last executing test programs: 22.390971998s ago: executing program 1 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r8, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) close_range(r0, r5, 0x0) 6.138039344s ago: executing program 1 (id=188): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) 5.797961419s ago: executing program 1 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0xa) 5.18279101s ago: executing program 1 (id=191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x77}, 0x8) 4.797119743s ago: executing program 1 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000013c0)=@ipv4_delroute={0x1c, 0x19, 0x201}, 0x1c}}, 0x0) 4.438342943s ago: executing program 1 (id=193): bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 4.059237084s ago: executing program 0 (id=195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0xa) 3.633578694s ago: executing program 0 (id=196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}, {&(0x7f00000004c0)=""/161, 0xa1}], 0x2, 0x0, 0x0) 3.189988307s ago: executing program 0 (id=197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x77}, 0x8) 2.870426479s ago: executing program 0 (id=198): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 2.348143715s ago: executing program 0 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xffe, 0x0, 0xfffd, 0x0, 0x9, 0xc, 0x0, 0xfff7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 0 (id=200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0xa) kernel console output (not intermixed with test programs): [ 48.710916][ T31] audit: type=1400 audit(48.650:68): avc: denied { read write } for pid=3102 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.711940][ T31] audit: type=1400 audit(48.650:69): avc: denied { open } for pid=3102 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:17159' (ED25519) to the list of known hosts. [ 60.125823][ T31] audit: type=1400 audit(60.070:70): avc: denied { name_bind } for pid=3103 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.455055][ T31] audit: type=1400 audit(62.390:71): avc: denied { execute } for pid=3105 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.483329][ T31] audit: type=1400 audit(62.410:72): avc: denied { execute_no_trans } for pid=3105 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.118519][ T31] audit: type=1400 audit(66.060:73): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.121006][ T31] audit: type=1400 audit(66.060:74): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.136265][ T3105] cgroup: Unknown subsys name 'net' [ 66.146399][ T31] audit: type=1400 audit(66.080:75): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.387046][ T3105] cgroup: Unknown subsys name 'hugetlb' [ 66.388019][ T3105] cgroup: Unknown subsys name 'rlimit' [ 66.654657][ T31] audit: type=1400 audit(66.590:76): avc: denied { setattr } for pid=3105 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.655589][ T31] audit: type=1400 audit(66.600:77): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.656369][ T31] audit: type=1400 audit(66.600:78): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.840695][ T3107] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.842594][ T31] audit: type=1400 audit(66.780:79): avc: denied { relabelto } for pid=3107 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.847098][ T31] audit: type=1400 audit(66.790:80): avc: denied { write } for pid=3107 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 66.880763][ T31] audit: type=1400 audit(66.820:81): avc: denied { read } for pid=3105 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.881315][ T31] audit: type=1400 audit(66.820:82): avc: denied { open } for pid=3105 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.453522][ T3105] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.436838][ T31] audit: type=1400 audit(76.380:83): avc: denied { execmem } for pid=3108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.494874][ T31] audit: type=1400 audit(76.430:84): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.495849][ T31] audit: type=1400 audit(76.430:85): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.496550][ T31] audit: type=1400 audit(76.430:86): avc: denied { read } for pid=3110 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.497215][ T31] audit: type=1400 audit(76.430:87): avc: denied { open } for pid=3110 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.498105][ T31] audit: type=1400 audit(76.430:88): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.518188][ T31] audit: type=1400 audit(76.460:89): avc: denied { module_request } for pid=3110 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.590349][ T31] audit: type=1400 audit(76.530:90): avc: denied { sys_module } for pid=3110 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.336843][ T31] audit: type=1400 audit(77.280:91): avc: denied { ioctl } for pid=3110 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.273703][ T3111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.280168][ T3111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.396608][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.405327][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.266946][ T3111] hsr_slave_0: entered promiscuous mode [ 79.272069][ T3111] hsr_slave_1: entered promiscuous mode [ 79.569896][ T3110] hsr_slave_0: entered promiscuous mode [ 79.572897][ T3110] hsr_slave_1: entered promiscuous mode [ 79.577497][ T3110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.580214][ T3110] Cannot create hsr debugfs directory [ 79.650077][ T31] audit: type=1400 audit(79.580:92): avc: denied { create } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.666350][ T3111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.681498][ T3111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.691349][ T3111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.701324][ T3111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.980439][ T3110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.995962][ T3110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.003278][ T3110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.015919][ T3110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.581696][ T3111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.715963][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.487320][ T3110] veth0_vlan: entered promiscuous mode [ 83.516712][ T3110] veth1_vlan: entered promiscuous mode [ 83.592304][ T3110] veth0_macvtap: entered promiscuous mode [ 83.609187][ T3110] veth1_macvtap: entered promiscuous mode [ 83.680945][ T3110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.681872][ T3110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682270][ T3110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682625][ T3110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.814532][ T3111] veth0_vlan: entered promiscuous mode [ 83.838160][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 83.838259][ T31] audit: type=1400 audit(83.780:95): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.850451][ T31] audit: type=1400 audit(83.790:96): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/syzkaller.wwscVB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.850721][ T3111] veth1_vlan: entered promiscuous mode [ 83.861271][ T31] audit: type=1400 audit(83.800:97): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.882777][ T31] audit: type=1400 audit(83.820:98): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.895445][ T31] audit: type=1400 audit(83.830:99): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.905041][ T31] audit: type=1400 audit(83.840:100): avc: denied { mount } for pid=3110 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.970375][ T3111] veth0_macvtap: entered promiscuous mode [ 83.982196][ T3111] veth1_macvtap: entered promiscuous mode [ 84.059924][ T3111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.062542][ T3111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.063742][ T3111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.067992][ T3111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.090629][ T31] audit: type=1400 audit(84.030:101): avc: denied { read write } for pid=3110 comm="syz-executor" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.103830][ T31] audit: type=1400 audit(84.040:102): avc: denied { open } for pid=3110 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.110644][ T31] audit: type=1400 audit(84.040:103): avc: denied { ioctl } for pid=3110 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.238691][ T31] audit: type=1400 audit(84.180:104): avc: denied { prog_load } for pid=3789 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.390883][ T3885] syz.1.26[3885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.391341][ T3885] syz.1.26[3885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.949791][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 91.949896][ T31] audit: type=1400 audit(91.890:118): avc: denied { create } for pid=3890 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.404962][ T31] audit: type=1400 audit(92.340:119): avc: denied { create } for pid=3901 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.424860][ T31] audit: type=1400 audit(92.350:120): avc: denied { setopt } for pid=3901 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.433402][ T31] audit: type=1400 audit(92.360:121): avc: denied { bind } for pid=3901 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.465230][ T31] audit: type=1400 audit(92.360:122): avc: denied { name_bind } for pid=3901 comm="syz.1.30" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.466134][ T31] audit: type=1400 audit(92.360:123): avc: denied { node_bind } for pid=3901 comm="syz.1.30" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 96.465033][ T31] audit: type=1400 audit(96.390:124): avc: denied { write } for pid=3955 comm="syz.1.38" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.465960][ T31] audit: type=1400 audit(96.410:125): avc: denied { connect } for pid=3955 comm="syz.1.38" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.466654][ T31] audit: type=1400 audit(96.410:126): avc: denied { name_connect } for pid=3955 comm="syz.1.38" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.086531][ T31] audit: type=1400 audit(97.030:127): avc: denied { create } for pid=3975 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.626892][ T4033] pim6reg1: entered promiscuous mode [ 99.627526][ T4033] pim6reg1: entered allmulticast mode [ 101.732374][ T4061] pim6reg1: entered promiscuous mode [ 101.733133][ T4061] pim6reg1: entered allmulticast mode [ 102.432913][ T4073] syzkaller0: entered promiscuous mode [ 102.433424][ T4073] syzkaller0: entered allmulticast mode [ 102.968459][ T4080] syzkaller0: entered promiscuous mode [ 102.968923][ T4080] syzkaller0: entered allmulticast mode [ 118.135653][ T4211] ªªªªªª: renamed from vlan0 (while UP) [ 121.267213][ T4243] wg2: entered promiscuous mode [ 121.270811][ T4243] wg2: entered allmulticast mode [ 122.716300][ T4256] syzkaller0: entered promiscuous mode [ 122.716804][ T4256] syzkaller0: entered allmulticast mode [ 123.234655][ T4268] bridge_slave_0: entered promiscuous mode [ 123.239604][ T4268] bridge_slave_0: entered allmulticast mode [ 124.207175][ T4277] syzkaller0: entered promiscuous mode [ 124.207672][ T4277] syzkaller0: entered allmulticast mode [ 125.337559][ T4296] syzkaller0: entered promiscuous mode [ 125.338047][ T4296] syzkaller0: entered allmulticast mode [ 128.843911][ T4332] syzkaller0: entered promiscuous mode [ 128.854381][ T4332] syzkaller0: entered allmulticast mode [ 131.185945][ T4386] syz.1.134[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.186164][ T4386] syz.1.134[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.737416][ T4402] pim6reg1: entered promiscuous mode [ 131.738970][ T4402] pim6reg1: entered allmulticast mode [ 133.467265][ T31] audit: type=1400 audit(133.400:128): avc: denied { name_bind } for pid=4446 comm="syz.1.145" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.468247][ T31] audit: type=1400 audit(133.410:129): avc: denied { node_bind } for pid=4446 comm="syz.1.145" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 133.693666][ T4451] syzkaller0: entered promiscuous mode [ 133.714429][ T4451] syzkaller0: entered allmulticast mode [ 134.576794][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.588888][ C0] hrtimer: interrupt took 2424656 ns [ 134.776106][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.861950][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.862630][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.863201][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 134.863552][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.898696][ T9] usb 1-1: config 0 descriptor?? [ 135.440131][ T9] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 135.440741][ T9] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 135.441076][ T9] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 135.441392][ T9] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 135.441713][ T9] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 135.468500][ T9] wacom 0003:056A:00FB.0001: hidraw0: USB HID ve.a5 Device [HID 056a:00fb] on usb-dummy_hcd.0-1/input0 [ 135.632668][ T9] usb 1-1: USB disconnect, device number 2 [ 136.649095][ T31] audit: type=1400 audit(136.580:130): avc: denied { create } for pid=4486 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.667506][ T31] audit: type=1400 audit(136.610:131): avc: denied { setopt } for pid=4486 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.097816][ T4488] ip6gretap1: entered promiscuous mode [ 142.098777][ T4488] ip6gretap1: entered allmulticast mode [ 168.714584][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 168.975062][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 169.055966][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.056616][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.058195][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 