last executing test programs: 10.550127726s ago: executing program 0 (id=4126): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1}, 0x8) 10.212662349s ago: executing program 0 (id=4129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 9.626243121s ago: executing program 0 (id=4131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.490675022s ago: executing program 0 (id=4135): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 5.271043162s ago: executing program 3 (id=4144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x3}, 0x1c) ioctl$int_in(r0, 0x5452, 0x0) getpgrp(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000480)=""/102400, 0x19000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi0\x00', 0x101001, 0x0) 5.222927233s ago: executing program 4 (id=4145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873", 0x3f}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f10", 0x9a}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.906445671s ago: executing program 4 (id=4148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000080)=@raw=[@tail_call], &(0x7f0000000140)='GPL\x00', 0x5, 0x86, &(0x7f0000000240)=""/134, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x327e}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 4.900664772s ago: executing program 1 (id=4149): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b26e53f07010000002a900683749e821d8b9236592b0004000093"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1100, 0x152) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 4.186627946s ago: executing program 3 (id=4150): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) close(0x3) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) lseek(r0, 0x1000000009, 0x0) 3.801220212s ago: executing program 3 (id=4152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 3.773826527s ago: executing program 4 (id=4153): sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000006780)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x11d0}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x200004, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"/528], 0x210}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0xffb, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="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", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f0000004280)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5ec632fc820e2c656", 0x86}, {&(0x7f0000000600)="4b8bd4fa8961ecabf22ae3b3cd7043ed7a2f27e615e688f90981645bc3c1faf55a01f86ea00bcffcd10caf20643264ddd76d18f017dfb879a401bec29e5452b76c7f202286589c956c7830f291e2d1b6bb3d374efba63ad695dd8a6ab92fafbfb88ef755215bf2dd1c4661f2ac1e3fd9fa3c8c6d5b691a2b5a487873d3a24b09e2a76b77759485e8b40cab71465b80858eacffbb8f1074018cf21be301b454f014048148d29e4086ee8e7c883f0dff1067728df49715c75c375b6fffe2cde4aadf5c1e32aa0606c9758943ce7170260ca08080e5b90298054b02f442b7e1db", 0xdf}, {0x0}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000000940)="7b8a69eaeca61bc1f0041df93ec4a31271bf57ff3dcc472d900d2e62da6ddef96857c84a211e6cd207e6919363a5d6a273841a0b9a80167085a4fb2446faa0", 0x3f}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f0000000440)="37c414ead78ce9a85b2525c070b1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d0decf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c1fad7e29cf03857db9568797aaa7bcb95b19c561a2e138b6c3f7a18079079cf0654826f4d36bf164206baa1e1c9da4c3e5e9101c12ac62dde65c705d93958357142267c3c6", 0xef}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a02000000000000000eaeeb4ebbedaa2a118d00", 0x56}, {&(0x7f00000001c0)}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f16712bd4cbb429947223233626f44a14fe29124af83c445b2c9354dcfed62162f597ab8d8816de9792354282eb321959298b76de7874b04dada3e8", 0x76}], 0x6, &(0x7f0000004bc0)=ANY=[], 0x1448}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000060c0)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc8cc2ea5343905d3e1e04049628e48ad4bc80d7fbb2b1542d79cef4a285f9835bc8ac658205077f9576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413846bad763ff5ca7dcc356c6a61ff01ef5517b35a3758902c661d7bdf6bb1ef29cf99fb8445c8de16d9b2782ba5cdb537271b3465f1bc394256c8a33decdf62d958d0c330ec55b019a404c58e9d1cc0e59d1363c3e576dc6d", 0xde}, {&(0x7f00000061c0)="374f8cd59ae59035ebcf8034c432509616a7a860dbd74f7930b859f89b4d32e56b13", 0x22}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000006300)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x80, &(0x7f00000065c0)}}], 0x6, 0x804) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bbddffffffffffffff00000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x2a, 0x4, 0x2, 0x1b, 0xa8, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @cipso={0x86, 0x65, 0x2, [{0x6, 0xc, "159a7b19a71b89640f6e"}, {0x0, 0x3, "8c"}, {0x1, 0x5, 'O0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}}) r10 = socket$inet6(0xa, 0x3, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000005c00)=ANY=[@ANYBLOB="1e00000000000000ff000000ac000000b0280000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000003000000020000000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005c80)={&(0x7f00000002c0)="b0dad7d80cfc1f70c0b8cdfd511ebfa874f5bdc2d0d9f348d0e19eb960bc5ea76fd22dc0b8069910348c60fcbf3623cfc4c00fccf538317edf7fa4a1d5b19964a7cddc6757b279dbac92067be3de9cb31c99a134a3ed7b6d93b1975250c6ec060096a223a537af9a28f2052b4444c2599392563db91aa3185beb97d95efb7038d34ea7911e6783a188a3622bb95b4defdcc41649cb1bf553f3148e0cdb1b9b753428587813dc061567fa5835c6de8e3016433ae90148b42508acd67b612395ddeb84ac68d03668dbce902dd638a8fbcddcc14d59af46ffdbd5c9bab281491ec7cb73ad3111a5f2e6f6c0bd35b6a61c4075bb", &(0x7f00000003c0)=""/80, &(0x7f0000004bc0)="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", &(0x7f0000005bc0)="fdea2ccc5470e34c9e89c34c61daaa195965219b7aa339604ee35a153bfd48e0082dfe5040cb16d01d41c9023b1a41516605089f2eeafe70b308cf1c051115", 0xffffff97, r11}, 0x38) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e23, 0x400, @empty, 0x100007}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) 3.75753887s ago: executing program 2 (id=4154): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.654790989s ago: executing program 3 (id=4155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x3, 0x4, 0x9}, {0x87, 0x2, 0x0, 0x9}, {0x6, 0x40, 0x0, 0x2}]}) 3.521437392s ago: executing program 2 (id=4156): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 3.491571556s ago: executing program 0 (id=4157): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000008820525004000010203010902"], 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.435521162s ago: executing program 1 (id=4158): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x11, 0x3, 0xc0000001) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 3.376874888s ago: executing program 3 (id=4159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r4, 0x2000000000000039, &(0x7f0000000280)=[&(0x7f0000000480)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) shutdown(r3, 0x0) 2.52015872s ago: executing program 2 (id=4160): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) dup(r1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_crypto(r0, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.435341375s ago: executing program 4 (id=4161): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000800000032490000c2"], 0x50) 2.384762386s ago: executing program 1 (id=4162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) 1.26803224s ago: executing program 1 (id=4163): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.265027678s ago: executing program 4 (id=4164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) r2 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="baaa10f0c269048a21d81c5b19548dfd1140f0318425682de5f45b48102264122270843752c1a7fd7f963c355ebac3ef2f27bdded889bb4446c5b39ba523c0102e7830fc92226dba9c6cee2f815d5b86c9ae632c60070ca461cf01086eb9431ac8f5decefc1ba3975c4b7fd840619437926eadffcc9a6da163e827ace063667375bbfe896299b7fa06f38d0855d653dd5378087c8e87d43ffbf747dcaa77f25792e03c0665c7b14f3ca973ffa3f0345428966293c77a535304f7bd0c601fca22c3155439c070dfc9"}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000580)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0xc79, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 1.241715669s ago: executing program 2 (id=4165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef"}) socket$inet6(0xa, 0x1, 0x84) close(0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0xcf28, 0x0) read$msr(r2, 0x0, 0x0) syz_clone(0x18200000, 0x0, 0x0, 0x0, 0x0, 0x0) 667.240623ms ago: executing program 2 (id=4166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) epoll_create1(0x80000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 535.233946ms ago: executing program 3 (id=4167): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) 533.802282ms ago: executing program 2 (id=4168): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 528.02079ms ago: executing program 4 (id=4169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='usbip-vudc.0\n', 0xd) 108.336737ms ago: executing program 1 (id=4170): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000200)=0x912, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000340), 0x1e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) set_mempolicy(0x4000, &(0x7f0000000100)=0x80, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') 30.672794ms ago: executing program 0 (id=4171): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffd000/0x3000)=nil, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x28) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) 0s ago: executing program 1 (id=4172): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(2000000228.250:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.136925][ T29] audit: type=1326 audit(2000000228.260:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.267109][ T29] audit: type=1326 audit(2000000228.260:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.339912][ T29] audit: type=1326 audit(2000000228.260:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.382409][ T29] audit: type=1326 audit(2000000228.270:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.413610][ T29] audit: type=1326 audit(2000000228.270:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.559215][ T29] audit: type=1326 audit(2000000228.270:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 772.653049][ T29] audit: type=1326 audit(2000000228.270:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 773.040208][ T29] audit: type=1326 audit(2000000228.280:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.1.2387" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa039e019 code=0x7ffc0000 [ 773.392047][T14738] trusted_key: encrypted_key: insufficient parameters specified [ 775.030842][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2396'. [ 776.399790][T14763] trusted_key: encrypted_key: keylen parameter is missing [ 777.146107][T14770] xt_hashlimit: size too large, truncated to 1048576 [ 777.692089][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 777.807978][T14779] netlink: zone id is out of range [ 777.813174][T14779] netlink: zone id is out of range [ 778.156164][T14776] bridge_slave_1: left allmulticast mode [ 778.162047][T14776] bridge_slave_1: left promiscuous mode [ 778.169986][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 778.170001][ T29] audit: type=1326 audit(2000000235.320:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 778.273852][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.408615][ T29] audit: type=1326 audit(2000000235.320:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 778.462157][T14776] bridge_slave_0: left allmulticast mode [ 778.480368][T14776] bridge_slave_0: left promiscuous mode [ 778.500058][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.573439][ T29] audit: type=1326 audit(2000000235.330:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 778.679683][ T29] audit: type=1326 audit(2000000235.330:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 778.812682][ T29] audit: type=1326 audit(2000000235.330:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 778.980377][ T29] audit: type=1326 audit(2000000235.340:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 780.139969][T14792] binder_alloc: 14789: pid 14789 spamming oneway? 1 buffers allocated for a total size of 4096 [ 780.591252][ T29] audit: type=1326 audit(2000000235.340:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 780.772363][ T29] audit: type=1326 audit(2000000235.340:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 781.326498][ T29] audit: type=1326 audit(2000000235.350:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.472021][ T29] audit: type=1326 audit(2000000235.350:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.499235][ T29] audit: type=1326 audit(2000000235.350:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.527952][ T29] audit: type=1326 audit(2000000235.350:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.572111][ T29] audit: type=1326 audit(2000000235.350:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.602797][ T29] audit: type=1326 audit(2000000235.350:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.712591][ T29] audit: type=1326 audit(2000000235.360:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.780831][ T29] audit: type=1326 audit(2000000235.360:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.903732][ T29] audit: type=1326 audit(2000000235.360:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 783.973825][ T29] audit: type=1326 audit(2000000235.370:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 784.089682][ T29] audit: type=1326 audit(2000000235.390:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.4.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 784.185148][T12500] Bluetooth: hci2: unexpected event for opcode 0x202d [ 786.391061][T14858] xt_hashlimit: size too large, truncated to 1048576 [ 786.394234][ T5613] Bluetooth: hci2: command 0x0401 tx timeout [ 786.403873][T12500] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 786.602128][T14862] binder_alloc: 14861: pid 14861 spamming oneway? 1 buffers allocated for a total size of 4096 [ 787.838111][T14880] netlink: zone id is out of range [ 787.843298][T14880] netlink: zone id is out of range [ 788.440452][T14882] xt_NFQUEUE: number of total queues is 0 [ 788.533470][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 788.533482][ T29] audit: type=1400 audit(2000000246.090:1091): avc: denied { create } for pid=14883 comm="syz.0.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 788.850095][T14890] netlink: 'syz.3.2430': attribute type 2 has an invalid length. [ 789.262393][T14892] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 789.558278][ T12] Bluetooth: (null): Invalid header checksum [ 789.574199][ T12] Bluetooth: (null): Invalid header checksum [ 789.586507][ T12] Bluetooth: (null): Invalid header checksum [ 789.657297][ T12] Bluetooth: (null): Invalid header checksum [ 790.283798][ T12] Bluetooth: (null): Invalid header checksum [ 790.305650][ T12] Bluetooth: (null): Invalid header checksum [ 790.335938][ T12] Bluetooth: (null): Invalid header checksum [ 790.353730][ T12] Bluetooth: (null): Invalid header checksum [ 790.369470][ T12] Bluetooth: (null): Invalid header checksum [ 792.583518][T14930] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 792.704155][T12500] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 792.710744][ T5613] Bluetooth: hci2: command 0x0401 tx timeout [ 792.906671][T14936] netlink: 'syz.2.2442': attribute type 10 has an invalid length. [ 792.914638][T14936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2442'. [ 792.927055][T14936] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 794.490098][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2448'. [ 795.137256][T14968] xt_hashlimit: size too large, truncated to 1048576 [ 795.394917][ T29] audit: type=1400 audit(2000000252.960:1092): avc: denied { nlmsg_read } for pid=14955 comm="syz.3.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 797.076172][T14986] xt_NFQUEUE: number of total queues is 0 [ 798.349984][T14996] netlink: 'syz.0.2454': attribute type 2 has an invalid length. [ 798.360277][T14965] ipip0: entered promiscuous mode [ 798.454762][T14965] ipip0: entered allmulticast mode [ 798.514162][T14996] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 798.523947][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'. [ 798.532939][T14996] netlink: 90 bytes leftover after parsing attributes in process `syz.0.2454'. [ 798.542091][T14996] netlink: 90 bytes leftover after parsing attributes in process `syz.0.2454'. [ 798.563698][ T29] audit: type=1400 audit(2000000256.120:1093): avc: denied { bind } for pid=14995 comm="syz.0.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 798.978260][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 799.404279][T15010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2458'. [ 799.682751][T15010] bond34: entered promiscuous mode [ 799.690725][T15010] 8021q: adding VLAN 0 to HW filter on device bond34 [ 800.456196][T15020] xt_connbytes: Forcing CT accounting to be enabled [ 800.492486][T15020] set match dimension is over the limit! [ 801.868319][T15035] xt_hashlimit: size too large, truncated to 1048576 [ 804.276235][T15054] xt_policy: output policy not valid in PREROUTING and INPUT [ 804.361832][ T29] audit: type=1400 audit(2000000261.830:1094): avc: denied { accept } for pid=15050 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 805.780710][ T5796] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 805.855269][T15071] Cannot find del_set index 4 as target [ 806.839959][T15072] overlayfs: failed to clone lowerpath [ 807.387651][T15076] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 807.968521][ T5796] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.025497][ T5796] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 808.096781][ T5796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.139900][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 808.175222][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 808.301178][ T5796] usb 5-1: string descriptor 0 read error: -71 [ 808.328733][ T5796] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.475774][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.787910][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 808.805603][ T5796] usb 5-1: can't set config #1, error -71 [ 808.827591][ T5796] usb 5-1: USB disconnect, device number 36 [ 808.886791][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 809.492001][ T29] audit: type=1400 audit(2000000267.030:1095): avc: denied { map } for pid=15094 comm="syz.4.2481" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 810.587981][T15109] overlayfs: failed to clone upperpath [ 811.432569][T15084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2477'. [ 812.073392][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'. [ 812.269623][T15133] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2489'. [ 812.369010][ T46] libceph: connect (1)[c::]:6789 error -101 [ 812.387574][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 812.400293][T15136] ceph: No mds server is up or the cluster is laggy [ 812.448600][ T29] audit: type=1400 audit(2000000270.010:1096): avc: denied { bind } for pid=15139 comm="syz.1.