last executing test programs: 1m50.922563843s ago: executing program 0 (id=463): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="9c91d779027f1b4ca046b42f083d", 0x5ee, 0x24008850, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 1m50.861855654s ago: executing program 0 (id=464): socket$netlink(0x10, 0x3, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) 1m49.917004739s ago: executing program 0 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000) 1m49.916798357s ago: executing program 0 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000000)='source') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 1m49.782134189s ago: executing program 0 (id=474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001501b1d685"], 0x18}}], 0x2, 0x20000000) 1m49.476693662s ago: executing program 0 (id=477): mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="30a8", 0x2) 1m49.423018914s ago: executing program 32 (id=477): mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="30a8", 0x2) 1.849968932s ago: executing program 1 (id=2075): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0xffff, 0x0, 0x1}) write$snddsp(r2, &(0x7f0000000080)='i', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x19ee0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.046745169s ago: executing program 3 (id=2080): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0xc6, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x90, 0x3a, 0x0, @private0, @mcast2, {[@fragment={0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x65}, @routing={0x73, 0x0, 0x1, 0x6b}, @hopopts={0x21, 0x7, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x23, 0x247e, [0x800000000000]}}, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x9}]}], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8002e002a"], 0x33) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x4000) 969.817295ms ago: executing program 3 (id=2082): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00@\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 969.261253ms ago: executing program 4 (id=2083): r0 = socket(0x11, 0xa, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'gre0\x00'}) socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073007a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x208000, 0x0) 968.279525ms ago: executing program 1 (id=2084): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYRES32=r1, @ANYBLOB="14000180080001000000010005"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 964.720324ms ago: executing program 1 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000580080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004810) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000013c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x210, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3ff, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x56, 0xc5, "40a62caae980d28258540731b79ddace36fb66851b0e20b072fe1cd1554ea9b6fa1d8b5cad2a5392b994a28e4069567693a85393f8e76064360e3c6c88600e749923dd8bffb1e033982aea7fc863643ed4be"}, @NL80211_ATTR_VENDOR_DATA={0x4b, 0xc5, "07482f4fde41a75db657bb0cc6420e39879ce8a49c38f939a75bd120194fbb89b137fb0f42d017c8f7205ed600caa8ade77eea774e3c05f147dfd087cdcfe1d31b851dbbb07c1d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x46d}, @NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000800}, 0x87) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r8, @ANYBLOB="000233d553d04cdb1fb329af7000ffdbdf250100e900c350987599781621a2238fa608c8d008000100", @ANYRES32=r15, @ANYBLOB="060006004e23000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000060006004e230000140002007767320000000000000000000000000014000200776732000000000000000000000000001400020077673000"/120], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x408f0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7004fddbdf252700000008000300", @ANYRES32=r16, @ANYBLOB="0a0006"], 0x34}}, 0x4) 964.511735ms ago: executing program 3 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7004fddbdf252700000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x34}}, 0x4) (fail_nth: 6) 881.792993ms ago: executing program 3 (id=2088): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {}, [{0x8, 0x4}], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000001140)=""/245, 0x71) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 881.153623ms ago: executing program 1 (id=2089): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYRES32=r1, @ANYBLOB="14000180080001000000010005"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 825.32858ms ago: executing program 4 (id=2090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="436f5e29b6bb500e7f6b8c1e3b2ea7da76a6236f14a4ec74161e4d3cc2436ec474b691ebbb49818f43a6a580924d6f1d068c7f3827e3d4ae60aa3e6c927ae86dc969b7053a2d8c8e9e93d7d147b0bd687f371f96c4a9f262d4f945c14e0c4773368aece8138582e6fe3dc12349c04ca1bae7f2c7df319fb4db874a6b24e40882", 0x80) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtaction={0x244, 0x30, 0x9, 0x70bd2c, 0x25dfdbff, {}, [{0x1ac, 0x1, [@m_xt={0xa8, 0x20, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x4a, 0x6, "377f9c50d1767afaeb0a1b247741b209014efd2738d993324d2940899b02b9a0084305888756fdd4051eb72b8a666c8794e6e78e5258f148df9e510ca883a557a1412069ce97"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xc0, 0x15, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x98, 0x8, 0xfffffffc, 0x3c9}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffc}]}, {0x28, 0x6, "54389bf4025759a34f5e06e189ba5ec80b3e4ceeacc62595a5407819ffbe677f980880f1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x40, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}]}, {0xc, 0x6, "895ccdd12da241b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x84, 0x1, [@m_sample={0x80, 0x7, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fffffff}]}, {0x2b, 0x6, "5aff3299fb4b1859b89bb82bb83eae47b8db6afb80a8c0d3fb57f6dc3db4c9460ab2b951bf8c9c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2804}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6100000000403a00fc000000000000000000000000000000ff02000000000000000000000000000101049078000000006d3103000f4e000100000000000000000000ffffac1e0101ff0200000000000000000000000000013a000c08680000000d00000000000000659f884c4d3c56f6899573792cc8400a92889837507f782a1f48602fe28b2c51174b1c8a780293513b962d5a61df7623df7a41c7b28f869769111945f110dddedb2dd680e72ac80f37f07ebb5d25151d954eb6067c9db5277deb5d356e621417d3cbb4afb0a86f8b7cb66d56df93d4d2ebb6124280"], 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000000) 823.371909ms ago: executing program 1 (id=2091): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/230, 0xe6}], 0x9, &(0x7f0000000780)=""/142, 0x8e}, 0x49}], 0x1, 0x2000, &(0x7f0000000880)={0x0, 0x3938700}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 823.118238ms ago: executing program 3 (id=2092): unshare(0x28000600) unshare(0x20040600) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xfffffffdffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 732.069663ms ago: executing program 4 (id=2093): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYRES32=r1, @ANYBLOB="14000180080001000000010005"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 731.507814ms ago: executing program 1 (id=2094): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = creat(&(0x7f0000000280)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x10, r5, 0x0}, 0x0]) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) r10 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x494, &(0x7f0000000d40)=ANY=[]) pselect6(0x40, &(0x7f0000000100)={0x0, 0x23, 0x5, 0x0, 0x804, 0x0, 0x2, 0x7}, 0x0, &(0x7f0000000240)={0x21, 0x0, 0x0, 0x0, 0x6, 0x3, 0xea9, 0x6}, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000000000008900000008000300", @ANYRES32=r9, @ANYBLOB="180000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 681.982862ms ago: executing program 4 (id=2095): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00`\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 681.726402ms ago: executing program 4 (id=2096): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000b00)={&(0x7f00000006c0)={{@local, 0x4c3}, {@local, 0x6}, 0x400, "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"}, 0x418, 0xffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000b00)={&(0x7f00000006c0)={{@local, 0x4c3}, {@local, 0x6}, 0x400, "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"}, 0x418, 0xffffffff}) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) 681.383639ms ago: executing program 3 (id=2097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x480000) close_range(r0, r1, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x10, r2, 0x0}, 0x0]) 431.342902ms ago: executing program 4 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x4002000, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000401000057bf048000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_cmd_rej_unk={{0x1, 0x80}, {0xa}}}}, 0x17) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2000000000000092, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) syz_emit_vhci(0x0, 0x0) fcntl$setflags(r3, 0x2, 0x1) syz_emit_vhci(0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000380)={0x7, 0xbc19}) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000400)={0x0, 0x1, 0x2, 0x0, 0x0, [{{r3}, 0xff}, {{}, 0x8d}]}) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000480)) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x200d}}}, 0x7) accept4(r4, 0x0, 0x0, 0x800) write$tun(r4, &(0x7f00000005c0)={@val={0x0, 0x88a2}, @void, @llc={@llc={0x4e, 0x7e, 'j\n', "9df3f22a1589"}}}, 0xe) syz_usb_connect$uac2(0x4, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) getegid() ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) 310.39731ms ago: executing program 2 (id=2101): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000a0002"], 0x28}}, 0x40040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="142894754e7dc801dfa0d27918482036", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004094}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1401, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000840) 310.185066ms ago: executing program 2 (id=2102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/67, &(0x7f0000000000)=0x43) 241.544442ms ago: executing program 2 (id=2103): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="9c91d779027f1b4ca046b42f083d", 0x5ee, 0x24008850, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x12) 241.27481ms ago: executing program 2 (id=2104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x80d0002, 0xa, 0xc, 0xd96, 0x0, [{0x5, 0x5, 0x26, '\x00', 0x2}, {0x5, 0x23, 0x0, '\x00', 0x7}, {0x0, 0xf0, 0x9, '\x00', 0x4}, {0x9, 0xd3, 0xa, '\x00', 0xa}, {0x9, 0x7, 0x5f, '\x00', 0x1}, {0x6, 0x80, 0x5, '\x00', 0x8}, {0x6, 0x3, 0x0, '\x00', 0x4}, {0x1, 0x7, 0x5, '\x00', 0xe}, {0x1, 0xf8, 0x9, '\x00', 0x3}, {0xff, 0x7f, 0x6, '\x00', 0x8}, {0x1, 0x6, 0x4, '\x00', 0x4}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x6e, 0x6, 0x0, '\x00', 0x3}, {0x7f, 0x5, 0x3, '\x00', 0x9f}, {0xd, 0x3, 0x4, '\x00', 0x9}, {0x9, 0x2, 0xf7, '\x00', 0xc9}, {0x3, 0x1, 0x0, '\x00', 0xde}, {0x27, 0x93, 0x9}, {0xe, 0x5, 0x0, '\x00', 0x3}, {0xd3, 0xff, 0x1, '\x00', 0xd}, {0x50, 0x5, 0x94, '\x00', 0x9}, {0x10, 0x3, 0x4, '\x00', 0x8}, {0x9, 0x40, 0x6, '\x00', 0x9}, {0x2, 0x3, 0x0, '\x00', 0x3}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x80d0002, 0xa, 0xc, 0xd96, 0x0, [{0x5, 0x5, 0x26, '\x00', 0x2}, {0x5, 0x23, 0x0, '\x00', 0x7}, {0x0, 0xf0, 0x9, '\x00', 0x4}, {0x9, 0xd3, 0xa, '\x00', 0xa}, {0x9, 0x7, 0x5f, '\x00', 0x1}, {0x6, 0x80, 0x5, '\x00', 0x8}, {0x6, 0x3, 0x0, '\x00', 0x4}, {0x1, 0x7, 0x5, '\x00', 0xe}, {0x1, 0xf8, 0x9, '\x00', 0x3}, {0xff, 0x7f, 0x6, '\x00', 0x8}, {0x1, 0x6, 0x4, '\x00', 0x4}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x6e, 0x6, 0x0, '\x00', 0x3}, {0x7f, 0x5, 0x3, '\x00', 0x9f}, {0xd, 0x3, 0x4, '\x00', 0x9}, {0x9, 0x2, 0xf7, '\x00', 0xc9}, {0x3, 0x1, 0x0, '\x00', 0xde}, {0x27, 0x93, 0x9}, {0xe, 0x5, 0x0, '\x00', 0x3}, {0xd3, 0xff, 0x1, '\x00', 0xd}, {0x50, 0x5, 0x94, '\x00', 0x9}, {0x10, 0x3, 0x4, '\x00', 0x8}, {0x9, 0x40, 0x6, '\x00', 0x9}, {0x2, 0x3, 0x0, '\x00', 0x3}]}}) (async) 155.101µs ago: executing program 2 (id=2105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}], 0x20}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 0s ago: executing program 2 (id=2106): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): fail_ex.cold+0x5/0xa [ 92.960233][ T7523] get_futex_key+0x1d0/0x14f0 [ 92.960259][ T7523] ? __pfx_get_futex_key+0x10/0x10 [ 92.960277][ T7523] ? enqueue_task+0x1dc/0x4f0 [ 92.960291][ T7523] futex_wait_setup+0x91/0x540 [ 92.960308][ T7523] __futex_wait+0x19f/0x300 [ 92.960323][ T7523] ? __pfx___futex_wait+0x10/0x10 [ 92.960335][ T7523] ? __pfx_try_to_wake_up+0x10/0x10 [ 92.960350][ T7523] ? futex_hash+0x311/0x400 [ 92.960367][ T7523] ? __pfx_futex_wake_mark+0x10/0x10 [ 92.960382][ T7523] ? find_held_lock+0x2b/0x80 [ 92.960408][ T7523] ? futex_wake+0x4ea/0x5e0 [ 92.960425][ T7523] futex_wait+0xe6/0x370 [ 92.960437][ T7523] ? __pfx_futex_wait+0x10/0x10 [ 92.960453][ T7523] ? rcu_read_lock_any_held+0x6a/0x90 [ 92.960465][ T7523] ? find_held_lock+0x2b/0x80 [ 92.960475][ T7523] ? ksys_write+0x190/0x250 [ 92.960494][ T7523] ? ksys_write+0x190/0x250 [ 92.960506][ T7523] do_futex+0x265/0x440 [ 92.960517][ T7523] ? __pfx_do_futex+0x10/0x10 [ 92.960534][ T7523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.960567][ T7523] __x64_sys_futex+0x34f/0x4d0 [ 92.960579][ T7523] ? fput+0x7c/0x100 [ 92.960593][ T7523] ? __pfx___x64_sys_futex+0x10/0x10 [ 92.960603][ T7523] ? ksys_write+0x1ac/0x250 [ 92.960614][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 92.960633][ T7523] do_syscall_64+0x123/0x790 [ 92.960645][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.960656][ T7523] RIP: 0033:0x7f81ea39e0d9 [ 92.960667][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.960677][ T7523] RSP: 002b:00007f81eb2140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.960702][ T7523] RAX: ffffffffffffffda RBX: 00007f81ea625fa8 RCX: 00007f81ea39e0d9 [ 92.960708][ T7523] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81ea625fa8 [ 92.960715][ T7523] RBP: 00007f81ea625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 92.960722][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.960729][ T7523] R13: 00007f81ea626038 R14: 00007ffe52e8d190 R15: 00007ffe52e8d278 [ 92.960749][ T7523] [ 93.070233][ T5435] 8021q: adding VLAN 0 to HW filter on device eth6 [ 93.223331][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 94.098955][ T5736] Bluetooth: hci1: command tx timeout [ 94.329038][ T41] kauditd_printk_skb: 38 callbacks suppressed [ 94.329055][ T41] audit: type=1400 audit(1787185275.182:525): avc: denied { bind } for pid=7598 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.331950][ T5736] Bluetooth: min 9 > max 1 [ 94.338711][ T41] audit: type=1400 audit(1787185275.182:526): avc: denied { setopt } for pid=7598 