last executing test programs: 3m14.790037338s ago: executing program 0 (id=258): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffffff, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4940}, 0x400081c) 3m14.760607388s ago: executing program 0 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000000100)="9e", 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="d7", 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000480)="48b8f1ffffffffffffff0f23c00f21f83502000f000f23f848b878ee9cec2a6bcd640f23c80f21f8350c0080000f23f8a10100000000000000660f3880700db9450b0000b8bd5582ecba000000000f30660f38170d0900010029ffc402f5960a48b801000000000000000f23d80f21f835c00000d00f23f8410f21d2", 0x7c}], 0x1, 0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @remote, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10}, 0x1c, 0x0}}], 0x1, 0x4000804) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3m14.227446161s ago: executing program 0 (id=265): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x10098, &(0x7f0000002500)=ANY=[], 0x1, 0x1da, &(0x7f0000000640)="$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") llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 3m13.969905613s ago: executing program 0 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x8444a8, &(0x7f0000000740)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 3m13.792277214s ago: executing program 0 (id=273): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x401}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3m13.597990365s ago: executing program 0 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) write(r3, &(0x7f0000000100)="9e", 0x1) write(r3, &(0x7f0000000080)="d7", 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000480)="48b8f1ffffffffffffff0f23c00f21f83502000f000f23f848b878ee9cec2a6bcd640f23c80f21f8350c0080000f23f8a10100000000000000660f3880700db9450b0000b8bd5582ecba000000000f30660f38170d0900010029ffc402f5960a48b801000000000000000f23d80f21f835c00000d00f23f8410f21d2", 0x7c}], 0x1, 0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @remote, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10}, 0x1c, 0x0}}], 0x1, 0x4000804) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3m13.597828495s ago: executing program 32 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) write(r3, &(0x7f0000000100)="9e", 0x1) write(r3, &(0x7f0000000080)="d7", 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000480)="48b8f1ffffffffffffff0f23c00f21f83502000f000f23f848b878ee9cec2a6bcd640f23c80f21f8350c0080000f23f8a10100000000000000660f3880700db9450b0000b8bd5582ecba000000000f30660f38170d0900010029ffc402f5960a48b801000000000000000f23d80f21f835c00000d00f23f8410f21d2", 0x7c}], 0x1, 0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @remote, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10}, 0x1c, 0x0}}], 0x1, 0x4000804) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2m42.699537987s ago: executing program 5 (id=710): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 2m42.699296057s ago: executing program 5 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.698936667s ago: executing program 5 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="69640000000000000001", 0xa}, {&(0x7f0000000040)="00dd95c9", 0x4}, {&(0x7f0000000580)="64a796257a7f894fd62b44bc8c09", 0xe}], 0x3, 0x4, 0x103, 0x0) 2m42.653801728s ago: executing program 5 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x102) 2m42.573921118s ago: executing program 5 (id=716): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x5, 0x148, 0x0, 0x0, 0x260, 0x2a8, 0x2a8, 0x260, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x0, 0x65}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x3, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'xfrm0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x949, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xffff, 0x1, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 2m41.700519853s ago: executing program 5 (id=720): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) syz_open_dev$loop(0x0, 0xffffffffffff102e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) 2m41.700342124s ago: executing program 33 (id=720): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) syz_open_dev$loop(0x0, 0xffffffffffff102e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) 4.526932381s ago: executing program 2 (id=2482): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(r3, &(0x7f0000000000)=@alg, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$can_bcm(r7, 0x0, 0x20000804) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x4000004) 4.469072771s ago: executing program 2 (id=2484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xa) 4.413821121s ago: executing program 2 (id=2485): pipe2$watch_queue(0x0, 0x80) syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000), &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f636b20696ff6864cccde778ff22b6d656d00"], 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 3.222824149s ago: executing program 2 (id=2496): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) 3.0922351s ago: executing program 2 (id=2498): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x40, 0x13, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3.01362498s ago: executing program 3 (id=2500): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x7fffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2.106353956s ago: executing program 3 (id=2509): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r5, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) 1.603903969s ago: executing program 1 (id=2514): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 1.51088467s ago: executing program 1 (id=2516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x6002, 0x4, 0x4c8, 0x1e8, 0x3e0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x81, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@arp={@dev, @multicast2, 0x0, 0xff000000, 0x10, 0x0, {@mac=@random="1097e37746e0", {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x40, 0x800, 0x0, 'veth1_vlan\x00', 'gretap0\x00', {}, {}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@remote, @private=0xa010102, @private=0x4000, 0x1, 0x1}}}, {{@arp={@private=0xa010100, @multicast1, 0xff000000, 0xffffff00, 0x6, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7ff, 0x8, 0xc5b6, 0x1, 0x3, 0x0, 'syz_tun\x00', 'wlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x518) 1.43486468s ago: executing program 3 (id=2520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xa) 1.402013151s ago: executing program 3 (id=2522): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.401634561s ago: executing program 3 (id=2523): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x5) 1.385789911s ago: executing program 1 (id=2524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.377663051s ago: executing program 3 (id=2525): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920424f02124085010203010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x121400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x39) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.362915591s ago: executing program 4 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) 1.222296252s ago: executing program 1 (id=2531): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r5, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) 845.554334ms ago: executing program 6 (id=2532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 798.112974ms ago: executing program 6 (id=2533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="000000ffffffffffffffe6000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 797.479845ms ago: executing program 6 (id=2534): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 783.808655ms ago: executing program 6 (id=2535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0xfffe, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 721.965105ms ago: executing program 6 (id=2536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xa) 721.339965ms ago: executing program 6 (id=2537): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 573.327576ms ago: executing program 1 (id=2538): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') 444.055257ms ago: executing program 2 (id=2539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r9) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x58, r10, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004c0}, 0x44084) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x1, "27004e8f"}, @global=@item_012={0x2, 0x1, 0x6, "f2ed"}]}}, 0x0}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r12, 0x0, 0x0, 0x24004000) 443.469997ms ago: executing program 1 (id=2549): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x40, 0x13, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 351.747948ms ago: executing program 4 (id=2540): syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 205.989428ms ago: executing program 4 (id=2541): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a2cbd7000fddbcf2507006800", @ANYRES32=r1, @ANYBLOB="586201002800000024001a8009000100766c61010000000004000480"], 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x50) 143.760769ms ago: executing program 4 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 93.530789ms ago: executing program 4 (id=2543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=2544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): T2326] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 88.212421][ T2326] FAT-fs (loop2): Filesystem has been set read-only [ 88.345341][ T2351] loop6: detected capacity change from 0 to 2048 [ 88.422654][ T30] audit: type=1400 audit(1762212621.951:326): avc: denied { setattr } for pid=2355 comm="syz.3.797" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.505726][ T2363] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.710023][ T30] audit: type=1400 audit(1762212622.231:327): avc: denied { bind } for pid=2382 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.745500][ T30] audit: type=1400 audit(1762212622.261:328): avc: denied { listen } for pid=2382 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.790455][ T30] audit: type=1400 audit(1762212622.261:329): avc: denied { write } for pid=2382 comm="syz.2.809" path="socket:[23639]" dev="sockfs" ino=23639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.838237][ T30] audit: type=1400 audit(1762212622.261:330): avc: denied { accept } for pid=2382 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.876128][ T2398] overlayfs: failed to clone upperpath [ 88.898047][ T30] audit: type=1400 audit(1762212622.311:331): avc: denied { read } for pid=2382 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.952655][ T30] audit: type=1400 audit(1762212622.481:332): avc: denied { nlmsg_write } for pid=2403 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.007764][ T20] kernel write not supported for file /zero (pid: 20 comm: kworker/0:1) [ 89.031376][ T2412] fuse: Bad value for 'fd' [ 89.090224][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 89.158846][ T2445] netlink: 196 bytes leftover after parsing attributes in process `syz.4.836'. [ 89.230208][ T1561] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.246290][ T1561] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 89.266850][ T1561] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 89.278502][ T1561] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 89.300312][ T1561] usb 2-1: USB disconnect, device number 9 [ 89.390448][ T2477] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 89.398774][ T2477] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 89.409005][ T2480] overlayfs: failed to clone upperpath [ 89.425536][ T2483] overlayfs: failed to clone upperpath [ 89.557079][ T2502] overlayfs: failed to clone lowerpath [ 89.657347][ T2528] loop2: detected capacity change from 0 to 7 [ 89.664447][ T1714] loop2: [ 89.672825][ T2528] loop2: [ 89.731988][ T2532] loop3: detected capacity change from 0 to 256 [ 89.756238][ T30] audit: type=1400 audit(1762212623.281:333): avc: denied { bind } for pid=2536 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.824252][ T2534] kvm: emulating exchange as write [ 89.838681][ T2541] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 89.855660][ T2541] FAT-fs (loop3): Filesystem has been set read-only [ 89.873390][ T2541] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 90.111554][ T2565] loop2: detected capacity change from 0 to 256 [ 90.657585][ T2594] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaa [ 91.322665][ T2649] device gre1 entered promiscuous mode [ 91.566483][ T2661] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 91.708363][ T2675] device bridge_slave_1 left promiscuous mode [ 91.734941][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.755615][ T2675] device bridge_slave_0 left promiscuous mode [ 91.770243][ T2675] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.946919][ T2689] overlayfs: failed to clone upperpath [ 92.236229][ T2718] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 92.267890][ T2718] overlayfs: missing 'lowerdir' [ 92.291164][ T2723] overlayfs: failed to clone upperpath [ 92.556347][ T2741] overlayfs: failed to clone upperpath [ 92.595657][ T2741] overlayfs: missing 'lowerdir' [ 92.606548][ T2745] netlink: 84 bytes leftover after parsing attributes in process `syz.6.959'. [ 92.783094][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 92.783109][ T30] audit: type=1326 audit(1762212626.311:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.6.964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ab4b36c9 code=0x0 [ 93.017302][ T2780] loop3: detected capacity change from 0 to 256 [ 93.291075][ T2786] loop3: detected capacity change from 0 to 512 [ 93.310747][ T2786] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.389371][ T30] audit: type=1400 audit(1762212626.911:342): avc: denied { shutdown } for pid=2790 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.449777][ T30] audit: type=1400 audit(1762212626.961:343): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 93.756500][ T2820] fuse: Bad value for 'fd' [ 93.770391][ T30] audit: type=1400 audit(1762212627.271:344): avc: denied { ioctl } for pid=2815 comm="syz.6.989" path="socket:[25726]" dev="sockfs" ino=25726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.001714][ T2846] loop2: detected capacity change from 0 to 128 [ 94.014281][ T2847] overlayfs: failed to clone upperpath [ 94.115213][ T30] audit: type=1400 audit(1762212627.641:345): avc: denied { mounton } for pid=2866 comm="syz.6.1013" path="/70/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 94.115218][ T2868] fuse: Bad value for 'fd' [ 94.210381][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.238210][ T2891] 9pnet: Insufficient options for proto=fd [ 94.273746][ T2901] 