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 813.017141][T15148] xt_hashlimit: size too large, truncated to 1048576 [ 815.978834][T15181] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 815.993450][T15181] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 816.010530][T15181] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 816.025029][T15181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 817.038009][T15193] binder_alloc: 15191: pid 15191 spamming oneway? 1 buffers allocated for a total size of 4096 [ 817.658992][T15203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15203 comm=syz.3.2505 [ 817.814538][T15207] binder_alloc: 15206: pid 15206 spamming oneway? 1 buffers allocated for a total size of 4096 [ 818.140962][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2510'. [ 818.176986][T15217] sctp: [Deprecated]: syz.3.2511 (pid 15217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.176986][T15217] Use struct sctp_sack_info instead [ 818.397880][T15225] xt_hashlimit: size too large, truncated to 1048576 [ 820.119471][T15246] binder_alloc: 15245: pid 15245 spamming oneway? 1 buffers allocated for a total size of 4096 [ 820.311999][T15255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15255 comm=syz.2.2521 [ 820.826247][T15260] lo speed is unknown, defaulting to 1000 [ 821.193705][ T29] audit: type=1400 audit(2000000278.750:1097): avc: denied { ioctl } for pid=15264 comm="syz.2.2523" path="/524/file0" dev="tmpfs" ino=2819 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 822.397067][T15282] xt_l2tp: missing protocol rule (udp|l2tpip) [ 822.405626][ T29] audit: type=1400 audit(2000000279.970:1098): avc: denied { write } for pid=15266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.239896][T15303] xt_hashlimit: size too large, truncated to 1048576 [ 823.510252][T15307] lo speed is unknown, defaulting to 1000 [ 823.516440][T15307] lo speed is unknown, defaulting to 1000 [ 823.528270][T15307] lo speed is unknown, defaulting to 1000 [ 823.540758][T15307] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 823.555291][T15307] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 823.573918][T15307] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 823.660037][T15307] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 823.853551][T15307] lo speed is unknown, defaulting to 1000 [ 823.860478][T15307] lo speed is unknown, defaulting to 1000 [ 823.867851][T15307] lo speed is unknown, defaulting to 1000 [ 823.876982][T15307] lo speed is unknown, defaulting to 1000 [ 823.884383][T15307] lo speed is unknown, defaulting to 1000 [ 824.162363][ T29] audit: type=1400 audit(2000000281.670:1099): avc: denied { write } for pid=15302 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.292055][T15309] tipc: Enabling of bearer rejected, failed to enable media [ 824.598434][T15315] syzkaller0: entered promiscuous mode [ 824.608665][T15315] syzkaller0: entered allmulticast mode [ 824.907508][T15326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15326 comm=syz.0.2535 [ 824.948318][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 824.967251][T15327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.974585][T15327] IPv6: NLM_F_CREATE should be set when creating new route [ 825.002805][ T29] audit: type=1326 audit(2000000282.560:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.075911][ T29] audit: type=1326 audit(2000000282.560:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.146704][ T29] audit: type=1326 audit(2000000282.560:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.175713][T15331] xt_hashlimit: size too large, truncated to 1048576 [ 825.234911][ T29] audit: type=1326 audit(2000000282.560:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.365560][ T29] audit: type=1326 audit(2000000282.560:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.495003][ T29] audit: type=1326 audit(2000000282.560:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 825.640758][ T29] audit: type=1326 audit(2000000282.560:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.4.2536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699079e019 code=0x7ffc0000 [ 826.445413][T15353] NILFS (nullb0): couldn't find nilfs on the device [ 826.542026][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 826.542043][ T29] audit: type=1400 audit(2000000284.100:1131): avc: denied { write } for pid=15347 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.550570][ T9] lo speed is unknown, defaulting to 1000 [ 826.764359][ T5711] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 827.076610][ T5711] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 827.121590][ T5711] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 827.162714][T15364] xt_hashlimit: max too large, truncated to 1048576 [ 827.185015][ T5711] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 827.223310][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.261021][ T5711] usb 1-1: Product: syz [ 827.280937][ T5711] usb 1-1: Manufacturer: syz [ 827.296023][ T5711] usb 1-1: SerialNumber: syz [ 827.309692][T15369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2543'. [ 827.331202][ T5711] usb 1-1: config 0 descriptor?? [ 828.711588][T15385] xt_hashlimit: size too large, truncated to 1048576 [ 829.516586][ T5711] mos7840 1-1:0.0: required endpoints missing [ 829.557061][ T5711] usb 1-1: USB disconnect, device number 38 [ 829.900911][T15395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15395 comm=syz.4.2549 [ 831.037263][ T5710] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 831.238397][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.263070][ T5710] usb 1-1: config 0 has no interface number 0 [ 831.361634][ T5710] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 831.422320][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.509752][ T5710] usb 1-1: Product: syz [ 831.548228][ T5710] usb 1-1: Manufacturer: syz [ 831.591865][ T5710] usb 1-1: SerialNumber: syz [ 831.947139][ T5710] usb 1-1: config 0 descriptor?? [ 832.364721][ T5710] usb 1-1: selecting invalid altsetting 1 [ 832.523631][ T5710] dvb_ttusb_budget: ttusb_init_controller: error [ 832.660178][ T5710] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 832.766991][T15413] binder_alloc: 15412: pid 15412 spamming oneway? 1 buffers allocated for a total size of 4096 [ 832.858579][ T5710] DVB: Unable to find symbol stv0299_attach() [ 832.979066][ T5710] DVB: Unable to find symbol tda8083_attach() [ 832.996962][T15419] binder_alloc: 15418: pid 15418 spamming oneway? 1 buffers allocated for a total size of 4096 [ 833.004166][ T5710] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 833.066308][ T5710] usb 1-1: USB disconnect, device number 39 [ 833.284959][ T29] audit: type=1400 audit(2000000290.830:1132): avc: denied { write } for pid=15420 comm="syz.4.2557" name="c.1" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 833.971693][T15432] xt_hashlimit: size too large, truncated to 1048576 [ 835.564177][ T46] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 835.730567][ T46] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 835.735369][T15443] xt_hashlimit: size too large, truncated to 1048576 [ 835.765276][ T46] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 835.791744][ T46] usb 1-1: Product: syz [ 835.805423][ T46] usb 1-1: Manufacturer: syz [ 835.819489][ T46] usb 1-1: SerialNumber: syz [ 835.842050][ T46] usb 1-1: config 0 descriptor?? [ 836.646508][ T29] audit: type=1400 audit(2000000294.200:1133): avc: denied { create } for pid=15453 comm="syz.2.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 836.815512][ T46] usb 1-1: USB disconnect, device number 40 [ 837.014389][T15463] fuse: Unknown parameter '' [ 837.080363][T15462] netlink: 'syz.1.2564': attribute type 21 has an invalid length. [ 837.127465][T15468] overlayfs: failed to clone lowerpath [ 837.692162][T15478] xt_hashlimit: size too large, truncated to 1048576 [ 838.149645][ T29] audit: type=1400 audit(2000000295.710:1134): avc: denied { listen } for pid=15481 comm="syz.4.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 839.908293][T15497] Process accounting resumed [ 840.183887][T15505] xt_hashlimit: size too large, truncated to 1048576 [ 840.583603][T15513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'. [ 841.232673][T15502] 9p: Could not find request transport: tdma [ 842.855188][T15539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15539 comm=syz.4.2579 [ 843.144022][T15541] xt_hashlimit: size too large, truncated to 1048576 [ 844.042507][T15554] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 844.177858][T15560] /dev/nullb0: Can't lookup blockdev [ 844.356475][T15562] xt_hashlimit: size too large, truncated to 1048576 [ 844.734962][T15571] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 844.742199][T15571] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 845.049899][ T29] audit: type=1326 audit(2000000302.610:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.2.2588" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54d699e019 code=0x0 [ 845.103157][ T29] audit: type=1326 audit(2000000302.660:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.2.2588" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54d699e019 code=0x0 [ 845.212789][T15578] ip6erspan0: entered allmulticast mode [ 845.390448][T15579] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 846.058295][T15596] xt_hashlimit: size too large, truncated to 1048576 [ 846.892714][T15607] binder_alloc: 15606: pid 15606 spamming oneway? 