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.385268][ T41] audit: type=1400 audit(1787185275.242:527): avc: denied { write } for pid=7608 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.400100][ T7611] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 94.428465][ T41] audit: type=1400 audit(1787185275.282:528): avc: denied { setopt } for pid=7614 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.456495][ T41] audit: type=1400 audit(1787185275.312:529): avc: denied { bind } for pid=7614 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.122470][ T5736] Bluetooth: hci2: command tx timeout [ 95.172728][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 95.350243][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.353998][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.379346][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 95.384396][ T9] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 95.387990][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 95.390451][ T9] usb 9-1: can't read configurations, error -71 [ 95.543392][ T41] audit: type=1400 audit(1787185276.402:530): avc: denied { execute } for pid=7657 comm="syz.3.566" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 96.064113][ T41] audit: type=1400 audit(1787185276.912:531): avc: denied { create } for pid=7672 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.071452][ T41] audit: type=1400 audit(1787185276.922:532): avc: denied { sys_admin } for pid=7672 comm="syz.4.571" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 96.104174][ T41] audit: type=1400 audit(1787185276.962:533): avc: denied { create } for pid=7675 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.153597][ T5736] Bluetooth: hci1: command tx timeout [ 96.421022][ T5736] Bluetooth: hci0: command tx timeout [ 96.678627][ T7708] "syz.4.586" (7708) uses obsolete ecb(arc4) skcipher [ 96.719949][ T7713] usb usb7: usbfs: process 7713 (syz.1.584) did not claim interface 0 before use [ 96.773478][ T41] audit: type=1400 audit(1787185277.622:534): avc: denied { create } for pid=7717 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.794500][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.808053][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 97.814376][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 97.974646][ T50] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 98.407926][ T50] usb 5-1: Dual-Role OTG device on HNP port [ 98.412715][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.428011][ T50] gspca_main: spca501-2.14.0 probing 0000:0000 [ 98.431720][ T50] gspca_spca501: reg write: error -32 [ 98.433732][ T50] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 98.436165][ T50] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 98.442140][ T50] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.567105][ T7763] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.569945][ T7763] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.615642][ T7763] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.656853][ T7763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.669072][ T7763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.693300][ T7763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.706032][ T7763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.708792][ T7763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.717099][ T7763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.723023][ T7763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.725799][ T7763] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.737745][ T7763] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.992573][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.132517][ T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.292481][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 99.295868][ T50] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.307593][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.310411][ T50] usb 9-1: Product: syz [ 99.311782][ T50] usb 9-1: Manufacturer: syz [ 99.313428][ T50] usb 9-1: SerialNumber: syz [ 99.316486][ T50] usb 9-1: config 0 descriptor?? [ 99.392942][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.396782][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 99.400067][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.403500][ T9] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.407444][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.415984][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.418513][ T9] usb 6-1: invalid MIDI out EP 0 [ 99.482830][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 99.525900][ T50] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.554533][ T41] kauditd_printk_skb: 12 callbacks suppressed [ 99.554545][ T41] audit: type=1400 audit(1787185280.410:547): avc: denied { audit_write } for pid=7821 comm="syz.2.629" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.618685][ T5816] usb 6-1: USB disconnect, device number 5 [ 99.993042][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.133300][ T50] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 100.143060][ T50] usb 9-1: USB disconnect, device number 4 [ 100.174056][ T7844] netlink: 'syz.3.637': attribute type 13 has an invalid length. [ 100.180391][ T41] audit: type=1400 audit(1787185281.030:548): avc: denied { connect } for pid=7843 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.191089][ T41] audit: type=1400 audit(1787185281.040:549): avc: denied { getopt } for pid=7843 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.244374][ T7850] netlink: 592 bytes leftover after parsing attributes in process `syz.3.640'. [ 100.452481][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.602766][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 100.604919][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.610887][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.616282][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.618780][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.621344][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.624407][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.627379][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.630167][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.633155][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.636857][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.640888][ T24] usb 6-1: config 0 descriptor?? [ 100.659006][ T41] audit: type=1326 audit(1787185281.510:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 100.674904][ T41] audit: type=1326 audit(1787185281.510:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 100.684232][ T41] audit: type=1326 audit(1787185281.530:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.651" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 100.692221][ T41] audit: type=1326 audit(1787185281.530:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 100.700651][ T41] audit: type=1326 audit(1787185281.530:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 100.712722][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.715173][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.792678][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.807695][ T7894] trusted_key: syz.2.660 sent an empty control message without MSG_MORE. [ 100.822001][ T41] audit: type=1400 audit(1787185281.670:555): avc: denied { map } for pid=7895 comm="syz.4.661" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.842269][ T41] audit: type=1400 audit(1787185281.680:556): avc: denied { call } for pid=7895 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.858353][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.875444][ T24] usb 6-1: USB disconnect, device number 6 [ 100.882323][ T24] usblp0: removed [ 100.906730][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 100.955716][ T7916] overlayfs: failed to clone lowerpath [ 101.380594][ T7934] FAULT_INJECTION: forcing a failure. [ 101.380594][ T7934] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.386311][ T7934] CPU: 3 UID: 0 PID: 7934 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.386331][ T7934] Tainted: [L]=SOFTLOCKUP [ 101.386335][ T7934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.386342][ T7934] Call Trace: [ 101.386346][ T7934] [ 101.386351][ T7934] dump_stack_lvl+0x100/0x190 [ 101.386370][ T7934] should_fail_ex.cold+0x5/0xa [ 101.386385][ T7934] get_futex_key+0x1d0/0x14f0 [ 101.386405][ T7934] ? __pfx_get_futex_key+0x10/0x10 [ 101.386423][ T7934] ? enqueue_task+0x1dc/0x4f0 [ 101.386436][ T7934] futex_wait_setup+0x91/0x540 [ 101.386458][ T7934] __futex_wait+0x19f/0x300 [ 101.386472][ T7934] ? __pfx___futex_wait+0x10/0x10 [ 101.386484][ T7934] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.386499][ T7934] ? futex_hash+0x311/0x400 [ 101.386516][ T7934] ? __pfx_futex_wake_mark+0x10/0x10 [ 101.386532][ T7934] ? find_held_lock+0x2b/0x80 [ 101.386544][ T7934] ? futex_wake+0x4ea/0x5e0 [ 101.386561][ T7934] futex_wait+0xe6/0x370 [ 101.386580][ T7934] ? __pfx_futex_wait+0x10/0x10 [ 101.386601][ T7934] ? rcu_read_lock_any_held+0x6a/0x90 [ 101.386620][ T7934] ? find_held_lock+0x2b/0x80 [ 101.386637][ T7934] ? ksys_write+0x190/0x250 [ 101.386657][ T7934] ? ksys_write+0x190/0x250 [ 101.386677][ T7934] do_futex+0x265/0x440 [ 101.386696][ T7934] ? __pfx_do_futex+0x10/0x10 [ 101.386725][ T7934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.386752][ T7934] __x64_sys_futex+0x34f/0x4d0 [ 101.386771][ T7934] ? fput+0x7c/0x100 [ 101.386798][ T7934] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.386816][ T7934] ? ksys_write+0x1ac/0x250 [ 101.386837][ T7934] ? __pfx_ksys_write+0x10/0x10 [ 101.386867][ T7934] do_syscall_64+0x123/0x790 [ 101.386890][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.386911][ T7934] RIP: 0033:0x7f032f99e0d9 [ 101.386930][ T7934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.386949][ T7934] RSP: 002b:00007f03308b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.386970][ T7934] RAX: ffffffffffffffda RBX: 00007f032fc25fa8 RCX: 00007f032f99e0d9 [ 101.386984][ T7934] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f032fc25fa8 [ 101.386997][ T7934] RBP: 00007f032fc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 101.387009][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.387022][ T7934] R13: 00007f032fc26038 R14: 00007fffcd0f7700 R15: 00007fffcd0f77e8 [ 101.387048][ T7934] [ 101.422475][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.622812][ T7944] random: crng reseeded on system resumption [ 101.633166][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.636979][ T24] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 101.640331][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.643972][ T24] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.648147][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.654964][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.661575][ T24] usb 9-1: invalid MIDI out EP 0 [ 101.738868][ T24] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 101.856583][ T24] usb 9-1: USB disconnect, device number 5 [ 101.882616][ T7958] scsi_nl_rcv_msg: discarding partial skb [ 102.082619][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.202446][ T73] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 102.322932][ T7976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.363250][ T73] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.367260][ T73] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.373438][ T73] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.378813][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.389020][ T7964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.404308][ T73] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.605993][ T34] usb 8-1: USB disconnect, device number 7 [ 102.661708][ T7992] overlayfs: failed to clone upperpath [ 102.712930][ T73] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 102.792459][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.794757][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.862450][ T73] usb 6-1: Using ep0 maxpacket: 32 [ 102.865803][ T73] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 102.872479][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.877412][ T73] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.881335][ T73] usb 6-1: Product: syz [ 102.883061][ T73] usb 6-1: Manufacturer: syz [ 102.884715][ T73] usb 6-1: SerialNumber: syz [ 102.897541][ T73] usb 6-1: config 0 descriptor?? [ 103.212298][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 103.221481][ T8004] syz_tun: entered promiscuous mode [ 103.224608][ T8004] macsec1: entered allmulticast mode [ 103.226421][ T8004] syz_tun: entered allmulticast mode [ 103.306534][ T73] airspy 6-1:0.0: Board ID: 00 [ 103.308164][ T73] airspy 6-1:0.0: Firmware version: [ 103.512467][ T50] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 103.677949][ T8021] overlay: ./file0 is not a directory [ 103.684671][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 103.686781][ T50] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 103.690582][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.694617][ T50] usb 8-1: config 0 descriptor?? [ 103.698310][ T50] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 103.914872][ T73] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 103.920949][ T73] airspy 6-1:0.0: Registered as swradio24 [ 103.924678][ T73] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 103.931952][ T73] usb 6-1: USB disconnect, device number 7 [ 104.109531][ T50] gspca_sonixj: reg_r err -71 [ 104.111293][ T50] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 104.117128][ T50] usb 8-1: USB disconnect, device number 8 [ 104.152578][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.330849][ T8052] bond0: entered promiscuous mode [ 104.332676][ T8052] bond_slave_0: entered promiscuous mode [ 104.334526][ T8052] bond_slave_1: entered promiscuous mode [ 104.336591][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 104.445346][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 104.482160][ T8071] team0: No ports can be present during mode change [ 104.542053][ T8076] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 104.566360][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 104.566371][ T41] audit: type=1400 audit(1787185285.420:577): avc: denied { write } for pid=8082 comm="syz.4.737" name="functions" dev="configfs" ino=13860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.697148][ T8096] overlayfs: failed to clone lowerpath [ 104.872563][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.874652][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.891930][ T41] audit: type=1400 audit(1787185285.740:578): avc: denied { write } for pid=8099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.940389][ T41] audit: type=1400 audit(1787185285.790:579): avc: denied { write } for