169.060954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.074654][ T9] usb 2-1: config 0 descriptor?? [ 169.667444][ T9] kone 0003:1E7D:2CED.0002: collection stack underflow [ 169.668077][ T9] kone 0003:1E7D:2CED.0002: item 0 1 0 12 parsing failed [ 169.668834][ T9] kone 0003:1E7D:2CED.0002: parse failed [ 169.669261][ T9] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 169.965011][ T9] usb 2-1: USB disconnect, device number 2 [ 170.744778][ T31] audit: type=1400 audit(170.660:132): avc: denied { watch } for pid=4522 comm="syz.1.154" path="/89/control" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 171.110680][ T31] audit: type=1400 audit(171.050:133): avc: denied { create } for pid=4525 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.120113][ T31] audit: type=1400 audit(171.060:134): avc: denied { bind } for pid=4525 comm="syz.1.155" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.120913][ T31] audit: type=1400 audit(171.060:135): avc: denied { node_bind } for pid=4525 comm="syz.1.155" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 171.138926][ T31] audit: type=1400 audit(171.080:136): avc: denied { connect } for pid=4525 comm="syz.1.155" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.144803][ T31] audit: type=1400 audit(171.080:137): avc: denied { write } for pid=4525 comm="syz.1.155" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.647247][ T4438] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.906180][ T4438] usb 2-1: Using ep0 maxpacket: 16 [ 172.022151][ T4438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.022489][ T4438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.022775][ T4438] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.023052][ T4438] usb 2-1: New USB device found, idVendor=045e, idProduct=0001, bcdDevice= 0.00 [ 172.023247][ T4438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.025737][ T4438] usb 2-1: config 0 descriptor?? [ 172.597148][ T4438] hid-generic 0003:045E:0001.0003: unknown main item tag 0x0 [ 172.597801][ T4438] hid-generic 0003:045E:0001.0003: ignoring exceeding usage max [ 172.599909][ T4438] hid-generic 0003:045E:0001.0003: unknown main item tag 0x0 [ 172.600305][ T4438] hid-generic 0003:045E:0001.0003: unbalanced collection at end of report description [ 172.601032][ T4438] hid-generic 0003:045E:0001.0003: probe with driver hid-generic failed with error -22 [ 172.813294][ T4438] usb 2-1: USB disconnect, device number 3 [ 175.564808][ T31] audit: type=1400 audit(175.500:138): avc: denied { ioctl } for pid=4547 comm="syz.0.158" path="socket:[2814]" dev="sockfs" ino=2814 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.936044][ T31] audit: type=1400 audit(175.870:139): avc: denied { create } for pid=4550 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.397677][ T4549] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 176.450130][ T4549] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 181.380871][ T4556] syz.0.159[4556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.381267][ T4556] syz.0.159[4556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.314566][ T31] audit: type=1400 audit(199.230:140): avc: denied { setopt } for pid=4565 comm="syz.1.164" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.315844][ T31] audit: type=1400 audit(199.250:141): avc: denied { getopt } for pid=4565 comm="syz.1.164" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.952429][ T31] audit: type=1400 audit(209.890:142): avc: denied { mounton } for pid=4575 comm="syz.1.167" path="/proc/218/task" dev="proc" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 210.050153][ T31] audit: type=1400 audit(209.990:143): avc: denied { wake_alarm } for pid=4577 comm="syz.0.168" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.525206][ T4419] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.868324][ T4419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.874693][ T4419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.875111][ T4419] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 210.875527][ T4419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.878920][ T4419] usb 2-1: config 0 descriptor?? [ 211.474587][ T4419] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 211.475142][ T4419] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 211.476094][ T4419] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 211.480904][ T4419] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 211.504780][ T4419] zydacron 0003:13EC:0006.0004: item fetching failed at offset 4/5 [ 211.505532][ T4419] zydacron 0003:13EC:0006.0004: parse failed [ 211.506013][ T4419] zydacron 0003:13EC:0006.0004: probe