1 buffers allocated for a total size of 4096 [ 846.944245][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'. [ 847.262419][T15611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2596'. [ 847.443474][T15610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15610 comm=syz.2.2598 [ 847.521320][T15610] overlayfs: failed to clone upperpath [ 847.525516][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 847.642963][T15616] xt_hashlimit: size too large, truncated to 1048576 [ 848.909192][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 850.671902][ T29] audit: type=1400 audit(2000000308.230:1137): avc: denied { getopt } for pid=15665 comm="syz.4.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 850.840140][T15668] FAT-fs (nbd4): unable to read boot sector [ 851.041776][ T29] audit: type=1400 audit(2000000308.550:1138): avc: denied { write } for pid=15665 comm="syz.4.2609" name="strings" dev="configfs" ino=14663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.096351][T15669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2609'. [ 851.259519][ T29] audit: type=1400 audit(2000000308.640:1139): avc: denied { write } for pid=15665 comm="syz.4.2609" name="functions" dev="configfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.986621][T15673] binder_alloc: 15672: pid 15672 spamming oneway? 1 buffers allocated for a total size of 4096 [ 852.058641][ T29] audit: type=1400 audit(2000000309.620:1140): avc: denied { append } for pid=15674 comm="syz.4.2611" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 852.923827][T15682] xt_hashlimit: size too large, truncated to 1048576 [ 853.091067][ T29] audit: type=1400 audit(2000000310.650:1141): avc: denied { watch watch_reads } for pid=15681 comm="syz.4.2612" path="pipe:[45194]" dev="pipefs" ino=45194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 853.252396][T15657] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 853.316903][T15688] loop6: detected capacity change from 0 to 2640 [ 853.329706][T15688] buffer_io_error: 6 callbacks suppressed [ 853.329728][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.344288][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.352354][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.360627][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.369894][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.378337][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.387950][T15689] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 853.397697][T15689] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 853.407742][T15689] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 853.417711][T15689] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 853.434484][T15689] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 853.554282][T15689] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 853.564346][T15689] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 853.574395][T15689] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 853.598391][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.606758][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.614952][T15688] ldm_validate_partition_table(): Disk read failed. [ 853.621914][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.630238][T15688] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.638937][T15688] Dev loop6: unable to read RDB block 0 [ 853.646124][T15688] loop6: unable to read partition table [ 853.653671][T15688] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 853.728459][T15657] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 854.070829][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.078041][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.562686][T15703] overlayfs: failed to clone upperpath [ 855.023076][T15707] xt_NFQUEUE: number of total queues is 0 [ 856.221686][ T29] audit: type=1400 audit(2000000313.770:1142): avc: denied { ioctl } for pid=15726 comm="syz.3.2623" path="socket:[44956]" dev="sockfs" ino=44956 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 856.681267][ T5613] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 856.874813][T15736] syzkaller0: entered promiscuous mode [ 856.881182][T15736] syzkaller0: entered allmulticast mode [ 858.058447][T15756] Cannot find del_set index 4 as target [ 858.094395][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 858.317318][ T5613] Bluetooth: hci1: unexpected event for opcode 0x202a [ 858.406040][T15769] trusted_key: syz.2.2634 sent an empty control message without MSG_MORE. [ 858.647050][T15775] xt_hashlimit: size too large, truncated to 1048576 [ 859.286378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 859.459593][T15787] syzkaller0: entered promiscuous mode [ 859.585165][T15787] syzkaller0: entered allmulticast mode [ 860.483760][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 861.894133][T15816] binder: 15814:15816 ioctl c0306201 0 returned -14 [ 862.047733][T15821] trusted_key: encrypted_key: insufficient parameters specified [ 862.059276][T15821] trusted_key: encrypted_key: insufficient parameters specified [ 862.564856][T15826] xt_hashlimit: size too large, truncated to 1048576 [ 862.890575][T15827] xt_hashlimit: size too large, truncated to 1048576 [ 863.621320][T15841] syzkaller0: entered promiscuous mode [ 863.629437][T15841] syzkaller0: entered allmulticast mode [ 863.726357][T15841] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 864.514213][ T5711] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 864.681357][T15871] binder: 15870:15871 ioctl c0306201 0 returned -14 [ 864.714157][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 864.731023][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 864.769594][ T5711] usb 5-1: config 5 has an invalid interface number: 116 but max is 0 [ 864.793443][ T5711] usb 5-1: config 5 has no interface number 0 [ 864.828826][ T5711] usb 5-1: config 5 interface 116 has no altsetting 0 [ 864.982795][T15877] xt_NFQUEUE: number of total queues is 0 [ 865.085077][T15879] xt_hashlimit: size too large, truncated to 1048576 [ 865.255447][ T5711] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=bb.73 [ 865.283605][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.301709][ T5711] usb 5-1: Product: syz [ 865.312772][ T5711] usb 5-1: Manufacturer: syz [ 865.322800][ T5711] usb 5-1: SerialNumber: syz [ 865.391681][T15883] kAFS: unable to lookup cell 'ÿ' [ 865.560467][ T5711] gspca_main: spca505-2.14.0 probing 041e:401d [ 865.579503][ T5711] gspca_spca505: reg write: error -71 [ 865.599923][ T5711] spca505 5-1:5.116: probe with driver spca505 failed with error -5 [ 865.786911][ T5711] usb 5-1: USB disconnect, device number 37 [ 865.861780][T15887] xt_hashlimit: size too large, truncated to 1048576 [ 867.012331][T15902] overlayfs: failed to clone lowerpath [ 867.066190][T15904] overlayfs: failed to clone lowerpath [ 867.591935][T15909] syzkaller0: entered promiscuous mode [ 867.597699][T15909] syzkaller0: entered allmulticast mode [ 867.616533][T15909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 867.760640][ T5613] Bluetooth: Unexpected start frame (len 18) [ 867.907233][ T5613] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 868.273010][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2675'. [ 868.300398][T15933] xt_hashlimit: size too large, truncated to 1048576 [ 868.636613][T15938] xt_hashlimit: size too large, truncated to 1048576 [ 870.197564][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.206458][ T29] audit: type=1400 audit(2000000327.290:1143): avc: denied { write } for pid=15946 comm="syz.0.2679" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 870.274866][ T29] audit: type=1400 audit(2000000327.290:1144): avc: denied { open } for pid=15946 comm="syz.0.2679" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 870.529607][T15961] overlayfs: failed to clone lowerpath [ 870.588127][T15963] overlayfs: failed to clone lowerpath [ 871.007911][ T29] audit: type=1400 audit(2000000328.570:1145): avc: denied { ioctl } for pid=15942 comm="syz.2.2678" path="socket:[45611]" dev="sockfs" ino=45611 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 872.373586][T15977] syzkaller0: entered promiscuous mode [ 872.380852][T15977] syzkaller0: entered allmulticast mode [ 873.663380][ T46] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 873.715914][T16006] xt_hashlimit: size too large, truncated to 1048576 [ 874.649143][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.661435][T16013] trusted_key: encrypted_key: insufficient parameters specified [ 874.758034][ T46] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 874.766451][ T46] usb 5-1: config 64 has no interface number 0 [ 874.772743][ T46] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 874.784075][ T46] usb 5-1: config 64 