pid=8106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.952634][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.999991][ T41] audit: type=1400 audit(1787185285.850:580): avc: denied { module_load } for pid=8101 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.000010][ T8111] Invalid ELF header magic: != ELF [ 105.017052][ T41] audit: type=1400 audit(1787185285.860:581): avc: denied { read write } for pid=8110 comm="syz.3.747" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.039312][ T41] audit: type=1400 audit(1787185285.860:582): avc: denied { open } for pid=8110 comm="syz.3.747" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.159615][ T8119] futex_wake_op: syz.1.746 tries to shift op by 144; fix this program [ 105.435571][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 105.592510][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 105.601391][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.607847][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.613960][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.616588][ T29] usb 8-1: Product: syz [ 105.618108][ T29] usb 8-1: Manufacturer: syz [ 105.619831][ T29] usb 8-1: SerialNumber: syz [ 105.629660][ T29] usb 8-1: config 0 descriptor?? [ 105.633843][ T8121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.644821][ T41] audit: type=1400 audit(1787185286.500:583): avc: denied { lock } for pid=8128 comm="syz.2.753" path="socket:[18762]" dev="sockfs" ino=18762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 105.762984][ T29] libceph: connect (1)[c::]:6789 error -101 [ 105.765891][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 105.768942][ T29] libceph: connect (1)[c::]:6789 error -101 [ 105.771340][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 105.843170][ T8135] ceph: No mds server is up or the cluster is laggy [ 105.914988][ T8142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.756'. [ 105.919171][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 106.430714][ T8154] netlink: 48 bytes leftover after parsing attributes in process `syz.2.761'. [ 106.627268][ T73] usb 8-1: USB disconnect, device number 9 [ 107.235092][ T41] audit: type=1400 audit(1787185287.920:584): avc: denied { read } for pid=8171 comm="syz.1.768" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.245008][ T41] audit: type=1400 audit(1787185287.920:585): avc: denied { open } for pid=8171 comm="syz.1.768" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.432758][ T41] audit: type=1326 audit(1787185288.280:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.2.772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc839e0d9 code=0x7ffc0000 [ 107.653329][ T8186] Invalid ELF header magic: != ELF [ 107.661457][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.771'. [ 107.808512][ T8172] syz.1.768 (8172) used greatest stack depth: 18920 bytes left [ 109.468779][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'. [ 109.472702][ T8226] netlink: 'syz.1.788': attribute type 7 has an invalid length. [ 109.475693][ T8226] netlink: 'syz.1.788': attribute type 8 has an invalid length. [ 109.478151][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 109.484925][ T8226] ip6gretap0: entered promiscuous mode [ 109.488131][ T8226] syz_tun: entered promiscuous mode [ 109.492019][ T8226] ip6gretap0: left promiscuous mode [ 109.495203][ T8226] syz_tun: left promiscuous mode [ 109.824232][ T8230] overlayfs: failed to clone upperpath [ 109.849362][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 109.849382][ T41] audit: type=1400 audit(1787185290.700:596): avc: denied { mount } for pid=8228 comm="syz.1.789" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.980621][ T5731] Bluetooth: hci0: unexpected event 0x20 length: 9 > 7 [ 110.004402][ T41] audit: type=1400 audit(1787185290.860:597): avc: denied { name_bind } for pid=8238 comm="syz.2.794" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 110.058305][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 110.232463][ T7671] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.602485][ T7671] usb 6-1: Using ep0 maxpacket: 16 [ 110.604616][ T7671] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.608413][ T7671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.613976][ T7671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.617175][ T7671] usb 6-1: Product: syz [ 110.618802][ T7671] usb 6-1: Manufacturer: syz [ 110.620661][ T7671] usb 6-1: SerialNumber: syz [ 110.626754][ T7671] usb 6-1: config 0 descriptor?? [ 110.630750][ T7671] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.635101][ T7671] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 110.972505][ T5816] IPVS: starting estimator thread 0... [ 110.978348][ T8295] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 111.054416][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'. [ 111.057266][ T8301] netlink: 9 bytes leftover after parsing attributes in process `syz.3.812'. [ 111.083977][ T8294] IPVS: using max 44 ests per chain, 105600 per kthread [ 111.127962][ T41] audit: type=1400 audit(1787185291.980:598): avc: denied { ioctl } for pid=8304 comm="syz.4.814" path="socket:[20294]" dev="sockfs" ino=20294 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.196665][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 111.247143][ T7671] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 111.268966][ T8315] erspan1: entered allmulticast mode [ 111.340612][ T7671] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 111.344114][ T7671] em28xx 6-1:0.0: board has no eeprom [ 111.402595][ T7671] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.405352][ T7671] em28xx 6-1:0.0: dvb set to bulk mode. [ 111.409908][ T7671] usb 6-1: USB disconnect, device number 8 [ 111.412653][ T7671] em28xx 6-1:0.0: Disconnecting em28xx [ 111.416386][ T9] em28xx 6-1:0.0: Binding DVB extension [ 111.448073][ T9] em28xx 6-1:0.0: Registering input extension [ 111.451276][ T7671] em28xx 6-1:0.0: Closing input extension [ 111.471739][ T7671] em28xx 6-1:0.0: Freeing device [ 111.493987][ T8320] SELinux: Context : is not valid (left unmapped). [ 111.496512][ T41] audit: type=1400 audit(1787185292.350:599): avc: denied { relabelto } for pid=8316 comm="syz.4.819" name="rdma.current" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 111.504239][ T41] audit: type=1400 audit(1787185292.350:600): avc: denied { associate } for pid=8316 comm="syz.4.819" name="rdma.current" dev="tmpfs" ino=362 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 112.092464][ T7671] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 112.178587][ T41] audit: type=1400 audit(1787185293.030:601): avc: denied { unlink } for pid=7336 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 112.196399][ T8335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 112.235724][ T5731] Bluetooth: hci3: unexpected subevent 0x0a length: 17 < 30 [ 112.243227][ T7671] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 112.247750][ T7671] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 112.251010][ T7671] usb 6-1: config 0 has no interface number 0 [ 112.253837][ T7671] usb 6-1: config 0 interface 41 has no altsetting 0 [ 112.258396][ T7671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.260998][ T7671] usb 6-1: Product: syz [ 112.262519][ T7671] usb 6-1: Manufacturer: syz [ 112.264062][ T7671] usb 6-1: SerialNumber: syz [ 112.267035][ T7671] usb 6-1: config 0 descriptor?? [ 112.341257][ T5731] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 112.510211][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 112.575741][ T41] audit: type=1400 audit(1787185293.430:602): avc: denied { bind } for pid=8357 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.657339][ T41] audit: type=1400 audit(1787185293.510:603): avc: denied { getopt } for pid=8362 comm="syz.2.837" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.662932][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 112.674976][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.678571][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.683685][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.691837][ T9] usb 8-1: config 0 descriptor?? [ 112.696624][ T7671] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 112.704513][ T7671] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 112.718090][ T7671] usb 6-1: USB disconnect, device number 9 [ 112.818182][ T8355] netlink: 'syz.4.834': attribute type 61 has an invalid length. [ 113.104230][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.107650][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.110125][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.113020][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.115474][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.117872][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.120294][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.122981][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.125463][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.127897][ T9] hid-retrode 0003:0403:97C1.0003: unknown main item tag 0x0 [ 113.130348][ T9] hid-retrode 0003:0403:97C1.0003: unbalanced collection at end of report description [ 113.133886][ T9] hid-retrode 0003:0403:97C1.0003: probe with driver hid-retrode failed with error -22 [ 113.302907][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.307120][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.314562][ T24] usb 8-1: USB disconnect, device number 10 [ 113.489559][ T41] audit: type=1400 audit(1787185294.340:604): avc: denied { mounton } for pid=8376 comm="syz.1.842" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.492678][ T8384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.880233][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 113.946212][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.849'. [ 114.178553][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 114.212013][ T41] audit: type=1400 audit(1787185295.040:605): avc: denied { write } for pid=8392 comm="syz.3.847" name="functions" dev="configfs" ino=13860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.515018][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.518569][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.631092][ T8403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.635779][ T8403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.711664][ T8416] unsupported nla_type 55137 [ 114.753023][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.756812][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.761111][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.767304][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.784128][ T8418] can0: slcan on ptm0. [ 114.841746][ T8413] __nla_validate_parse: 1 callbacks suppressed [ 114.841761][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 114.901903][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 114.901915][ T41] audit: type=1400 audit(1787185295.750:608): avc: denied { write } for pid=8420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.945896][ T41] audit: type=1400 audit(1787185295.800:609): avc: denied { write } for pid=8426 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.980749][ T8430] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 114.982717][ T8430] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 114.984689][ T8430] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 114.987289][ T8430] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 115.237368][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 116.117215][ T41] audit: type=1400 audit(1787185296.970:610): avc: denied { write } for pid=8461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.286497][ T41] audit: type=1400 audit(1787185297.140:611): avc: denied { write } for pid=8465 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.315378][ T8417] can0 (unregistered): slcan off ptm0. [ 116.407557][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 116.460528][ T41] audit: type=1400 audit(1787185297.310:612): avc: denied { write } for pid=8469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.476744][ T41] audit: type=1400 audit(1787185297.320:613): avc: denied { bind } for pid=8475 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.494266][ T41] audit: type=1400 audit(1787185297.330:614): avc: denied { setopt } for pid=8475 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.559772][ T8481] FAULT_INJECTION: forcing a failure. [ 116.559772][ T8481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.566942][ T8481] CPU: 1 UID: 0 PID: 8481 Comm: syz.3.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.566964][ T8481] Tainted: [L]=SOFTLOCKUP [ 116.566968][ T8481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.566975][ T8481] Call Trace: [ 116.566980][ T8481] [ 116.566985][ T8481] dump_stack_lvl+0x100/0x190 [ 116.567004][ T8481] should_fail_ex.cold+0x5/0xa [ 116.567020][ T8481] get_futex_key+0x1d0/0x14f0 [ 116.567045][ T8481] ? __pfx_get_futex_key+0x10/0x10 [ 116.567065][ T8481] ? enqueue_task+0x1dc/0x4f0 [ 116.567079][ T8481] futex_wait_setup+0x91/0x540 [ 116.567098][ T8481] __futex_wait+0x19f/0x300 [ 116.567114][ T8481] ? __pfx___futex_wait+0x10/0x10 [ 116.567127][ T8481] ? __pfx_try_to_wake_up+0x10/0x10 [ 116.567144][ T8481] ? futex_hash+0x311/0x400 [ 116.567162][ T8481] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.567178][ T8481] ? find_held_lock+0x2b/0x80 [ 116.567189][ T8481] ? futex_wake+0x4ea/0x5e0 [ 116.567205][ T8481] futex_wait+0xe6/0x370 [ 116.567218][ T8481] ? __pfx_futex_wait+0x10/0x10 [ 116.567234][ T8481] ? rcu_read_lock_any_held+0x6a/0x90 [ 116.567246][ T8481] ? find_held_lock+0x2b/0x80 [ 116.567257][ T8481] ? ksys_write+0x190/0x250 [ 116.567273][ T8481] ? ksys_write+0x190/0x250 [ 116.567292][ T8481] do_futex+0x265/0x440 [ 116.567308][ T8481] ? __pfx_do_futex+0x10/0x10 [ 116.567334][ T8481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.567357][ T8481] __x64_sys_futex+0x34f/0x4d0 [ 116.567374][ T8481] ? fput+0x7c/0x100 [ 116.567391][ T8481] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.567401][ T8481] ? ksys_write+0x1ac/0x250 [ 116.567413][ T8481] ? __pfx_ksys_write+0x10/0x10 [ 116.567430][ T8481] do_syscall_64+0x123/0x790 [ 116.567443][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.567455][ T8481] RIP: 0033:0x7f81ea39e0d9 [ 116.567465][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.567477][ T8481] RSP: 002b:00007f81eb2140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.567489][ T8481] RAX: ffffffffffffffda RBX: 00007f81ea625fa8 RCX: 00007f81ea39e0d9 [ 116.567496][ T8481] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81ea625fa8 [ 116.567502][ T8481] RBP: 00007f81ea625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 116.567509][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.567516][ T8481] R13: 00007f81ea626038 R14: 00007ffe52e8d190 R15: 00007ffe52e8d278 [ 116.567533][ T8481] [ 116.672284][ T41] audit: type=1400 audit(1787185297.520:615): avc: denied { write } for pid=8485 