8021q: VLANs not supported on gre0 [ 94.325081][ T2913] overlayfs: failed to clone upperpath [ 94.354185][ T2915] overlayfs: failed to clone upperpath [ 94.360579][ T30] audit: type=1400 audit(1762212627.891:346): avc: denied { read write } for pid=2914 comm="syz.6.1036" name="file5" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.404637][ T2917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.412119][ T2917] IPv6: NLM_F_CREATE should be set when creating new route [ 94.416691][ T30] audit: type=1400 audit(1762212627.911:347): avc: denied { open } for pid=2914 comm="syz.6.1036" path="/82/bus/file5" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.493711][ T2929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 95.289804][ T2952] bridge0: port 3(vlan2) entered blocking state [ 95.296440][ T2952] bridge0: port 3(vlan2) entered disabled state [ 95.303824][ T2952] device vlan2 entered promiscuous mode [ 95.309500][ T2952] device syz_tun entered promiscuous mode [ 95.330174][ T57] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.939543][ T2975] overlayfs: failed to clone upperpath [ 95.990187][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 96.194232][ T57] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.203753][ T57] usb 4-1: config 0 has no interface number 0 [ 96.209949][ T57] usb 4-1: config 0 interface 184 has no altsetting 0 [ 96.390295][ T57] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.409655][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.437598][ T57] usb 4-1: Product: syz [ 96.450178][ T57] usb 4-1: Manufacturer: syz [ 96.465795][ T57] usb 4-1: SerialNumber: syz [ 96.485605][ T57] usb 4-1: config 0 descriptor?? [ 96.541242][ T57] smsc75xx v1.0.0 [ 96.653451][ T30] audit: type=1400 audit(1762212630.181:348): avc: denied { mounton } for pid=3015 comm="syz.6.1080" path="/94/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.715628][ T30] audit: type=1400 audit(1762212630.201:349): avc: denied { append } for pid=3015 comm="syz.6.1080" name="file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.839922][ T30] audit: type=1326 audit(1762212630.361:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.4.1085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x0 [ 97.190229][ T57] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 97.206808][ T57] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.330460][ T3050] device syzkaller0 entered promiscuous mode [ 97.719490][ T3070] overlayfs: unrecognized mount option "verity=require" or missing value [ 97.796535][ T3082] loop2: detected capacity change from 0 to 128 [ 98.030052][ T3122] overlayfs: failed to clone upperpath [ 98.051852][ T3128] overlayfs: failed to clone upperpath [ 98.117410][ T3140] netlink: 'syz.2.1134': attribute type 3 has an invalid length. [ 98.163501][ T3146] loop2: detected capacity change from 0 to 256 [ 98.247893][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 98.324559][ T3165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.350973][ T57] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 98.366893][ T57] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 98.382663][ T57] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.392606][ T57] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 98.404373][ T3171] device erspan0 entered promiscuous mode [ 98.412592][ T3174] tmpfs: Unsupported parameter 'mpol' [ 98.416582][ T57] usb 4-1: USB disconnect, device number 8 [ 98.445099][ T3176] loop1: detected capacity change from 0 to 128 [ 98.716340][ T30] audit: type=1400 audit(1762212632.241:351): avc: denied { sys_module } for pid=3210 comm="syz.4.1165" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.855517][ T3225] overlayfs: failed to clone upperpath [ 98.877599][ T3227] overlayfs: failed to clone upperpath [ 99.052488][ T3231] loop3: detected capacity change from 0 to 128 [ 99.120608][ T3231] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.135463][ T3231] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.199631][ T30] audit: type=1326 audit(1762212888.714:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.320631][ T30] audit: type=1326 audit(1762212888.754:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.385461][ T3251] overlayfs: unrecognized mount option "verity=require" or missing value [ 99.386578][ T3252] loop3: detected capacity change from 0 to 128 [ 99.400467][ T30] audit: type=1326 audit(1762212888.754:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.443969][ T3252] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 99.458855][ T3252] FAT-fs (loop3): Filesystem has been set read-only [ 99.465831][ T30] audit: type=1326 audit(1762212888.754:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.506191][ T30] audit: type=1326 audit(1762212888.754:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.533220][ T3258] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1187'. [ 99.548510][ T30] audit: type=1326 audit(1762212888.754:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.617854][ T3264] overlayfs: failed to clone upperpath [ 99.624533][ T30] audit: type=1326 audit(1762212888.754:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.649008][ T30] audit: type=1326 audit(1762212888.754:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.705851][ T30] audit: type=1326 audit(1762212888.754:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f48abd7b6c9 code=0x7ffc0000 [ 99.900243][ T3285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1198'. [ 99.986420][ T3293] loop2: detected capacity change from 0 to 256 [ 101.333456][ T3374] loop3: detected capacity change from 0 to 512 [ 101.682539][ T3391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 101.932282][ T3439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=3439 comm=syz.6.1266 [ 104.520297][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 104.520330][ T30] audit: type=1400 audit(1762212893.674:387): avc: denied { mounton } for pid=3492 comm="syz.3.1287" path="/209/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.640393][ T39] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.760249][ T30] audit: type=1400 audit(1762212893.674:388): avc: denied { read } for pid=3492 comm="syz.3.1287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.784174][ T30] audit: type=1400 audit(1762212893.674:389): avc: denied { open } for pid=3492 comm="syz.3.1287" path="/209/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.834321][ T30] audit: type=1400 audit(1762212894.264:390): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 104.900155][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 104.912326][ T30] audit: type=1400 audit(1762212894.434:391): avc: denied { create } for pid=3501 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.948503][ T30] audit: type=1400 audit(1762212894.454:392): avc: denied { write } for pid=3501 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.100257][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.180370][ T39] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 105.210200][ T39] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 105.240155][ T39] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid maxpacket 59391, setting to 1024 [ 105.271590][ T39] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.287647][ T39] usb 3-1: config 12 interface 0 has no altsetting 0 [ 105.320837][ T30] audit: type=1400 audit(1762212894.844:393): avc: denied { mount } for pid=3510 comm="syz.6.1295" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 105.370211][ T30] audit: type=1400 audit(1762212894.844:394): avc: denied { search } for pid=3510 comm="syz.6.1295" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.420487][ T30] audit: type=1400 audit(1762212894.844:395): avc: denied { read } for pid=3510 comm="syz.6.1295" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.460303][ T39] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 105.464218][ T30] audit: type=1400 audit(1762212894.844:396): avc: denied { open } for pid=3510 comm="syz.6.1295" path="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.469971][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.531708][ T39] usb 3-1: Product: syz [ 105.546210][ T39] usb 3-1: Manufacturer: syz [ 105.551148][ T39] usb 3-1: SerialNumber: syz [ 105.580260][ T3494] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.710180][ T57] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.730316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 105.754999][ T3533] syz.3.1304 (3533): /proc/3532/oom_adj is deprecated, please use /proc/3532/oom_score_adj instead. [ 105.910829][ T39] usb 3-1: selecting invalid altsetting 0 [ 105.921103][ T39] usb 3-1: USB disconnect, device number 8 [ 105.960141][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 106.120230][ T57] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.132597][ T57] usb 2-1: config 1 has no interface number 1 [ 106.147515][ T57] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 106.190583][ T57] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 106.204068][ T57] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.390906][ T57] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.400233][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.408392][ T57] usb 2-1: Product: syz [ 106.412984][ T57] usb 2-1: Manufacturer: syz [ 106.417666][ T57] usb 2-1: SerialNumber: syz [ 106.687768][ T3549] hub 1-0:1.0: USB hub found [ 106.693355][ T3549] hub 1-0:1.0: 1 port detected [ 106.839075][ T3567] input: syz0 as /devices/virtual/input/input5 [ 107.037021][ T3580] tipc: Enabling of bearer rejected, failed to enable media [ 107.470323][ T57] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 107.530208][ T57] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 107.562709][ T57] usb 2-1: USB disconnect, device number 10 [ 108.318047][ T3598] loop9: detected capacity change from 0 to 7 [ 108.755814][ T3615] device syzkaller0 entered promiscuous mode [ 109.827235][ T3622] binder: binder_mmap: 3621 200000000000-200000003000 bad vm_flags failed -1 [ 109.920196][ T57] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 109.959814][ T3642] binder: 3631:3642 ioctl c0306201 200000004a40 returned -14 [ 110.610346][ T57] usb 2-1: device descriptor read/64, error -71 [ 110.945961][ T3659] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 111.071361][ T57] usb 2-1: device descriptor read/64, error -71 [ 111.100832][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 111.100853][ T30] audit: type=1326 audit(1762212900.624:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.130277][ T30] audit: type=1326 audit(1762212900.624:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.165328][ T30] audit: type=1326 audit(1762212900.624:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.218819][ T30] audit: type=1326 audit(1762212900.624:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.244047][ T30] audit: type=1326 audit(1762212900.624:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.268879][ T30] audit: type=1326 audit(1762212900.624:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.382373][ T30] audit: type=1326 audit(1762212900.634:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.408754][ T57] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 111.423779][ T30] audit: type=1326 audit(1762212900.634:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.450165][ T30] audit: type=1326 audit(1762212900.634:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.474154][ T30] audit: type=1326 audit(1762212900.634:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b10566c9 code=0x7ffc0000 [ 111.720157][ T57] usb 2-1: device descriptor read/64, error -71 [ 112.046200][ T3698] futex_wake_op: syz.4.1365 tries to shift op by -1; fix this program [ 112.270249][ T57] usb usb2-port1: attempt power cycle [ 112.690203][ T57] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 112.820449][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 112.980377][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 113.026884][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 113.050468][ T57] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.061067][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.078608][ T57] usb 2-1: config 0 descriptor?? [ 113.110505][ T3685] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.152805][ T57] hub 2-1:0.0: USB hub found [ 113.340248][ T57] hub 2-1:0.0: 1 port detected [ 114.372111][ T39] usb 2-1: USB disconnect, device number 13 [ 114.380315][ T57] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 114.429946][ T3753] KVM: debugfs: duplicate directory 3753-5 [ 114.570194][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.950925][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 115.080225][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.091213][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.101730][ T20] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 115.116073][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.128575][ T20] usb 4-1: config 0 descriptor?? [ 115.330845][ T39] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 115.580164][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 115.602945][ T20] holtek_mouse 0003:04D9:A081.0002: item fetching failed at offset 5/8 [ 115.616358][ T20] holtek_mouse 0003:04D9:A081.0002: hid parse failed: -22 [ 115.623898][ T20] holtek_mouse: probe of 0003:04D9:A081.0002 failed with error -22 [ 115.700210][ T39] usb 2-1: config 1 has an invalid interface number: 69 but max is 0 [ 115.708331][ T39] usb 2-1: config 1 has no interface number 0 [ 115.714559][ T39] usb 2-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 115.724477][ T39] usb 2-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.734740][ T39] usb 2-1: config 1 interface 69 has no altsetting 0 [ 115.797836][ T3790] APIC base relocation is unsupported by KVM [ 115.802980][ T20] usb 4-1: USB disconnect, device number 9 [ 115.900244][ T39] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 115.909403][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.918704][ T39] usb 2-1: Product: syz [ 115.923120][ T39] usb 2-1: Manufacturer: syz [ 115.927737][ T39] usb 2-1: SerialNumber: syz [ 115.950232][ T3773] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.957477][ T3773] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.291101][ T344] usb 2-1: USB disconnect, device number 14 [ 116.420185][ T20] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 116.580189][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.780296][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.791614][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 116.801353][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.812434][ T20] usb 3-1: config 0 descriptor?? [ 116.820144][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 