with driver zydacron failed with error -22 [ 211.663683][ T4419] usb 2-1: USB disconnect, device number 4 [ 212.009019][ T4608] ======================================================= [ 212.009019][ T4608] WARNING: The mand mount option has been deprecated and [ 212.009019][ T4608] and is ignored by this kernel. Remove the mand [ 212.009019][ T4608] option from the mount to silence this warning. [ 212.009019][ T4608] ======================================================= [ 212.012370][ T31] audit: type=1400 audit(211.950:144): avc: denied { mount } for pid=4607 comm="syz.0.175" name="/" dev="ramfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 212.127958][ T31] audit: type=1400 audit(212.070:145): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 212.888082][ T31] audit: type=1400 audit(212.830:146): avc: denied { mounton } for pid=4618 comm="syz.0.179" path="/proc/177/cgroup" dev="proc" ino=3819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 230.621018][ T31] audit: type=1400 audit(230.560:147): avc: denied { read write } for pid=3111 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.622086][ T31] audit: type=1400 audit(230.560:148): avc: denied { open } for pid=3111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.622874][ T31] audit: type=1400 audit(230.560:149): avc: denied { ioctl } for pid=3111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.629594][ T31] audit: type=1400 audit(230.570:150): avc: denied { read } for pid=2925 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 230.630521][ T31] audit: type=1400 audit(230.570:151): avc: denied { search } for pid=2925 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.631286][ T31] audit: type=1400 audit(230.570:152): avc: denied { append } for pid=2925 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.632095][ T31] audit: type=1400 audit(230.570:153): avc: denied { open } for pid=2925 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.633093][ T31] audit: type=1400 audit(230.570:154): avc: denied { getattr } for pid=2925 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.704929][ T31] audit: type=1400 audit(230.640:155): avc: denied { read } for pid=4628 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.710602][ T4629] capability: warning: `syz.1.182' uses deprecated v2 capabilities in a way that may be insecure [ 230.720887][ T31] audit: type=1400 audit(230.660:156): avc: denied { prog_load } for pid=4628 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.105449][ T4445] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.297674][ T4445] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.298301][ T4445] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.309566][ T4445] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.310336][ T4445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.310972][ T4445] usb 2-1: SerialNumber: syz [ 231.546545][ T4445] usb 2-1: 0:2 : does not exist [ 231.568625][ T4445] usb 2-1: USB disconnect, device number 5 [ 247.550130][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 247.550251][ T31] audit: type=1326 audit(247.490:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 247.553116][ T31] audit: type=1326 audit(247.490:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=243 compat=0 ip=0x132da0 code=0x7ffc0000 [ 247.559649][ T31] audit: type=1326 audit(247.500:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 247.562293][ T31] audit: type=1326 audit(247.500:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=245 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.080984][ T31] audit: type=1326 audit(248.020:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.081809][ T31] audit: type=1326 audit(248.020:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.280177][ T31] audit: type=1326 audit(248.220:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.281252][ T31] audit: type=1326 audit(248.220:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.188" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.291512][ T31] audit: type=1326 audit(248.220:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.292630][ T31] audit: type=1326 audit(248.230:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.188" exe="/syz-executor" sig=0 arch=40000028 syscall=260 compat=0 ip=0x132da0 code=0x7ffc0000 [ 248.733021][ T4445] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 248.954675][ T4445] usb 1-1: Using ep0 maxpacket: 16 [ 248.959501][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.959844][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.962545][ T4445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.976564][ T4445] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.976890][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.000905][ T4445] usb 1-1: config 0 descriptor?? [ 249.496934][ T4445] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 249.499098][ T4445] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 249.499770][ T4445] microsoft 0003:045E:07DA.0005: parse failed [ 249.500339][ T4445] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 249.625606][ T4374] usb 1-1: USB disconnect, device number 3 [ 251.528076][ T4724] syz_tun: entered promiscuous mode [ 251.528640][ T4724] vlan0: entered promiscuous mode [ 251.529189][ T4724] vlan0: entered allmulticast mode [ 251.529454][ T4724] syz_tun: entered allmulticast mode [ 251.548912][ T4724] syz_tun: left allmulticast mode [ 251.549773][ T4724] syz_tun: left promiscuous mode [ 252.384697][ T4443] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.607426][ T4443] usb 1-1: Using ep0 maxpacket: 8 [ 252.630120][ T4443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.690110][ T4443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.695967][ T4443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.696948][ T4443] usb 1-1: Product: syz [ 252.698078][ T4443] usb 1-1: Manufacturer: syz [ 252.701374][ T4443] usb 1-1: SerialNumber: syz [ 253.799541][ T4443] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 253.800736][ T4443] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 254.026902][ T4443] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 254.045067][ T4443] usb 1-1: USB disconnect, device number 4 [ 254.046694][ T4443] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 254.126714][ T4443] ------------[ cut here ]------------ [ 254.127285][ T4443] WARNING: CPU: 1 PID: 4443 at lib/debugobjects.c:515 debug_print_object+0xc4/0xd8 [ 254.128902][ T4443] ODEBUG: free active (active state 0) object: 846c37cc object type: work_struct hint: usbnet_deferred_kevent+0x0/0x388 [ 254.130595][ T4443] Modules linked in: [ 254.131239][ T4443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.132429][ T4443] CPU: 1 UID: 0 PID: 4443 Comm: kworker/1:63 Not tainted 6.11.0-syzkaller #0 [ 254.133147][ T4443] Hardware name: ARM-Versatile Express [ 254.133848][ T4443] Workqueue: usb_hub_wq hub_event [ 254.134670][ T4443] Call trace: [ 254.135105][ T4443] [<8195d3f8>] (dump_backtrace) from [<8195d4f4>] (show_stack+0x18/0x1c) [ 254.135792][ T4443] r7:00000000 r6:826228c4 r5:00000000 r4:8200cab8 [ 254.136319][ T4443] [<8195d4dc>] (show_stack) from [<8197b214>] (dump_stack_lvl+0x54/0x7c) [ 254.136924][ T4443] [<8197b1c0>] (dump_stack_lvl) from [<8197b254>] (dump_stack+0x18/0x1c) [ 254.137497][ T4443] r5:00000000 r4:8286dd18 [ 254.137696][ T4443] [<8197b23c>] (dump_stack) from [<8195df9c>] (panic+0x120/0x368) [ 254.138131][ T4443] [<8195de7c>] (panic) from [<802421e4>] (get_taint+0x0/0x1c) [ 254.138490][ T4443] r3:8260c5c4 r2:00000001 r1:81ff52e0 r0:81ffd0b8 [ 254.138889][ T4443] r7:8082de64 [ 254.139143][ T4443] [<80242170>] (check_panic_on_warn) from [<80242338>] (__warn+0x7c/0x180) [ 254.139643][ T4443] [<802422bc>] (__warn) from [<80242624>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 254.140161][ T4443] r8:00000009 r7:8205bd8c r6:e45bda8c r5:84796c00 r4:00000000 [ 254.140485][ T4443] [<80242440>] (warn_slowpath_fmt) from [<8082de64>] (debug_print_object+0xc4/0xd8) [ 254.141090][ T4443] r10:00000005 r9:846c3000 r8:81a01c24 r7:82086370 r6:828d171c r5:e45bdb34 [ 254.141482][ T4443] r4:8260cda4 [ 254.141661][ T4443] [<8082dda0>] (debug_print_object) from [<8082f704>] (debug_check_no_obj_freed+0x254/0x2a0) [ 254.142110][ T4443] r8:846c3800 r7:846c37cc r6:00000100 r5:00000003 r4:00000000 [ 254.142389][ T4443] [<8082f4b0>] (debug_check_no_obj_freed) from [<804bc99c>] (kfree+0x198/0x338) [ 254.142945][ T4443] r10:82779fdc r9:85309c80 r8:846c3000 r7:80461778 r6:82c023c0 r5:dde98300 [ 254.143401][ T4443] r4:846c3000 [ 254.143570][ T4443] [<804bc804>] (kfree) from [<80461778>] (kvfree+0x2c/0x30) [ 254.143932][ T4443] r10:82779fdc r9:85309c80 r8:846c3000 r7:00000000 r6:851f6b00 r5:845d1e80 [ 254.144708][ T4443] r4:846c3000 [ 254.145154][ T4443] [<8046174c>] (kvfree) from [<814c5d3c>] (netdev_release+0x2c/0x34) [ 254.145553][ T4443] r5:845d1e80 r4:846c3000 [ 254.145794][ T4443] [<814c5d10>] (netdev_release) from [<80a747f0>] (device_release+0x38/0xa8) [ 254.146307][ T4443] r5:845d1e80 r4:846c33c0 [ 254.146584][ T4443] [<80a747b8>] (device_release) from [<81937248>] (kobject_put+0xa0/0x1f4) [ 254.146963][ T4443] r5:81b4b7ac r4:846c33c0 [ 254.147177][ T4443] [<819371a8>] (kobject_put) from [<80a74a1c>] (put_device+0x18/0x1c) [ 254.147569][ T4443] r7:85309800 r6:846c310c r5:846c3000 r4:00000000 [ 254.147830][ T4443] [<80a74a04>] (put_device) from [<8147ac74>] (free_netdev+0x114/0x18c) [ 254.148192][ T4443] [<8147ab60>] (free_netdev) from [<80d569c8>] (usbnet_disconnect+0xac/0xf0) [ 254.148674][ T4443] r6:846c3794 r5:846c3680 r4:00000000 [ 254.148915][ T4443] [<80d5691c>] (usbnet_disconnect) from [<80dbe650>] (usb_unbind_interface+0x84/0x2c4) [ 254.149401][ T4443] r8:00000044 r7:85309830 r6:82779fdc r5:00000000 r4:85309800 [ 254.149772][ T4443] [<80dbe5cc>] (usb_unbind_interface) from [<80a7c8f4>] (device_remove+0x64/0x6c) [ 254.150243][ T4443] r10:00000000 r9:85309c80 r8:00000044 r7:85309874 r6:82779fdc r5:00000000 [ 254.150945][ T4443] r4:85309830 [ 254.151289][ T4443] [<80a7c890>] (device_remove) from [<80a7de0c>] (device_release_driver_internal+0x18c/0x200) [ 254.152047][ T4443] r5:00000000 r4:85309830 [ 254.152272][ T4443] [<80a7dc80>] (device_release_driver_internal) from [<80a7de98>] (device_release_driver+0x18/0x1c) [ 254.152763][ T4443] r9:85309c80 r8:82f5ad40 r7:82f5ad38 r6:82f5ad0c r5:85309830 r4:82f5ad30 [ 254.153092][ T4443] [<80a7de80>] (device_release_driver) from [<80a7bf78>] (bus_remove_device+0xcc/0x120) [ 254.153515][ T4443] [<80a7beac>] (bus_remove_device) from [<80a76088>] (device_del+0x148/0x38c) [ 254.153903][ T4443] r9:85309c80 r8:84796c00 r7:04208060 r6:00000000 r5:85309830 r4:85309874 [ 254.154945][ T4443] [<80a75f40>] (device_del) from [<80dbc06c>] (usb_disable_device+0xdc/0x1f0) [ 254.155333][ T4443] r10:00000000 r9:00000000 r8:85309800 r7:85309c00 r6:843dda08 r5:00000001 [ 254.155787][ T4443] r4:00000038 [ 254.156056][ T4443] [<80dbbf90>] (usb_disable_device) from [<80db0ed0>] (usb_disconnect+0xec/0x29c) [ 254.156651][ T4443] r10:00000001 r9:854c1e00 r8:85309cc4 r7:83ebc400 r6:85309c80 r5:85309c00 [ 254.157021][ T4443] r4:60000113 [ 254.157205][ T4443] [<80db0de4>] (usb_disconnect) from [<80db3b80>] (hub_event+0xe78/0x194c) [ 254.157677][ T4443] r10:00000001 r9:00000100 r8:8381a500 r7:85309c00 r6:82fb7c00 r5:83ebc610 [ 254.158135][ T4443] r4:00000001 [ 254.158356][ T4443] [<80db2d08>] (hub_event) from [<80265f04>] (process_one_work+0x1b4/0x4f4) [ 254.158858][ T4443] r10:82e6ea05 r9:84796c00 r8:01800000 r7:ddde4000 r6:82e6ea00 r5:8381a500 [ 254.159215][ T4443] r4:848ea200 [ 254.159446][ T4443] [<80265d50>] (process_one_work) from [<80266ae8>] (worker_thread+0x1ec/0x3bc) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.159836][ T4443] r10:84796c00 r9:848ea22c r8:61c88647 r7:ddde4020 r6:82604d40 r5:ddde4000 [ 254.161187][ T4443] r4:848ea200 [ 254.161373][ T4443] [<802668fc>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 254.161732][ T4443] r10:00000000 r9:e0261e78 r8:851615c0 r7:848ea200 r6:802668fc r5:84796c00 [ 254.162516][ T4443] r4:8512d480 [ 254.162806][ T4443] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 254.163543][ T4443] Exception stack(0xe45bdfb0 to 0xe45bdff8) [ 254.164009][ T4443] dfa0: 00000000 00000000 00000000 00000000 [ 254.164798][ T4443] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 254.165123][ T4443] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 254.165474][ T4443] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8512d480 [ 254.167542][ T4443] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:09:42 Registers: info registers vcpu 0 CPU#0 R00=827b84b8 R01=84075780 R02=00000000 R03=8197cfa4 R04=828b1640 R05=0000c5de R06=0000c5de R07=23946c00 R08=00000038 R09=00000038 R10=829154c0 R11=df8019e4 R12=df8019e8 R13=df8019d8 R14=81208e4c R15=8197cfb4 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005127e9 s17=00000000 d08=00000000005127e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=3190c1f6 s33=587c088b d16=587c088b3190c1f6 s34=4cca5a08 s35=a7777f19 d17=a7777f194cca5a08 s36=f1c4ad21 s37=e8b6c8dc d18=e8b6c8dcf1c4ad21 s38=a1c45fdd s39=93a33478 d19=93a33478a1c45fdd s40=efdd24c6 s41=013bba50 d20=013bba50efdd24c6 s42=e6b3304b s43=6f898a90 d21=6f898a90e6b3304b s44=ba3be7d6 s45=ff708e4a d22=ff708e4aba3be7d6 s46=f90ad8c3 s47=e2f973e9 d23=e2f973e9f90ad8c3 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=00a00000 s53=008c0000 d26=008c000000a00000 s54=00780000 s55=00640000 d27=0064000000780000 s56=00500000 s57=003c0000 d28=003c000000500000 s58=00280000 s59=00140000 d29=0014000000280000 s60=00080000 s61=00000008 d30=0000000800080000 s62=00080004 s63=03e60000 d31=03e6000000080004 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82201e99 R01=e45bd824 R02=82201e99 R03=00000002 R04=e45bd824 R05=82201e99 R06=00000003 R07=e45bd9a0 R08=82201e99 R09=e45bd824 R10=e45bd8b4 R11=e45bd80c R12=e45bd810 R13=e45bd7e0 R14=819581e8 R15=819528cc PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000003 s17=7ef0daf0 d08=7ef0daf000000003 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000