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.740009][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 116.816342][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 116.870984][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 116.874103][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 117.270351][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 117.882820][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 118.169823][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 118.205028][ T8563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.210674][ T8563] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.565324][ T41] audit: type=1400 audit(1787185299.420:616): avc: denied { read } for pid=8587 comm="syz.1.922" name="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.578005][ T41] audit: type=1400 audit(1787185299.430:617): avc: denied { read open } for pid=8587 comm="syz.1.922" path="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.961221][ T8631] __nla_validate_parse: 3 callbacks suppressed [ 119.961234][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 120.304554][ T8636] Invalid ELF header magic: != ELF [ 120.494314][ T41] audit: type=1326 audit(1787185301.350:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.506751][ T41] audit: type=1326 audit(1787185301.350:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.520014][ T41] audit: type=1326 audit(1787185301.350:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.533250][ T41] audit: type=1326 audit(1787185301.350:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.539547][ T8647] tipc: Cannot configure node identity twice [ 120.549185][ T41] audit: type=1326 audit(1787185301.350:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.558465][ T41] audit: type=1326 audit(1787185301.350:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.568926][ T41] audit: type=1326 audit(1787185301.350:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.576159][ T41] audit: type=1326 audit(1787185301.350:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.585023][ T41] audit: type=1326 audit(1787185301.350:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.592029][ T41] audit: type=1326 audit(1787185301.350:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.3.941" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81ea39e0d9 code=0x7ffc0000 [ 120.643835][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 121.494788][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 122.019228][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 123.039882][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 123.052780][ T8745] input: syz0 as /devices/virtual/input/input9 [ 123.859487][ T8787] afs: Bad value for 'source' [ 124.011477][ T7458] IPVS: starting estimator thread 0... [ 124.112489][ T8792] IPVS: using max 44 ests per chain, 105600 per kthread [ 124.354754][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 124.544730][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'. [ 124.557084][ T7458] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 124.644751][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 124.713507][ T7458] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 124.718568][ T7458] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.723262][ T7458] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.727519][ T7458] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.731376][ T7458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.738125][ T8791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.826871][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 124.962082][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 125.028058][ T8835] loop2: detected capacity change from 0 to 7 [ 125.039957][ T8835] Dev loop2: unable to read RDB block 7 [ 125.041931][ T8835] loop2: unable to read partition table [ 125.044731][ T8835] loop2: partition table beyond EOD, truncated [ 125.049781][ T8835] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.053272][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 125.101824][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1024'. [ 125.145961][ T7458] usb 6-1: USB disconnect, device number 10 [ 125.149753][ T5731] Bluetooth: hci4: Reading Intel version command failed (-19) [ 125.605084][ T8855] fuse: fd is not a fuse device [ 125.616647][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 125.644897][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 125.644914][ T41] audit: type=1400 audit(1787185306.500:638): avc: denied { write } for pid=8858 comm="syz.3.1034" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.654508][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 125.692136][ T8865] securityfs: Unknown parameter 'username' [ 125.782870][ T5731] Bluetooth: hci0: unknown advertising packet type: 0x32 [ 125.782904][ T5731] Bluetooth: hci0: Dropping invalid advertising data [ 125.788525][ T5731] Bluetooth: hci0: Malformed LE Event: 0x02 [ 125.866065][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 125.961143][ T41] audit: type=1400 audit(1787185306.810:639): avc: denied { setopt } for pid=8885 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.972682][ T41] audit: type=1400 audit(1787185306.820:640): avc: denied { connect } for pid=8885 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.504948][ T8902] fuse: fd is not a fuse device [ 126.563286][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 127.225542][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 127.264777][ T41] audit: type=1400 audit(1787185308.120:641): avc: denied { read } for pid=8937 comm="syz.1.1069" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.265684][ T8938] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 127.275457][ T41] audit: type=1400 audit(1787185308.120:642): avc: denied { open } for pid=8937 comm="syz.1.1069" path="/105/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.288119][ T41] audit: type=1400 audit(1787185308.120:643): avc: denied { ioctl } for pid=8937 comm="syz.1.1069" path="/105/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.372459][ T7458] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 127.525743][ T7458] usb 8-1: unable to get BOS descriptor or descriptor too short [ 127.530136][ T7458] usb 8-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 127.537993][ T7458] usb 8-1: config 1 has an invalid interface number: 178 but max is 2 [ 127.542758][ T7458] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.547863][ T7458] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.552694][ T7458] usb 8-1: config 1 has no interface number 0 [ 127.554522][ T7458] usb 8-1: too many endpoints for config 1 interface 178 altsetting 209: 153, using maximum allowed: 30 [ 127.562460][ T7458] usb 8-1: config 1 interface 178 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 153 [ 127.572446][ T7458] usb 8-1: config 1 interface 178 has no altsetting 0 [ 127.577074][ T7458] usb 8-1: string descriptor 0 read error: -22 [ 127.579058][ T7458] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.596020][ T7458] usb-storage 8-1:1.178: USB Mass Storage device detected [ 127.669540][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 127.728965][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 127.799899][ T7458] usb 8-1: USB disconnect, device number 11 [ 127.920289][ T41] audit: type=1400 audit(1787185308.770:644): avc: denied { read write } for pid=8968 comm="syz.1.1084" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 127.929357][ T41] audit: type=1400 audit(1787185308.770:645): avc: denied { open } for pid=8968 comm="syz.1.1084" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.114241][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 128.159145][ T41] audit: type=1400 audit(1787185309.010:646): avc: denied { mmap_zero } for pid=8984 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 128.423343][ T9013] loop9: detected capacity change from 0 to 7 [ 128.430734][ T9013] Dev loop9: unable to read RDB block 7 [ 128.435177][ T9013] loop9: unable to read partition table [ 128.437106][ T9013] loop9: partition table beyond EOD, truncated [ 128.439862][ T9013] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.445531][ T9013] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 128.456929][ T9017] overlay: ./file0 is not a directory [ 128.700360][ T41] audit: type=1800 audit(1787185309.550:647): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1112" name="ifname" dev="configfs" ino=25052 res=0 errno=0 [ 129.754625][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 129.912595][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 129.916926][ T61] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 129.925328][ T61] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 129.931513][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 129.938096][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 129.942088][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 129.948844][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 129.956273][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.962017][ T61] usb 8-1: Product: syz [ 129.965864][ T61] usb 8-1: Manufacturer: syz [ 129.968441][ T61] usb 8-1: SerialNumber: syz [ 129.975139][ T61] usb 8-1: config 0 descriptor?? [ 130.192960][ T7458] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 130.354059][ T7458] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00 [ 130.360283][ T7458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.362820][ T7458] usb 6-1: Product: syz [ 130.364230][ T7458] usb 6-1: Manufacturer: syz [ 130.370871][ T7458] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 130.390738][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.393034][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.395142][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.397243][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.399400][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.401562][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.408587][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.410821][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.413225][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.415544][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.417693][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.419828][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.421993][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.424294][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.426379][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.428613][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.430857][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.433064][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.435315][ T61] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 130.437323][ T61] input input10: Timeout waiting for response from device. [ 130.442699][ T61] usb 8-1: USB disconnect, device number 12 [ 130.743521][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 130.743574][ T41] audit: type=1400 audit(1787185311.600:650): avc: denied { connect } for pid=9129 comm="syz.4.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.751439][ T41] audit: type=1400 audit(1787185311.600:651): avc: denied { write } for pid=9129 comm="syz.4.1155" lport=34587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.759884][ T41] audit: type=1400 audit(1787185311.600:652): avc: denied { read } for pid=9129 comm="syz.4.1155" lport=34587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.069902][ T41] audit: type=1800 audit(1787185311.920:653): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1162" name="ifname" dev="configfs" ino=24170 res=0 errno=0 [ 131.374163][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 131.583036][ T7458] gspca_topro: reg_w err -71 [ 131.618306][ T41] audit: type=1800 audit(1787185312.470:654): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1174" name="ifname" dev="configfs" ino=25997 res=0 errno=0 [ 131.625062][ T7458] gspca_topro: Sensor soi763a [ 131.630151][ T7458] usb 6-1: USB disconnect, device number 11 [ 131.645941][ T41] audit: type=1400 audit(1787185312.500:655): avc: denied { wake_alarm } for pid=9173 comm="syz.4.1175" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.735900][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 132.115241][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 132.511531][ T41] audit: type=1400 audit(1787185313.360:656): avc: denied { shutdown } for pid=9235 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.530269][ T41] audit: type=1400 audit(1787185313.380:657): avc: denied { read } for pid=9250 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.715297][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.717324][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.571883][ T9288] overlayfs: failed to clone lowerpath [ 133.708865][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1230'. [ 134.249517][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 134.617418][ T41] audit: type=1400 audit(1787185315.470:658): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 134.647093][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 134.824619][ T41] audit: type=1400 audit(1787185315.680:659): avc: denied { append } for pid=9348 comm="syz.3.1254" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 134.827448][ T9349] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 134.974665][ T5731] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 135.284679][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 136.315175][ T9441] trusted_key: encrypted_key: insufficient parameters specified [ 137.491983][ T9495] overlayfs: conflicting options: nfs_export=on,index=off [ 137.993710][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 138.086412][ T9486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.089162][ T9486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.091610][ T9486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.093595][ T9486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.096263][ T9486] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.161557][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 138.161573][ T41] audit: type=1800 audit(1787185319.010:662): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1335" name="ifname" dev="configfs" ino=27597 res=0 errno=0 [ 138.197380][ T5731] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 138.293766][ T41] audit: type=1400 audit(1787185319.150:663): avc: denied { write } for pid=9550 comm="syz.3.1338" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.350379][ T41] audit: type=1400 audit(1787185319.200:664): avc: denied { ioctl } for pid=9556 comm="syz.3.1340" path="socket:[24491]" dev="sockfs" ino=24491 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.423198][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1342'. [ 138.461356][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 138.465118][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 138.522105][ T9586] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1349'. [ 138.526372][ T41] audit: type=1800 audit(1787185319.380:665): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1348" name="ifname" dev="configfs" ino=27627 res=0 errno=0 [ 138.554525][ T9593] binder: 9591:9593 ioctl c0046209 0 returned -22 [ 138.784617][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 139.363839][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.572983][ T9641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1365'. [ 139.615581][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 139.857074][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1377'. [ 139.889551][ T41] audit: type=1800 audit(1787185320.740:666): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1378" name="ifname" dev="configfs" ino=25496 res=0 errno=0 [ 140.016603][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 140.086845][ T41] audit: type=1400 audit(1787185320.940:667): avc: denied { connect } for pid=9673 comm="syz.1.