116.950281][ T39] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.959020][ T39] usb 4-1: config 0 has no interface number 0 [ 116.965297][ T39] usb 4-1: config 0 interface 184 has no altsetting 0 [ 117.281894][ T20] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0 [ 117.330780][ T20] logitech-hidpp-device 0003:046D:C086.0003: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 117.487764][ T20] usb 3-1: USB disconnect, device number 9 [ 117.587891][ T338] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 117.595770][ T39] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.651415][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.659656][ T39] usb 4-1: Product: syz [ 117.663922][ T39] usb 4-1: Manufacturer: syz [ 117.668722][ T39] usb 4-1: SerialNumber: syz [ 117.684598][ T39] usb 4-1: config 0 descriptor?? [ 117.720860][ T39] smsc75xx v1.0.0 [ 117.950225][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 118.080337][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.091342][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.101185][ T338] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.110335][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.127267][ T338] usb 2-1: config 0 descriptor?? [ 118.191018][ T338] hub 2-1:0.0: USB hub found [ 118.410631][ T338] hub 2-1:0.0: 1 port detected [ 118.420563][ T39] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 118.543537][ T39] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.670225][ T338] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 118.676700][ T338] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 118.688241][ T3834] device wireguard0 entered promiscuous mode [ 118.780394][ T338] usbhid 2-1:0.0: can't add hid device: -71 [ 118.786412][ T338] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.820540][ T338] usb 2-1: USB disconnect, device number 15 [ 119.333908][ T3846] device bridge1 entered promiscuous mode [ 119.480530][ T39] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 119.511655][ T39] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 119.546618][ T39] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 119.579263][ T39] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 119.946496][ T39] usb 4-1: USB disconnect, device number 10 [ 120.780225][ T338] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 121.030210][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 121.320320][ T338] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 121.331897][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.340035][ T338] usb 2-1: Product: syz [ 121.344554][ T338] usb 2-1: Manufacturer: syz [ 121.349325][ T338] usb 2-1: SerialNumber: syz [ 121.357876][ T338] usb 2-1: config 0 descriptor?? [ 121.439854][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 121.439872][ T30] audit: type=1400 audit(1762212910.954:436): avc: denied { bind } for pid=3904 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.603950][ T3870] UDC core: couldn't find an available UDC or it's busy: -16 [ 121.611593][ T3870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.700894][ T3911] overlayfs: missing 'workdir' [ 121.722798][ T3911] overlayfs: failed to resolve './file1': -2 [ 121.920243][ T30] audit: type=1400 audit(1762212911.364:437): avc: denied { write } for pid=3869 comm="syz.1.1425" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.993304][ T3913] overlayfs: missing 'lowerdir' [ 121.997069][ T338] usb 2-1: USB disconnect, device number 16 [ 122.026244][ T3919] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1442'. [ 122.650174][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.815834][ T20] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 122.824590][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 122.837162][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 123.011444][ T6] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 123.019892][ T6] usb 3-1: config 0 has no interface number 0 [ 123.029228][ T6] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 123.039778][ T6] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.180208][ T20] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 123.189170][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.210250][ T6] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 123.226688][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.246547][ T6] usb 3-1: Product: syz [ 123.260228][ T6] usb 3-1: Manufacturer: syz [ 123.264893][ T6] usb 3-1: SerialNumber: syz [ 123.280241][ T20] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.289346][ T20] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.306460][ T20] usb 2-1: Manufacturer: syz [ 123.313559][ T6] usb 3-1: config 0 descriptor?? [ 123.324481][ T30] audit: type=1400 audit(1762212912.844:438): avc: denied { write } for pid=4006 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.325028][ T20] usb 2-1: config 0 descriptor?? [ 123.348726][ T3934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.698139][ T6] usb 2-1: USB disconnect, device number 17 [ 124.523445][ T338] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 124.770156][ T338] usb 2-1: Using ep0 maxpacket: 8 [ 124.890213][ T338] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 124.909758][ T338] usb 2-1: config 0 has no interface number 0 [ 124.932505][ T338] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 124.966982][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.999062][ T338] usb 2-1: config 0 descriptor?? [ 125.242647][ T57] usb 2-1: USB disconnect, device number 18 [ 125.388801][ T640] usb 3-1: USB disconnect, device number 10 [ 126.387300][ T30] audit: type=1400 audit(1762212915.904:439): avc: denied { map } for pid=4095 comm="syz.6.1515" path="socket:[30110]" dev="sockfs" ino=30110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.412780][ T30] audit: type=1400 audit(1762212915.934:440): avc: denied { read accept } for pid=4095 comm="syz.6.1515" path="socket:[30110]" dev="sockfs" ino=30110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.450171][ T57] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 126.960723][ T4113] overlayfs: statfs failed on './file0' [ 127.000232][ T57] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.009333][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.018517][ T57] usb 2-1: Product: syz [ 127.030211][ T57] usb 2-1: Manufacturer: syz [ 127.034875][ T57] usb 2-1: SerialNumber: syz [ 128.742080][ T30] audit: type=1400 audit(1762212918.264:441): avc: denied { write } for pid=4130 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.766027][ T57] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.780232][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.800428][ T30] audit: type=1400 audit(1762212918.324:442): avc: denied { read } for pid=4130 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.080214][ T57] usb 4-1: device descriptor read/64, error -71 [ 129.182882][ T338] usb 2-1: USB disconnect, device number 19 [ 129.282144][ T4147] xt_policy: output policy not valid in PREROUTING and INPUT [ 129.500162][ T57] usb 4-1: device descriptor read/64, error -71 [ 129.770169][ T57] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 130.000192][ T338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.040331][ T57] usb 4-1: device descriptor read/64, error -71 [ 130.250219][ T338] usb 3-1: Using ep0 maxpacket: 8 [ 130.551368][ T338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.640724][ T338] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.960042][ T338] usb 3-1: config 1 has no interface number 1 [ 131.020411][ T338] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.240299][ T338] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.255359][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.380195][ T338] usb 3-1: Product: syz [ 131.384565][ T338] usb 3-1: Manufacturer: syz [ 131.389193][ T338] usb 3-1: SerialNumber: syz [ 131.726687][ T389] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 132.000136][ T389] usb 2-1: device descriptor read/64, error -71 [ 132.110713][ T338] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 132.158866][ T338] usb 3-1: 2:1 : invalid channels 0 [ 132.186482][ T338] usb 3-1: USB disconnect, device number 11 [ 132.450164][ T389] usb 2-1: device descriptor read/64, error -71 [ 132.720225][ T389] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 132.770903][ T6] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.911468][ T30] audit: type=1400 audit(1762212922.434:443): avc: denied { bind } for pid=4224 comm="syz.6.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.931401][ T30] audit: type=1400 audit(1762212922.454:444): avc: denied { listen } for pid=4224 comm="syz.6.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.975479][ T30] audit: type=1400 audit(1762212922.474:445): avc: denied { accept } for pid=4224 comm="syz.6.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.058844][ T389] usb 2-1: device descriptor read/64, error -71 [ 133.310161][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 133.469111][ T4239] netlink: 'syz.6.1567': attribute type 12 has an invalid length. [ 133.671099][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 133.995510][ T6] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 134.082406][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.094386][ T6] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 134.103554][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.130454][ T6] usb 4-1: config 0 descriptor?? [ 134.375144][ T30] audit: type=1326 audit(1762212923.894:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.398723][ T30] audit: type=1326 audit(1762212923.894:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.426263][ T4242] usb 4-1: USB disconnect, device number 13 [ 134.432658][ T30] audit: type=1326 audit(1762212923.894:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.523078][ T30] audit: type=1326 audit(1762212923.894:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.546950][ T30] audit: type=1326 audit(1762212923.894:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.570524][ T30] audit: type=1326 audit(1762212923.894:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.598774][ T30] audit: type=1400 audit(1762212923.894:452): avc: denied { bind } for pid=4261 comm="syz.1.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.637789][ T4269] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1579'. [ 134.814518][ T30] audit: type=1326 audit(1762212923.894:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.859575][ T30] audit: type=1326 audit(1762212923.894:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 134.936348][ T30] audit: type=1326 audit(1762212923.894:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 136.650313][ T4242] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 136.920194][ T4242] usb 4-1: device descriptor read/64, error -71 [ 136.972126][ T4304] tipc: Enabling of bearer rejected, failed to enable media [ 137.300533][ T389] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 137.560132][ T389] usb 2-1: Using ep0 maxpacket: 8 [ 137.690192][ T389] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 137.730137][ T344] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.850188][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 137.859294][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.889685][ T389] usb 2-1: Product: syz [ 137.900124][ T4242] usb 4-1: device descriptor read/64, error -71 [ 137.902394][ T389] usb 2-1: Manufacturer: syz [ 137.928480][ T389] usb 2-1: SerialNumber: syz [ 137.944619][ T389] usb 2-1: config 0 descriptor?? [ 138.130201][ T344] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 138.138453][ T344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.150614][ T344] usb 3-1: config 0 has no interface number 0 [ 138.157289][ T344] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 138.167925][ T344] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.181390][ T4242] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 138.340286][ T344] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 138.349474][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.357563][ T344] usb 3-1: Product: syz [ 138.361776][ T344] usb 3-1: Manufacturer: syz [ 138.366393][ T344] usb 3-1: SerialNumber: syz [ 138.372133][ T344] usb 3-1: config 0 descriptor?? [ 138.450174][ T4242] usb 4-1: device descriptor read/64, error -71 [ 138.890334][ T4351] overlayfs: failed to clone upperpath [ 139.640242][ T4242] usb usb4-port1: attempt power cycle [ 139.650235][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.874612][ T4212] usb 3-1: USB disconnect, device number 12 [ 140.043969][ T344] usb 2-1: USB disconnect, device number 22 [ 140.051272][ T4242] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 140.220233][ T4242] usb 4-1: Using ep0 maxpacket: 8 [ 140.420180][ T4242] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 140.428596][ T4242] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.438841][ T4242] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.449166][ T4242] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.459627][ T4242] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.473797][ T4242] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.484068][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.361004][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 141.480613][ T633] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 141.598030][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 141.598046][ T30] audit: type=1400 audit(1762212931.114:468): avc: denied { ioctl } for pid=4414 comm="syz.4.1637" path="socket:[29320]" dev="sockfs" ino=29320 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.890600][ T633] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 141.921189][ T633] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 141.985853][ T633] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.019980][ T633] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 142.042193][ T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.052039][ T633] usb 3-1: config 0 descriptor?? [ 142.070221][ T4399] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.102476][ T4242] usb 4-1: USB disconnect, device number 16 [ 142.296346][ T4399] UDC core: couldn't find an available UDC or it's busy: -16 [ 142.323695][ T4399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.430452][ T633] usbhid 3-1:0.0: can't add hid device: -71 [ 142.437303][ T633] usbhid: probe of 3-1:0.0 failed with error -71 [ 142.459820][ T633] usb 3-1: USB disconnect, device number 13 [ 142.980296][ T633] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.038326][ T4460] hub 1-0:1.0: USB hub found [ 143.043290][ T4460] hub 1-0:1.0: 1 port detected [ 143.493657][ T633] usb 3-1: Using ep0 maxpacket: 32 [ 143.610210][ T633] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 143.623107][ T633] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.630015][ T633] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 143.639314][ T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.654787][ T633] usb 3-1: config 0 descriptor?? [ 143.700830][ T633] hub 3-1:0.0: USB hub found [ 143.880335][ T633] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.103651][ T633] usbhid 3-1:0.0: can't add hid device: -71 [ 144.141155][ T4492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1665'. [ 144.151628][ T633] usbhid: probe of 3-1:0.0 failed with error -71 [ 144.237569][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.250719][ T633] usb 3-1: USB disconnect, device number 14 [ 144.935215][ T4510] input: syz0 as /devices/virtual/input/input6 [ 144.981083][ T30] audit: type=1400 audit(1762212934.504:469): avc: denied { read } for pid=86 comm="acpid" name="mouse0" dev="devtmpfs" ino=1445 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 145.020189][ T30] audit: type=1400 audit(1762212934.504:470): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=1445 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 145.043089][ T30] audit: type=1400 audit(1762212934.504:471): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=1445 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 146.293338][ T30] audit: type=1400 audit(1762212935.814:472): avc: denied { load_policy } for pid=4533 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 146.324158][ T4534] SELinux: failed to load policy [ 146.399092][ T4549] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1688'. [ 146.490144][ T344] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 146.920930][ T4212] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 147.054237][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 147.230226][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.241312][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.251142][ T344] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 147.260259][ T344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.269224][ T344] usb 2-1: config 0 descriptor?? [ 147.300175][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 147.310427][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.320353][ T4212] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.335102][ T4212] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.00 [ 147.344231][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.353671][ T4212] usb 3-1: config 0 descriptor?? [ 147.407820][ T4564] overlayfs: failed to clone upperpath [ 147.440298][ T20] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.448554][ T20] usb 4-1: config 0 has no interface number 0 [ 147.455212][ T20] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 147.466160][ T20] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 147.477275][ T20] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.490708][ T20] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.499781][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.509083][ T20] usb 4-1: config 0 descriptor?? [ 147.757785][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.765155][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.091611][ T4212] hid-generic 0003:1B1C:0A53.0004: item fetching failed at offset 7/8 [ 148.106436][ T4212] hid-generic: probe of 0003:1B1C:0A53.0004 failed with error -22 [ 148.225171][ T344] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 148.313099][ T6] usb 4-1: USB disconnect, device number 17 [ 148.327103][ T4212] usb 3-1: USB disconnect, device number 15 [ 148.340217][ T344] isku 0003:1E7D:319C.0005: couldn't init struct isku_device [ 148.347796][ T344] isku 0003:1E7D:319C.0005: couldn't install keyboard [ 148.355687][ T344] isku: probe of 0003:1E7D:319C.0005 failed with error -71 [ 148.364326][ T344] usb 2-1: USB disconnect, device number 23 [ 148.382817][ T4595] fido_id[4595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 148.545876][ T30] audit: type=1400 audit(1762212938.064:473): avc: denied { read } for pid=4596 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.820232][ T4212] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.014876][ T4632] tipc: Enabling of bearer rejected, failed to enable media [ 151.160255][ T4212] usb 4-1: Using ep0 maxpacket: 16 [ 151.560831][ T4212] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 151.740345][ T4212] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.750026][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.759094][ T4212] usb 4-1: Product: syz [ 151.856923][ T4212] usb 4-1: Manufacturer: syz [ 151.884970][ T4212] usb 4-1: SerialNumber: syz [ 151.934575][ T4212] usb 4-1: config 0 descriptor?? [ 152.175141][ T4212] usb 4-1: USB disconnect, device number 18 [ 152.306256][ T30] audit: type=1400 audit(1762212941.824:474): avc: denied { connect } for pid=4665 comm="syz.4.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.451037][ T4674] hub 2-0:1.0: USB hub found [ 152.456002][ T4674] hub 2-0:1.0: 1 port detected [ 153.247252][ T30] audit: type=1400 audit(1762212942.764:475): avc: denied { view } for pid=4684 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.481856][ T4695] bridge0: port 4(gretap0) entered blocking state [ 153.488441][ T4695] bridge0: port 4(gretap0) entered disabled state [ 153.507155][ T4695] device gretap0 entered promiscuous mode [ 153.515058][ T4695] bridge0: port 4(gretap0) entered blocking state [ 153.521545][ T4695] bridge0: port 4(gretap0) entered forwarding state [ 154.435179][ T4704] hub 1-0:1.0: USB hub found [ 154.440804][ T4704] hub 1-0:1.0: 1 port detected [ 154.657303][ T4722] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1752'. [ 156.470503][ T26] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 156.708671][ T4784] overlayfs: missing 'workdir' [ 156.726490][ T4784] overlayfs: failed to clone upperpath [ 156.980247][ T26] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.995506][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.002628][ T26] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 157.012715][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.024541][ T26] usb 3-1: config 0 descriptor?? [ 157.671493][ T26] hid-generic 0003:11FF:3331.0006: item fetching failed at offset 6/7 [ 157.682244][ T26] hid-generic: probe of 0003:11FF:3331.0006 failed with error -22 [ 158.120142][ T6] usb 3-1: USB disconnect, device number 16 [ 158.277263][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.284677][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.292662][ T4826] device bridge_slave_0 entered promiscuous mode [ 158.299845][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.307188][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.314957][ T4826] device bridge_slave_1 entered promiscuous mode [ 158.397188][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.404318][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.411667][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.418725][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.445523][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.460919][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.470828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.488650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.500171][ T344] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 158.521755][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.530697][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.537767][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.546083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.554881][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.561990][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.588336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.605591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.654345][ T4846] hub 1-0:1.0: USB hub found [ 158.666080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.676540][ T4846] hub 1-0:1.0: 1 port detected [ 158.745744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.754892][ T344] usb 2-1: Using ep0 maxpacket: 8 [ 158.764068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.775888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.788454][ T4826] device veth0_vlan entered promiscuous mode [ 158.834421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.847648][ T4826] device veth1_macvtap entered promiscuous mode [ 158.867116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.929465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.040239][ T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.049408][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.057592][ T344] usb 2-1: Product: syz [ 159.061836][ T344] usb 2-1: Manufacturer: syz [ 159.066496][ T344] usb 2-1: SerialNumber: syz [ 159.073116][ T332] device veth1_macvtap left promiscuous mode [ 159.079326][ T332] device veth0_vlan left promiscuous mode [ 159.610673][ T344] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.648040][ T30] audit: type=1400 audit(1762212949.164:476): avc: denied { read write } for pid=4824 comm="syz.1.1791" name="lp0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 159.672726][ T30] audit: type=1400 audit(1762212949.164:477): avc: denied { open } for pid=4824 comm="syz.1.1791" path="/dev/usb/lp0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 160.957569][ T633] usb 2-1: USB disconnect, device number 24 [ 160.971661][ T633] usblp0: removed [ 162.039283][ T4914] binder: 4910:4914 ioctl c0306201 200000000500 returned -14 [ 162.567873][ T4955] netlink: 'syz.6.1827': attribute type 16 has an invalid length. [ 162.575824][ T4955] netlink: 'syz.6.1827': attribute type 3 has an invalid length. [ 162.583701][ T4955] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.1827'. [ 162.740219][ T633] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 163.090264][ T633] usb 2-1: Using ep0 maxpacket: 8 [ 163.890261][ T633] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.900681][ T633] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.025627][ T30] audit: type=1400 audit(1762212953.544:478): avc: denied { ioctl } for pid=4988 comm="syz.4.1845" path="socket:[32570]" dev="sockfs" ino=32570 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.090173][ T633] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 164.099354][ T633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.107918][ T633] usb 2-1: Product: syz [ 164.112377][ T633] usb 2-1: Manufacturer: syz [ 164.117214][ T633] usb 2-1: SerialNumber: syz [ 164.122522][ T633] usb 2-1: config 0 descriptor?? [ 164.150183][ T344] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 164.290344][ T787] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 164.510960][ T4242] usb 2-1: USB disconnect, device number 25 [ 164.740309][ T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.751438][ T344] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 164.760800][ T344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.769736][ T344] usb 4-1: config 0 descriptor?? [ 164.770900][ T787] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.785900][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 164.890233][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.899433][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.907511][ T787] usb 3-1: SerialNumber: syz [ 164.950570][ T787] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 164.958499][ T787] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 164.964996][ T787] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 165.156558][ T787] usb 3-1: USB disconnect, device number 17 [ 165.550157][ T389] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 165.591254][ T344] hid (null): unknown global tag 0xd [ 165.597457][ T344] hid-generic 0003:1532:010D.0007: unknown global tag 0xd [ 165.604845][ T344] hid-generic 0003:1532:010D.0007: item 0 1 1 13 parsing failed [ 165.612736][ T344] hid-generic: probe of 0003:1532:010D.0007 failed with error -22 [ 165.621713][ T344] usb 4-1: USB disconnect, device number 19 [ 165.670200][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.820217][ T389] usb 2-1: device descriptor read/64, error -71 [ 166.240215][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.254997][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.283954][ T6] usb 5-1: Product: syz [ 166.297020][ T6] usb 5-1: Manufacturer: syz [ 166.319572][ T6] usb 5-1: SerialNumber: syz [ 166.359089][ T389] usb 2-1: device descriptor read/64, error -71 [ 166.630125][ T389] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 166.920146][ T389] usb 2-1: device descriptor read/64, error -71 [ 167.092372][ T30] audit: type=1400 audit(1762212956.614:479): avc: denied { getopt } for pid=5053 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.409791][ T5062] input: syz1 as /devices/virtual/input/input7 [ 167.470657][ T389] usb 2-1: device descriptor read/64, error -71 [ 167.590536][ T389] usb usb2-port1: attempt power cycle [ 167.837642][ T5071] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1875' sets config #1 [ 167.960358][ T20] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 168.026709][ T5083] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 168.242823][ T30] audit: type=1400 audit(1762212957.544:480): avc: denied { read append } for pid=5076 comm="syz.2.1878" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.242923][ T389] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 168.289578][ T787] usb 5-1: USB disconnect, device number 3 [ 168.468799][ T389] usb 2-1: device descriptor read/8, error -71 [ 168.971541][ T389] usb 2-1: device descriptor read/8, error -71 [ 169.142010][ T20] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.152286][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.161414][ T20] usb 4-1: Product: syz [ 169.166680][ T20] usb 4-1: Manufacturer: syz [ 169.172424][ T20] usb 4-1: SerialNumber: syz [ 169.281139][ T20] usb 4-1: config 0 descriptor?? [ 171.548161][ T5148] device wireguard0 entered promiscuous mode [ 171.571054][ T787] usb 4-1: USB disconnect, device number 20 [ 171.949125][ T30] audit: type=1400 audit(1762212961.464:481): avc: denied { mount } for pid=5164 comm="syz.4.1908" name="/" dev="ramfs" ino=33016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 172.137889][ T389] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 172.178266][ T30] audit: type=1400 audit(1762212961.694:482): avc: denied { unmount } for pid=4826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 172.571039][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.711686][ T389] usb 2-1: not running at top speed; connect to a high speed hub [ 172.983670][ T5175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 173.000441][ T389] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 173.021122][ T389] usb 2-1: config 129 has no interface number 0 [ 173.063300][ T389] usb 2-1: config 129 interface 28 altsetting 250 has an invalid endpoint with address 0xFD, skipping [ 173.084622][ T30] audit: type=1400 audit(1762212962.604:483): avc: denied { create } for pid=5178 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.092500][ T389] usb 2-1: config 129 interface 28 altsetting 250 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 173.198189][ T389] usb 2-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.245446][ T389] usb 2-1: config 129 interface 28 has no altsetting 0 [ 173.440667][ T389] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 173.456177][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.470161][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.477002][ T389] usb 2-1: Product: syz [ 173.492604][ T389] usb 2-1: Manufacturer: syz [ 173.507956][ T389] usb 2-1: SerialNumber: syz [ 173.540310][ T5155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.750120][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 173.841962][ T389] usb 2-1: USB disconnect, device number 30 [ 173.880228][ T6] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 173.888583][ T6] usb 5-1: config 4 has an invalid interface number: 102 but max is 0 [ 173.896915][ T6] usb 5-1: config 4 has no interface number 0 [ 173.903066][ T6] usb 5-1: config 4 interface 102 altsetting 0 has an invalid endpoint with address 0x9C, skipping [ 173.913946][ T6] usb 5-1: config 4 interface 102 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 255 [ 174.000221][ T6] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 174.009349][ T6] usb 5-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 174.017525][ T6] usb 5-1: Manufacturer: syz [ 174.040206][ T5183] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 174.047259][ T5183] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 174.060680][ T6] ums-jumpshot 5-1:4.102: USB Mass Storage device detected [ 174.068914][ T6] ums-jumpshot 5-1:4.102: Quirks match for vid 05dc pid 0001: 2 [ 174.263957][ T6] usb 5-1: USB disconnect, device number 4 [ 175.231271][ T5221] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1927'. [ 176.439227][ T5253] capability: warning: `syz.4.1938' uses deprecated v2 capabilities in a way that may be insecure [ 176.600831][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.162526][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 178.230904][ T344] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 178.296250][ T6] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 178.304609][ T6] usb 3-1: config 0 has no interface number 0 [ 178.310959][ T6] usb 3-1: config 0 interface 196 has no altsetting 0 [ 178.585823][ T389] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.830165][ T389] usb 5-1: Using ep0 maxpacket: 32 [ 178.860380][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 178.869671][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.878019][ T6] usb 3-1: Product: syz [ 178.884146][ T6] usb 3-1: Manufacturer: syz [ 178.888892][ T6] usb 3-1: SerialNumber: syz [ 178.897219][ T6] usb 3-1: config 0 descriptor?? [ 178.990289][ T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.130433][ T389] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 179.139701][ T389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.155023][ T389] usb 5-1: Product: syz [ 179.159569][ T389] usb 5-1: Manufacturer: syz [ 179.164324][ T389] usb 5-1: SerialNumber: syz [ 179.173716][ T389] usb 5-1: config 0 descriptor?? [ 179.203021][ T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.216324][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.224904][ T6] ipheth 3-1:0.196: Unable to find endpoints [ 179.238682][ T344] usb 2-1: Product: syz [ 179.242968][ T344] usb 2-1: Manufacturer: syz [ 179.244701][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1952'. [ 179.247584][ T344] usb 2-1: SerialNumber: syz [ 179.431670][ T6] usb 3-1: USB disconnect, device number 18 [ 180.459500][ T30] audit: type=1400 audit(1762212969.974:484): avc: denied { validate_trans } for pid=5304 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.690174][ T39] usb 5-1: USB disconnect, device number 5 [ 180.890354][ T344] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 180.897360][ T344] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 180.940298][ T344] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 181.103690][ T344] cdc_ncm 2-1:1.0: setting tx_max = 136 [ 181.121677][ T344] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 181.140181][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.362771][ T344] usb 2-1: USB disconnect, device number 31 [ 181.385279][ T30] audit: type=1400 audit(1762212970.904:485): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 181.419370][ T344] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 181.529329][ T30] audit: type=1400 audit(1762212970.934:486): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.819551][ T30] audit: type=1400 audit(1762212970.934:487): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=7953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.843615][ T30] audit: type=1400 audit(1762212970.934:488): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.877900][ T30] audit: type=1400 audit(1762212970.934:489): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.912904][ T30] audit: type=1400 audit(1762212971.324:490): avc: denied { read } for pid=5342 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.939735][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.961350][ T39] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.980127][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.001122][ T30] audit: type=1400 audit(1762212971.324:491): avc: denied { open } for pid=5342 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.028961][ T39] usb 5-1: config 0 descriptor?? [ 182.051349][ T30] audit: type=1400 audit(1762212971.324:492): avc: denied { getattr } for pid=5342 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.077081][ T30] audit: type=1400 audit(1762212971.424:493): avc: denied { execute } for pid=5348 comm="syz.6.1969" path="/330/cpuacct.usage_percpu" dev="tmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.100136][ T20] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 182.680279][ T20] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 182.689842][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.698206][ T20] usb 3-1: Product: syz [ 182.702740][ T20] usb 3-1: Manufacturer: syz [ 182.707606][ T20] usb 3-1: SerialNumber: syz [ 183.126101][ T5420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1987'. [ 183.305545][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 183.315455][ T5423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'. [ 183.402259][ T20] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 183.409044][ T39] usb 5-1: USB disconnect, device number 6 [ 183.543278][ T5439] hub 1-0:1.0: USB hub found [ 183.623787][ T5439] hub 1-0:1.0: 1 port detected [ 183.771643][ T26] usb 3-1: USB disconnect, device number 19 [ 183.820153][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.854172][ T5446] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 183.862276][ T5446] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 183.944820][ T5457] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1996'. [ 184.060257][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 184.180972][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.196376][ T39] usb 5-1: config 0 has no interfaces? [ 184.219472][ T39] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 184.244289][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.261808][ T39] usb 5-1: config 0 descriptor?? [ 184.333390][ T5490] hub 8-0:1.0: USB hub found [ 184.338191][ T5490] hub 8-0:1.0: 1 port detected [ 184.428571][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 184.559239][ T20] usb 5-1: USB disconnect, device number 7 [ 186.002683][ T5499] hub 1-0:1.0: USB hub found [ 186.024313][ T5499] hub 1-0:1.0: 1 port detected [ 187.272483][ T5535] syz.4.2021 uses obsolete (PF_INET,SOCK_PACKET) [ 187.680161][ T344] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.023914][ T5558] hub 1-0:1.0: USB hub found [ 188.029133][ T5558] hub 1-0:1.0: 1 port detected [ 188.090261][ T633] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 188.090300][ T26] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 188.480431][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.491449][ T633] usb 5-1: device descriptor read/64, error -71 [ 188.500194][ T787] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.530187][ T344] usb 3-1: Using ep0 maxpacket: 32 [ 188.650273][ T344] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 188.658550][ T344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.668924][ T344] usb 3-1: config 0 has no interface number 0 [ 188.680264][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.689397][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.697432][ T26] usb 2-1: Product: syz [ 188.701782][ T26] usb 2-1: Manufacturer: syz [ 188.706380][ T26] usb 2-1: SerialNumber: syz [ 188.750240][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 188.860212][ T344] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=3b.9f [ 188.869398][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.877445][ T344] usb 3-1: Product: syz [ 188.880208][ T787] usb 4-1: config 4 has an invalid interface number: 81 but max is 0 [ 188.881695][ T344] usb 3-1: Manufacturer: syz [ 188.889807][ T787] usb 4-1: config 4 has no interface number 0 [ 188.894380][ T344] usb 3-1: SerialNumber: syz [ 188.900738][ T633] usb 5-1: device descriptor read/64, error -71 [ 188.910282][ T344] usb 3-1: config 0 descriptor?? [ 189.105631][ T787] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=67.e2 [ 189.115192][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.123625][ T787] usb 4-1: Product: syz [ 189.127806][ T787] usb 4-1: Manufacturer: syz [ 189.132424][ T787] usb 4-1: SerialNumber: syz [ 189.158502][ T344] usb 3-1: USB disconnect, device number 20 [ 189.180291][ T633] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 189.453592][ T4242] usb 4-1: USB disconnect, device number 21 [ 189.460215][ T633] usb 5-1: device descriptor read/64, error -71 [ 189.620196][ T26] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 189.660242][ T26] cdc_ncm 2-1:1.0: bind() failure [ 189.666991][ T26] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 189.674009][ T26] cdc_ncm 2-1:1.1: bind() failure [ 189.689854][ T26] usb 2-1: USB disconnect, device number 32 [ 189.850198][ T633] usb 5-1: device descriptor read/64, error -71 [ 189.988312][ T633] usb usb5-port1: attempt power cycle [ 190.400209][ T633] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 190.590185][ T633] usb 5-1: device descriptor read/8, error -71 [ 190.830570][ T633] usb 5-1: device descriptor read/8, error -71 [ 190.840588][ T26] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 190.955088][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 190.955103][ T30] audit: type=1400 audit(1762212980.474:507): avc: denied { bind } for pid=5610 comm="syz.6.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.090144][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 191.672847][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.724579][ T26] usb 4-1: config 0 has no interface number 0 [ 192.110393][ T26] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 192.119527][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.127716][ T26] usb 4-1: Product: syz [ 192.132002][ T26] usb 4-1: Manufacturer: syz [ 192.136742][ T26] usb 4-1: SerialNumber: syz [ 192.275070][ T26] usb 4-1: config 0 descriptor?? [ 192.290334][ T633] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 192.460219][ T633] usb 5-1: device descriptor read/8, error -71 [ 192.760168][ T633] usb 5-1: device descriptor read/8, error -71 [ 192.948283][ T633] usb usb5-port1: unable to enumerate USB device [ 193.572730][ T633] usb 4-1: USB disconnect, device number 22 [ 193.592890][ T5649] device syzkaller0 entered promiscuous mode [ 193.962709][ T5664] overlayfs: failed to clone lowerpath [ 194.002991][ T5664] overlayfs: failed to clone upperpath [ 194.344178][ T5673] netlink: 'syz.2.2068': attribute type 16 has an invalid length. [ 194.352231][ T5673] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2068'. [ 194.989942][ T344] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 195.137816][ T5684] device syzkaller0 entered promiscuous mode [ 195.195649][ T30] audit: type=1326 audit(1762212984.714:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.233029][ T30] audit: type=1326 audit(1762212984.714:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.257782][ T30] audit: type=1326 audit(1762212984.714:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.282379][ T30] audit: type=1326 audit(1762212984.714:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.307034][ T30] audit: type=1326 audit(1762212984.724:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.331798][ T30] audit: type=1326 audit(1762212984.724:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.355682][ T30] audit: type=1326 audit(1762212984.724:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.379503][ T30] audit: type=1326 audit(1762212984.724:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.403346][ T30] audit: type=1326 audit(1762212984.724:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4d5a06c9 code=0x7ffc0000 [ 195.499926][ T20] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 195.519976][ T4242] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 195.630075][ T344] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 195.639781][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.648580][ T344] usb 4-1: Product: syz [ 195.653489][ T344] usb 4-1: Manufacturer: syz [ 195.658143][ T344] usb 4-1: SerialNumber: syz [ 195.675505][ T344] usb 4-1: config 0 descriptor?? [ 195.739975][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 195.760044][ T4242] usb 3-1: Using ep0 maxpacket: 16 [ 195.859998][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 195.879982][ T4242] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 195.888482][ T4242] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.896897][ T4242] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.905297][ T4242] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.913806][ T4242] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.929174][ T4242] usb 3-1: config 0 has no interface number 0 [ 195.935572][ T4242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 195.946843][ T4242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 195.957061][ T4242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.967223][ T4242] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.980557][ T4242] usb 3-1: config 0 interface 125 has no altsetting 0 [ 195.987356][ T4242] usb 3-1: config 0 interface 125 has no altsetting 2 [ 195.994682][ T6] usb 4-1: USB disconnect, device number 23 [ 196.040075][ T20] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.049343][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.057747][ T20] usb 2-1: Product: syz [ 196.062211][ T20] usb 2-1: Manufacturer: syz [ 196.066834][ T20] usb 2-1: SerialNumber: syz [ 196.076454][ T20] usb 2-1: config 0 descriptor?? [ 196.149999][ T4242] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 196.159372][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.167659][ T4242] usb 3-1: Product: syz [ 196.172254][ T4242] usb 3-1: Manufacturer: syz [ 196.176869][ T4242] usb 3-1: SerialNumber: syz [ 196.186414][ T4242] usb 3-1: config 0 descriptor?? [ 196.461465][ T4242] usb 3-1: USB disconnect, device number 21 [ 196.584393][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 196.584408][ T30] audit: type=1326 audit(1762212986.104:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.6.