interface 44 has no altsetting 0 [ 874.797153][ T46] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 874.807857][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.816267][ T46] usb 5-1: Product: syz [ 874.820512][ T46] usb 5-1: Manufacturer: syz [ 874.831552][ T46] usb 5-1: SerialNumber: syz [ 874.907865][T16017] siw: device registration error -23 [ 876.114212][ T46] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 876.147220][ T46] usb 5-1: USB disconnect, device number 38 [ 876.162062][T16031] syzkaller0: entered promiscuous mode [ 876.180222][T16031] syzkaller0: entered allmulticast mode [ 876.198643][T16031] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 876.398703][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 876.928651][T16043] JFS: discard option not supported on device [ 876.944794][T16043] Mount JFS Failure: -5 [ 876.949914][T16043] jfs_mount failed w/return code = -5 [ 877.110964][T16047] xt_hashlimit: size too large, truncated to 1048576 [ 879.014130][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 879.207125][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 879.223372][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 879.241969][ T9] usb 1-1: config 160 has an invalid interface number: 187 but max is 0 [ 879.253811][ T9] usb 1-1: config 160 has no interface number 0 [ 879.275320][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 879.290464][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 879.357141][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 879.409597][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 879.586615][ T9] usb 1-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 879.618606][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 879.631004][T16104] xt_hashlimit: size too large, truncated to 1048576 [ 879.797280][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 879.813041][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 879.825204][ T9] usb 1-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 879.838979][ T9] usb 1-1: config 160 interface 187 has no altsetting 0 [ 879.849004][ T9] usb 1-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 879.858430][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.871725][ T9] usb 1-1: Product: syz [ 879.876354][ T9] usb 1-1: Manufacturer: syz [ 879.881022][ T9] usb 1-1: SerialNumber: syz [ 879.897948][T16076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 879.917460][T16076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 879.925920][T16076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 880.210623][ T9] pl2303 1-1:160.187: pl2303 converter detected [ 880.219126][ T9] pl2303 1-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 880.341151][T16114] netlink: 'syz.2.2723': attribute type 2 has an invalid length. [ 880.639755][ T9] usb 1-1: USB disconnect, device number 41 [ 880.674144][ T804] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 881.484139][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 881.536624][T16122] CIFS: Attempting to mount //127.0.0.1/share [ 881.557806][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.609318][ T804] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 881.638465][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.666940][ T804] usb 5-1: Product: syz [ 881.674577][T16130] syzkaller0: entered promiscuous mode [ 881.677493][ T804] usb 5-1: Manufacturer: syz [ 881.687302][T16130] syzkaller0: entered allmulticast mode [ 881.694651][ T804] usb 5-1: SerialNumber: syz [ 881.710285][ T804] usb 5-1: config 0 descriptor?? [ 881.724271][T16130] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 881.739784][T16122] CIFS: VFS: Error connecting to socket. Aborting operation. [ 881.747521][T16122] CIFS: VFS: cifs_mount failed w/return code = -4 [ 881.777719][ T804] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 882.514545][ T5711] usb 5-1: USB disconnect, device number 39 [ 883.002497][ T804] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 883.070079][T16159] xt_hashlimit: size too large, truncated to 1048576 [ 883.966054][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 883.992781][ T804] usb 1-1: config 247 has an invalid interface number: 221 but max is 0 [ 884.283305][ T804] usb 1-1: config 247 has no interface number 0 [ 884.298825][ T804] usb 1-1: config 247 interface 221 has no altsetting 0 [ 884.322741][ T804] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55 [ 884.344191][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.359633][ T804] usb 1-1: Product: syz [ 884.369063][ T804] usb 1-1: Manufacturer: syz [ 884.379204][ T804] usb 1-1: SerialNumber: syz [ 884.414118][ T804] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:247.221/input/input24 [ 884.661383][ T4962] bcm5974 1-1:247.221: could not read from device [ 884.675407][ T4962] bcm5974 1-1:247.221: could not read from device [ 884.680663][ T804] usb 1-1: USB disconnect, device number 42 [ 885.285065][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2746'. [ 885.427826][ T5613] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 885.434285][ T5613] Bluetooth: hci2: command 0x0401 tx timeout [ 886.025486][T16206] xt_hashlimit: size too large, truncated to 1048576 [ 886.034312][T16207] overlayfs: failed to clone upperpath [ 887.982317][T16227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2758'. [ 888.324094][T16223] JFS: discard option not supported on device [ 888.337440][T16223] Mount JFS Failure: -5 [ 888.341682][T16223] jfs_mount failed w/return code = -5 [ 888.649302][ T5613] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 889.417557][T16245] xt_NFQUEUE: number of total queues is 0 [ 889.975546][T16252] xt_hashlimit: size too large, truncated to 1048576 [ 890.390824][T16251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16251 comm=syz.0.2764 [ 891.039084][T16259] xt_hashlimit: size too large, truncated to 1048576 [ 891.253050][T16267] trusted_key: encrypted_key: insufficient parameters specified [ 891.265076][T16267] trusted_key: encrypted_key: insufficient parameters specified [ 891.674542][T16262] xt_connbytes: Forcing CT accounting to be enabled [ 891.696695][T16262] set match dimension is over the limit! [ 892.733855][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 892.756205][T16284] ceph: No mds server is up or the cluster is laggy [ 892.781355][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 893.344182][ T5726] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 893.428284][T16305] xt_hashlimit: size too large, truncated to 1048576 [ 893.904329][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 893.911488][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.928371][ T5726] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 893.951082][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.969547][ T5726] usb 5-1: Product: syz [ 893.979073][ T5726] usb 5-1: Manufacturer: syz [ 893.988325][ T5726] usb 5-1: SerialNumber: syz [ 893.996968][ T5726] usb 5-1: config 0 descriptor?? [ 894.005855][ T5726] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 894.018103][ T5726] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 894.315846][T16312] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 894.323715][T16312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2781'. [ 895.289045][T16312] team0: Port device geneve1 added [ 895.330660][ T5710] usb 5-1: USB disconnect, device number 40 [ 895.751567][ T5613] Bluetooth: hci2: unexpected event for opcode 0x041b [ 896.590146][T16334] xt_NFQUEUE: number of total queues is 0 [ 896.639202][T16326] JFS: discard option not supported on device [ 896.647037][T16326] Mount JFS Failure: -5 [ 896.651185][T16326] jfs_mount failed w/return code = -5 [ 896.869728][T16341] trusted_key: encrypted_key: keylen parameter is missing [ 897.297309][T16346] xt_hashlimit: size too large, truncated to 1048576 [ 898.554156][ T804] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 898.764196][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 898.905800][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 899.019549][ T804] usb 1-1: config 3 has an invalid interface number: 171 but max is 0 [ 899.090507][ T804] usb 1-1: config 3 has no interface number 0 [ 899.184709][ T804] usb 1-1: New USB device found, idVendor=07ca, idProduct=b835, bcdDevice=1a.86 [ 899.284924][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.357865][ T804] usb 1-1: Product: syz [ 899.391642][ T804] usb 1-1: Manufacturer: syz [ 899.426028][ T804] usb 1-1: SerialNumber: syz [ 899.789161][ T804] usb 1-1: USB disconnect, device number 43 [ 899.808337][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 899.817416][T16371] bridge_slave_1: left promiscuous mode [ 900.330377][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.364079][T16371] bridge_slave_0: left allmulticast mode [ 900.369782][T16371] bridge_slave_0: left promiscuous mode [ 900.375480][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.569878][T16392] xt_hashlimit: size too large, truncated to 1048576 [ 902.081995][T16381] JFS: discard option not supported on device [ 902.088729][T16381] Mount JFS Failure: -5 [ 902.092937][T16381] jfs_mount failed w/return code = -5 [ 902.534319][ T5613] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 902.561111][ T804] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 902.684221][T16412] xt_NFQUEUE: number of total queues is 0 [ 902.763232][ T804] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.182246][T16411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2812'. [ 903.470746][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.912440][ T804] usb 1-1: config 0 descriptor?? [ 903.927730][ T804] cp210x 1-1:0.0: cp210x converter detected [ 904.143868][ T804] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 904.164097][ T804] cp210x 1-1:0.0: querying part number failed [ 904.174520][ T804] usb 1-1: cp210x converter now attached to ttyUSB0 [ 904.196402][ T804] usb 1-1: USB disconnect, device number 44 [ 904.220282][ T804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 904.234594][ T804] cp210x 1-1:0.0: device disconnected [ 905.468434][T16423] 9p: Could not find request transport: tdma [ 905.501988][T16423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2825'. [ 905.821122][ T29] audit: type=1400 audit(2000000363.370:1146): avc: denied { view } for pid=16422 comm="syz.4.2825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 907.328326][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2823'. [ 907.564232][ T5711] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 907.718587][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 907.804454][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 907.831284][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.902819][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 907.920646][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 907.971113][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.994973][ T5711] usb 1-1: config 1 interface 0 has no altsetting 1 [ 908.040052][ T5711] usb 1-1: config 1 interface 1 has no altsetting 0 [ 908.180479][ T5711] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 908.496252][ T9] usb 5-1: config 0 descriptor?? [ 908.510485][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.521413][ T9] cp210x 5-1:0.0: cp210x converter detected [ 908.531184][ T5711] usb 1-1: Product: syz [ 908.546786][ T5711] usb 1-1: Manufacturer: syz [ 908.556308][ T5711] usb 1-1: SerialNumber: syz [ 908.653660][ T5711] snd-ua101 1-1:1.1: invalid num_altsetting [ 908.678836][ T5711] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 908.694585][ T5711] usb 1-1: selecting invalid altsetting 0 [ 908.731128][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 908.742336][ T5711] usb 1-1: selecting invalid altsetting 0 [ 908.754619][ T5711] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 908.762790][ T9] cp210x 5-1:0.0: querying part number failed [ 908.953637][ T5711] usb 1-1: selecting invalid altsetting 0 [ 908.969185][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 908.977380][ T5711] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 908.997692][ T9] usb 5-1: USB disconnect, device number 41 [ 909.369259][T16474] lo speed is unknown, defaulting to 1000 [ 909.400029][T16474] lo speed is unknown, defaulting to 1000 [ 909.595311][ T5711] usb 1-1: selecting invalid altsetting 0 [ 909.622954][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 909.633882][ T5711] snd-ua101 1-1:1.1: probe with driver snd-ua101 failed with error -22 [ 909.771042][ T9] cp210x 5-1:0.0: device disconnected [ 909.802892][ T5711] usb 1-1: USB disconnect, device number 45 [ 909.937531][T16481] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 911.769576][T16519] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 911.795980][T16516] xt_hashlimit: size too large, truncated to 1048576 [ 911.924354][ T5711] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 912.078494][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2852'. [ 912.115906][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 912.136586][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.150245][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 912.176487][ T5711] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 912.212735][ T5711] usb 1-1: New USB device found, idVendor=0499, idProduct=1015, bcdDevice= 0.40 [ 912.234921][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.250357][ T5711] usb 1-1: Product: syz [ 912.259992][ T5711] usb 1-1: Manufacturer: syz [ 912.274209][ T5711] usb 1-1: SerialNumber: syz [ 912.396256][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2861'. [ 912.594879][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.618750][ T5711] usb 1-1: invalid MIDI out EP 0 [ 913.331847][T16577] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 913.369229][T16577] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 913.418811][T16579] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 913.433493][ T5711] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 913.483761][ T5711] usb 1-1: USB disconnect, device number 46 [ 913.607570][T16586] udevd[16586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.663889][ T29] audit: type=1400 audit(2000000371.220:1147): avc: denied { compute_member } for pid=16589 comm="syz.0.2878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 913.750677][T16592] xt_hashlimit: size too large, truncated to 1048576 [ 914.228029][T16593] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2878'. [ 914.243055][T16593] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2878'. [ 915.158511][T16610] JFS: discard option not supported on device [ 915.167708][T16610] Mount JFS Failure: -5 [ 915.171892][T16610] jfs_mount failed w/return code = -5 [ 915.563020][T16629] binder: 16626:16629 ioctl c0306201 0 returned -14 [ 915.904854][T16638] xt_hashlimit: size too large, truncated to 1048576 [ 916.511778][ T29] audit: type=1400 audit(2000000374.040:1148): avc: denied { append } for pid=16636 comm="syz.0.2894" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 916.840248][T16648] syzkaller0: entered promiscuous mode [ 916.845966][T16648] syzkaller0: entered allmulticast mode [ 916.854760][T16648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 920.107157][T16720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16720 comm=syz.1.2923 [ 920.728859][T16742] xt_NFQUEUE: number of total queues is 0 [ 920.970915][T16741] JFS: discard option not supported on device [ 920.979877][T16741] Mount JFS Failure: -5 [ 920.984207][T16741] jfs_mount failed w/return code = -5 [ 921.218264][T16744] syzkaller0: entered promiscuous mode [ 921.241483][T16744] syzkaller0: entered allmulticast mode [ 921.259306][T16744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 921.457469][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2932'. [ 921.468537][T16755] openvswitch: netlink: Missing key (keys=40, expected=100) [ 921.628842][T16768] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 921.645828][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 921.862756][T16779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16779 comm=syz.0.2939 [ 922.370072][T16786] program syz.4.2945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.521123][T16796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 922.691372][T16806] binder: 16804:16806 ioctl c0306201 0 returned -14 [ 922.756589][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.113368][T16830] syzkaller0: entered promiscuous mode [ 923.132319][T16830] syzkaller0: entered allmulticast mode [ 923.157737][T16830] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 923.224112][T16834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16834 comm=syz.0.2964 [ 923.354207][T16845] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 924.068319][T16874] tmpfs: Bad value for 'mpol' [ 924.869737][T16906] overlayfs: failed to clone upperpath [ 926.123697][T16930] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 926.524887][T16944] syzkaller0: entered promiscuous mode [ 926.537586][T16944] syzkaller0: entered allmulticast mode [ 926.565050][T16944] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 927.024304][ T804] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 927.244321][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 927.290312][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.385804][ T804] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 927.689744][ T804] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.771903][T16964] Process accounting resumed [ 927.836977][ T804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 927.845697][ T804] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 927.858121][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.866656][ T804] usb 1-1: Product: syz [ 927.870936][ T804] usb 1-1: Manufacturer: syz [ 927.875946][ T804] usb 1-1: SerialNumber: syz [ 927.884453][ T804] usb 1-1: config 0 descriptor?? [ 927.905882][ T804] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 928.129727][ T804] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 928.154344][ T804] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 928.166390][ T804] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 928.430624][ T804] usb 1-1: USB disconnect, device number 47 [ 928.671682][T16984] syzkaller0: entered promiscuous mode [ 928.683713][T16984] syzkaller0: entered allmulticast mode [ 928.733273][T16984] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 929.980242][ T29] audit: type=1400 audit(2000000387.540:1149): avc: denied { accept } for pid=17016 comm="syz.3.