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.152579][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.152708][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.153067][ T5081] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.448260][ T41] audit: type=1800 audit(1787185321.300:668): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1387" name="ifname" dev="configfs" ino=25520 res=0 errno=0 [ 140.608654][ T41] audit: type=1400 audit(1787185321.460:669): avc: denied { append } for pid=9696 comm="syz.3.1392" name="event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.711291][ T41] audit: type=1800 audit(1787185322.560:670): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1412" name="ifname" dev="configfs" ino=28701 res=0 errno=0 [ 142.232878][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.233174][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.243118][ T41] audit: type=1326 audit(1787185323.100:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032f99e0d9 code=0x7ffc0000 [ 142.364211][ T9775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9775 comm=syz.1.1427 [ 143.167594][ T9818] __nla_validate_parse: 15 callbacks suppressed [ 143.167606][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'. [ 143.176239][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 143.176251][ T41] audit: type=1400 audit(1787185324.030:692): avc: denied { write } for pid=9815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.239174][ T41] audit: type=1400 audit(1787185324.090:693): avc: denied { write } for pid=9820 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.327528][ T41] audit: type=1400 audit(1787185324.180:694): avc: denied { write } for pid=9824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.367083][ T41] audit: type=1400 audit(1787185324.220:695): avc: denied { write } for pid=9827 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.398873][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 143.526803][ T41] audit: type=1400 audit(1787185324.380:696): avc: denied { write } for pid=9833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.616633][ T41] audit: type=1400 audit(1787185324.470:697): avc: denied { write } for pid=9836 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.674739][ T41] audit: type=1400 audit(1787185324.530:698): avc: denied { write } for pid=9841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.722324][ T41] audit: type=1400 audit(1787185324.570:699): avc: denied { write } for pid=9845 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.793514][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 149.160293][ T41] audit: type=1400 audit(1787185330.010:700): avc: denied { write } for pid=9883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.226417][ T41] audit: type=1400 audit(1787185330.080:701): avc: denied { write } for pid=9886 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.950122][ T41] audit: type=1400 audit(1787185332.800:702): avc: denied { write } for pid=9890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.999574][ T41] audit: type=1400 audit(1787185332.850:703): avc: denied { write } for pid=9893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.385126][ T41] audit: type=1400 audit(1787185336.240:704): avc: denied { write } for pid=9902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.430546][ T41] audit: type=1400 audit(1787185336.280:705): avc: denied { write } for pid=9905 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.429458][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 156.462941][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1451'. [ 156.734233][ T6186] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 156.772034][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1460'. [ 156.800021][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 156.883396][ T6186] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.887233][ T6186] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 156.890625][ T6186] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.894625][ T6186] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.899413][ T6186] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.909253][ T6186] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.911919][ T6186] usb 8-1: invalid MIDI out EP 0 [ 156.954024][ T9947] udevd[9947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:27.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 156.974648][ T6186] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 157.062552][ T5816] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 157.163454][ T61] usb 8-1: USB disconnect, device number 13 [ 157.212546][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 157.214728][ T5816] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 157.218967][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.225255][ T5816] usb 6-1: config 0 descriptor?? [ 157.234181][ T5816] as10x_usb: device has been detected [ 157.236495][ T5816] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 157.251385][ T5816] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 157.269068][ T41] audit: type=1400 audit(1787185338.120:706): avc: denied { firmware_load } for pid=5816 comm="kworker/1:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 157.269604][ T5816] as10x_usb: error during firmware upload part1 [ 157.279488][ T5816] Registered device nBox DVB-T Dongle [ 157.438836][ T5816] usb 6-1: USB disconnect, device number 12 [ 157.467461][ T5816] Unregistered device nBox DVB-T Dongle [ 157.469621][ T5816] as10x_usb: device has been disconnected [ 157.752995][ T41] audit: type=1400 audit(1787185338.610:707): avc: denied { create } for pid=9986 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.760220][ T41] audit: type=1400 audit(1787185338.610:708): avc: denied { connect } for pid=9986 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.766919][ T41] audit: type=1400 audit(1787185338.610:709): avc: denied { listen } for pid=9986 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.781563][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 157.875509][ T41] audit: type=1400 audit(1787185338.730:710): avc: denied { write } for pid=10000 comm="syz.3.1487" name="cluster" dev="configfs" ino=2152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.883008][T10002] o2cb: This node has not been configured. [ 157.884095][ T41] audit: type=1400 audit(1787185338.730:711): avc: denied { write } for pid=10000 comm="syz.3.1487" name="node" dev="configfs" ino=28033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.885912][T10002] o2cb: Cluster check failed. Fix errors before retrying. [ 157.891999][ T41] audit: type=1400 audit(1787185338.730:712): avc: denied { write } for pid=10000 comm="syz.3.1487" name="/" dev="ocfs2_dlmfs" ino=28040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.892025][ T41] audit: type=1400 audit(1787185338.740:713): avc: denied { add_name } for pid=10000 comm="syz.3.1487" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.896107][T10002] (syz.3.1487,10002,1):user_dlm_register:674 ERROR: status = -22 [ 157.913417][T10002] (syz.3.1487,10002,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 157.991608][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 158.008811][T10022] Illegal XDP return value 4294967274 on prog (id 67) dev syz_tun, expect packet loss! [ 158.306332][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 159.230957][T10068] bridge2: entered promiscuous mode [ 159.362498][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 159.434341][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 159.513563][ T29] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 159.518061][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.522595][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.528125][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 159.531136][ T29] usb 6-1: Product: syz [ 159.532968][ T29] usb 6-1: Manufacturer: syz [ 159.541411][ T29] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 159.744914][ T29] mos7840 6-1:1.0: probe with driver mos7840 failed with error -71 [ 159.753093][ T29] usb 6-1: USB disconnect, device number 13 [ 159.961241][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 160.020394][T10094] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 160.052267][T10094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.062957][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 160.278939][T10117] o2cb: This node has not been configured. [ 160.280923][T10117] o2cb: Cluster check failed. Fix errors before retrying. [ 160.286477][T10117] (syz.1.1529,10117,1):user_dlm_register:674 ERROR: status = -22 [ 160.289060][T10117] (syz.1.1529,10117,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 160.468732][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 162.459549][T10185] __nla_validate_parse: 3 callbacks suppressed [ 162.459566][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1558'. [ 163.100270][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 163.260958][T10222] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 163.269816][T10222] CIFS: Attempting to mount //127.0.0.1/share [ 163.278904][T10222] CIFS: VFS: Error connecting to socket. Aborting operation. [ 163.281351][T10222] CIFS: VFS: cifs_mount failed w/return code = -111 [ 163.944937][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 164.473314][ T5731] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 164.477111][ T5731] Bluetooth: hci1: Injecting HCI hardware error event [ 164.481511][ T5731] Bluetooth: hci1: hardware error 0x00 [ 164.949938][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 164.950201][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1592'. [ 165.222976][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1603'. [ 165.248427][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 165.481442][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1612'. [ 165.487829][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 166.106605][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 166.554361][ T5731] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 167.340427][T10366] overlayfs: failed to clone upperpath [ 168.629073][T10395] __nla_validate_parse: 2 callbacks suppressed [ 168.629085][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 169.073662][T10412] 9pnet_fd: p9_fd_create_tcp (10412): problem connecting socket to 127.0.0.1 [ 169.814522][ T5731] Bluetooth: hci0: connection err: -111 [ 170.156578][T10479] vlan2: entered promiscuous mode [ 170.158272][T10479] macvtap0: entered promiscuous mode [ 171.197957][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 171.205977][T10518] bond0: (slave bond_slave_0): Releasing backup interface [ 171.208809][T10518] bond_slave_0 (unregistering): left promiscuous mode [ 171.340095][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 172.084645][T10545] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 172.097380][T10545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.121336][T10545] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 172.257545][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 172.282940][T10559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1713'. [ 172.391406][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'. [ 172.654368][T10573] bridge3: entered promiscuous mode [ 173.292559][ T1351] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 173.437279][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 173.442592][ T1351] usb 6-1: Using ep0 maxpacket: 32 [ 173.445672][ T1351] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 173.454329][ T1351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.457744][ T1351] usb 6-1: Product: syz [ 173.459126][ T1351] usb 6-1: Manufacturer: syz [ 173.460678][ T1351] usb 6-1: SerialNumber: syz [ 173.463967][ T1351] usb 6-1: config 0 descriptor?? [ 173.873891][ T1351] airspy 6-1:0.0: Board ID: 00 [ 173.875548][ T1351] airspy 6-1:0.0: Firmware version: [ 174.199388][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 174.573599][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 174.883709][ T1351] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 174.890814][ T1351] airspy 6-1:0.0: Registered as swradio24 [ 174.892810][ T1351] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 174.899926][ T1351] usb 6-1: USB disconnect, device number 14 [ 174.943578][T10641] fuse: Bad value for 'fd' [ 175.067418][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 175.105661][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 175.105672][ T41] audit: type=1400 audit(1787185355.960:721): avc: denied { watch } for pid=10649 comm="syz.3.1752" path="/392/file0" dev="tmpfs" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 175.153626][T10654] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 175.159595][T10654] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 175.166259][ T41] audit: type=1400 audit(1787185356.020:722): avc: denied { remount } for pid=10653 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 175.205263][ T41] audit: type=1400 audit(1787185356.060:723): avc: denied { ioctl } for pid=10658 comm="syz.2.1757" path="socket:[30183]" dev="sockfs" ino=30183 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.216179][ T41] audit: type=1400 audit(1787185356.070:724): avc: denied { write } for pid=10658 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.276568][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 175.444521][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 175.825216][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 176.464644][T10721] netlink: 'syz.4.1777': attribute type 4 has an invalid length. [ 176.533393][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 176.829768][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1788'. [ 177.862886][ T41] audit: type=1400 audit(1787185357.697:725): avc: denied { getopt } for pid=10768 comm="syz.2.