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ab4b36c9 code=0x7ffc0000 [ 196.614363][ T30] audit: type=1326 audit(1762212986.104:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.6.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ab4b36c9 code=0x7ffc0000 [ 196.638544][ T30] audit: type=1326 audit(1762212986.114:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.6.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f16ab4b36c9 code=0x7ffc0000 [ 196.662488][ T30] audit: type=1326 audit(1762212986.114:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.6.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ab4b36c9 code=0x7ffc0000 [ 196.687320][ T30] audit: type=1326 audit(1762212986.114:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.6.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ab4b36c9 code=0x7ffc0000 [ 196.779854][ T633] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 197.220408][ T5745] input: syz0 as /devices/virtual/input/input9 [ 197.344328][ T30] audit: type=1400 audit(1762212986.864:533): avc: denied { mounton } for pid=5747 comm="syz.4.2100" path="/51/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 197.380027][ T633] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.384191][ T30] audit: type=1400 audit(1762212986.904:534): avc: denied { unmount } for pid=4826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 197.428927][ T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.464760][ T633] usb 4-1: Product: syz [ 197.471960][ T5751] device syzkaller0 entered promiscuous mode [ 197.486394][ T633] usb 4-1: Manufacturer: syz [ 197.500714][ T633] usb 4-1: SerialNumber: syz [ 197.503153][ T6] usb 2-1: USB disconnect, device number 33 [ 197.518882][ T633] usb 4-1: config 0 descriptor?? [ 198.374772][ T30] audit: type=1400 audit(1762212987.894:535): avc: denied { create } for pid=5766 comm="syz.2.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.522590][ T5771] block device autoloading is deprecated and will be removed. [ 198.530369][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.605550][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 198.908231][ T5776] tipc: Started in network mode [ 198.926681][ T5776] tipc: Node identity 0a6bb5ac8771, cluster identity 4711 [ 198.954386][ T5776] tipc: Enabled bearer , priority 0 [ 198.979508][ T5778] device syzkaller0 entered promiscuous mode [ 199.003556][ T6] usb 4-1: USB disconnect, device number 24 [ 199.061957][ T5776] tipc: Resetting bearer [ 199.087720][ T5775] tipc: Resetting bearer [ 199.104816][ T5775] tipc: Disabling bearer [ 200.353896][ T5787] device syzkaller0 entered promiscuous mode [ 200.591403][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2116'. [ 200.600659][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2116'. [ 200.876701][ T5817] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2123'. [ 200.959738][ T389] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.199610][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 201.320171][ T389] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 201.374752][ T389] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 201.674789][ T389] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.692467][ T389] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 201.837428][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.949940][ T389] usb 3-1: config 0 descriptor?? [ 202.214085][ T5833] device syzkaller0 entered promiscuous mode [ 202.431624][ T389] hid-generic 0003:258A:0033.0008: hidraw0: USB HID vf4.f6 Device [HID 258a:0033] on usb-dummy_hcd.2-1/input0 [ 202.551982][ T5846] tipc: Enabling of bearer rejected, failed to enable media [ 202.804837][ T389] usb 3-1: USB disconnect, device number 22 [ 203.015556][ T5863] device syzkaller0 entered promiscuous mode [ 203.799300][ T30] audit: type=1400 audit(1762212993.314:536): avc: denied { relabelfrom } for pid=5873 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 203.831107][ T30] audit: type=1400 audit(1762212993.344:537): avc: denied { relabelto } for pid=5873 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 203.859639][ T5884] syz.4.2145[5884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.859889][ T5884] syz.4.2145[5884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.872966][ T30] audit: type=1400 audit(1762212993.384:538): avc: denied { read } for pid=5875 comm="syz.1.2144" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 203.916997][ T30] audit: type=1400 audit(1762212993.384:539): avc: denied { open } for pid=5875 comm="syz.1.2144" path="/264/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 203.986470][ T30] audit: type=1400 audit(1762212993.384:540): avc: denied { module_request } for pid=5875 comm="syz.1.2144" kmod="block-major-0-2306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.009704][ T30] audit: type=1400 audit(1762212993.464:541): avc: denied { read } for pid=5886 comm="syz.1.2148" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.033847][ T30] audit: type=1400 audit(1762212993.464:542): avc: denied { open } for pid=5886 comm="syz.1.2148" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.145274][ T5894] device syzkaller0 entered promiscuous mode [ 204.852694][ T30] audit: type=1400 audit(1762212994.374:543): avc: denied { read write } for pid=5912 comm="syz.1.2156" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.878363][ T30] audit: type=1400 audit(1762212994.404:544): avc: denied { open } for pid=5912 comm="syz.1.2156" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.902067][ T30] audit: type=1400 audit(1762212994.404:545): avc: denied { ioctl } for pid=5912 comm="syz.1.2156" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.114461][ T5920] overlayfs: failed to clone upperpath [ 205.139394][ T6] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 205.819468][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.830608][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.841703][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.851566][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.949558][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.959449][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.967875][ T6] usb 2-1: Manufacturer: syz [ 205.997413][ T6] usb 2-1: config 0 descriptor?? [ 206.655498][ T6] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 206.662922][ T6] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 206.673392][ T6] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 206.879337][ T389] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 207.163422][ T26] usb 2-1: USB disconnect, device number 34 [ 207.399331][ T389] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.408262][ T389] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.419111][ T389] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.428828][ T389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.440387][ T389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.589533][ T389] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.598801][ T389] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.607516][ T389] usb 3-1: Product: syz [ 207.612126][ T389] usb 3-1: Manufacturer: syz [ 207.672868][ T389] cdc_wdm 3-1:1.0: skipping garbage [ 207.678351][ T389] cdc_wdm 3-1:1.0: skipping garbage [ 207.692985][ T389] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 208.049287][ T389] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 208.419222][ T389] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.429457][ T389] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.438537][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.450715][ T389] usb 4-1: config 0 descriptor?? [ 209.422220][ T6030] netlink: 'syz.4.2197': attribute type 6 has an invalid length. [ 209.622927][ T26] usb 3-1: USB disconnect, device number 23 [ 210.630463][ T6049] hub 1-0:1.0: USB hub found [ 210.637573][ T633] usb 4-1: USB disconnect, device number 25 [ 210.936988][ T6049] hub 1-0:1.0: 1 port detected [ 210.969105][ T26] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 211.179362][ T389] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 211.284354][ T6063] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.343942][ T6063] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 211.379761][ T6063] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 211.389018][ T6063] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 211.400354][ T6063] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 211.409838][ T633] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 211.410958][ T6063] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 211.429695][ T26] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.438702][ T26] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.439993][ T6063] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 211.460269][ T26] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.467515][ T6063] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 211.486627][ T6063] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 211.500038][ T389] usb 2-1: device descriptor read/64, error -71 [ 211.511330][ T6063] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 211.559843][ T26] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.575204][ T26] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.622697][ T26] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.699063][ T633] usb 4-1: Using ep0 maxpacket: 32 [ 211.759257][ T26] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.769995][ T26] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.805855][ T26] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.819122][ T633] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 211.831712][ T633] usb 4-1: config 0 has no interface number 0 [ 211.979689][ T389] usb 2-1: device descriptor read/64, error -71 [ 212.159047][ T633] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 212.171458][ T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.180180][ T633] usb 4-1: Product: syz [ 212.184445][ T633] usb 4-1: Manufacturer: syz [ 212.189083][ T633] usb 4-1: SerialNumber: syz [ 212.194413][ T633] usb 4-1: config 0 descriptor?? [ 212.239136][ T26] usb 3-1: string descriptor 0 read error: -22 [ 212.245392][ T26] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.254507][ T389] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 212.262680][ T633] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 212.270826][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.429024][ T633] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.526679][ T4242] usb 3-1: USB disconnect, device number 24 [ 212.538964][ T389] usb 2-1: device descriptor read/64, error -71 [ 212.929302][ T389] usb 2-1: device descriptor read/64, error -71 [ 212.969074][ T633] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 212.978509][ T633] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 212.987300][ T633] usb 5-1: Product: syz [ 212.991623][ T633] usb 5-1: Manufacturer: syz [ 212.996300][ T633] usb 5-1: SerialNumber: syz [ 213.006185][ T633] usb 5-1: config 0 descriptor?? [ 213.049208][ T389] usb usb2-port1: attempt power cycle [ 213.263220][ T4242] usb 5-1: USB disconnect, device number 12 [ 213.458955][ T389] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 213.738922][ T389] usb 2-1: device descriptor read/8, error -71 [ 213.968575][ T4242] usb 4-1: USB disconnect, device number 26 [ 213.980317][ T389] usb 2-1: device descriptor read/8, error -71 [ 214.036800][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 214.036826][ T30] audit: type=1400 audit(1762213003.555:551): avc: denied { write } for pid=6099 comm="syz.4.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.164366][ T30] audit: type=1400 audit(1762213003.555:552): avc: denied { nlmsg_write } for pid=6099 comm="syz.4.