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 930.044612][T17012] Process accounting resumed [ 930.659500][T17041] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 931.222366][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 931.244697][ T804] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 931.269244][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.430940][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 931.447528][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 931.501298][ T804] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 931.558458][ T804] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 931.643836][ T804] usb 5-1: string descriptor 0 read error: -22 [ 931.664458][ T804] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 931.738385][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.018313][ T804] snd-usb-6fire 5-1:2.0: unknown device firmware state received from device: [ 932.048395][ T804] eb 2e 87 4b 9a 05 e6 5e [ 932.077059][ T804] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 932.387247][ T5796] usb 5-1: USB disconnect, device number 42 [ 932.680905][ T29] audit: type=1400 audit(2000000390.240:1150): avc: denied { write } for pid=17084 comm="syz.0.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 933.389103][T17098] JFS: discard option not supported on device [ 933.394305][T17102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 933.395875][T17098] Mount JFS Failure: -5 [ 933.405906][ T5710] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 933.414097][T17098] jfs_mount failed w/return code = -5 [ 933.472468][T17103] xt_hashlimit: size too large, truncated to 1048576 [ 933.754413][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 933.893457][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.181176][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.192641][ T5710] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 934.213858][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.222312][ T5710] usb 1-1: Product: syz [ 934.226732][ T5710] usb 1-1: Manufacturer: syz [ 934.231435][ T5710] usb 1-1: SerialNumber: syz [ 934.896578][ T5710] usb 1-1: disable ehci-hcd to run US-144 [ 934.932020][ T5710] usb 1-1: USB disconnect, device number 48 [ 935.013394][T17118] Process accounting resumed [ 935.968239][ T29] audit: type=1400 audit(2000000393.460:1151): avc: denied { getopt } for pid=17138 comm="syz.0.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 936.736880][ T5613] Bluetooth: hci3: Dropping invalid advertising data [ 936.746424][ T5613] Bluetooth: hci3: Malformed LE Event: 0x02 [ 936.955957][T17155] xt_hashlimit: size too large, truncated to 1048576 [ 938.601048][T17177] Process accounting resumed [ 938.789616][T17179] xt_hashlimit: max too large, truncated to 1048576 [ 938.907911][T17189] hfsplus: unable to find HFS+ superblock [ 939.882346][T17199] 9p: Could not find request transport: tdma [ 939.896601][T17208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3102'. [ 941.374682][ T29] audit: type=1400 audit(2000000398.610:1152): avc: denied { mounton } for pid=17229 comm="syz.4.3110" path="/553/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 944.630830][ T29] audit: type=1400 audit(2000000402.180:1153): avc: denied { write } for pid=17267 comm="syz.4.3120" name="functions" dev="configfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 944.798465][ T29] audit: type=1400 audit(2000000402.200:1154): avc: denied { write } for pid=17267 comm="syz.4.3120" name="c.1" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.016585][ T29] audit: type=1400 audit(2000000402.200:1155): avc: denied { write } for pid=17267 comm="syz.4.3120" name="c.1" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 946.944291][T17302] lo speed is unknown, defaulting to 1000 [ 946.972593][T17302] lo speed is unknown, defaulting to 1000 [ 947.240350][T17297] JFS: discard option not supported on device [ 947.302349][T17297] Mount JFS Failure: -5 [ 947.314394][T17297] jfs_mount failed w/return code = -5 [ 948.881153][T17336] hfsplus: unable to find HFS+ superblock [ 949.546432][T17349] loop6: detected capacity change from 0 to 2640 [ 949.556729][T17349] buffer_io_error: 6 callbacks suppressed [ 949.556779][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.570786][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.579092][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.587534][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.606505][T17350] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 949.616351][T17350] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 949.626335][T17350] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 949.636320][T17350] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 949.652362][T17350] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 949.788712][T17350] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 949.798998][T17350] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 949.809240][T17350] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 949.960745][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.969355][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.977699][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.986949][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.995032][T17349] ldm_validate_partition_table(): Disk read failed. [ 950.004916][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.013843][T17349] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.022433][T17349] Dev loop6: unable to read RDB block 0 [ 950.029445][T17349] loop6: unable to read partition table [ 950.037815][T17349] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 951.653008][T17395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3158'. [ 951.739145][T17399] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3170'. [ 952.001797][T17412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 953.024131][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 954.077726][T17435] Process accounting resumed [ 957.227775][T17476] lo speed is unknown, defaulting to 1000 [ 957.238697][T17476] lo speed is unknown, defaulting to 1000 [ 958.034123][ T46] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 958.194546][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 958.259374][ T46] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 958.296742][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.413195][ T46] usb 1-1: Product: syz [ 958.463834][ T46] usb 1-1: Manufacturer: syz [ 958.500906][ T46] usb 1-1: SerialNumber: syz [ 958.628480][ T46] usb 1-1: config 0 descriptor?? [ 958.645595][ T46] gspca_main: spca508-2.14.0 probing 041e:4018 [ 958.837044][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3206'. [ 959.061818][ T46] gspca_spca508: reg_read err -71 [ 959.086956][ T46] gspca_spca508: reg_read err -71 [ 959.112451][ T29] audit: type=1400 audit(2000000416.670:1156): avc: denied { write } for pid=17487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.142904][ T46] gspca_spca508: reg_read err -71 [ 959.187688][ T46] gspca_spca508: reg_read err -71 [ 959.201335][ T46] gspca_spca508: reg write: error -71 [ 959.216357][ T46] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 959.266312][ T46] usb 1-1: USB disconnect, device number 49 [ 959.483569][T17532] xt_hashlimit: size too large, truncated to 1048576 [ 959.991115][ T29] audit: type=1400 audit(2000000417.550:1157): avc: denied { write } for pid=17531 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.332746][T17546] netlink: 'syz.1.3207': attribute type 8 has an invalid length. [ 960.354285][T17546] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3207'. [ 961.515102][T17576] xt_hashlimit: size too large, truncated to 1048576 [ 962.518014][ T29] audit: type=1400 audit(2000000420.070:1158): avc: denied { ioctl } for pid=17584 comm="syz.0.3220" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 963.192839][ T29] audit: type=1400 audit(2000000420.750:1159): avc: denied { write } for pid=17554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.481070][ T29] audit: type=1400 audit(2000000421.040:1160): avc: denied { write } for pid=17597 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.277144][T17621] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 965.319832][T17621] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 965.342737][T17621] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 965.369127][T17621] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 965.386499][T17624] xt_l2tp: invalid flags combination: 4 [ 966.891066][T17665] xt_NFQUEUE: number of total queues is 0 [ 967.317480][ T5613] Bluetooth: hci1: unexpected event for opcode 0x200b [ 967.634083][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 967.728128][T17685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.838407][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.879604][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 967.895619][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 967.920078][ T9] usb 5-1: Product: syz [ 967.932179][ T9] usb 5-1: Manufacturer: syz [ 967.961550][ T9] usb 5-1: SerialNumber: syz [ 968.285442][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 968.826480][ T5726] usb 5-1: USB disconnect, device number 43 [ 968.871179][ T5726] usblp0: removed [ 969.527939][T17730] tipc: Enabling of bearer rejected, failed to enable media [ 970.084881][T17752] tc_dump_action: action bad kind [ 970.229296][T17756] openvswitch: netlink: IPv4 tunnel dst address is zero [ 970.633665][ T29] audit: type=1400 audit(2000000428.190:1161): avc: denied { read } for pid=17769 comm="syz.0.