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.907023][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 178.020139][T10778] syz.3.1796 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.719110][ T41] audit: type=1400 audit(1787185358.577:726): avc: denied { map } for pid=10781 comm="syz.3.1802" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 178.905344][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 179.549728][T10816] __nla_validate_parse: 3 callbacks suppressed [ 179.549743][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 179.772732][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 179.842515][ T61] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 179.942651][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 179.944719][ T10] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 179.948499][ T10] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 179.951094][ T10] usb 8-1: config 0 has no interface number 0 [ 179.953182][ T10] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 179.956354][ T10] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 179.961003][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.963704][ T10] usb 8-1: Product: syz [ 179.965069][ T10] usb 8-1: Manufacturer: syz [ 179.966607][ T10] usb 8-1: SerialNumber: syz [ 179.969521][ T10] usb 8-1: config 0 descriptor?? [ 179.974282][T10814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.976675][T10814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.992780][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 179.994882][ T61] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.000945][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.008386][ T61] usb 6-1: Product: syz [ 180.010287][ T61] usb 6-1: Manufacturer: syz [ 180.012194][ T61] usb 6-1: SerialNumber: syz [ 180.019265][ T61] usb 6-1: config 0 descriptor?? [ 180.184572][T10814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.186979][T10814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.229488][ T61] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.392192][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 180.981598][T10838] bond0: entered allmulticast mode [ 180.983399][T10838] bond_slave_0: entered allmulticast mode [ 180.985343][T10838] bond_slave_1: entered allmulticast mode [ 180.987682][T10838] bridge0: port 3(bond0) entered blocking state [ 180.990053][T10838] bridge0: port 3(bond0) entered disabled state [ 180.994315][T10838] bond0: entered promiscuous mode [ 180.995980][T10838] bond_slave_0: entered promiscuous mode [ 180.998264][T10838] bond_slave_1: entered promiscuous mode [ 181.000661][T10838] bridge0: port 3(bond0) entered blocking state [ 181.002765][T10838] bridge0: port 3(bond0) entered forwarding state [ 181.039608][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 181.236777][ T61] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 181.243168][ T61] usb 6-1: USB disconnect, device number 15 [ 181.524182][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 181.602761][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.607622][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 181.612617][ T10] asix 8-1:0.34: probe with driver asix failed with error -71 [ 181.619368][ T10] usb 8-1: USB disconnect, device number 14 [ 181.975336][T10873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1839'. [ 182.012490][ T7671] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 182.164104][ T7671] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.168022][ T7671] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.171867][ T7671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.175589][ T7671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 182.179125][ T7671] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.183781][ T7671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.187886][ T7671] usb 6-1: config 0 descriptor?? [ 182.218866][ T41] audit: type=1400 audit(1787185362.077:727): avc: denied { name_bind } for pid=10887 comm="syz.3.1846" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 182.258782][T10889] CIFS mount error: No usable UNC path provided in device string! [ 182.258782][T10889] [ 182.262072][T10889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 182.624226][ T7671] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 183.087756][ T41] audit: type=1400 audit(1787185362.947:728): avc: denied { setattr } for pid=10908 comm="syz.2.1853" name="" dev="pipefs" ino=5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 183.778337][T10922] overlayfs: failed to clone upperpath [ 183.920808][ T10] usb 6-1: USB disconnect, device number 16 [ 184.751063][ T41] audit: type=1400 audit(1787185364.607:729): avc: denied { getopt } for pid=10940 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.804011][T10944] netlink: 'syz.4.1868': attribute type 2 has an invalid length. [ 185.936414][T10991] jffs2: notice: (10991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.958334][ T41] audit: type=1400 audit(1787185365.817:730): avc: denied { write } for pid=10990 comm="syz.3.1888" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.965683][ T41] audit: type=1400 audit(1787185365.817:731): avc: denied { add_name } for pid=10990 comm="syz.3.1888" name="f3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.972279][ T41] audit: type=1400 audit(1787185365.817:732): avc: denied { create } for pid=10990 comm="syz.3.1888" name="f3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.978924][ T41] audit: type=1400 audit(1787185365.827:733): avc: denied { read write open } for pid=10990 comm="syz.3.1888" path="/425/mnt/f3" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.015876][ T41] audit: type=1400 audit(1787185365.877:734): avc: denied { bpf } for pid=10993 comm="syz.3.1889" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.022456][ T41] audit: type=1400 audit(1787185365.877:735): avc: denied { perfmon } for pid=10993 comm="syz.3.1889" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.259527][ T41] audit: type=1400 audit(1787185366.117:736): avc: denied { mounton } for pid=10998 comm="syz.1.1891" path="/file0" dev="ramfs" ino=31143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 186.265070][T11003] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.270943][T11003] overlayfs: failed to set xattr on upper [ 186.273650][T11003] overlayfs: ...falling back to redirect_dir=nofollow. [ 186.276543][T11003] overlayfs: ...falling back to index=off. [ 186.279034][T11003] overlayfs: ...falling back to uuid=null. [ 186.565285][T11012] kAFS: No cell specified [ 187.396067][ T10] Process accounting resumed [ 187.412682][ T6186] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 187.583409][ T6186] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 187.593555][ T6186] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.602481][ T6186] usb 8-1: config 1 has no interface number 0 [ 187.604487][ T6186] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 187.610881][ T6186] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 187.622703][ T6186] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 187.628157][ T6186] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 187.638981][ T6186] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.642187][ T6186] usb 8-1: Product: syz [ 187.643661][ T6186] usb 8-1: Manufacturer: syz [ 187.645171][ T6186] usb 8-1: SerialNumber: syz [ 187.650256][T11022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.663058][T11022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.878159][T11022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.880641][T11022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.887222][ T6186] usb 8-1: No status endpoint found [ 188.088437][ T7458] usb 8-1: USB disconnect, device number 15 [ 188.656215][T11081] bond_slave_1: entered promiscuous mode [ 188.658886][T11078] bond_slave_1: left promiscuous mode [ 188.783250][T11088] /dev/nullb0: Can't lookup blockdev [ 188.785735][T11088] /dev/nullb0: Can't lookup blockdev [ 188.858354][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 188.858365][ T41] audit: type=1400 audit(1787185368.717:738): avc: denied { bind } for pid=11093 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.935588][T11100] jffs2: notice: (11100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 188.947615][ T41] audit: type=1400 audit(1787185368.807:739): avc: denied { write } for pid=11098 comm="syz.3.1932" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.796504][ T41] audit: type=1400 audit(1787185369.657:740): avc: denied { name_bind } for pid=11116 comm="syz.2.1937" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 190.097327][T11127] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 190.139693][T11127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.207365][T11127] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 190.242539][ T5800] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.353605][ T5535] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.544359][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.551181][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.555388][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.558518][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.566252][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.734685][ T41] audit: type=1400 audit(1787185370.597:741): avc: denied { set_context_mgr } for pid=11159 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.740738][ T41] audit: type=1400 audit(1787185370.597:742): avc: denied { call } for pid=11159 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.746529][ T41] audit: type=1400 audit(1787185370.597:743): avc: denied { transfer } for pid=11159 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.956801][ T5535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.963822][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1957'. [ 191.031329][T11175] Invalid ELF header magic: != ELF [ 191.034659][T11175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 191.182346][ T5535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.299218][ T41] audit: type=1804 audit(1787185371.147:744): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1962" name="bus" dev="ramfs" ino=32032 res=1 errno=0 [ 191.320761][ T5535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.435815][ T5535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.440774][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 191.444399][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 191.462978][T11148] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.465339][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.467712][T11148] bridge_slave_0: entered allmulticast mode [ 191.476440][T11148] bridge_slave_0: entered promiscuous mode [ 191.483946][T11148] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.486305][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.488692][T11148] bridge_slave_1: entered allmulticast mode [ 191.491418][T11148] bridge_slave_1: entered promiscuous mode [ 191.514541][T11148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.519896][T11148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.548479][T11148] team0: Port device team_slave_0 added [ 191.552087][T11148] team0: Port device team_slave_1 added [ 191.613045][T11148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.617681][T11148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.626062][T11148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.647493][T11148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.650392][T11148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.661085][T11148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.705891][ T5535] bond0: left promiscuous mode [ 191.710130][ T5535] bond_slave_0: left promiscuous mode [ 191.720062][ T5535] bond_slave_1: left promiscuous mode [ 191.728399][ T5535] bridge0: port 3(bond0) entered disabled state [ 191.734962][ T5535] bridge_slave_1: left allmulticast mode [ 191.736746][ T5535] bridge_slave_1: left promiscuous mode [ 191.738612][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.747723][ T5535] bridge_slave_0: left allmulticast mode [ 191.749602][ T5535] bridge_slave_0: left promiscuous mode [ 191.751607][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.935531][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.941082][ T5535] bond_slave_0: left allmulticast mode [ 191.945030][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.949141][ T5535] bond_slave_1: left allmulticast mode [ 191.956211][ T5535] bond0 (unregistering): Released all slaves [ 191.963378][ T5535] bond1 (unregistering): Released all slaves [ 191.970712][ T5535] bond2 (unregistering): Released all slaves [ 191.980744][ T5535] bond3 (unregistering): (slave dummy0): Removing an active aggregator [ 191.984830][ T5535] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 192.022904][ T5535] bond3 (unregistering): Released all slaves [ 192.085590][ T41] audit: type=1400 audit(1787185371.947:745): avc: denied { mount } for pid=11233 comm="syz.1.1979" name="/" dev="hugetlbfs" ino=33098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 192.105190][ T41] audit: type=1400 audit(1787185371.967:746): avc: denied { unmount } for pid=7266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 192.168317][T11148] hsr_slave_0: entered promiscuous mode [ 192.173187][T11148] hsr_slave_1: entered promiscuous mode [ 192.176434][T11148] debugfs: 'hsr0' already exists in 'hsr' [ 192.179396][T11148] Cannot create hsr debugfs directory [ 192.300331][ T5535] tipc: Left network mode [ 192.439678][ T41] audit: type=1400 audit(1787185372.297:747): avc: denied { write } for pid=11242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.520522][ T5435] 8021q: adding VLAN 0 to HW filter on device eth7 [ 192.642729][ T5736] Bluetooth: hci4: command tx timeout [ 192.669006][ T5535] hsr_slave_0: left promiscuous mode [ 192.671423][ T5535] hsr_slave_1: left promiscuous mode [ 192.673509][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.675854][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.679664][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.681933][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.686421][ T5535] veth1_macvtap: left promiscuous mode [ 192.688272][ T5535] veth0_macvtap: left promiscuous mode [ 192.690129][ T5535] veth1_vlan: left promiscuous mode [ 192.691852][ T5535] veth0_vlan: left promiscuous mode [ 192.746198][T11263] FAULT_INJECTION: forcing a failure. [ 192.746198][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.750411][T11263] CPU: 3 UID: 0 PID: 11263 Comm: syz.3.