last executing test programs: 6.278666234s ago: executing program 2 (id=1949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r3, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 5.132212368s ago: executing program 3 (id=1956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r2, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="e60485f4835670c47fcbee770664bc3ca3722b4e384583b44d059645eae6b83325", 0x21}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200c697, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 4.969088021s ago: executing program 2 (id=1958): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6(0xa, 0x0, 0x2520) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) pipe2$9p(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x16, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000f14010000000000000000001100450069625f6d046c74696361730000000000a94bfc4d24046f6da2a883fc593d4ddf8bda51b24f525380957f8b22c371a04a406795a3e60b5c2b31715949c76c"], 0x24}}, 0x0) 4.737897727s ago: executing program 1 (id=1959): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x1000000, &(0x7f0000000380)) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x4000000000000000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x21c041) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYBLOB="04002bbd7000f9dbdf25870000060048005e0000000600480033000000060048000000000061002a000526e0ef6fe78880da06a2537e9b3d0b941200ed03c4e05eb008ed64a7aff82dc2e5f5e0b291af2eef78a2178d5ea898939d6512505050505050ffffffffffffffffffffffff2d1a0c0018ff00000000000000680006000100e6ff060001000000ff250600953f0000009cc74e0781d83e627aeaf4ff837623230aac27b4b3ebfc00000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044010}, 0x280488d0) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xda}]}]}, 0x58}}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001700)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="4ee1ea092c2c", 0x0, 0x0, 0x0, 0xfffffffd, 0x0}) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}], 0x2c) sendto$inet6(r6, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000280)=0x8) fsmount(r5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0)='4', 0x1) tee(0xffffffffffffffff, r7, 0x3, 0x0) 4.576513165s ago: executing program 0 (id=1960): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000100000000000000000000000002002000ff"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.402904703s ago: executing program 2 (id=1961): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x4401, &(0x7f00000002c0)) close_range(r2, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4.021149515s ago: executing program 0 (id=1962): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 4.019111474s ago: executing program 4 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633"], 0x6f4}}, 0x0) 3.904629335s ago: executing program 3 (id=1964): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000400)='\r', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0x4}}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9}}}, 0x8) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04910c20"], 0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="418d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) 3.750272597s ago: executing program 4 (id=1965): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x14) fcntl$notify(r0, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) 3.64420595s ago: executing program 0 (id=1966): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = memfd_secret(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x58, r3, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0xb, 0x1}, {0x30}]}, @val={0x3, 0x1, 0xf8}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r3, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast1, @remote, 0x1, 0x7800, 0x7, 0x2}}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000187ca00000001800000004000000000000000000007100000000010000000000000a0500000000300800"], &(0x7f0000000640)=""/25, 0x34, 0x19, 0x1, 0x10001}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @ldst={0x1, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8ee6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, 0x25, r13, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x4, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x1}], 0x10, 0x2fb1}, 0x90) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x24c, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1c}}, @common=@unspec=@limit={{0x3c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x70) 3.541951726s ago: executing program 1 (id=1967): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x0, 0xfff7}) 3.414580749s ago: executing program 4 (id=1968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r3, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.264929011s ago: executing program 1 (id=1969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300), 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$inet6(0xa, 0x2, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r4) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x20008004) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x5e) socket$inet(0xa, 0x801, 0x84) 3.250166804s ago: executing program 0 (id=1970): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) syz_open_dev$vim2m(0x0, 0x9, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.750681415s ago: executing program 3 (id=1971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000080)=0x40) 2.469216537s ago: executing program 3 (id=1972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4098000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f0000001700)="81f0074fa49359021453c05bd6456ffdadf289b21a13604e22697672bd18b3a8bba5ffd3d087a857a18485356c5e8f0032fe046894ef48e482ec017394465534aa5b6002e8", 0x45, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x5e, 0x10022, 0x0) 2.132445242s ago: executing program 0 (id=1973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.310018661s ago: executing program 3 (id=1974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r2, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="e60485f4835670c47fcbee770664bc3ca3722b4e384583b44d059645eae6b83325", 0x21}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200c697, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.112271515s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633"], 0x6f4}}, 0x0) 1.030766996s ago: executing program 4 (id=1976): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 960.272472ms ago: executing program 1 (id=1977): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 794.503708ms ago: executing program 2 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 716.971297ms ago: executing program 1 (id=1979): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x0, 0xfff7}) 634.449475ms ago: executing program 4 (id=1980): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = memfd_secret(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x58, r3, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0xb, 0x1}, {0x30}]}, @val={0x3, 0x1, 0xf8}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r3, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast1, @remote, 0x1, 0x7800, 0x7, 0x2}}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000187ca00000001800000004000000000000000000007100000000010000000000000a0500000000300800"], &(0x7f0000000640)=""/25, 0x34, 0x19, 0x1, 0x10001}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8ee6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, 0x25, r13, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x4, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x1}], 0x10, 0x2fb1}, 0x90) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x24c, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'wlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1c}}, @common=@unspec=@limit={{0x3c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x70) 474.71793ms ago: executing program 1 (id=1981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x95) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0xc027, &(0x7f0000000540)={[{@noprefix}, {@name={'name', 0x3d, 'noprefix'}}]}) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6", @ANYRES16=r1], 0x16) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c848eb966ca73e8178103abad144d016001200"], 0x1b) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04089fdcf5f20252ded003b4"], 0x7) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xb) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c90010000c000500170347a3e168a53dd396da0208000600090085990000a5c4704ea9c7b42de1011850cb387dd09abbc0baaa978b1332e14b03fa83175691b61ec1fd9748f2080f7360f591ddeb5435d5bc7c3e0d8c2d111416d83244068cd8beef06a2fba4c60c8556a1bd9c6ceb7f769855c06974ad7dc59bb4bf37f8cd2cfebfdf5efdc9784f76b33402e3e58ae228e73dc36f9a45f6416b5cbd0e44562ecfff21f0f434198aa7f5442835a12987de0d85e97bb1a3a8ebce6ffbe71905b2d79d3d46b6a132dcc103dfef07744b2e16ea19318c0331108640ddc70ccb56"], 0x15) readahead(r6, 0x0, 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0409051620"], 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2726], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}, 0x10}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x84800, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES8=r7, @ANYRESDEC=r5, @ANYRES32=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) 284.691414ms ago: executing program 0 (id=1982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 197.087721ms ago: executing program 2 (id=1983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) syz_open_dev$vim2m(0x0, 0x9, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 83.613393ms ago: executing program 3 (id=1984): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) 0s ago: executing program 4 (id=1985): r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000380), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x1e) kernel console output (not intermixed with test programs): ent} for writing: No such file or directory [ 334.515107][ T785] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.707767][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.753953][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.817995][ T785] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 334.859964][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.900504][ T785] usb 3-1: config 0 descriptor?? [ 335.197396][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 335.387954][ T5134] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 335.445568][ T29] audit: type=1400 audit(1720275083.241:773): avc: denied { name_bind } for pid=8129 comm="syz.1.942" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 335.596216][ T5137] usb 4-1: USB disconnect, device number 11 [ 335.972986][ T29] audit: type=1400 audit(1720275083.781:774): avc: denied { ioctl } for pid=8143 comm="syz.0.947" path="socket:[19029]" dev="sockfs" ino=19029 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 336.135687][ T8147] [U] [ 336.138470][ T8147] [U] [ 336.141237][ T8147] [U] [ 336.143998][ T8147] [U] [ 336.149967][ T8147] [U] [ 336.152746][ T8147] [U] [ 336.155506][ T8147] [U] [ 336.158267][ T8147] [U] [ 336.172400][ T8147] [U] [ 336.175171][ T8147] [U] [ 336.177914][ T8147] [U] [ 336.194947][ T785] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 336.230064][ T785] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 336.261524][ T785] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 336.277105][ T785] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 336.314852][ T785] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 336.366243][ T785] usb 3-1: USB disconnect, device number 10 [ 336.454767][ T5196] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 336.653619][ T5196] usb 2-1: Using ep0 maxpacket: 8 [ 336.691185][ T5196] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 336.707754][ T8141] [U] [ 336.725888][ T5196] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 336.798831][ T5196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.042560][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.953'. [ 337.149442][ T5196] usb 2-1: string descriptor 0 read error: -71 [ 337.182423][ T5196] hub 2-1:32.0: USB hub found [ 337.214536][ T5196] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 337.384817][ T5196] usb 2-1: USB disconnect, device number 8 [ 337.452439][ T29] audit: type=1400 audit(1720275085.261:775): avc: denied { setopt } for pid=8171 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.709997][ T5281] udevd[5281]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.117085][ T8197] [U] [ 338.119845][ T8197] [U] [ 338.122596][ T8197] [U] [ 338.125386][ T8197] [U] [ 338.166073][ T8197] [U] [ 338.168863][ T8197] [U] [ 338.171631][ T8197] [U] [ 338.174380][ T8197] [U] [ 338.256236][ T8197] [U] [ 338.259033][ T8197] [U] [ 338.261774][ T8197] [U] [ 338.365275][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 338.742657][ T8185] [U] [ 339.470592][ T8231] syz.0.974[8231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.470856][ T8231] syz.0.974[8231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.598127][ T29] audit: type=1400 audit(1720275087.401:776): avc: denied { setattr } for pid=8232 comm="syz.3.975" path="/dev/mixer" dev="devtmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 339.703280][ T29] audit: type=1400 audit(1720275087.451:777): avc: denied { read write } for pid=8232 comm="syz.3.975" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 339.732680][ T29] audit: type=1400 audit(1720275087.451:778): avc: denied { open } for pid=8232 comm="syz.3.975" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 339.964684][ T5139] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 340.090308][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 340.157611][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 340.177874][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 340.224683][ T5139] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 340.264680][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.313240][ T5139] usb 4-1: config 0 descriptor?? [ 340.337776][ T8234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.581566][ T29] audit: type=1400 audit(1720275088.381:779): avc: denied { ioctl } for pid=8232 comm="syz.3.975" path="/dev/video7" dev="devtmpfs" ino=867 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 340.747906][ T29] audit: type=1400 audit(1720275088.391:780): avc: denied { write } for pid=8232 comm="syz.3.975" name="if_inet6" dev="proc" ino=4026533087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 340.755563][ T8245] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 340.793988][ T8245] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 340.868271][ T29] audit: type=1400 audit(1720275088.431:781): avc: denied { connect } for pid=8243 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 340.941430][ T29] audit: type=1400 audit(1720275088.431:782): avc: denied { name_connect } for pid=8243 comm="syz.4.979" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 341.042507][ T29] audit: type=1400 audit(1720275088.851:783): avc: denied { ioctl } for pid=8232 comm="syz.3.975" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 341.170236][ T5139] usbhid 4-1:0.0: can't add hid device: -71 [ 341.223098][ T8256] [U] [ 341.225850][ T8256] [U] [ 341.228647][ T8256] [U] [ 341.231354][ T8256] [U] [ 341.237890][ T5139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.271344][ T8256] [U] [ 341.274138][ T8256] [U] [ 341.276902][ T8256] [U] [ 341.279664][ T8256] [U] [ 341.308866][ T5139] usb 4-1: USB disconnect, device number 12 [ 341.340986][ T8256] [U] [ 341.343773][ T8256] [U] [ 341.346534][ T8256] [U] [ 341.785482][ T8252] [U] [ 342.851411][ T29] audit: type=1400 audit(1720275090.651:784): avc: denied { write } for pid=8286 comm="syz.2.990" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.878839][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.122351][ T29] audit: type=1400 audit(1720275090.931:785): avc: denied { getopt } for pid=8287 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.215623][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.238154][ T29] audit: type=1400 audit(1720275090.961:786): avc: denied { create } for pid=8287 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 343.322873][ T29] audit: type=1400 audit(1720275091.121:787): avc: denied { connect } for pid=8287 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.682952][ T8314] [U] [ 343.685740][ T8314] [U] [ 343.688502][ T8314] [U] [ 343.691248][ T8314] [U] [ 343.724491][ T8314] [U] [ 343.727313][ T8314] [U] [ 343.730092][ T8314] [U] [ 343.732865][ T8314] [U] [ 343.739754][ T8314] [U] [ 343.742530][ T8314] [U] [ 343.745312][ T8314] [U] [ 344.368842][ T8305] [U] [ 344.404769][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 344.715732][ T29] audit: type=1400 audit(1720275092.531:788): avc: denied { setopt } for pid=8335 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.119542][ T29] audit: type=1400 audit(1720275093.931:789): avc: denied { setopt } for pid=8352 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 346.217184][ T29] audit: type=1400 audit(1720275093.941:790): avc: denied { map } for pid=8357 comm="syz.2.1013" path="socket:[19367]" dev="sockfs" ino=19367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.439255][ T29] audit: type=1400 audit(1720275093.941:791): avc: denied { read } for pid=8357 comm="syz.2.1013" path="socket:[19367]" dev="sockfs" ino=19367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.572445][ T8366] [U] [ 346.575545][ T8366] [U] [ 346.578310][ T8366] [U] [ 346.581083][ T8366] [U] [ 346.585535][ T8366] [U] [ 346.588313][ T8366] [U] [ 346.591074][ T8366] [U] [ 346.593834][ T8366] [U] [ 346.600547][ T8366] [U] [ 346.603315][ T8366] [U] [ 346.606074][ T8366] [U] [ 346.946411][ T8355] [U] [ 347.268738][ T29] audit: type=1400 audit(1720275095.081:792): avc: denied { create } for pid=8381 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 347.356973][ T29] audit: type=1400 audit(1720275095.111:793): avc: denied { setopt } for pid=8381 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 347.454717][ T29] audit: type=1400 audit(1720275095.251:794): avc: denied { create } for pid=8387 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.537590][ T29] audit: type=1400 audit(1720275095.261:795): avc: denied { write } for pid=8387 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.817151][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 347.841329][ T29] audit: type=1400 audit(1720275095.651:796): avc: denied { mounton } for pid=8394 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 347.908374][ T29] audit: type=1400 audit(1720275095.691:797): avc: denied { mount } for pid=8394 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 347.944024][ T29] audit: type=1400 audit(1720275095.691:798): avc: denied { read } for pid=8394 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 347.972563][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.988349][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.109641][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.129652][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.149637][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.162054][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.386011][ T3624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.316281][ T8422] [U] [ 350.319030][ T8422] [U] [ 350.321743][ T8422] [U] [ 350.324491][ T8422] [U] [ 350.352354][ T3624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.375255][ T8422] [U] [ 350.378044][ T8422] [U] [ 350.380819][ T8422] [U] [ 350.383574][ T8422] [U] [ 350.386886][ T5099] Bluetooth: hci4: command tx timeout [ 350.410963][ T8422] [U] [ 350.413754][ T8422] [U] [ 350.416523][ T8422] [U] [ 350.661021][ T3624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.895643][ T8414] [U] [ 351.109525][ T3624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.228934][ T8441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.437592][ T8441] overlay: filesystem on ./bus not supported as upperdir [ 351.886676][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 352.279309][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 352.279331][ T29] audit: type=1400 audit(1720275100.091:803): avc: denied { search } for pid=4748 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.453739][ T5099] Bluetooth: hci4: command tx timeout [ 352.461162][ T29] audit: type=1400 audit(1720275100.101:804): avc: denied { read } for pid=4748 comm="dhcpcd" name="n70" dev="tmpfs" ino=4802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.515988][ T29] audit: type=1400 audit(1720275100.101:805): avc: denied { open } for pid=4748 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=4802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.545031][ T29] audit: type=1400 audit(1720275100.101:806): avc: denied { getattr } for pid=4748 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=4802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.669492][ T29] audit: type=1400 audit(1720275100.301:807): avc: denied { create } for pid=8452 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 352.691525][ T29] audit: type=1400 audit(1720275100.311:808): avc: denied { write } for pid=8452 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 352.970264][ T29] audit: type=1400 audit(1720275100.781:809): avc: denied { write } for pid=8464 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.826698][ T8481] [U] [ 353.829481][ T8481] [U] [ 353.832197][ T8481] [U] [ 353.834950][ T8481] [U] [ 353.839148][ T8481] [U] [ 353.841939][ T8481] [U] [ 353.844706][ T8481] [U] [ 353.847439][ T8481] [U] [ 353.851543][ T8481] [U] [ 353.854322][ T8481] [U] [ 353.857080][ T8481] [U] [ 353.954175][ T8483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.138874][ T8484] overlay: filesystem on ./bus not supported as upperdir [ 354.218926][ T3624] bond1 (unregistering): (slave gre1): Releasing backup interface [ 354.398035][ T8476] [U] [ 354.533482][ T5099] Bluetooth: hci4: command tx timeout [ 354.942740][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.986073][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.009107][ T3624] bond0 (unregistering): Released all slaves [ 355.070670][ T3624] bond1 (unregistering): Released all slaves [ 355.443688][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.464976][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.489003][ T8394] bridge_slave_0: entered allmulticast mode [ 355.535294][ T8394] bridge_slave_0: entered promiscuous mode [ 355.577968][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.618005][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.646114][ T8394] bridge_slave_1: entered allmulticast mode [ 355.676250][ T8394] bridge_slave_1: entered promiscuous mode [ 355.875969][ T29] audit: type=1400 audit(1720275103.691:810): avc: denied { create } for pid=8504 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 356.242756][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.390495][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.614273][ T5099] Bluetooth: hci4: command tx timeout [ 356.710107][ T8521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 356.792263][ T8523] [U] [ 356.795007][ T8523] [U] [ 356.797746][ T8523] [U] [ 356.800457][ T8523] [U] [ 356.867444][ T8523] [U] [ 356.870230][ T8523] [U] [ 356.872982][ T8523] [U] [ 356.875741][ T8523] [U] [ 356.904578][ T8523] [U] [ 356.907337][ T8523] [U] [ 356.910071][ T8523] [U] [ 356.966892][ T8524] overlay: filesystem on ./bus not supported as upperdir [ 357.094536][ T8394] team0: Port device team_slave_0 added [ 357.141890][ T8394] team0: Port device team_slave_1 added [ 357.178737][ T8526] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ;5ÏÇ–3OŲ"`õͶ [ 357.346281][ T8517] [U] [ 357.425600][ T3624] hsr_slave_0: left promiscuous mode [ 357.470875][ T3624] hsr_slave_1: left promiscuous mode [ 357.490050][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.532371][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.567461][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.694262][ T3624] veth1_macvtap: left promiscuous mode [ 357.713979][ T3624] veth0_macvtap: left promiscuous mode [ 357.722836][ T3624] veth1_vlan: left promiscuous mode [ 357.737952][ T3624] veth0_vlan: left promiscuous mode [ 357.766334][ T5134] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 357.882962][ T29] audit: type=1400 audit(1720275105.691:811): avc: denied { create } for pid=8534 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.978311][ T5134] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.989273][ T5134] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.005443][ T5134] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.015969][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.025368][ T5134] usb 5-1: SerialNumber: syz [ 358.226098][ T3624] pimreg (unregistering): left allmulticast mode [ 359.276608][ T3624] smc: removing net device batadv_slave_1 with user defined pnetid SYZ2 [ 359.526744][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 359.753599][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 360.535893][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.542947][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.570459][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.605975][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.626987][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.656607][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.748699][ T5134] usb 5-1: 0:2 : does not exist [ 360.786996][ T5134] usb 5-1: unit 55 not found! [ 360.896820][ T5134] usb 5-1: USB disconnect, device number 15 [ 360.993056][ T29] audit: type=1400 audit(1720275108.801:812): avc: denied { read } for pid=8548 comm="syz.0.1068" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 361.295230][ T5281] udevd[5281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.326148][ T8394] hsr_slave_0: entered promiscuous mode [ 361.354917][ T8394] hsr_slave_1: entered promiscuous mode [ 361.446016][ T8394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.466910][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'. [ 361.477000][ T8394] Cannot create hsr debugfs directory [ 361.562420][ T8558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.694898][ T8560] overlay: filesystem on ./bus not supported as upperdir [ 362.263097][ T29] audit: type=1400 audit(1720275110.071:813): avc: denied { bind } for pid=8571 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.336571][ T29] audit: type=1400 audit(1720275110.081:814): avc: denied { write } for pid=8571 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.363271][ T3624] IPVS: stop unused estimator thread 0... [ 363.062347][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 363.304795][ T5134] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 363.537547][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.584635][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.612689][ T5134] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.634673][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.710564][ T5134] usb 2-1: config 0 descriptor?? [ 363.888098][ T8394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.956505][ T8394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.018859][ T8394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.076342][ T8394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.361975][ T5134] usb 2-1: string descriptor 0 read error: -71 [ 364.395279][ T5134] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #200: -71 [ 364.421517][ T5134] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 364.455716][ T5134] uclogic 0003:256C:006D.001C: failed probing pen v2 parameters: -71 [ 364.494289][ T5134] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 