318096][ C1] ? vma_complete+0xa10/0xdb0 [ 398.322803][ C1] __split_vma+0xd68/0x11c0 [ 398.327341][ C1] ? __pfx___split_vma+0x10/0x10 [ 398.332302][ C1] vma_modify+0x2b9/0x360 [ 398.336641][ C1] mprotect_fixup+0x220/0xc40 [ 398.341336][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 398.346549][ C1] do_mprotect_pkey+0x9d7/0xd70 [ 398.351433][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 398.356824][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 398.362156][ C1] __x64_sys_mprotect+0x78/0xc0 [ 398.367059][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.372290][ C1] do_syscall_64+0xcd/0x250 [ 398.376812][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.382717][ C1] RIP: 0033:0x7fa36c8cebb7 [ 398.387163][ C1] RSP: 002b:00007ffe07619578 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 398.395588][ C1] RAX: ffffffffffffffda RBX: 00007fa36c8e2ab0 RCX: 00007fa36c8cebb7 [ 398.403580][ C1] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007fa36c8e0000 [ 398.411560][ C1] RBP: 00007ffe07619690 R08: 00007ffe07610000 R09: 00007fa36c8ab5c0 [ 398.419551][ C1] R10: 00007fa36c8b3858 R11: 0000000000000206 R12: 00007fa36c8e2ab0 [ 398.427529][ C1] R13: 00007fa36c8d6eda R14: 00007fa36c8e19f0 R15: 00007fa36c8e1f40 [ 398.435519][ C1] [ 398.438562][ C1] rcu: rcu_preempt kthread starved for 10380 jiffies! g32717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 398.449767][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 398.459765][ C1] rcu: RCU grace-period kthread stack dump: [ 398.465648][ C1] task:rcu_preempt state:R running task stack:27312 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 398.477384][ C1] Call Trace: [ 398.480659][ C1] [ 398.483589][ C1] __schedule+0xe37/0x5490 [ 398.488037][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 398.493249][ C1] ? __pfx___schedule+0x10/0x10 [ 398.498109][ C1] ? schedule+0x298/0x350 [ 398.502469][ C1] ? __pfx_lock_release+0x10/0x10 [ 398.507499][ C1] ? __pfx___mod_timer+0x10/0x10 [ 398.512460][ C1] ? lock_acquire+0x1b1/0x560 [ 398.517172][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 398.522654][ C1] schedule+0xe7/0x350 [ 398.526751][ C1] schedule_timeout+0x136/0x2a0 [ 398.531619][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 398.537203][ C1] ? __pfx_process_timeout+0x10/0x10 [ 398.542529][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 398.548358][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 398.553826][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 398.558620][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 398.563926][ C1] ? rcu_gp_init+0xc82/0x1630 [ 398.568644][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 398.573878][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.579717][ C1] rcu_gp_kthread+0x271/0x380 [ 398.584420][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 398.589637][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.594942][ C1] ? __kthread_parkme+0x148/0x220 [ 398.599998][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 398.605210][ C1] kthread+0x2c1/0x3a0 [ 398.609292][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.614507][ C1] ? __pfx_kthread+0x10/0x10 [ 398.619120][ C1] ret_from_fork+0x45/0x80 [ 398.623559][ C1] ? __pfx_kthread+0x10/0x10 [ 398.628203][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.632982][ C1] [ 398.636004][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 398.642329][ C1] Sending NMI from CPU 1 to CPUs 0: [ 398.647550][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20