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.750429][T11263] Tainted: [L]=SOFTLOCKUP [ 192.750433][T11263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.750439][T11263] Call Trace: [ 192.750455][T11263] [ 192.750460][T11263] dump_stack_lvl+0x100/0x190 [ 192.750561][T11263] should_fail_ex.cold+0x5/0xa [ 192.750584][T11263] _copy_from_user+0x2e/0xd0 [ 192.750622][T11263] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 192.750677][T11263] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 192.750697][T11263] do_sock_getsockopt+0x530/0x6e0 [ 192.750710][T11263] ? __lock_acquire+0x4c5/0x1ec0 [ 192.750749][T11263] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 192.750767][T11263] ? find_held_lock+0x2b/0x80 [ 192.750781][T11263] ? __fget_files+0x21f/0x3d0 [ 192.750810][T11263] __sys_getsockopt+0x148/0x260 [ 192.750825][T11263] ? __x64_sys_getsockopt+0xbd/0x160 [ 192.750837][T11263] __x64_sys_getsockopt+0xbd/0x160 [ 192.750847][T11263] ? do_syscall_64+0xae/0x790 [ 192.750904][T11263] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.750920][T11263] do_syscall_64+0x123/0x790 [ 192.750931][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.750943][T11263] RIP: 0033:0x7f81ea39e0d9 [ 192.750954][T11263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.750965][T11263] RSP: 002b:00007f81eb214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 192.750989][T11263] RAX: ffffffffffffffda RBX: 00007f81ea625fa0 RCX: 00007f81ea39e0d9 [ 192.750995][T11263] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 192.751002][T11263] RBP: 00007f81eb214090 R08: 00002000000005c0 R09: 0000000000000000 [ 192.751008][T11263] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 192.751014][T11263] R13: 00007f81ea626038 R14: 00007f81ea625fa0 R15: 00007ffe52e8d278 [ 192.751028][T11263] [ 192.928295][ T5535] team0 (unregistering): Port device team_slave_1 removed [ 192.942992][ T5535] team0 (unregistering): Port device team_slave_0 removed [ 193.092626][ T7671] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 193.257051][ T7671] usb 8-1: Using ep0 maxpacket: 32 [ 193.263219][ T7671] usb 8-1: unable to get BOS descriptor or descriptor too short [ 193.269164][ T7671] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 193.279381][ T7671] usb 8-1: string descriptor 0 read error: -22 [ 193.281585][ T7671] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.290022][T11148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.316172][ T7671] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 193.319850][ T7671] dw2102: su3000_power_ctrl: 1, initialized 0 [ 193.322794][T11148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.326625][T11148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.327049][ T7671] dvb-usb: bulk message failed: -22 (2/0) [ 193.339626][T11148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.347007][T11148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.361582][ T7671] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.367874][ T7671] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 193.368961][T11148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.381885][T11148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.393721][ T7671] usb 8-1: media controller created [ 193.406451][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.407339][T11148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.411309][ T7671] dw2102: i2c transfer failed. [ 193.416972][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.429427][ T7671] dw2102: i2c transfer failed. [ 193.430900][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.433795][ T7671] dw2102: i2c transfer failed. [ 193.437814][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.440581][ T7671] dw2102: i2c transfer failed. [ 193.443057][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.445223][ T7671] dw2102: i2c transfer failed. [ 193.447653][ T7671] dvb-usb: bulk message failed: -22 (6/0) [ 193.450081][ T7671] dw2102: i2c transfer failed. [ 193.453381][ T7671] dvb-usb: MAC address: 02:02:02:02:02:02 [ 193.462982][ T7671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.476277][T11148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.491506][T11148] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.492508][ T7671] dvb-usb: bulk message failed: -22 (3/0) [ 193.498144][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.500418][ T7671] dw2102: command 0x0e transfer failed. [ 193.500942][ T9857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.507717][ T7671] dvb-usb: bulk message failed: -22 (3/0) [ 193.509216][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.509767][ T7671] dw2102: command 0x0e transfer failed. [ 193.515250][ T9857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.746179][T11148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.770176][T11148] veth0_vlan: entered promiscuous mode [ 193.778689][T11148] veth1_vlan: entered promiscuous mode [ 193.796289][T11148] veth0_macvtap: entered promiscuous mode [ 193.803557][T11148] veth1_macvtap: entered promiscuous mode [ 193.811732][T11148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.815898][ T7671] dvb-usb: bulk message failed: -22 (3/0) [ 193.818304][ T7671] dw2102: command 0x0e transfer failed. [ 193.822659][ T7671] dvb-usb: bulk message failed: -22 (3/0) [ 193.824415][ T7671] dw2102: command 0x0e transfer failed. [ 193.827586][T11148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.831356][ T7671] dvb-usb: bulk message failed: -22 (1/0) [ 193.833934][ T7671] dw2102: command 0x51 transfer failed. [ 193.836889][T11269] dvb-usb: bulk message failed: -22 (6/0) [ 193.839802][T11269] dw2102: i2c transfer failed. [ 193.867705][ T6698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.877625][ T6698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.887498][ T7671] DVB: Unable to find symbol ds3000_attach() [ 193.889371][ T7671] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 193.905574][ T8254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.912517][ T8254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.926279][ T8254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.928728][ T8254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.941860][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 193.941872][ T41] audit: type=1400 audit(1787185373.797:755): avc: denied { mounton } for pid=11148 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.942745][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.953694][ T7671] rc_core: IR keymap rc-su3000 not found [ 193.955708][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.958368][ T7671] Registered IR keymap rc-empty [ 193.966530][ T7671] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 193.975883][ T7671] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input12 [ 193.987210][ T7671] dvb-usb: schedule remote query interval to 150 msecs. [ 193.989691][ T7671] dw2102: su3000_power_ctrl: 0, initialized 1 [ 193.991659][ T7671] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 193.997132][ T7671] usb 8-1: USB disconnect, device number 16 [ 194.020128][T11326] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 194.022772][T11326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1990'. [ 194.040366][ T7671] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 194.154586][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.157161][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.164255][T11341] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1996'. [ 194.723487][ T5736] Bluetooth: hci4: command tx timeout [ 195.090428][T11371] FAULT_INJECTION: forcing a failure. [ 195.090428][T11371] name failslab, interval 1, probability 0, space 0, times 1 [ 195.097880][ T41] audit: type=1400 audit(1787185374.957:756): avc: denied { bind } for pid=11362 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 195.101052][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 195.103996][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.2.2005 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.104013][T11371] Tainted: [L]=SOFTLOCKUP [ 195.104017][T11371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.104024][T11371] Call Trace: [ 195.104042][T11371] [ 195.104048][T11371] dump_stack_lvl+0x100/0x190 [ 195.104124][T11371] should_fail_ex.cold+0x5/0xa [ 195.104153][T11371] should_failslab+0xc2/0x120 [ 195.104201][T11371] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 195.104223][T11371] ? __alloc_skb+0x5b7/0x710 [ 195.104282][T11371] ? __alloc_skb+0x140/0x710 [ 195.104304][T11371] __alloc_skb+0x140/0x710 [ 195.104338][T11371] ? __alloc_skb+0x5b7/0x710 [ 195.104355][T11371] ? __pfx___alloc_skb+0x10/0x10 [ 195.104373][T11371] ? find_held_lock+0x2b/0x80 [ 195.104412][T11371] sock_wmalloc+0xd4/0x120 [ 195.104443][T11371] packet_sendmsg_spkt+0x9e3/0x1490 [ 195.104493][T11371] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 195.104521][T11371] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.104594][T11371] __sys_sendto+0x48b/0x4e0 [ 195.104610][T11371] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 195.104638][T11371] ? __pfx___sys_sendto+0x10/0x10 [ 195.104662][T11371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.104730][T11371] ? ksys_write+0x1ac/0x250 [ 195.104744][T11371] ? __pfx_ksys_write+0x10/0x10 [ 195.104757][T11371] __x64_sys_sendto+0xe0/0x1c0 [ 195.104767][T11371] ? do_syscall_64+0xae/0x790 [ 195.104776][T11371] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.104793][T11371] do_syscall_64+0x123/0x790 [ 195.104803][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.104816][T11371] RIP: 0033:0x7fe3f979e0d9 [ 195.104827][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.104837][T11371] RSP: 002b:00007fe3fa6b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 195.104857][T11371] RAX: ffffffffffffffda RBX: 00007fe3f9a25fa0 RCX: 00007fe3f979e0d9 [ 195.104864][T11371] RDX: 00000000000005ee RSI: 0000200000000140 RDI: 0000000000000003 [ 195.104870][T11371] RBP: 00007fe3fa6b9090 R08: 0000200000000040 R09: 0000000000000010 [ 195.104877][T11371] R10: 0000000024008850 R11: 0000000000000246 R12: 0000000000000001 [ 195.104883][T11371] R13: 00007fe3f9a26038 R14: 00007fe3f9a25fa0 R15: 00007ffc922213f8 [ 195.104896][T11371] [ 195.258783][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 195.337657][T11397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.425720][T11402] FAULT_INJECTION: forcing a failure. [ 195.425720][T11402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.432251][T11402] CPU: 2 UID: 0 PID: 11402 Comm: syz.1.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.432269][T11402] Tainted: [L]=SOFTLOCKUP [ 195.432272][T11402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.432279][T11402] Call Trace: [ 195.432290][T11402] [ 195.432296][T11402] dump_stack_lvl+0x100/0x190 [ 195.432377][T11402] should_fail_ex.cold+0x5/0xa [ 195.432407][T11402] _copy_to_user+0x32/0xd0 [ 195.432439][T11402] simple_read_from_buffer+0xcb/0x170 [ 195.432467][T11402] proc_fail_nth_read+0x1af/0x230 [ 195.432483][T11402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.432498][T11402] ? rw_verify_area+0xce/0x6d0 [ 195.432515][T11402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.432532][T11402] vfs_read+0x1e4/0xb40 [ 195.432545][T11402] ? __pfx_vfs_read+0x10/0x10 [ 195.432555][T11402] ? find_held_lock+0x2b/0x80 [ 195.432578][T11402] ? __fget_files+0x215/0x3d0 [ 195.432595][T11402] ? __fget_files+0x21f/0x3d0 [ 195.432612][T11402] ksys_read+0x12a/0x250 [ 195.432622][T11402] ? __pfx_ksys_read+0x10/0x10 [ 195.432637][T11402] do_syscall_64+0x123/0x790 [ 195.432678][T11402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.432690][T11402] RIP: 0033:0x7f032f95e90e [ 195.432699][T11402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.432710][T11402] RSP: 002b:00007f03308b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.432729][T11402] RAX: ffffffffffffffda RBX: 00007f03308b26c0 RCX: 00007f032f95e90e [ 195.432736][T11402] RDX: 000000000000000f RSI: 00007f03308b20a0 RDI: 0000000000000004 [ 195.432742][T11402] RBP: 00007f03308b2090 R08: 0000000000000000 R09: 0000000000000000 [ 195.432748][T11402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.432754][T11402] R13: 00007f032fc26038 R14: 00007f032fc25fa0 R15: 00007fffcd0f77e8 [ 195.432768][T11402] [ 195.449876][T11414] syzkaller0: entered promiscuous mode [ 195.501280][T11414] syzkaller0: entered allmulticast mode [ 195.538990][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 195.585373][ T41] audit: type=1800 audit(1787185375.447:757): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2024" name="ifname" dev="configfs" ino=34045 res=0 errno=0 [ 195.700308][T11440] program syz.3.2029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.705614][ T41] audit: type=1400 audit(1787185375.567:758): avc: denied { wake_alarm } for pid=11439 comm="syz.3.2029" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.798004][T11451] FAULT_INJECTION: forcing a failure. [ 195.798004][T11451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.798541][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 195.803276][T11451] CPU: 2 UID: 0 PID: 11451 Comm: syz.3.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.803295][T11451] Tainted: [L]=SOFTLOCKUP [ 195.803299][T11451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.803307][T11451] Call Trace: [ 195.803312][T11451] [ 195.803316][T11451] dump_stack_lvl+0x100/0x190 [ 195.803385][T11451] should_fail_ex.cold+0x5/0xa [ 195.803406][T11451] _copy_from_iter+0x1f4/0x1690 [ 195.803441][T11451] ? skb_set_owner_w+0x37d/0x780 [ 195.803487][T11451] ? __pfx__copy_from_iter+0x10/0x10 [ 195.803497][T11451] ? __pfx_skb_set_owner_w+0x10/0x10 [ 195.803515][T11451] ? find_held_lock+0x2b/0x80 [ 195.803553][T11451] packet_sendmsg_spkt+0xb8a/0x1490 [ 195.803597][T11451] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 195.803619][T11451] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.803653][T11451] __sys_sendto+0x48b/0x4e0 [ 195.803669][T11451] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 195.803696][T11451] ? __pfx___sys_sendto+0x10/0x10 [ 195.803722][T11451] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.803783][T11451] ? ksys_write+0x1ac/0x250 [ 195.803807][T11451] ? __pfx_ksys_write+0x10/0x10 [ 195.803827][T11451] __x64_sys_sendto+0xe0/0x1c0 [ 195.803838][T11451] ? do_syscall_64+0xae/0x790 [ 195.803853][T11451] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.803878][T11451] do_syscall_64+0x123/0x790 [ 195.803895][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.803913][T11451] RIP: 0033:0x7f81ea39e0d9 [ 195.803928][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.803939][T11451] RSP: 002b:00007f81eb214028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 195.803968][T11451] RAX: ffffffffffffffda RBX: 00007f81ea625fa0 RCX: 00007f81ea39e0d9 [ 195.803979][T11451] RDX: 00000000000005ee RSI: 0000200000000140 RDI: 0000000000000003 [ 195.803990][T11451] RBP: 00007f81eb214090 R08: 0000200000000040 R09: 0000000000000010 [ 195.804001][T11451] R10: 0000000024008850 R11: 0000000000000246 R12: 0000000000000001 [ 195.804012][T11451] R13: 00007f81ea626038 R14: 00007f81ea625fa0 R15: 00007ffe52e8d278 [ 195.804028][T11451] [ 195.882538][T11450] veth0: entered promiscuous mode [ 195.884780][T11450] veth0: entered allmulticast mode [ 195.966996][T11459] sock: sock_set_timeout: `syz.1.2036' (pid 11459) tries to set negative timeout [ 195.971188][T11459] futex_wake_op: syz.1.2036 tries to shift op by 144; fix this program [ 195.971933][ T41] audit: type=1400 audit(1787185375.827:759): avc: denied { read } for pid=11458 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.979510][T11459] futex_wake_op: syz.1.2036 tries to shift op by 144; fix this program [ 196.037486][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 196.058599][T11456] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.432498][T11478] bridge0: port 3(syz_tun) entered blocking state [ 196.436022][T11478] bridge0: port 3(syz_tun) entered disabled state [ 196.440586][T11478] syz_tun: entered allmulticast mode [ 196.446191][T11478] syz_tun: entered promiscuous mode [ 196.448258][T11478] bridge0: port 3(syz_tun) entered blocking state [ 196.450484][T11478] bridge0: port 3(syz_tun) entered listening state [ 196.455852][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 196.459573][T11482] veth0: entered promiscuous mode [ 196.461604][T11482] veth0: entered allmulticast mode [ 196.559263][ T8260] bridge0: port 3(syz_tun) entered disabled state [ 196.599152][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'. [ 196.641127][ T61] IPVS: starting estimator thread 0... [ 196.644305][T11498] IPVS: ip_vs_add_dest(): server weight less than zero [ 196.742487][T11499] IPVS: using max 44 ests per chain, 105600 per kthread [ 196.792765][ T5736] Bluetooth: hci4: command tx timeout [ 196.837675][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 196.938064][T11530] bridge1: entered allmulticast mode [ 196.974946][T11535] FAULT_INJECTION: forcing a failure. [ 196.974946][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.979998][T11535] CPU: 2 UID: 0 PID: 11535 Comm: syz.3.