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.459290][ T6114] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 215.221471][ T6132] syz.2.2233[6132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.221561][ T6132] syz.2.2233[6132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.304812][ T389] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 215.488865][ T389] usb 2-1: device descriptor read/8, error -71 [ 215.708900][ T4242] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 215.809253][ T389] usb 2-1: device descriptor read/8, error -71 [ 215.825717][ T344] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 215.947109][ T389] usb usb2-port1: unable to enumerate USB device [ 215.992639][ T6161] tipc: Started in network mode [ 215.997617][ T6161] tipc: Node identity ac14140f, cluster identity 4711 [ 216.004883][ T6161] tipc: New replicast peer: 255.255.255.255 [ 216.012000][ T6161] tipc: Enabled bearer , priority 10 [ 216.174124][ T4242] usb 5-1: device descriptor read/64, error -71 [ 216.538785][ T344] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.548062][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.556194][ T344] usb 3-1: Product: syz [ 216.560539][ T344] usb 3-1: Manufacturer: syz [ 216.565304][ T344] usb 3-1: SerialNumber: syz [ 216.569985][ T4242] usb 5-1: device descriptor read/64, error -71 [ 216.599542][ T344] usb 3-1: config 0 descriptor?? [ 216.619404][ T6163] device syzkaller0 entered promiscuous mode [ 216.838260][ T6169] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 216.918456][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2248'. [ 216.939958][ T4242] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 217.008762][ T389] tipc: Node number set to 2886997007 [ 217.439723][ T4242] usb 5-1: device descriptor read/64, error -71 [ 218.036897][ T389] usb 3-1: USB disconnect, device number 25 [ 218.226981][ T6187] input: syz0 as /devices/virtual/input/input10 [ 218.688679][ T389] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 218.707265][ T6199] netlink: 'syz.4.2252': attribute type 12 has an invalid length. [ 218.785403][ T6203] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 218.798603][ T6203] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 218.812843][ T633] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 219.102838][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2260'. [ 219.114505][ T389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.238881][ T633] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 219.271167][ T633] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.289043][ T389] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.313404][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.328946][ T633] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 219.368244][ T389] usb 3-1: Product: syz [ 219.390533][ T389] usb 3-1: Manufacturer: syz [ 219.414046][ T389] usb 3-1: SerialNumber: syz [ 219.425256][ T633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.461642][ T633] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 219.490131][ T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.556104][ T633] usb 2-1: config 0 descriptor?? [ 220.029878][ T6213] input: syz1 as /devices/virtual/input/input11 [ 220.239036][ T389] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 220.245563][ T389] cdc_ncm 3-1:1.0: bind() failure [ 220.523124][ T389] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 220.530303][ T389] cdc_ncm 3-1:1.1: bind() failure [ 220.583004][ T30] audit: type=1400 audit(1762213010.105:553): avc: denied { map } for pid=6189 comm="syz.2.2255" path="socket:[35836]" dev="sockfs" ino=35836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 220.761557][ T4212] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 220.822651][ T633] hid-generic 0003:044E:120C.000A: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 221.024965][ T344] usb 2-1: USB disconnect, device number 39 [ 221.038511][ T4212] usb 4-1: device descriptor read/64, error -71 [ 221.428523][ T4212] usb 4-1: device descriptor read/64, error -71 [ 221.698449][ T4212] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 221.850057][ T344] usb 3-1: USB disconnect, device number 26 [ 221.932743][ T30] audit: type=1400 audit(1762213011.455:554): avc: denied { ioctl } for pid=6257 comm="syz.2.2277" path="socket:[37912]" dev="sockfs" ino=37912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.958840][ T389] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 222.068412][ T4212] usb 4-1: device descriptor read/64, error -71 [ 222.251126][ T6268] device syzkaller0 entered promiscuous mode [ 222.328482][ T389] usb 2-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 222.337630][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.346728][ T389] usb 2-1: config 0 descriptor?? [ 222.378425][ T344] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 222.458409][ T4212] usb 4-1: device descriptor read/64, error -71 [ 222.578476][ T4212] usb usb4-port1: attempt power cycle [ 222.619380][ T344] usb 3-1: Using ep0 maxpacket: 32 [ 222.738423][ T344] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.755876][ T344] usb 3-1: config 0 has no interface number 0 [ 222.770385][ T344] usb 3-1: config 0 interface 184 has no altsetting 0 [ 222.938441][ T344] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.952980][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.968367][ T344] usb 3-1: Product: syz [ 222.977733][ T344] usb 3-1: Manufacturer: syz [ 222.987007][ T344] usb 3-1: SerialNumber: syz [ 222.999685][ T344] usb 3-1: config 0 descriptor?? [ 223.038795][ T344] smsc75xx v1.0.0 [ 223.043559][ T344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 223.054072][ T344] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 223.335309][ T6296] tipc: Enabled bearer , priority 0 [ 223.343061][ T6296] device syzkaller0 entered promiscuous mode [ 223.349883][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2289'. [ 223.361893][ T6296] tipc: Resetting bearer [ 223.368532][ T6295] tipc: Resetting bearer [ 223.375247][ T6295] tipc: Disabling bearer [ 224.220262][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 224.359264][ T4212] usb 3-1: USB disconnect, device number 27 [ 224.624828][ T26] usb 2-1: USB disconnect, device number 40 [ 224.718300][ T344] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.908268][ T4212] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 224.959548][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 224.963751][ T6333] tipc: Enabled bearer , priority 0 [ 224.971716][ T6333] device syzkaller0 entered promiscuous mode [ 224.980401][ T6332] tipc: Resetting bearer [ 224.987217][ T6332] tipc: Disabling bearer [ 225.078381][ T344] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.088268][ T344] usb 5-1: config 0 has no interface number 0 [ 225.098449][ T344] usb 5-1: config 0 interface 184 has no altsetting 0 [ 225.158275][ T4212] usb 3-1: Using ep0 maxpacket: 8 [ 225.268443][ T344] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.277612][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.285906][ T344] usb 5-1: Product: syz [ 225.288288][ T4212] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 225.290388][ T344] usb 5-1: Manufacturer: syz [ 225.303014][ T344] usb 5-1: SerialNumber: syz [ 225.308239][ T4212] usb 3-1: config 4 has an invalid interface number: 102 but max is 0 [ 225.313363][ T344] usb 5-1: config 0 descriptor?? [ 225.321479][ T4212] usb 3-1: config 4 has no interface number 0 [ 225.337820][ T4212] usb 3-1: config 4 interface 102 altsetting 0 has an invalid endpoint with address 0x9C, skipping [ 225.348877][ T4212] usb 3-1: config 4 interface 102 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 255 [ 225.359228][ T344] smsc75xx v1.0.0 [ 225.363617][ T344] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 225.373980][ T344] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 225.448277][ T4212] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 225.457532][ T4212] usb 3-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 225.465959][ T4212] usb 3-1: Manufacturer: syz [ 225.491361][ T6321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.508260][ T6321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.537130][ T26] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 225.545313][ T4212] ums-jumpshot 3-1:4.102: USB Mass Storage device detected [ 225.581376][ T4212] ums-jumpshot 3-1:4.102: Quirks match for vid 05dc pid 0001: 2 [ 225.673397][ T30] audit: type=1400 audit(1762213015.195:555): avc: denied { ioctl } for pid=6347 comm="syz.6.2313" path="socket:[38134]" dev="sockfs" ino=38134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.744729][ T344] usb 3-1: USB disconnect, device number 28 [ 225.868214][ T26] usb 4-1: device descriptor read/64, error -71 [ 226.258183][ T26] usb 4-1: device descriptor read/64, error -71 [ 226.523230][ T6368] tipc: Started in network mode [ 226.528394][ T6368] tipc: Node identity 9aa017373c0b, cluster identity 4711 [ 226.535946][ T6368] tipc: Enabled bearer , priority 0 [ 226.542906][ T26] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 226.552672][ T6368] device syzkaller0 entered promiscuous mode [ 226.565588][ T6367] tipc: Resetting bearer [ 226.574888][ T6367] tipc: Disabling bearer [ 226.744013][ T633] usb 5-1: USB disconnect, device number 15 [ 226.818169][ T26] usb 4-1: device descriptor read/64, error -71 [ 226.854853][ T6373] device syzkaller0 entered promiscuous mode [ 227.218358][ T26] usb 4-1: device descriptor read/64, error -71 [ 227.338645][ T26] usb usb4-port1: attempt power cycle [ 227.761041][ T6398] 9pnet_virtio: no channels available for device syz [ 227.828127][ T26] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 227.903940][ T6408] device syzkaller0 entered promiscuous mode [ 227.942059][ T6410] device syzkaller0 entered promiscuous mode [ 228.008253][ T26] usb 4-1: device descriptor read/8, error -71 [ 228.512058][ T26] usb 4-1: device descriptor read/8, error -71 [ 229.140768][ T6449] device syzkaller0 entered promiscuous mode [ 229.182029][ T6454] device pim6reg1 entered promiscuous mode [ 229.528190][ T633] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 229.592542][ T6467] hub 1-0:1.0: USB hub found [ 229.684285][ T6467] hub 1-0:1.0: 1 port detected [ 229.875418][ T6479] binder: BC_ATTEMPT_ACQUIRE not supported [ 229.892102][ T6479] binder: 6478:6479 ioctl c0306201 2000000001c0 returned -22 [ 229.897983][ T633] usb 3-1: device descriptor read/64, error -71 [ 229.982831][ T6480] overlayfs: missing 'workdir' [ 229.998903][ T6480] overlayfs: missing 'lowerdir' [ 230.347943][ T633] usb 3-1: device descriptor read/64, error -71 [ 230.567946][ T344] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 230.737922][ T633] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 230.748844][ T6491] device wg2 entered promiscuous mode [ 230.907977][ T344] usb 4-1: device descriptor read/64, error -71 [ 231.037908][ T633] usb 3-1: device descriptor read/64, error -71 [ 231.317885][ T344] usb 4-1: device descriptor read/64, error -71 [ 231.427885][ T633] usb 3-1: device descriptor read/64, error -71 [ 231.548348][ T633] usb usb3-port1: attempt power cycle [ 231.597972][ T344] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 231.799828][ T6521] device pim6reg1 entered promiscuous mode [ 231.823018][ T6523] device pim6reg1 entered promiscuous mode [ 231.907877][ T344] usb 4-1: device descriptor read/64, error -71 [ 232.046171][ T633] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 232.327881][ T344] usb 4-1: device descriptor read/64, error -71 [ 232.450495][ T344] usb usb4-port1: attempt power cycle [ 232.627914][ T633] usb 3-1: device not accepting address 31, error -71 [ 233.212887][ T26] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 233.517799][ T26] usb 2-1: device descriptor read/64, error -71 [ 233.591065][ T6571] syz.6.2400[6571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.591143][ T6571] syz.6.2400[6571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.999775][ T30] audit: type=1400 audit(1762213023.526:556): avc: denied { append } for pid=6592 comm="syz.2.2409" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 234.034154][ T26] usb 2-1: device descriptor read/64, error -71 [ 234.317717][ T26] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 234.587782][ T26] usb 2-1: device descriptor read/64, error -71 [ 234.702049][ T6605] device syzkaller0 entered promiscuous mode [ 234.766972][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2411'. [ 235.457678][ T26] usb 2-1: device descriptor read/64, error -71 [ 235.583022][ T26] usb usb2-port1: attempt power cycle [ 236.177692][ T389] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 236.371685][ T6639] overlayfs: failed to clone upperpath [ 236.427636][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 236.677669][ T389] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 236.691121][ T389] usb 3-1: config 0 has no interface number 0 [ 236.718000][ T389] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 236.737653][ T389] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 236.748671][ T389] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.795278][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2429'. [ 236.997635][ T389] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 237.004886][ T6664] loop3: detected capacity change from 0 to 128 [ 237.006970][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.027774][ T389] usb 3-1: Product: syz [ 237.032012][ T389] usb 3-1: Manufacturer: syz [ 237.033590][ T30] audit: type=1400 audit(1762213026.556:557): avc: denied { mount } for pid=6663 comm="syz.3.2434" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 237.036621][ T389] usb 3-1: SerialNumber: syz [ 237.063651][ T389] usb 3-1: config 0 descriptor?? [ 237.117724][ T30] audit: type=1400 audit(1762213026.616:558): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 237.145937][ T6666] loop3: detected capacity change from 0 to 256 [ 237.195822][ T6666] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 237.712334][ T6671] UDC core: couldn't find an available UDC or it's busy: -16 [ 237.722110][ T6671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.946027][ T6679] loop1: detected capacity change from 0 to 256 [ 237.974243][ T6679] exfat: Deprecated parameter 'namecase' [ 237.998955][ T6679] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 238.019986][ T6679] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 238.032600][ T6673] loop4: detected capacity change from 0 to 40427 [ 238.057771][ T6673] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 238.070240][ T6673] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 238.078690][ T6673] F2FS-fs (loop4): fault_injection options not supported [ 238.085793][ T6673] F2FS-fs (loop4): fault_type options not supported [ 238.094859][ T6673] F2FS-fs (loop4): invalid crc value [ 238.128376][ T6673] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.171216][ T6687] device syzkaller0 entered promiscuous mode [ 238.227779][ T6673] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 238.234882][ T6673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.980877][ T20] usb 3-1: USB disconnect, device number 33 [ 239.196381][ T6726] device syzkaller0 entered promiscuous mode [ 239.290982][ T6731] hub 1-0:1.0: USB hub found [ 239.305060][ T6731] hub 1-0:1.0: 1 port detected [ 240.265138][ T6757] device syzkaller0 entered promiscuous mode [ 240.425177][ T6763] device syzkaller0 entered promiscuous mode [ 240.792241][ T30] audit: type=1400 audit(1762213030.316:559): avc: denied { accept } for pid=6780 comm="syz.2.