364.512368][ T5134] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 364.577154][ T5134] usb 2-1: USB disconnect, device number 9 [ 364.920454][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.991004][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 365.131284][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.241534][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.248960][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.382628][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.389949][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.848994][ T8662] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ;5ÏÇ–3OŲ"`õͶ [ 366.945382][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 367.042355][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.341851][ T8394] veth0_vlan: entered promiscuous mode [ 367.371310][ T5099] Bluetooth: hci0: unexpected event for opcode 0x100c [ 367.407153][ T8394] veth1_vlan: entered promiscuous mode [ 367.710543][ T8394] veth0_macvtap: entered promiscuous mode [ 367.755724][ T8394] veth1_macvtap: entered promiscuous mode [ 367.810790][ T5099] Bluetooth: hci0: unexpected cc 0x1408 length: 57 > 4 [ 367.824741][ T5099] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 367.890805][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.918328][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.934586][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.958852][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.968816][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.979942][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.990287][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.005863][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.020566][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.088901][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.150865][ T8394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.168674][ T8394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.179570][ T8394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.211190][ T8394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.351624][ T29] audit: type=1400 audit(1720275116.151:815): avc: denied { mount } for pid=8688 comm="syz.4.1113" name="/" dev="autofs" ino=21050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 368.563131][ T29] audit: type=1400 audit(1720275116.371:816): avc: denied { unmount } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 368.738472][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.791681][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.991397][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.029306][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.086548][ T29] audit: type=1400 audit(1720275116.901:817): avc: denied { mounton } for pid=8394 comm="syz-executor" path="/root/syzkaller.ReLKIt/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 369.189277][ T29] audit: type=1400 audit(1720275117.001:818): avc: denied { mounton } for pid=8394 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 369.544171][ T5139] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 369.753135][ T5139] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 369.798402][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.826319][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.871995][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.925472][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.964963][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.990593][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.000790][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.011669][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.026306][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.044842][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.069704][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.116880][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.139687][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.152348][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.199301][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.228076][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.238667][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.272995][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.291139][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.322002][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.343189][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.362315][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.394561][ T5139] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.424550][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.446274][ T5139] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 370.459605][ T5139] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 370.481892][ T5139] usb 2-1: Product: syz [ 370.493092][ T5139] usb 2-1: Manufacturer: syz [ 370.510663][ T5139] usb 2-1: SerialNumber: syz [ 370.551133][ T5139] usb 2-1: config 0 descriptor?? [ 370.572409][ T5139] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 370.816540][ T5139] usb 2-1: USB disconnect, device number 10 [ 370.848513][ T8735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1129'. [ 370.869824][ T5139] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 371.415152][ T5099] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 371.425719][ T5099] Bluetooth: hci0: Injecting HCI hardware error event [ 371.436489][ T5094] Bluetooth: hci0: hardware error 0x00 [ 371.477784][ T8747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1133'. [ 371.515364][ T29] audit: type=1400 audit(1720275119.321:819): avc: denied { read } for pid=8748 comm="syz.4.1134" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.561415][ T29] audit: type=1400 audit(1720275119.321:820): avc: denied { open } for pid=8748 comm="syz.4.1134" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.627848][ T29] audit: type=1400 audit(1720275119.361:821): avc: denied { ioctl } for pid=8748 comm="syz.4.1134" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 372.606301][ T8779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 373.500280][ T5094] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 373.610128][ T8801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.652860][ T8810] overlayfs: missing 'lowerdir' [ 374.821679][ T8814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.842295][ T8814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.152411][ T8823] can0: slcan on pts0. [ 375.243648][ T5136] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 375.336131][ T8826] can0 (unregistered): slcan off pts0. [ 375.444033][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 375.455042][ T5136] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 375.501583][ T5136] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 375.603791][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.985041][ T5136] usb 5-1: string descriptor 0 read error: -71 [ 376.026338][ T5136] hub 5-1:32.0: USB hub found [ 376.060820][ T5136] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 376.316012][ T5136] usb 5-1: USB disconnect, device number 16 [ 376.623727][ T5281] udevd[5281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.812933][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 377.174997][ T29] audit: type=1400 audit(1720275124.981:822): avc: denied { ioctl } for pid=8868 comm="syz.4.1184" path="socket:[21429]" dev="sockfs" ino=21429 ioctlcmd=0x8b26 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 377.267529][ T8872] tipc: Started in network mode [ 377.272062][ T5099] Bluetooth: Unexpected start frame (len 0) [ 377.286055][ T8872] tipc: Node identity fffffff9, cluster identity 4711 [ 377.303183][ T8872] tipc: Node number set to 4294967289 [ 377.574022][ T5099] Bluetooth: hci4: command 0x0406 tx timeout [ 377.595340][ T29] audit: type=1400 audit(1720275125.411:823): avc: denied { ioctl } for pid=8883 comm="syz.0.1189" path="socket:[21447]" dev="sockfs" ino=21447 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.810360][ T29] audit: type=1400 audit(1720275125.621:824): avc: denied { setopt } for pid=8889 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 379.031664][ T29] audit: type=1400 audit(1720275126.841:825): avc: denied { setopt } for pid=8906 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.300336][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.347458][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.639702][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.192155][ T29] audit: type=1400 audit(1720275129.971:826): avc: denied { write } for pid=8960 comm="syz.3.1215" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 384.219488][ T29] audit: type=1400 audit(1720275132.031:827): avc: denied { read } for pid=8985 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.314942][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.325162][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.062000][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.245131][ T5139] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 385.283120][ T9025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.436464][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.482692][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.559631][ T5139] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 385.590929][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.665915][ T5139] usb 3-1: config 0 descriptor?? [ 385.943607][ T9035] ipvlan0: entered promiscuous mode [ 385.976153][ T9034] ipvlan0: left promiscuous mode [ 386.287277][ T785] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 386.379370][ T5139] usb 3-1: string descriptor 0 read error: -71 [ 386.402117][ T5139] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 386.423267][ T5139] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 386.432748][ T5139] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 386.444914][ T5139] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 386.453235][ T5139] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 386.476742][ T5139] usb 3-1: USB disconnect, device number 11 [ 386.545677][ T785] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 386.636115][ T785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.748524][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.764956][ T785] usb 2-1: SerialNumber: syz [ 386.902066][ T9051] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 387.953468][ T29] audit: type=1400 audit(1720275135.761:828): avc: denied { bind } for pid=9059 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.962986][ T785] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 387.989971][ T29] audit: type=1400 audit(1720275135.771:829): avc: denied { setopt } for pid=9059 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.351374][ T5196] usb 2-1: USB disconnect, device number 11 [ 388.399758][ T5196] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 388.502039][ T9077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1253'. [ 389.914546][ T29] audit: type=1400 audit(1720275137.081:830): avc: denied { create } for pid=9087 comm="syz.4.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 390.219159][ T29] audit: type=1400 audit(1720275138.031:831): avc: denied { map } for pid=9101 comm="syz.1.1260" path="socket:[23883]" dev="sockfs" ino=23883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.362008][ T29] audit: type=1400 audit(1720275138.071:832): avc: denied { read } for pid=9101 comm="syz.1.1260" path="socket:[23883]" dev="sockfs" ino=23883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.772493][ T9106] netlink: 'syz.4.1261': attribute type 30 has an invalid length. [ 391.900411][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1266'. [ 392.589890][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 393.178197][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 393.237461][ T9144] netlink: 'syz.3.1273': attribute type 11 has an invalid length. [ 393.304720][ T9144] netlink: 'syz.3.1273': attribute type 14 has an invalid length. [ 393.509357][ T9144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.519646][ T9144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.528693][ T9144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.537527][ T9144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.559867][ T9144] vxlan0: entered promiscuous mode [ 395.307908][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 395.507505][ T29] audit: type=1400 audit(1720275143.321:833): avc: denied { mounton } for pid=9178 comm="syz.2.1284" path="/24/bus" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 395.627978][ T29] audit: type=1400 audit(1720275143.351:834): avc: denied { map } for pid=9178 comm="syz.2.1284" path="/24/bus" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.794524][ T29] audit: type=1400 audit(1720275143.471:835): avc: denied { unmount } for pid=8394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 395.898059][ T29] audit: type=1400 audit(1720275143.661:836): avc: denied { setopt } for pid=9184 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.209933][ T9202] veth0_vlan: entered allmulticast mode [ 396.607193][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.017276][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.272963][ T29] audit: type=1400 audit(1720275145.081:837): avc: denied { read } for pid=9233 comm="syz.4.1298" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 397.381299][ T29] audit: type=1400 audit(1720275145.081:838): avc: denied { open } for pid=9233 comm="syz.4.1298" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 397.535403][ T29] audit: type=1400 audit(1720275145.081:839): avc: denied { ioctl } for pid=9233 comm="syz.4.1298" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 397.642862][ T29] audit: type=1400 audit(1720275145.121:840): avc: denied { append } for pid=9233 