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.980024][T11535] Tainted: [L]=SOFTLOCKUP [ 196.980030][T11535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.980040][T11535] Call Trace: [ 196.980059][T11535] [ 196.980065][T11535] dump_stack_lvl+0x100/0x190 [ 196.980211][T11535] should_fail_ex.cold+0x5/0xa [ 196.980254][T11535] _copy_to_user+0x32/0xd0 [ 196.980308][T11535] simple_read_from_buffer+0xcb/0x170 [ 196.980354][T11535] proc_fail_nth_read+0x1af/0x230 [ 196.980378][T11535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.980401][T11535] ? rw_verify_area+0xce/0x6d0 [ 196.980434][T11535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.980455][T11535] vfs_read+0x1e4/0xb40 [ 196.980475][T11535] ? __pfx_vfs_read+0x10/0x10 [ 196.980490][T11535] ? find_held_lock+0x2b/0x80 [ 196.980531][T11535] ? __fget_files+0x215/0x3d0 [ 196.980556][T11535] ? __fget_files+0x21f/0x3d0 [ 196.980584][T11535] ksys_read+0x12a/0x250 [ 196.980605][T11535] ? __pfx_ksys_read+0x10/0x10 [ 196.980630][T11535] do_syscall_64+0x123/0x790 [ 196.980702][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.980721][T11535] RIP: 0033:0x7f81ea35e90e [ 196.980736][T11535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.980752][T11535] RSP: 002b:00007f81eb213fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.980785][T11535] RAX: ffffffffffffffda RBX: 00007f81eb2146c0 RCX: 00007f81ea35e90e [ 196.980796][T11535] RDX: 000000000000000f RSI: 00007f81eb2140a0 RDI: 0000000000000004 [ 196.980806][T11535] RBP: 00007f81eb214090 R08: 0000000000000000 R09: 0000000000000000 [ 196.980817][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.980827][T11535] R13: 00007f81ea626038 R14: 00007f81ea625fa0 R15: 00007ffe52e8d278 [ 196.980850][T11535] [ 197.086381][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 197.089953][T11546] veth0: entered promiscuous mode [ 197.092074][T11546] veth0: entered allmulticast mode [ 197.172035][T11558] xt_hashlimit: size too large, truncated to 1048576 [ 197.422560][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 197.572502][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 197.574616][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 197.578345][ T29] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 197.581000][ T29] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 197.583883][ T29] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 197.586694][ T29] usb 7-1: config 250 has no interface number 0 [ 197.588641][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 197.592094][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 197.596620][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.599859][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.603110][ T29] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 197.607369][ T29] usb 7-1: config 250 interface 228 has no altsetting 0 [ 197.610824][ T29] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 197.613757][ T29] usb 7-1: Product: syz [ 197.615155][ T29] usb 7-1: SerialNumber: syz [ 197.621041][ T29] hub 7-1:250.228: bad descriptor, ignoring hub [ 197.623565][ T29] hub 7-1:250.228: probe with driver hub failed with error -5 [ 197.824393][ T29] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 198.023061][ T41] audit: type=1400 audit(1787185377.877:760): avc: denied { read write } for pid=11562 comm="syz.2.2073" name="lp0" dev="devtmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.038190][ T41] audit: type=1400 audit(1787185377.877:761): avc: denied { open } for pid=11562 comm="syz.2.2073" path="/dev/usb/lp0" dev="devtmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.085202][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 198.088046][T11580] veth0: left promiscuous mode [ 198.089581][T11580] veth0: left allmulticast mode [ 198.140122][ T5736] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 198.199338][T11596] openvswitch: netlink: IP tunnel dst address not specified [ 198.206539][T11596] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 198.215470][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 198.247761][ T7671] usb 7-1: USB disconnect, device number 8 [ 198.250929][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'. [ 198.256229][ T7671] usblp0: removed [ 198.298799][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 198.302306][T11609] veth0: left promiscuous mode [ 198.304226][T11609] veth0: left allmulticast mode [ 198.373529][T11619] netlink: 'syz.1.2091': attribute type 2 has an invalid length. [ 198.411434][T11623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'. [ 198.414527][T11623] netlink: 'syz.1.2094': attribute type 7 has an invalid length. [ 198.417034][T11623] netlink: 'syz.1.2094': attribute type 8 has an invalid length. [ 198.426262][ T41] audit: type=1400 audit(1787185378.287:762): avc: denied { getopt } for pid=11622 comm="syz.1.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.682570][ T1036] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 198.736594][T11638] veth0: left promiscuous mode [ 198.738344][T11638] veth0: left allmulticast mode [ 198.842134][T11644] IPVS: length: 67 != 24 [ 198.852695][ T1036] usb 6-1: Using ep0 maxpacket: 8 [ 198.854880][ T1036] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.859046][ T1036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.863761][ T1036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.870561][ T1036] usb 6-1: config 0 descriptor?? [ 198.883348][ T5736] Bluetooth: hci4: command tx timeout [ 198.904909][ T41] audit: type=1400 audit(1787185378.767:763): avc: denied { read } for pid=11647 comm="syz.2.2104" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 198.912722][ T41] audit: type=1400 audit(1787185378.767:764): avc: denied { open } for pid=11647 comm="syz.2.2104" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.080826][ T1036] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.184592][ T7671] [ 199.184658][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 199.184673][ T41] audit: type=1400 audit(1787185379.047:766): avc: denied { read } for pid=11657 comm="syz.2.2107" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.185401][ T7671] ============================================ [ 199.185417][ T7671] WARNING: possible recursive locking detected [ 199.185424][ T7671] syzkaller #0 Tainted: G L [ 199.188196][ T41] audit: type=1400 audit(1787185379.047:767): avc: denied { open } for pid=11657 comm="syz.2.2107" path="net:[4026532862]" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.193985][ T7671] -------------------------------------------- [ 199.193992][ T7671] kworker/0:5/7671 is trying to acquire lock: [ 199.194000][ T7671] ffff888033846928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 199.194076][ T7671] [ 199.194076][ T7671] but task is already holding lock: [ 199.194081][ T7671] ffff8880569f7928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 199.194107][ T7671] [ 199.194107][ T7671] other info that might help us debug this: [ 199.194111][ T7671] Possible unsafe locking scenario: [ 199.194111][ T7671] [ 199.194114][ T7671] CPU0 [ 199.194116][ T7671] ---- [ 199.194119][ T7671] lock(&grp->list_lock); [ 199.194126][ T7671] lock(&grp->list_lock); [ 199.194133][ T7671] [ 199.194133][ T7671] *** DEADLOCK *** [ 199.194133][ T7671] [ 199.194136][ T7671] May be due to missing lock nesting notation [ 199.194136][ T7671] [ 199.194139][ T7671] locks held by kworker/0:5/7671: 3, last CPU#0: [ 199.194148][ T7671] #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 199.194178][ T7671] #1: ffffc90005047d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 199.194205][ T7671] #2: ffff8880569f7928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 199.194234][ T7671] [ 199.194234][ T7671] stack backtrace: [ 199.194243][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.194258][ T7671] Tainted: [L]=SOFTLOCKUP [ 199.194261][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.194270][ T7671] Workqueue: events snd_rawmidi_input_event_work [ 199.194287][ T7671] Call Trace: [ 199.194292][ T7671] [ 199.194296][ T7671] dump_stack_lvl+0x100/0x190 [ 199.194313][ T7671] print_deadlock_bug.cold+0xbd/0xca [ 199.194330][ T7671] __lock_acquire+0x1343/0x1ec0 [ 199.194347][ T7671] lock_acquire+0x1b9/0x370 [ 199.194360][ T7671] ? snd_seq_deliver_event+0x230/0x860 [ 199.194374][ T7671] ? do_raw_read_unlock+0x3f/0x70 [ 199.194391][ T7671] _raw_read_lock+0x5f/0x70 [ 199.194407][ T7671] ? snd_seq_deliver_event+0x230/0x860 [ 199.194420][ T7671] snd_seq_deliver_event+0x230/0x860 [ 199.194434][ T7671] ? lock_acquire+0x1b9/0x370 [ 199.194448][ T7671] ? find_held_lock+0x2b/0x80 [ 199.194458][ T7671] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 199.194473][ T7671] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.194489][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.194504][ T7671] ? client_use_ptr+0xfd/0x4a0 [ 199.194516][ T7671] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 199.194531][ T7671] queue_broadcast_event.isra.0+0x143/0x1b0 [ 199.194547][ T7671] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 199.194563][ T7671] ? _raw_spin_unlock_irq_enable+0x4c/0x90 [ 199.194578][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.194594][ T7671] snd_seq_control_queue+0x6e9/0xb40 [ 199.194611][ T7671] ? __pfx_event_input_timer+0x10/0x10 [ 199.194623][ T7671] __snd_seq_deliver_single_event+0x127/0x1c0 [ 199.194638][ T7671] snd_seq_deliver_single_event+0x31f/0x8c0 [ 199.194656][ T7671] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 199.194673][ T7671] snd_seq_deliver_event+0x44b/0x860 [ 199.194686][ T7671] ? lock_acquire+0x1b9/0x370 [ 199.194699][ T7671] ? do_raw_spin_lock+0x128/0x260 [ 199.194714][ T7671] ? find_held_lock+0x2b/0x80 [ 199.194724][ T7671] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 199.194738][ T7671] ? mark_held_locks+0x40/0x70 [ 199.194751][ T7671] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 199.194768][ T7671] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.194784][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.194798][ T7671] ? client_use_ptr+0xfd/0x4a0 [ 199.194810][ T7671] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 199.194825][ T7671] send_timer_event.isra.0+0x130/0x190 [ 199.194839][ T7671] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 199.194854][ T7671] ? snd_seq_queue_timer_set_tempo+0x18b/0x4e0 [ 199.194871][ T7671] snd_seq_oss_timer_start+0x1db/0x320 [ 199.194885][ T7671] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 199.194900][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.194915][ T7671] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.194930][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.194945][ T7671] ? find_slot+0x15c/0x1b0 [ 199.194960][ T7671] snd_seq_oss_midi_input+0x467/0xa30 [ 199.194977][ T7671] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 199.194995][ T7671] ? find_held_lock+0x2b/0x80 [ 199.195004][ T7671] ? snd_seq_port_use_ptr+0x128/0x190 [ 199.195017][ T7671] snd_seq_oss_event_input+0x194/0x250 [ 199.195031][ T7671] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 199.195046][ T7671] __snd_seq_deliver_single_event+0x127/0x1c0 [ 199.195061][ T7671] snd_seq_deliver_single_event+0x31f/0x8c0 [ 199.195075][ T7671] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 199.195089][ T7671] ? mark_held_locks+0x40/0x70 [ 199.195102][ T7671] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 199.195116][ T7671] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.195132][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.195147][ T7671] snd_seq_deliver_event+0x2c1/0x860 [ 199.195162][ T7671] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 199.195175][ T7671] ? _raw_spin_unlock_irq_enable+0x4c/0x90 [ 199.195190][ T7671] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 199.195205][ T7671] ? client_use_ptr+0xfd/0x4a0 [ 199.195217][ T7671] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 199.195232][ T7671] snd_midi_input_event+0x32f/0x470 [ 199.195244][ T7671] ? __pfx_snd_midi_input_event+0x10/0x10 [ 199.195257][ T7671] ? lock_acquire+0x5e/0x370 [ 199.195270][ T7671] ? __pfx_snd_midi_input_event+0x10/0x10 [ 199.195282][ T7671] snd_rawmidi_input_event_work+0x61/0x80 [ 199.195296][ T7671] process_one_work+0xa23/0x1940 [ 199.195309][ T7671] ? __pfx_process_one_work+0x10/0x10 [ 199.195323][ T7671] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 199.195338][ T7671] worker_thread+0x5ef/0xe50 [ 199.195350][ T7671] ? __pfx_worker_thread+0x10/0x10 [ 199.195362][ T7671] ? kthread+0x13a/0x450 [ 199.195372][ T7671] ? __pfx_worker_thread+0x10/0x10 [ 199.195383][ T7671] kthread+0x373/0x450 [ 199.195392][ T7671] ? __pfx_kthread+0x10/0x10 [ 199.195403][ T7671] ret_from_fork+0x730/0xd60 [ 199.195419][ T7671] ? __pfx_ret_from_fork+0x10/0x10 [ 199.195433][ T7671] ? rcu_is_watching+0x13/0xc0 [ 199.195444][ T7671] ? __switch_to+0x800/0x10f0 [ 199.195455][ T7671] ? __pfx_kthread+0x10/0x10 [ 199.195465][ T7671] ret_from_fork_asm+0x1a/0x30 [ 199.195483][ T7671] [ 199.533175][ T34] usb 6-1: USB disconnect, device number 17