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.841718][ T6765] loop1: detected capacity change from 0 to 40427 [ 240.952262][ T6765] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 240.985992][ T6765] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 241.018956][ T6765] F2FS-fs (loop1): fault_injection options not supported [ 241.026996][ T6795] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 241.046262][ T6765] F2FS-fs (loop1): fault_type options not supported [ 241.068370][ T6765] F2FS-fs (loop1): invalid crc value [ 241.091703][ T6765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.188269][ T6765] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 241.205178][ T6765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 241.247924][ T6806] overlayfs: failed to clone lowerpath [ 241.258338][ T6806] overlayfs: failed to clone upperpath [ 241.347016][ T30] audit: type=1400 audit(1762213030.866:560): avc: denied { create } for pid=6764 comm="syz.1.2474" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.388296][ T283] attempt to access beyond end of device [ 241.388296][ T283] loop1: rw=2049, want=45112, limit=40427 [ 241.420946][ T30] audit: type=1400 audit(1762213030.866:561): avc: denied { read write open } for pid=6764 comm="syz.1.2474" path="/321/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.523976][ T6794] loop3: detected capacity change from 0 to 40427 [ 241.567791][ T6794] F2FS-fs (loop3): fault_injection options not supported [ 241.574932][ T6794] F2FS-fs (loop3): fault_type options not supported [ 241.615589][ T6794] F2FS-fs (loop3): invalid crc value [ 241.638593][ T6794] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.758018][ T6794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.854240][ T30] audit: type=1400 audit(1762213031.376:562): avc: denied { rename } for pid=6793 comm="syz.3.2487" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.869598][ T6813] syz.4.2492[6813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.889685][ T6813] syz.4.2492[6813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.911330][ T282] attempt to access beyond end of device [ 241.911330][ T282] loop3: rw=2049, want=45112, limit=40427 [ 242.159378][ T6821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'. [ 242.497330][ T20] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 242.548183][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2503'. [ 242.571351][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 242.594090][ T6817] loop1: detected capacity change from 0 to 40427 [ 242.612955][ T6817] F2FS-fs (loop1): fault_injection options not supported [ 242.627509][ T6817] F2FS-fs (loop1): fault_type options not supported [ 242.667576][ T6817] F2FS-fs (loop1): invalid crc value [ 242.708941][ T6817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.757293][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 242.801246][ T6817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.877322][ T20] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 242.885955][ T20] usb 3-1: config 0 has no interface number 0 [ 242.908879][ T20] usb 3-1: config 0 interface 184 has no altsetting 0 [ 242.922707][ T6836] loop4: detected capacity change from 0 to 40427 [ 242.934191][ T283] attempt to access beyond end of device [ 242.934191][ T283] loop1: rw=2049, want=45112, limit=40427 [ 242.972895][ T6836] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.052631][ T6836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.097368][ T20] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.106437][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.158427][ T30] audit: type=1400 audit(1762213032.686:563): avc: denied { quotaon } for pid=6834 comm="syz.4.2501" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 243.165853][ T20] usb 3-1: Product: syz [ 243.185619][ T4826] attempt to access beyond end of device [ 243.185619][ T4826] loop4: rw=2049, want=45104, limit=40427 [ 243.208220][ T20] usb 3-1: Manufacturer: syz [ 243.213030][ T20] usb 3-1: SerialNumber: syz [ 243.223245][ T20] usb 3-1: config 0 descriptor?? [ 243.267788][ T20] smsc75xx v1.0.0 [ 243.272883][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2509'. [ 243.687319][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 243.719907][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 243.741205][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 243.810138][ T20] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 243.951733][ T6899] device pim6reg1 entered promiscuous mode [ 244.170451][ T6916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2531'. [ 244.702672][ T4212] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 244.744769][ T30] audit: type=1326 audit(1762213034.267:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 244.777476][ T30] audit: type=1326 audit(1762213034.267:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 244.851801][ T344] usb 3-1: USB disconnect, device number 34 [ 244.885947][ T30] audit: type=1326 audit(1762213034.297:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 244.947176][ T4212] usb 4-1: Using ep0 maxpacket: 32 [ 244.999702][ T30] audit: type=1326 audit(1762213034.297:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 245.067392][ T4212] usb 4-1: config 0 has no interfaces? [ 245.102767][ T30] audit: type=1326 audit(1762213034.297:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5bac46c9 code=0x7ffc0000 [ 245.147193][ T4242] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 245.227188][ T4212] usb 4-1: New USB device found, idVendor=4f42, idProduct=1202, bcdDevice=85.40 [ 245.236287][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.238007][ T6948] device syzkaller0 entered promiscuous mode [ 245.253421][ T4212] usb 4-1: Product: syz [ 245.267100][ T4212] usb 4-1: Manufacturer: syz [ 245.271748][ T4212] usb 4-1: SerialNumber: syz [ 245.277373][ T4212] usb 4-1: config 0 descriptor?? [ 245.330701][ T6950] ================================================================== [ 245.338841][ T6950] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.348090][ T6950] Read of size 1 at addr ffff88810ada73f8 by task syz.4.2544/6950 [ 245.355924][ T6950] [ 245.358272][ T6950] CPU: 0 PID: 6950 Comm: syz.4.2544 Not tainted syzkaller #0 [ 245.365657][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.375736][ T6950] Call Trace: [ 245.379032][ T6950] [ 245.382034][ T6950] __dump_stack+0x21/0x30 [ 245.386394][ T6950] dump_stack_lvl+0xee/0x150 [ 245.391124][ T6950] ? show_regs_print_info+0x20/0x20 [ 245.396340][ T6950] ? load_image+0x3a0/0x3a0 [ 245.400867][ T6950] ? unwind_get_return_address+0x4d/0x90 [ 245.406519][ T6950] print_address_description+0x7f/0x2c0 [ 245.412091][ T6950] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.418612][ T6950] kasan_report+0xf1/0x140 [ 245.423053][ T6950] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.430012][ T6950] __asan_report_load1_noabort+0x14/0x20 [ 245.435665][ T6950] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.442019][ T6950] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 245.448198][ T6950] ? xfrm_netlink_rcv+0x72/0x90 [ 245.453071][ T6950] ? netlink_unicast+0x876/0xa40 [ 245.458030][ T6950] ? netlink_sendmsg+0x86a/0xb70 [ 245.462987][ T6950] ? ____sys_sendmsg+0x5a2/0x8c0 [ 245.467949][ T6950] ? ___sys_sendmsg+0x1f0/0x260 [ 245.472819][ T6950] ? x64_sys_call+0x4b/0x9a0 [ 245.477429][ T6950] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.483519][ T6950] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 245.490225][ T6950] xfrm_policy_inexact_insert+0x70/0x1130 [ 245.495966][ T6950] ? __get_hash_thresh+0x10c/0x420 [ 245.501099][ T6950] ? policy_hash_bysel+0x110/0x4f0 [ 245.506259][ T6950] xfrm_policy_insert+0x126/0x9a0 [ 245.511300][ T6950] ? xfrm_policy_construct+0x54f/0x1f00 [ 245.516865][ T6950] xfrm_add_policy+0x4d1/0x830 [ 245.521654][ T6950] ? xfrm_dump_sa_done+0xc0/0xc0 [ 245.526626][ T6950] xfrm_user_rcv_msg+0x45c/0x6e0 [ 245.531584][ T6950] ? xfrm_netlink_rcv+0x90/0x90 [ 245.536465][ T6950] ? avc_has_perm_noaudit+0x460/0x460 [ 245.541861][ T6950] ? x64_sys_call+0x4b/0x9a0 [ 245.546472][ T6950] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 245.551916][ T6950] netlink_rcv_skb+0x1e0/0x430 [ 245.556717][ T6950] ? xfrm_netlink_rcv+0x90/0x90 [ 245.561587][ T6950] ? netlink_ack+0xb60/0xb60 [ 245.566192][ T6950] ? wait_for_completion_killable_timeout+0x10/0x10 [ 245.572813][ T6950] ? __netlink_lookup+0x387/0x3b0 [ 245.577880][ T6950] xfrm_netlink_rcv+0x72/0x90 [ 245.582575][ T6950] netlink_unicast+0x876/0xa40 [ 245.587363][ T6950] netlink_sendmsg+0x86a/0xb70 [ 245.592149][ T6950] ? netlink_getsockopt+0x530/0x530 [ 245.597361][ T6950] ? sock_alloc_file+0xba/0x260 [ 245.602228][ T6950] ? security_socket_sendmsg+0x82/0xa0 [ 245.607713][ T6950] ? netlink_getsockopt+0x530/0x530 [ 245.612928][ T6950] ____sys_sendmsg+0x5a2/0x8c0 [ 245.617721][ T6950] ? __sys_sendmsg_sock+0x40/0x40 [ 245.622787][ T6950] ? import_iovec+0x7c/0xb0 [ 245.627433][ T6950] ___sys_sendmsg+0x1f0/0x260 [ 245.632150][ T6950] ? __sys_sendmsg+0x250/0x250 [ 245.636946][ T6950] ? __fdget+0x1a1/0x230 [ 245.641299][ T6950] __x64_sys_sendmsg+0x1e2/0x2a0 [ 245.646264][ T6950] ? ___sys_sendmsg+0x260/0x260 [ 245.651138][ T6950] ? __kasan_check_write+0x14/0x20 [ 245.656359][ T6950] ? switch_fpu_return+0x15d/0x2c0 [ 245.661481][ T6950] x64_sys_call+0x4b/0x9a0 [ 245.665911][ T6950] do_syscall_64+0x4c/0xa0 [ 245.670335][ T6950] ? clear_bhb_loop+0x50/0xa0 [ 245.675023][ T6950] ? clear_bhb_loop+0x50/0xa0 [ 245.679697][ T6950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.685605][ T6950] RIP: 0033:0x7fd84abe56c9 [ 245.690037][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.709676][ T6950] RSP: 002b:00007fd84964d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.718113][ T6950] RAX: ffffffffffffffda RBX: 00007fd84ae3bfa0 RCX: 00007fd84abe56c9 [ 245.726091][ T6950] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 245.734062][ T6950] RBP: 00007fd84ac67f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.742035][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.750046][ T6950] R13: 00007fd84ae3c038 R14: 00007fd84ae3bfa0 R15: 00007ffc6841fcd8 [ 245.758026][ T6950] [ 245.761043][ T6950] [ 245.763364][ T6950] Allocated by task 6950: [ 245.767683][ T6950] __kasan_kmalloc+0xda/0x110 [ 245.772372][ T6950] __kmalloc+0x13d/0x2c0 [ 245.776615][ T6950] sk_prot_alloc+0xed/0x320 [ 245.781200][ T6950] sk_alloc+0x38/0x430 [ 245.785261][ T6950] pfkey_create+0x12a/0x660 [ 245.789783][ T6950] __sock_create+0x38d/0x7a0 [ 245.794372][ T6950] __sys_socket+0xec/0x190 [ 245.798800][ T6950] __x64_sys_socket+0x7a/0x90 [ 245.803482][ T6950] x64_sys_call+0x8c5/0x9a0 [ 245.808082][ T6950] do_syscall_64+0x4c/0xa0 [ 245.812507][ T6950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.818418][ T6950] [ 245.820735][ T6950] The buggy address belongs to the object at ffff88810ada7000 [ 245.820735][ T6950] which belongs to the cache kmalloc-1k of size 1024 [ 245.834782][ T6950] The buggy address is located 1016 bytes inside of [ 245.834782][ T6950] 1024-byte region [ffff88810ada7000, ffff88810ada7400) [ 245.848230][ T6950] The buggy address belongs to the page: [ 245.853853][ T6950] page:ffffea00042b6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ada0 [ 245.864085][ T6950] head:ffffea00042b6800 order:3 compound_mapcount:0 compound_pincount:0 [ 245.872406][ T6950] flags: 0x4000000000010200(slab|head|zone=1) [ 245.878529][ T6950] raw: 4000000000010200 ffffea000456f200 0000000200000002 ffff888100043080 [ 245.887120][ T6950] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 245.895708][ T6950] page dumped because: kasan: bad access detected [ 245.902112][ T6950] page_owner tracks the page as allocated [ 245.907817][ T6950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2702733191, free_ts 0 [ 245.924247][ T6950] post_alloc_hook+0x192/0x1b0 [ 245.929020][ T6950] prep_new_page+0x1c/0x110 [ 245.933521][ T6950] get_page_from_freelist+0x2cc5/0x2d50 [ 245.939064][ T6950] __alloc_pages+0x18f/0x440 [ 245.943663][ T6950] new_slab+0xa1/0x4d0 [ 245.947755][ T6950] ___slab_alloc+0x381/0x810 [ 245.952362][ T6950] __slab_alloc+0x49/0x90 [ 245.956693][ T6950] __kmalloc+0x16a/0x2c0 [ 245.960929][ T6950] blk_mq_realloc_hw_ctxs+0x42a/0x1700 [ 245.966418][ T6950] blk_mq_init_allocated_queue+0x3fa/0x17e0 [ 245.972311][ T6950] blk_mq_init_queue+0x6c/0xd0 [ 245.977083][ T6950] scsi_alloc_sdev+0x66c/0x9c0 [ 245.981846][ T6950] scsi_probe_and_add_lun+0x18d/0x33b0 [ 245.987304][ T6950] __scsi_scan_target+0x1d6/0xb50 [ 245.992326][ T6950] scsi_scan_host_selected+0x343/0x5f0 [ 245.997791][ T6950] scsi_scan_host+0x39e/0x660 [ 246.002554][ T6950] page_owner free stack trace missing [ 246.007918][ T6950] [ 246.010237][ T6950] Memory state around the buggy address: [ 246.015862][ T6950] ffff88810ada7280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.023943][ T6950] ffff88810ada7300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.032004][ T6950] >ffff88810ada7380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 246.040071][ T6950] ^ [ 246.048135][ T6950] ffff88810ada7400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.056330][ T6950] ffff88810ada7480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.064392][ T6950] ================================================================== [ 246.072446][ T6950] Disabling lock debugging due to kernel taint [ 246.081659][ T344] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 246.095031][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 246.095047][ T30] audit: type=1400 audit(1762213035.617:573): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 246.124010][ T30] audit: type=1400 audit(1762213035.617:574): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.145710][ T30] audit: type=1400 audit(1762213035.617:575): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.167265][ T4242] usb 2-1: Using ep0 maxpacket: 32 [ 246.167433][ T30] audit: type=1400 audit(1762213035.617:576): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.193481][ T30] audit: type=1400 audit(1762213035.617:577): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.214635][ T30] audit: type=1400 audit(1762213035.617:578): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.238033][ T30] audit: type=1400 audit(1762213035.617:579): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.307165][ T4242] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.315526][ T4242] usb 2-1: config 0 has no interface number 0 [ 246.321671][ T4242] usb 2-1: config 0 interface 184 has no altsetting 0 [ 246.487182][ T4242] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 246.496401][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.504440][ T4242] usb 2-1: Product: syz [ 246.508703][ T344] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 246.519691][ T4242] usb 2-1: Manufacturer: syz [ 246.524287][ T4242] usb 2-1: SerialNumber: syz [ 246.528973][ T344] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.539303][ T344] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 246.552770][ T4242] usb 2-1: config 0 descriptor?? [ 246.557834][ T344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.564435][ T344] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 246.573496][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.582266][ T344] usb 3-1: config 0 descriptor?? [ 246.597590][ T4242] smsc75xx v1.0.0 [ 247.037038][ T4242] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 247.049360][ T4242] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 247.059245][ T344] hid-generic 0003:044E:120C.000B: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 247.072027][ T4242] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 247.082315][ T4242] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 247.255053][ T4242] usb 3-1: USB disconnect, device number 35 [ 247.297741][ T344] usb 4-1: USB disconnect, device number 37 [ 248.037330][ T389] usb 2-1: USB disconnect, device number 44