comm="syz.4.1298" name="vsock" dev="devtmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.743013][ T29] audit: type=1400 audit(1720275145.191:841): avc: denied { bind } for pid=9247 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 397.809056][ T29] audit: type=1400 audit(1720275145.191:842): avc: denied { name_bind } for pid=9247 comm="syz.2.1300" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 399.214683][ T5134] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 399.406765][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.426797][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.449152][ T5134] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 399.463009][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.479610][ T5134] usb 5-1: config 0 descriptor?? [ 400.083835][ T5133] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 400.211963][ T5134] usb 5-1: string descriptor 0 read error: -71 [ 400.255965][ T5134] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 400.288623][ T5134] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 400.301104][ T5133] usb 1-1: config 0 has an invalid interface number: 204 but max is 1 [ 400.311685][ T5133] usb 1-1: config 0 has no interface number 1 [ 400.333416][ T5134] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 400.341711][ T5134] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 400.378000][ T5133] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 400.398238][ T5134] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 400.417572][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.458868][ T5133] usb 1-1: Product: syz [ 400.463102][ T5133] usb 1-1: Manufacturer: syz [ 400.475347][ T5134] usb 5-1: USB disconnect, device number 17 [ 400.531989][ T5133] usb 1-1: SerialNumber: syz [ 400.575124][ T5133] usb 1-1: config 0 descriptor?? [ 400.732348][ T5133] snd-usb-audio 1-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 400.937668][ T5134] usb 1-1: USB disconnect, device number 15 [ 401.219522][ T5131] udevd[5131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.264621][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 401.264645][ T29] audit: type=1804 audit(1720275149.061:854): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1331" name="/newroot/260/bus/bus" dev="overlay" ino=1391 res=1 errno=0 [ 401.873861][ T29] audit: type=1400 audit(1720275149.671:855): avc: denied { execute } for pid=9343 comm="syz.2.1335" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 401.962395][ T9350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.099903][ T29] audit: type=1326 audit(1720275149.901:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.1337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d48575bd9 code=0x0 [ 402.197875][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1340'. [ 402.421902][ T9358] vlan2: entered allmulticast mode [ 402.442031][ T9358] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 402.496432][ T29] audit: type=1804 audit(1720275150.311:857): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1343" name="/newroot/274/bus/bus" dev="overlay" ino=1493 res=1 errno=0 [ 403.375780][ T29] audit: type=1400 audit(1720275151.181:858): avc: denied { write } for pid=9375 comm="syz.2.1347" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 403.467278][ T29] audit: type=1400 audit(1720275151.281:859): avc: denied { getopt } for pid=9390 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.928120][ T9407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 404.160721][ T29] audit: type=1326 audit(1720275151.971:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.0.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca0575bd9 code=0x0 [ 405.194688][ T5133] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 405.306165][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 405.400104][ T5133] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 405.420960][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.449710][ T5133] usb 2-1: config 0 descriptor?? [ 405.600741][ T9456] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1381'. [ 405.616275][ T9456] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1381'. [ 405.717778][ T9459] syzkaller0: entered promiscuous mode [ 405.741803][ T9459] syzkaller0: entered allmulticast mode [ 406.334858][ T5133] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 406.356249][ T5133] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 406.428217][ T5133] usb 2-1: USB disconnect, device number 12 [ 406.601079][ T9475] nlmon0: entered promiscuous mode [ 406.632225][ T9475] vlan2: entered promiscuous mode [ 406.642623][ T9475] vlan2: entered allmulticast mode [ 406.658272][ T9475] nlmon0: entered allmulticast mode [ 406.675965][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 406.691435][ T9475] nlmon0: left allmulticast mode [ 406.707807][ T9475] nlmon0: left promiscuous mode [ 407.111180][ T29] audit: type=1400 audit(1720275154.921:861): avc: denied { accept } for pid=9496 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 407.199397][ T29] audit: type=1400 audit(1720275154.981:862): avc: denied { write } for pid=9496 comm="syz.4.1394" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 408.762182][ T5094] Bluetooth: hci2: unexpected event for opcode 0x100c [ 409.221994][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.472125][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.864829][ T29] audit: type=1326 audit(1720275157.671:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.0.1405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca0575bd9 code=0x0 [ 410.150762][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.160110][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.173024][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.185396][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.196396][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 410.207730][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.669612][ T9548] dummy0: entered promiscuous mode [ 410.698512][ T9548] vlan2: entered promiscuous mode [ 410.723120][ T9548] vlan2: entered allmulticast mode [ 410.737024][ T9548] dummy0: entered allmulticast mode [ 410.768973][ T9548] dummy0: left allmulticast mode [ 410.785016][ T9548] dummy0: left promiscuous mode [ 410.971034][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.174878][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.332953][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.494674][ T5133] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 411.550753][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.701564][ T5133] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 411.772513][ T5133] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.831738][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.869945][ T931] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 411.886780][ T5133] usb 4-1: SerialNumber: syz [ 412.296400][ T5099] Bluetooth: hci5: command tx timeout [ 412.743057][ T5133] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 412.775764][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 412.787013][ T5099] Bluetooth: hci2: Injecting HCI hardware error event [ 412.797846][ T5099] Bluetooth: hci2: hardware error 0x00 [ 413.316400][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 413.441577][ T12] bridge_slave_1: left allmulticast mode [ 413.459462][ T12] bridge_slave_1: left promiscuous mode [ 413.494957][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.323499][ T931] usb 1-1: Using ep0 maxpacket: 8 [ 414.374858][ T5094] Bluetooth: hci5: command tx timeout [ 414.506599][ T12] bridge_slave_0: left allmulticast mode [ 414.854622][ T5099] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 415.007434][ T12] bridge_slave_0: left promiscuous mode [ 415.021211][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.082831][ T931] usb 1-1: device descriptor read/all, error -71 [ 415.138656][ T5196] usb 4-1: USB disconnect, device number 13 [ 415.189758][ T5196] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 415.620167][ T29] audit: type=1326 audit(1720275163.431:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.0.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca0575bd9 code=0x0 [ 416.460647][ T5099] Bluetooth: hci5: command tx timeout [ 416.968796][ T9606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.021035][ T29] audit: type=1400 audit(1720275164.831:865): avc: denied { name_connect } for pid=9605 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 417.222884][ T29] audit: type=1400 audit(1720275165.031:866): avc: denied { nlmsg_read } for pid=9605 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 417.294639][ T9618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.592270][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.614294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.633180][ T12] bond0 (unregistering): Released all slaves [ 418.209990][ T9636] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 418.534744][ T5099] Bluetooth: hci5: command tx timeout [ 419.066057][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.108342][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.136417][ T9541] bridge_slave_0: entered allmulticast mode [ 419.173709][ T9541] bridge_slave_0: entered promiscuous mode [ 419.865245][ T29] audit: type=1400 audit(1720275167.681:867): avc: denied { create } for pid=9646 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 419.927590][ T29] audit: type=1400 audit(1720275167.721:868): avc: denied { bind } for pid=9646 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 420.029923][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.061284][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.093565][ T9541] bridge_slave_1: entered allmulticast mode [ 420.115743][ T9541] bridge_slave_1: entered promiscuous mode [ 420.365602][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.474235][ T12] hsr_slave_0: left promiscuous mode [ 420.481105][ T12] hsr_slave_1: left promiscuous mode [ 420.528443][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.545202][ T29] audit: type=1326 audit(1720275168.361:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.573440][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.626138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.675949][ T29] audit: type=1326 audit(1720275168.381:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.722813][ T4534] udevd[4534]: worker [5281] terminated by signal 33 (Unknown signal 33) [ 420.743704][ T4534] udevd[4534]: worker [5281] failed while handling '/devices/virtual/block/loop1' [ 420.765353][ T29] audit: type=1326 audit(1720275168.391:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.768240][ T12] veth1_macvtap: left promiscuous mode [ 420.846404][ T29] audit: type=1326 audit(1720275168.391:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.872005][ T29] audit: type=1326 audit(1720275168.401:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.895714][ T29] audit: type=1326 audit(1720275168.411:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x7ffc0000 [ 420.898922][ T12] veth0_macvtap: left promiscuous mode [ 420.921287][ T29] audit: type=1326 audit(1720275168.411:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f293036cc27 code=0x7ffc0000 [ 420.968541][ T29] audit: type=1326 audit(1720275168.411:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29303115c9 code=0x7ffc0000 [ 420.999245][ T29] audit: type=1326 audit(1720275168.411:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f293036cc27 code=0x7ffc0000 [ 421.205045][ T12] veth1_vlan: left promiscuous mode [ 421.205942][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.234918][ T29] audit: type=1326 audit(1720275168.411:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29303115c9 code=0x7ffc0000 [ 421.948776][ T29] audit: type=1326 audit(1720275168.411:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f293036cc27 code=0x7ffc0000 [ 421.974634][ T12] veth0_vlan: left promiscuous mode [ 422.359361][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.391957][ T12] smc: removing net device batadv_slave_1 with user defined pnetid SYZ2 [ 423.512423][ T12] team0 (unregistering): Port device team_slave_1 removed [ 423.571551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.430494][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.636574][ T9541] team0: Port device team_slave_0 added [ 424.663572][ T5196] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 424.686492][ T9541] team0: Port device team_slave_1 added [ 424.812263][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.862292][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.925084][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.011605][ T5196] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 425.046522][ T5196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.057889][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.065170][ T5196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.074497][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.101520][ T5196] usb 4-1: SerialNumber: syz [ 425.333195][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.265519][ T9541] hsr_slave_0: entered promiscuous mode [ 426.311986][ T9541] hsr_slave_1: entered promiscuous mode [ 426.321609][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.334688][ T9541] Cannot create hsr debugfs directory [ 426.408611][ T5196] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 426.972090][ T12] IPVS: stop unused estimator thread 0... [ 427.057888][ T931] usb 4-1: USB disconnect, device number 14 [ 427.106507][ T931] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 427.199478][ T9705] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 427.685865][ T9722] syz.1.1460[9722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.686198][ T9722] syz.1.1460[9722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.882554][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.911269][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.923073][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.967856][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.979205][ T9726] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 428.005171][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 428.016436][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.177093][ T9728] syzkaller0: entered promiscuous mode [ 428.182641][ T9728] syzkaller0: entered allmulticast mode [ 428.350596][ T9731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.711676][ T9738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.218747][ T9541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.257973][ T9541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.283146][ T9541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.494541][ T9541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.317271][ T5094] Bluetooth: hci3: command tx timeout [ 430.621349][ T5099] Bluetooth: hci6: sending frame failed (-49) [ 430.631313][ T5094] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 430.694374][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 430.694394][ T29] audit: type=1326 audit(1720275178.511:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.1.1467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x0 [ 430.872133][ T9723] chnl_net:caif_netlink_parms(): no params data found [ 431.234011][ T9772] syzkaller0: entered promiscuous mode [ 431.239814][ T9772] syzkaller0: entered allmulticast mode [ 431.450864][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.458507][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.467687][ T9723] bridge_slave_0: entered allmulticast mode [ 431.478218][ T9723] bridge_slave_0: entered promiscuous mode [ 431.502863][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.519480][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.527303][ T9723] bridge_slave_1: entered allmulticast mode [ 431.539857][ T9723] bridge_slave_1: entered promiscuous mode [ 431.736943][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.781378][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.802035][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.885331][ T9782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.957000][ T9723] team0: Port device team_slave_0 added [ 431.982554][ T9723] team0: Port device team_slave_1 added [ 432.169176][ T9782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.365473][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.373989][ T5094] Bluetooth: hci3: command tx timeout [ 432.404485][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.456570][ T9723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.476571][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.487958][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.371405][ T9723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.387666][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.474148][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.481476][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.568131][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.575432][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.842788][ T9723] hsr_slave_0: entered promiscuous mode [ 433.859741][ T9723] hsr_slave_1: entered promiscuous mode [ 433.869357][ T9723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.882489][ T9723] Cannot create hsr debugfs directory [ 434.257616][ T9814] syzkaller0: entered promiscuous mode [ 434.279920][ T9814] syzkaller0: entered allmulticast mode [ 434.457416][ T5094] Bluetooth: hci3: command tx timeout [ 434.591482][ T9541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.053420][ T5136] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 435.278955][ T5136] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.310623][ T5136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.345878][ T5136] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.349857][ T9723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.365512][ T5136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.399463][ T5136] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.420860][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.445848][ T5136] usb 2-1: Product: syz [ 435.468587][ T5136] usb 2-1: Manufacturer: syz [ 435.522826][ T5136] cdc_wdm 2-1:1.0: skipping garbage [ 435.566523][ T5136] cdc_wdm 2-1:1.0: skipping garbage [ 435.624974][ T5136] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 435.662608][ T5136] cdc_wdm 2-1:1.0: Unknown control protocol [ 435.726851][ T9723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.885057][ T9834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.010434][ T9723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.184886][ T9834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.295039][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 436.301553][ T5134] usb 2-1: USB disconnect, device number 13 [ 436.301923][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 436.313848][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 436.458666][ T9723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.546146][ T5094] Bluetooth: hci3: command tx timeout [ 436.659202][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.127473][ T9723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.196299][ T9723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.235696][ T9723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.260628][ T9723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.619081][ T9864] syzkaller0: entered promiscuous mode [ 437.628855][ T29] audit: type=1400 audit(1720275185.441:919): avc: denied { connect } for pid=9860 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.668781][ T9864] syzkaller0: entered allmulticast mode [ 437.756659][ T29] audit: type=1400 audit(1720275185.441:920): avc: denied { bind } for pid=9860 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.779140][ T29] audit: type=1400 audit(1720275185.471:921): avc: denied { write } for pid=9860 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.978981][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.134688][ T5133] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 438.204684][ T9870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1496'. [ 438.207948][ T9723] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.261499][ T9541] veth0_vlan: entered promiscuous mode [ 438.327724][ T5133] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 438.332009][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.348186][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.388987][ T9541] veth1_vlan: entered promiscuous mode [ 438.399371][ T5133] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.418368][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.458965][ T5133] usb 1-1: SerialNumber: syz [ 438.463964][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.464184][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.716394][ T9541] veth0_macvtap: entered promiscuous mode [ 438.808553][ T9541] veth1_macvtap: entered promiscuous mode [ 438.969059][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.001189][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.028039][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.056127][ T9884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.077242][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.120375][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.135354][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.163054][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.198424][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.222876][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.355655][ T5133] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 439.370109][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.439191][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.514226][ T9541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.549238][ T9541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.605652][ T9541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.635424][ T5196] usb 1-1: USB disconnect, device number 18 [ 439.642731][ T9541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.654735][ T5196] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 439.956023][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.113010][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.124726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.333632][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.341611][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.362187][ T9723] veth0_vlan: entered promiscuous mode [ 440.468690][ T9723] veth1_vlan: entered promiscuous mode [ 440.685976][ T9907] syzkaller0: entered promiscuous mode [ 440.691536][ T9907] syzkaller0: entered allmulticast mode [ 440.763071][ T9723] veth0_macvtap: entered promiscuous mode [ 440.819129][ T9723] veth1_macvtap: entered promiscuous mode [ 440.931626][ T5099] Bluetooth: hci6: sending frame failed (-49) [ 440.945297][ T5094] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 440.992865][ T29] audit: type=1326 audit(1720275188.801:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9906 comm="syz.1.1505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x0 [ 441.152628][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.178506][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.189833][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.201714][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.213156][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.240499][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.269234][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.292682][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.312013][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.337587][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.379661][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.452618][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.512299][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.570444][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.650991][ T9723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.691631][ T9723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.742863][ T9723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.782468][ T9723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.843545][ T5196] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 441.949146][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 442.066126][ T5196] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.116234][ T5196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.193393][ T5196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.243929][ T5196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.305895][ T5196] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.443835][ T29] audit: type=1400 audit(1720275190.251:923): avc: denied { read write } for pid=9924 comm="syz.4.1510" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 442.469526][ T5196] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.501231][ T5196] usb 1-1: Product: syz [ 442.519981][ T5196] usb 1-1: Manufacturer: syz [ 442.520582][ T1566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.704797][ T1566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.705971][ T29] audit: type=1400 audit(1720275190.251:924): avc: denied { open } for pid=9924 comm="syz.4.1510" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 442.759236][ T5196] cdc_wdm 1-1:1.0: skipping garbage [ 442.842807][ T5196] cdc_wdm 1-1:1.0: skipping garbage [ 442.854017][ T5196] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 442.896603][ T5196] cdc_wdm 1-1:1.0: Unknown control protocol [ 445.742501][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.749002][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.587843][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.618479][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.766625][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.978128][ T5134] usb 1-1: USB disconnect, device number 19 [ 451.098375][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.309437][ T29] audit: type=1400 audit(1720275199.121:925): avc: denied { unmount } for pid=9541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 451.696016][ T9955] syzkaller0: entered promiscuous mode [ 451.701558][ T9955] syzkaller0: entered allmulticast mode [ 452.021307][ T5099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.043206][ T5099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.065642][ T5099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.099585][ T5099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.114733][ T5099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 452.122415][ T5099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 452.850688][ T9934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.084883][ T9934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.362777][ T9981] syz.2.1524[9981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.363000][ T9981] syz.2.1524[9981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.390683][ T9934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.534735][ T9934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.996085][ T9934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.063701][ T9934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.294198][ T5094] Bluetooth: hci6: command tx timeout [ 454.519172][ T9934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.544107][ T9934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.766724][ T5136] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 455.013384][ T5136] usb 1-1: Using ep0 maxpacket: 8 [ 455.026181][ T5136] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 455.055275][ T5136] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 455.073332][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.892258][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 456.009296][ T9934] bridge_slave_1: left allmulticast mode [ 456.025188][ T5136] usb 1-1: string descriptor 0 read error: -71 [ 456.032240][ T5136] hub 1-1:32.0: USB hub found [ 456.053910][ T5136] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 456.057575][ T9934] bridge_slave_1: left promiscuous mode [ 456.095234][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.187914][ T9934] bridge_slave_0: left allmulticast mode [ 456.221651][ T9934] bridge_slave_0: left promiscuous mode [ 456.252817][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.314907][ T5136] usb 1-1: USB disconnect, device number 20 [ 456.385552][ T5094] Bluetooth: hci6: command tx timeout [ 456.667214][ T5131] udevd[5131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.330322][ T9934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.349690][ T9934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.363247][ T9934] bond0 (unregistering): Released all slaves [ 457.468631][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 457.510784][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 457.693490][ T9934] tipc: Left network mode [ 458.165745][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.173139][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.180429][ T9961] bridge_slave_0: entered allmulticast mode [ 458.190185][ T9961] bridge_slave_0: entered promiscuous mode [ 458.210187][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.222745][T10037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.232993][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.241997][ T9961] bridge_slave_1: entered allmulticast mode [ 458.256026][ T9961] bridge_slave_1: entered promiscuous mode [ 458.307367][ T29] audit: type=1400 audit(1720275206.121:926): avc: denied { ioctl } for pid=10033 comm="syz.0.1540" path="socket:[28728]" dev="sockfs" ino=28728 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.349667][ T5134] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 458.430688][T10037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.453600][ T5094] Bluetooth: hci6: command tx timeout [ 458.545259][ T5134] usb 5-1: Using ep0 maxpacket: 8 [ 458.556435][ T5134] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 458.616672][ T5134] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 458.647615][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.724308][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.781155][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.852581][ T9934] hsr_slave_0: left promiscuous mode [ 458.890620][ T9934] hsr_slave_1: left promiscuous mode [ 458.921650][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.929674][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.952157][ T29] audit: type=1400 audit(1720275206.751:927): avc: denied { wake_alarm } for pid=10046 comm="syz.2.1543" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 458.954624][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.010673][ T9934] veth0_macvtap: left promiscuous mode [ 459.018977][ T9934] veth1_vlan: left promiscuous mode [ 459.024820][ T9934] veth0_vlan: left promiscuous mode [ 460.166750][ T9934] smc: removing net device batadv_slave_1 with user defined pnetid SYZ2 [ 460.319259][ T9934] team0 (unregistering): Port device team_slave_1 removed [ 460.397517][ T9934] team0 (unregistering): Port device team_slave_0 removed [ 460.534508][ T5094] Bluetooth: hci6: command tx timeout [ 461.162600][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.210509][T10047] bond0: (slave rose0): Enslaving as an active interface with an up link [ 461.286039][ T5134] usb 5-1: string descriptor 0 read error: -71 [ 461.315339][ T5134] hub 5-1:32.0: USB hub found [ 461.329024][ T5134] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 461.395883][ T9961] team0: Port device team_slave_0 added [ 461.492998][ T9961] team0: Port device team_slave_1 added [ 461.631202][ T5134] usb 5-1: USB disconnect, device number 18 [ 461.889769][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.958857][ T5131] udevd[5131]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.014766][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.694609][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.783667][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.833552][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.900792][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.025258][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'. [ 463.082148][ T29] audit: type=1400 audit(1720275210.891:928): avc: denied { audit_write } for pid=10087 comm="syz.0.1556" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 463.157593][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.246546][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.304881][ T29] audit: type=1400 audit(1720275211.111:929): avc: denied { mounton } for pid=10092 comm="syz.0.1557" path="/proc/952/task" dev="proc" ino=28646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 463.498855][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.560584][ T9961] hsr_slave_0: entered promiscuous mode [ 463.596980][ T9961] hsr_slave_1: entered promiscuous mode [ 463.619636][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.646766][ T9961] Cannot create hsr debugfs directory [ 463.794078][T10097] syzkaller0: entered promiscuous mode [ 463.799629][T10097] syzkaller0: entered allmulticast mode [ 464.265058][ T29] audit: type=1400 audit(1720275212.081:930): avc: denied { getopt } for pid=10105 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 465.079333][ T5136] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 465.777915][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 465.825329][ T5136] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 465.850473][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.867935][ T5136] usb 5-1: Product: syz [ 465.877714][ T5136] usb 5-1: Manufacturer: syz [ 465.902359][ T5136] usb 5-1: SerialNumber: syz [ 465.945120][ T5136] usb 5-1: config 0 descriptor?? [ 466.152438][ T29] audit: type=1400 audit(1720275213.961:931): avc: denied { mount } for pid=10135 comm="syz.2.1572" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 466.206751][ T5136] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 466.403091][T10140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.517738][ T9961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.569488][ T9961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.651094][ T5136] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.661816][ T9961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.676413][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.713880][ T5136] usb 5-1: USB disconnect, device number 19 [ 466.778174][ T9961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.246518][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.305853][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.391749][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.399121][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.456390][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.463703][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.546142][T10155] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 467.731848][ T9961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.169351][ T29] audit: type=1400 audit(1720275215.981:932): avc: denied { write } for pid=10171 comm="syz.2.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 468.855097][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.152592][ T9961] veth0_vlan: entered promiscuous mode [ 469.240540][ T9961] veth1_vlan: entered promiscuous mode [ 469.296527][T10204] usb usb8: usbfs: process 10204 (syz.1.1598) did not claim interface 0 before use [ 469.579647][T10209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.616446][ T9961] veth0_macvtap: entered promiscuous mode [ 469.675199][ T9961] veth1_macvtap: entered promiscuous mode [ 469.842516][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.861555][ T29] audit: type=1326 audit(1720275217.651:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.2.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f3175bd9 code=0x0 [ 469.922000][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.965193][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.012710][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.064479][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.119354][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.141386][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.159726][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.222497][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.296807][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.341671][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.371730][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.475237][ T9961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.499156][ T9961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.540078][ T9961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.567071][ T9961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.090564][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.108144][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.282642][ T9932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.312198][ T9932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.365122][ T5193] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 471.586343][ T5193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.616587][ T5193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.662333][ T5193] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.978027][ T5193] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 472.829008][ T5193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.849332][ T5193] usb 5-1: config 0 descriptor?? [ 473.321456][ T29] audit: type=1400 audit(1720275221.131:934): avc: denied { create } for pid=10262 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.400973][ T5193] acrux 0003:1A34:0802.001F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 473.420831][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 473.452655][ T29] audit: type=1400 audit(1720275221.171:935): avc: denied { connect } for pid=10262 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.483359][ T5193] acrux 0003:1A34:0802.001F: no inputs found [ 473.489423][ T5193] acrux 0003:1A34:0802.001F: Failed to enable force feedback support, error: -19 [ 473.498772][ T5094] Bluetooth: hci3: command 0x0406 tx timeout [ 473.621739][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1619'. [ 475.407870][ T5193] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 475.770870][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1630'. [ 476.238791][T10315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.330722][ T5136] usb 5-1: USB disconnect, device number 20 [ 476.356236][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.755168][T10315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.505674][ T29] audit: type=1400 audit(1720275226.321:936): avc: denied { setopt } for pid=10342 comm="syz.0.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 478.579643][T10345] dccp_invalid_packet: P.Data Offset(0) too small [ 478.734576][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 478.838723][ T5139] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 478.888517][ T5099] Bluetooth: hci5: unexpected cc 0x1408 length: 57 > 4 [ 479.062122][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.079629][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.102744][ T5139] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 479.142293][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.185845][ T5139] usb 3-1: config 0 descriptor?? [ 479.201151][T10359] syz_tun: entered promiscuous mode [ 479.219123][T10357] syz_tun: left promiscuous mode [ 479.656368][ T784] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 479.738677][ T5139] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 479.761592][ T5139] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 479.779236][ T5139] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 479.788030][ T5139] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 479.798805][ T5139] zydacron 0003:13EC:0006.0020: item fetching failed at offset 4/5 [ 479.810240][ T5139] zydacron 0003:13EC:0006.0020: parse failed [ 479.820253][ T5139] zydacron 0003:13EC:0006.0020: probe with driver zydacron failed with error -22 [ 479.884885][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 479.919286][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 479.940968][ T5139] usb 3-1: USB disconnect, device number 12 [ 479.942575][ T784] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 479.993538][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.031068][ T784] usb 5-1: config 0 descriptor?? [ 480.085348][T10362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 480.592292][ T784] usbhid 5-1:0.0: can't add hid device: -71 [ 480.615138][ T784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 480.649697][ T784] usb 5-1: USB disconnect, device number 21 [ 480.697357][ T5099] Bluetooth: hci3: unexpected cc 0x1408 length: 57 > 4 [ 480.707090][ T5099] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 480.970857][T10399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.934967][ T5099] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 482.946606][ T5099] Bluetooth: hci5: Injecting HCI hardware error event [ 482.957572][ T5099] Bluetooth: hci5: hardware error 0x00 [ 484.404760][ T29] audit: type=1400 audit(1720275232.211:937): avc: denied { append } for pid=10465 comm="syz.2.1680" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 484.830786][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 484.843458][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 485.019341][ T53] Bluetooth: hci3: hardware error 0x00 [ 485.025837][ T5099] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 485.883613][ T29] audit: type=1400 audit(1720275233.671:938): avc: denied { setopt } for pid=10476 comm="syz.2.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.910254][ T29] audit: type=1400 audit(1720275233.681:939): avc: denied { bind } for pid=10476 comm="syz.2.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 487.146456][T10485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1684'. [ 487.179681][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 489.931217][ T29] audit: type=1400 audit(1720275237.721:940): avc: denied { open } for pid=10502 comm="syz.3.1692" path="/dev/ptyqb" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 491.131122][ T29] audit: type=1400 audit(1720275238.941:941): avc: denied { setopt } for pid=10502 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 491.253758][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 491.302562][ T29] audit: type=1400 audit(1720275239.001:942): avc: denied { ioctl } for pid=10502 comm="syz.3.1692" path="/dev/ptyqb" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 491.433159][T10517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.504347][T10520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.585369][T10517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.622495][T10517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.829636][T10529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.982635][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1702'. [ 492.096027][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 492.693482][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.132649][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 494.283565][T10555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 494.565213][T10568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.615272][ T29] audit: type=1326 audit(1720275242.431:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.1.1710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2930375bd9 code=0x0 [ 494.677066][T10572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.766147][T10568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.836801][ T931] IPVS: starting estimator thread 0... [ 494.891767][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1715'. [ 494.934506][T10577] IPVS: using max 16 ests per chain, 38400 per kthread [ 494.992235][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 495.922359][ T29] audit: type=1400 audit(1720275243.721:944): avc: denied { bind } for pid=10595 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.810293][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1729'. [ 497.995730][T10620] team0: entered promiscuous mode [ 498.041555][T10620] team_slave_0: entered promiscuous mode [ 498.075040][T10620] team_slave_1: entered promiscuous mode [ 498.094903][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 498.532867][T10635] netlink: 'syz.2.1733': attribute type 33 has an invalid length. [ 498.565180][T10635] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1733'. [ 498.885018][ T29] audit: type=1400 audit(1720275246.691:945): avc: denied { ioctl } for pid=10619 comm="syz.3.1728" path="socket:[31292]" dev="sockfs" ino=31292 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.060265][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 500.722273][T10619] team0: left promiscuous mode [ 500.756734][T10619] team_slave_0: left promiscuous mode [ 500.780907][T10619] team_slave_1: left promiscuous mode [ 501.004956][ T5174] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 501.249852][ T5174] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 501.284716][ T5174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.339337][ T5174] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 501.374889][ T5174] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 501.383066][ T5174] usb 2-1: Manufacturer: syz [ 501.441617][ T5174] usb 2-1: config 0 descriptor?? [ 502.564403][ T5174] rc_core: IR keymap rc-hauppauge not found [ 502.570430][ T5174] Registered IR keymap rc-empty [ 502.591442][ T5174] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 502.614553][T10662] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1742'. [ 502.655366][ T5174] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 502.716910][T10695] team0: entered promiscuous mode [ 502.722012][T10695] team_slave_0: entered promiscuous mode [ 502.753798][T10695] team_slave_1: entered promiscuous mode [ 502.757648][ T29] audit: type=1400 audit(1720275250.561:946): avc: denied { read } for pid=4519 comm="acpid" name="event4" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 502.814678][ T5174] usb 2-1: USB disconnect, device number 14 [ 502.884504][ T29] audit: type=1400 audit(1720275250.561:947): avc: denied { open } for pid=4519 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 502.956257][ T29] audit: type=1400 audit(1720275250.561:948): avc: denied { ioctl } for pid=4519 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2597 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 503.411497][T10715] netlink: 'syz.2.1758': attribute type 4 has an invalid length. [ 503.843172][T10719] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 504.258941][T10694] team0: left promiscuous mode [ 504.289638][T10694] team_slave_0: left promiscuous mode [ 504.324214][T10694] team_slave_1: left promiscuous mode [ 505.613522][ T5196] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 505.863672][ T5196] usb 4-1: Using ep0 maxpacket: 8 [ 505.886232][ T5196] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 505.950564][ T5196] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 505.963729][T10750] netlink: 'syz.4.1771': attribute type 4 has an invalid length. [ 505.978500][ T5196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.281725][ T5196] usb 4-1: string descriptor 0 read error: -71 [ 506.311671][ T5196] hub 4-1:32.0: USB hub found [ 506.327144][ T5196] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 506.574120][ T5196] usb 4-1: USB disconnect, device number 15 [ 506.741349][T10766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1779'. [ 506.926194][ T5131] udevd[5131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.356397][ T5193] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 507.417282][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.423811][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.038088][ T5193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 508.073347][ T5193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 508.143320][ T5193] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 508.185223][ T5193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.253940][ T5193] usb 2-1: config 0 descriptor?? [ 508.288746][T10771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.960090][ T5193] usbhid 2-1:0.0: can't add hid device: -71 [ 508.982126][ T5193] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 509.014716][ T5193] usb 2-1: USB disconnect, device number 15 [ 509.238947][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 510.044800][T10815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10815 comm=syz.0.1795 [ 510.866783][ T29] audit: type=1400 audit(1720275258.591:949): avc: denied { accept } for pid=10822 comm="syz.0.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 511.491222][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 511.570839][ T29] audit: type=1400 audit(1720275259.381:950): avc: denied { remount } for pid=10836 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 511.692281][ T29] audit: type=1400 audit(1720275259.461:951): avc: denied { block_suspend } for pid=10836 comm="syz.3.1802" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 511.790892][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 512.345533][T10863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10863 comm=syz.4.1808 [ 512.535019][ T5174] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 513.786103][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 513.835128][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 514.191735][ T5174] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 514.233020][ T5174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.318997][ T5174] usb 1-1: config 0 descriptor?? [ 514.347484][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 514.368994][T10861] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 515.114084][T10913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10913 comm=syz.4.1822 [ 515.345826][ T5174] usbhid 1-1:0.0: can't add hid device: -71 [ 515.391393][ T5174] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 515.435994][ T5174] usb 1-1: USB disconnect, device number 21 [ 515.466727][ T29] audit: type=1400 audit(1720275263.261:952): avc: denied { write } for pid=10916 comm="syz.2.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 516.971161][T10930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1827'. [ 517.426633][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 519.551058][T10950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10950 comm=syz.2.1834 [ 520.907605][T10961] xt_hashlimit: overflow, try lower: 0/0 [ 522.331622][T10975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1842'. [ 522.589061][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 523.322252][ T29] audit: type=1400 audit(1720275271.021:953): avc: denied { read } for pid=10993 comm="syz.3.1847" path="socket:[33217]" dev="sockfs" ino=33217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 523.380443][T10998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10998 comm=syz.4.1846 [ 524.587667][ T29] audit: type=1400 audit(1720275272.391:954): avc: denied { mount } for pid=11002 comm="syz.0.1849" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 524.743489][ T29] audit: type=1400 audit(1720275272.491:955): avc: denied { unmount } for pid=9961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 524.986442][ T5139] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 525.003450][ T5174] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 525.206368][ T5139] usb 5-1: Using ep0 maxpacket: 16 [ 525.237714][ T5174] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 525.271138][ T5139] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 525.685614][T11015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1853'. [ 526.062721][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.075628][ T5139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.093727][ T5139] usb 5-1: Product: syz [ 526.097973][ T5139] usb 5-1: Manufacturer: syz [ 526.102628][ T5139] usb 5-1: SerialNumber: syz [ 526.107668][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.134414][ T5174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 526.158372][ T5139] usb 5-1: config 0 descriptor?? [ 526.180116][ T5139] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 526.191587][ T5174] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 526.215102][ T5174] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 526.248880][ T5174] usb 1-1: Manufacturer: syz [ 526.269448][ T5174] usb 1-1: config 0 descriptor?? [ 527.229357][T11003] 9pnet_fd: Insufficient options for proto=fd [ 527.286317][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 527.293308][ T29] audit: type=1400 audit(1720275275.091:956): avc: denied { remount } for pid=11002 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 527.321601][ T5174] usbhid 1-1:0.0: can't add hid device: -71 [ 527.356044][T11029] input: syz0 as /devices/virtual/input/input9 [ 527.364328][ T5174] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 527.443337][ T29] audit: type=1400 audit(1720275275.151:957): avc: denied { ioctl } for pid=11004 comm="syz.4.1850" path="/dev/uinput" dev="devtmpfs" ino=836 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 527.525652][ T5174] usb 1-1: USB disconnect, device number 22 [ 527.922496][T11039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11039 comm=syz.1.1860 [ 528.163010][T11042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.298523][ T5139] gp8psk: usb in 128 operation failed. [ 528.343911][ T5139] gp8psk: usb in 137 operation failed. [ 528.371143][ T5139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.444577][ T5139] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 528.445275][ T29] audit: type=1326 audit(1720275276.251:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bdc575bd9 code=0x0 [ 528.500649][ T5139] usb 5-1: media controller created [ 528.635223][ T29] audit: type=1400 audit(1720275276.321:959): avc: denied { unmount } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 528.680389][ T5139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.624630][ T5139] gp8psk_fe: Frontend revision 1 attached [ 529.664680][ T5139] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 529.706499][ T5139] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 529.944861][T11061] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1865'. [ 530.001812][ T29] audit: type=1400 audit(1720275277.811:960): avc: denied { append } for pid=11063 comm="syz.3.1866" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 531.214222][ T5137] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 531.402228][ T5139] gp8psk: usb in 138 operation failed. [ 531.437006][ T5139] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 531.467689][ T5137] usb 4-1: Using ep0 maxpacket: 16 [ 531.498589][ T5139] gp8psk: found Genpix USB device pID = 201 (hex) [ 531.526083][ T5137] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 531.556534][ T5139] usb 5-1: USB disconnect, device number 22 [ 531.574827][ T5137] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.604120][ T5137] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 531.616431][ T5137] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 531.622341][ T29] audit: type=1400 audit(1720275279.421:961): avc: denied { accept } for pid=11062 comm="syz.0.1868" laddr=::ffff:172.20.20.187 lport=59676 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.652150][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.652193][ T5137] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 531.652252][ T5137] usb 4-1: config 1 interface 0 has no altsetting 0 [ 531.652412][ T5137] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 531.652452][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.670168][ T5137] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 531.964822][ T5137] scsi host1: usb-storage 4-1:1.0 [ 532.017370][ T5139] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 532.314110][ T5193] usb 4-1: USB disconnect, device number 16 [ 533.805011][ T5139] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 533.912537][T11103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.015621][ T29] audit: type=1326 audit(1720275281.831:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.3.1877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bdc575bd9 code=0x0 [ 534.052924][ T5139] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 534.091735][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.217012][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.843150][ T5139] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 534.874664][ T5139] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 534.887843][ T5139] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 534.897330][ T5139] usb 5-1: Manufacturer: syz [ 534.912489][ T5139] usb 5-1: config 0 descriptor?? [ 535.504335][T11117] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1880'. [ 536.012901][T11093] 9pnet_fd: Insufficient options for proto=fd [ 536.228474][ T5139] usbhid 5-1:0.0: can't add hid device: -71 [ 536.254809][ T5139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 536.334582][ T5139] usb 5-1: USB disconnect, device number 23 [ 538.746279][T11156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 538.949477][ T29] audit: type=1326 audit(1720275286.751:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdda8975bd9 code=0x0 [ 539.073839][T11165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1894'. [ 541.874601][ T5134] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 541.968648][T11207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1908'. [ 542.081587][ T5134] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 542.134464][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.172276][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.194533][ T5174] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 542.202311][ T5134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 542.247146][ T5134] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 542.266243][ T5134] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 542.286382][ T5134] usb 5-1: Manufacturer: syz [ 542.309686][ T5134] usb 5-1: config 0 descriptor?? [ 542.405247][ T5174] usb 3-1: Using ep0 maxpacket: 32 [ 542.437408][ T5174] usb 3-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 542.456482][ T5174] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 542.479310][ T5174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 542.488270][ T5174] usb 3-1: New USB device found, idVendor=046d, idProduct=431c, bcdDevice= 0.40 [ 542.504596][ T5174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.551948][ T5174] usb 3-1: config 0 descriptor?? [ 542.580410][ T5174] hub 3-1:0.0: bad descriptor, ignoring hub [ 542.608358][ T5174] hub 3-1:0.0: probe with driver hub failed with error -5 [ 542.755781][T11193] 9pnet_fd: Insufficient options for proto=fd [ 542.798783][ T5134] usbhid 5-1:0.0: can't add hid device: -71 [ 542.857694][ T5134] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 542.956319][ T5134] usb 5-1: USB disconnect, device number 24 [ 543.036000][ T785] usb 3-1: USB disconnect, device number 13 [ 543.431622][T11235] Bluetooth: MGMT ver 1.22 [ 545.425161][ T29] audit: type=1400 audit(1720275293.240:964): avc: denied { ioctl } for pid=11248 comm="syz.2.1918" path="socket:[34023]" dev="sockfs" ino=34023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 545.425570][T11248] delete_channel: no stack [ 546.334746][ T5134] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 546.620947][ T5134] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 546.792248][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.870483][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.944547][ T5134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 547.041926][ T5134] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 547.159790][ T5134] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 547.211906][ T5134] usb 5-1: Manufacturer: syz [ 547.255731][ T5134] usb 5-1: config 0 descriptor?? [ 547.573659][ T5193] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 548.322480][ T5193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.365698][T11273] 9pnet_fd: Insufficient options for proto=fd [ 548.380886][ T5193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.436922][ T5134] usbhid 5-1:0.0: can't add hid device: -71 [ 548.443168][ T5193] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 548.452300][ T5193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.468406][ T5134] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 548.522769][ T5193] usb 3-1: config 0 descriptor?? [ 548.578868][ T5134] usb 5-1: USB disconnect, device number 25 [ 549.429482][ T5193] kye 0003:0458:5013.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 549.476963][ T29] audit: type=1400 audit(1720275297.290:965): avc: denied { read } for pid=11315 comm="syz.0.1940" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 549.478295][ T5193] kye 0003:0458:5013.0021: unknown main item tag 0x0 [ 549.573852][ T29] audit: type=1400 audit(1720275297.320:966): avc: denied { open } for pid=11315 comm="syz.0.1940" path="/435/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 549.603110][ T5193] kye 0003:0458:5013.0021: unknown main item tag 0x0 [ 549.615039][ T5193] kye 0003:0458:5013.0021: item fetching failed at offset 4/5 [ 549.665941][ T5193] kye 0003:0458:5013.0021: parse failed [ 549.683106][ T29] audit: type=1400 audit(1720275297.320:967): avc: denied { ioctl } for pid=11315 comm="syz.0.1940" path="/435/file0/file0" dev="fuse" ino=0 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 549.718016][ T5193] kye 0003:0458:5013.0021: probe with driver kye failed with error -22 [ 549.756775][ T5193] usb 3-1: USB disconnect, device number 14 [ 550.295140][ T5099] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 550.305309][ T5099] Bluetooth: hci6: Injecting HCI hardware error event [ 550.336770][ T53] Bluetooth: hci6: hardware error 0x00 [ 552.777129][ T53] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 552.799191][ T29] audit: type=1400 audit(1720275300.610:968): avc: denied { read } for pid=11388 comm="syz.1.1959" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 552.844440][ T29] audit: type=1400 audit(1720275300.620:969): avc: denied { open } for pid=11388 comm="syz.1.1959" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 552.958259][T11391] netlink: 'syz.0.1960': attribute type 4 has an invalid length. [ 553.490606][T11403] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1963'. [ 554.759741][ T29] audit: type=1400 audit(1720275302.570:970): avc: denied { map } for pid=11434 comm="syz.3.1971" path="socket:[34293]" dev="sockfs" ino=34293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 556.019822][ T29] audit: type=1400 audit(1720275303.070:971): avc: denied { name_bind } for pid=11436 comm="syz.3.1972" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 556.402405][T11445] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1975'. [ 557.218730][T11468] autofs: Unknown parameter '' [ 557.378642][ C1] [ 557.381011][ C1] ================================ [ 557.386119][ C1] WARNING: inconsistent lock state [ 557.391225][ C1] 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 Not tainted [ 557.398337][ C1] -------------------------------- [ 557.403442][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 557.410287][ C1] syz.1.1981/11462 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 557.416720][ C1] ffff8880b9338a80 (lock#10){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 557.427139][ C1] {HARDIRQ-ON-W} state was registered at: [ 557.432851][ C1] lock_acquire+0x1b1/0x560 [ 557.437468][ C1] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 557.444177][ C1] lock_mm_and_find_vma+0xeb/0x6a0 [ 557.449398][ C1] do_user_addr_fault+0x29c/0xe50 [ 557.454532][ C1] exc_page_fault+0x5c/0xc0 [ 557.459139][ C1] asm_exc_page_fault+0x26/0x30 [ 557.464128][ C1] rep_movs_alternative+0x4a/0x70 [ 557.469263][ C1] _copy_to_user+0xac/0xc0 [ 557.473779][ C1] rng_dev_read+0x25d/0x720 [ 557.478389][ C1] vfs_readv+0x6cb/0x8a0 [ 557.482739][ C1] __x64_sys_preadv+0x22b/0x310 [ 557.487702][ C1] do_syscall_64+0xcd/0x250 [ 557.492312][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.498314][ C1] irq event stamp: 3344 [ 557.502463][ C1] hardirqs last enabled at (3343): [] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 557.512647][ C1] hardirqs last disabled at (3344): [] irqentry_enter+0x54/0x60 [ 557.521861][ C1] softirqs last enabled at (2636): [] fpu_clone+0x393/0xbc0 [ 557.530831][ C1] softirqs last disabled at (2634): [] fpu_clone+0x328/0xbc0 [ 557.539783][ C1] [ 557.539783][ C1] other info that might help us debug this: [ 557.547854][ C1] Possible unsafe locking scenario: [ 557.547854][ C1] [ 557.555303][ C1] CPU0 [ 557.558585][ C1] ---- [ 557.561873][ C1] lock(lock#10); [ 557.565614][ C1] [ 557.569062][ C1] lock(lock#10); [ 557.572965][ C1] [ 557.572965][ C1] *** DEADLOCK *** [ 557.572965][ C1] [ 557.581107][ C1] 2 locks held by syz.1.1981/11462: [ 557.586305][ C1] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 557.595732][ C1] #1: ffff888024343118 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x1e8/0x7c0 [ 557.606548][ C1] [ 557.606548][ C1] stack backtrace: [ 557.612431][ C1] CPU: 1 PID: 11462 Comm: syz.1.1981 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 557.622583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 557.632728][ C1] Call Trace: [ 557.636011][ C1] [ 557.638947][ C1] dump_stack_lvl+0x116/0x1f0 [ 557.643642][ C1] mark_lock+0x923/0xc60 [ 557.647933][ C1] ? __pfx_mark_lock+0x10/0x10 [ 557.652823][ C1] ? __pfx_mark_lock+0x10/0x10 [ 557.657611][ C1] ? hlock_class+0x4e/0x130 [ 557.662210][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 557.667276][ C1] ? hlock_class+0x4e/0x130 [ 557.671792][ C1] ? __lock_acquire+0xc5d/0x3b30 [ 557.676753][ C1] __lock_acquire+0x1359/0x3b30 [ 557.681631][ C1] ? finish_task_switch.isra.0+0x212/0xcc0 [ 557.687453][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 557.692689][ C1] ? lock_acquire+0x1b1/0x560 [ 557.697396][ C1] lock_acquire+0x1b1/0x560 [ 557.701924][ C1] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 557.708741][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 557.713790][ C1] ? kvm_guest_state+0xfa/0x160 [ 557.718660][ C1] ? perf_callchain_user+0x7ec/0xa20 [ 557.723964][ C1] ? down_read_trylock+0x1ed/0x3f0 [ 557.729085][ C1] ? stack_map_get_build_id_offset+0x1e8/0x7c0 [ 557.735258][ C1] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 557.741878][ C1] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 557.748710][ C1] ? __pfx_get_perf_callchain+0x10/0x10 [ 557.754281][ C1] stack_map_get_build_id_offset+0x5d9/0x7c0 [ 557.760288][ C1] __bpf_get_stack+0x6bf/0x700 [ 557.765064][ C1] ? __pfx___bpf_get_stack+0x10/0x10 [ 557.770363][ C1] bpf_get_stack_raw_tp+0x124/0x160 [ 557.775582][ C1] ? __pfx_bpf_get_stack_raw_tp+0x10/0x10 [ 557.781326][ C1] ___bpf_prog_run+0x3e51/0xabd0 [ 557.786284][ C1] ? lock_acquire+0x1b1/0x560 [ 557.790985][ C1] __bpf_prog_run32+0xc1/0x100 [ 557.795766][ C1] ? __pfx___bpf_prog_run32+0x10/0x10 [ 557.801157][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 557.806216][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 557.811430][ C1] bpf_trace_run2+0x231/0x590 [ 557.816133][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 557.821350][ C1] ? __schedule+0x3b29/0x5d00 [ 557.826045][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 557.831270][ C1] __bpf_trace_tlb_flush+0xd2/0x110 [ 557.836495][ C1] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 557.842323][ C1] ? flush_tlb_func+0x3d2/0x600 [ 557.847185][ C1] trace_tlb_flush+0xf3/0x170 [ 557.851881][ C1] __flush_smp_call_function_queue+0x27a/0x8c0 [ 557.858076][ C1] __sysvec_call_function_single+0x8c/0x410 [ 557.863994][ C1] sysvec_call_function_single+0x43/0xb0 [ 557.869648][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 557.875661][ C1] RIP: 0033:0x7f293025516c [ 557.880089][ C1] Code: 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 b8 01 00 00 00 41 89 db 89 de 8d 7b 04 89 d8 89 c1 81 e1 ff 1f 00 00 49 8b 14 cf <48> 39 f2 0f 84 5f ff ff ff 48 85 d2 0f 84 d2 01 00 00 83 c0 01 39 [ 557.899715][ C1] RSP: 002b:00007ffd0b5ae320 EFLAGS: 00000206 [ 557.905970][ C1] RAX: 000000008181acd2 RBX: ffffffff8181acd2 RCX: 0000000000000cd2 [ 557.913950][ C1] RDX: 000000008181acd2 RSI: 000000008181acd2 RDI: 000000008181acd6 [ 557.921938][ C1] RBP: 00007f2931035720 R08: 0000000000000001 R09: 00007f292f601000 [ 557.929939][ C1] R10: 0000000000000008 R11: 000000008181acd2 R12: ffffffff8181ac45 [ 557.937921][ C1] R13: 00007f29305040d0 R14: 000000000000332a R15: 00007f29304f0000 [ 557.945902][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 557.952315][ C1] ? smp_call_function_many_cond+0x572/0x1420 [ 557.958404][ C1] [ 557.961585][ C1] vkms_vblank_simulate: vblank timer overrun