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 970.972102][T17780] tipc: Enabling of bearer rejected, already enabled [ 971.025093][T17780] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 971.236753][T17784] binder: BINDER_SET_CONTEXT_MGR already set [ 971.260844][T17784] binder: 17782:17784 ioctl 4018620d 200000000300 returned -16 [ 971.853708][T17803] xt_hashlimit: max too large, truncated to 1048576 [ 971.868769][T17803] xt_cgroup: xt_cgroup: no path or classid specified [ 972.122386][T17812] tipc: Enabling of bearer rejected, already enabled [ 972.133697][ T29] audit: type=1400 audit(2000000429.680:1162): avc: denied { ioctl } for pid=17814 comm="syz.0.3308" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 972.168415][T17812] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 972.277236][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3311'. [ 973.604925][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 974.437421][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 974.444296][ T46] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 974.519784][T17907] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 974.605301][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 974.614353][ T46] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 974.634811][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.654067][ T46] usb 5-1: Product: syz [ 974.658336][ T46] usb 5-1: Manufacturer: syz [ 974.669279][ T46] usb 5-1: SerialNumber: syz [ 974.687095][ T46] usb 5-1: config 0 descriptor?? [ 975.313150][ T46] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 975.434716][ T46] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 975.469047][ T46] usb 5-1: USB disconnect, device number 44 [ 975.760211][ T29] audit: type=1400 audit(2000000433.320:1163): avc: denied { shutdown } for pid=17939 comm="syz.1.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 977.046014][T17978] tipc: Enabling of bearer rejected, failed to enable media [ 977.542866][T18007] 9p: Bad value for 'rfdno' [ 977.763458][T18014] webusb: landingPage URL 2 bytes too long for given URL scheme [ 978.112448][T18030] tipc: Enabling of bearer rejected, failed to enable media [ 979.046088][T18057] JFS: discard option not supported on device [ 979.086268][T18057] Mount JFS Failure: -5 [ 979.091245][T18057] jfs_mount failed w/return code = -5 [ 979.485012][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 979.846874][T18082] xt_NFQUEUE: number of total queues is 0 [ 980.808975][T18095] tipc: Enabling of bearer rejected, failed to enable media [ 981.664253][T16165] Bluetooth: hci2: command 0x0401 tx timeout [ 982.099514][T18126] syzkaller0: entered promiscuous mode [ 982.111162][T18126] syzkaller0: entered allmulticast mode [ 982.128307][T18126] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 982.462341][T18132] xt_NFQUEUE: number of total queues is 0 [ 983.157989][T18142] ªªªªªª: renamed from vlan0 (while UP) [ 983.607996][T18154] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 983.780733][T16165] Bluetooth: hci2: command 0x0401 tx timeout [ 984.123036][T18153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'. [ 984.558865][ T29] audit: type=1400 audit(2000000442.120:1164): avc: denied { remount } for pid=18166 comm="syz.4.3434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 984.603637][T18170] option changes via remount are deprecated (pid=18166 comm=syz.4.3434) [ 984.686701][T18170] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 986.441581][T18192] xt_hashlimit: size too large, truncated to 1048576 [ 987.224169][ T5710] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 987.484086][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 987.593300][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 987.620037][ T5710] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 987.638503][ T5710] usb 1-1: can't read configurations, error -71 [ 988.769952][ T5710] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 988.977568][ T5710] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 988.998103][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.118907][ T5710] usb 1-1: Product: syz [ 989.142223][ T5710] usb 1-1: Manufacturer: syz [ 989.163289][ T5710] usb 1-1: SerialNumber: syz [ 989.443629][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 990.074689][ T5805] usb 1-1: USB disconnect, device number 51 [ 990.704189][ T9] usb 1-1: Service connection timeout for: 256 [ 990.732771][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 990.777202][ T9] ath9k_htc: Failed to initialize the device [ 990.813334][ T5805] usb 1-1: ath9k_htc: USB layer deinitialized [ 990.835590][ T29] audit: type=1400 audit(2000000448.390:1165): avc: denied { write } for pid=18261 comm="syz.0.3470" name="functions" dev="configfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 990.866240][T18262] file system registered [ 990.888142][T18262] unloading [ 990.963636][ T29] audit: type=1400 audit(2000000448.450:1166): avc: denied { write } for pid=18261 comm="syz.0.3470" name="functions" dev="configfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.234413][ T29] audit: type=1400 audit(2000000448.790:1167): avc: denied { write } for pid=18276 comm="syz.0.3477" name="instances" dev="tracefs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 991.264469][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 991.284108][ T29] audit: type=1400 audit(2000000448.850:1168): avc: denied { add_name } for pid=18276 comm="syz.0.3477" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 991.317678][ T29] audit: type=1400 audit(2000000448.850:1169): avc: denied { create } for pid=18276 comm="syz.0.3477" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 991.445229][T18286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=18286 comm=syz.4.3476 [ 991.615753][T18279] bridge_slave_0: default FDB implementation only supports local addresses [ 992.360991][T18313] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 992.555194][T18322] 9pnet_fd: Insufficient options for proto=fd [ 992.704140][ T5726] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 992.715142][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.855883][ T5726] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 992.865113][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 992.878039][ T5726] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 992.887372][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.895621][ T5726] usb 1-1: Product: syz [ 992.899933][ T5726] usb 1-1: Manufacturer: syz [ 992.904904][ T5726] usb 1-1: SerialNumber: syz [ 992.911293][ T5726] usb 1-1: config 0 descriptor?? [ 992.934497][ T5726] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 993.338573][ T5726] gspca_sunplus: reg_r err -71 [ 993.347366][ T5726] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 993.365213][ T5726] usb 1-1: USB disconnect, device number 52 [ 993.580254][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3505'. [ 993.601115][T18349] ipvlan3: entered allmulticast mode [ 993.607477][T18349] syz_tun: entered allmulticast mode [ 993.754226][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 993.944807][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 993.959513][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.983856][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 993.998442][ T9] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 994.010551][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 994.022410][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 994.045377][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.071949][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 994.102518][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.171204][T18387] tipc: Enabled bearer , priority 0 [ 994.179622][T18387] syzkaller0: entered promiscuous mode [ 994.185569][T18387] syzkaller0: entered allmulticast mode [ 994.205511][T18387] tipc: Resetting bearer [ 994.222821][T18386] tipc: Resetting bearer [ 994.256835][T18386] tipc: Disabling bearer [ 994.322451][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 994.331259][ T9] usbtmc 5-1:16.0: can't read capabilities [ 994.383208][T18396] sctp: [Deprecated]: syz.2.3522 (pid 18396) Use of int in max_burst socket option. [ 994.383208][T18396] Use struct sctp_assoc_value instead [ 994.535741][ T46] usb 5-1: USB disconnect, device number 45 [ 994.654136][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 994.806114][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.818322][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 994.828820][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 994.839550][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 994.850801][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 994.861586][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 994.871747][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 994.882794][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 994.892970][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 994.904119][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 994.914336][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 994.924512][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 994.939509][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 994.948880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.956924][ T9] usb 1-1: Product: syz [ 994.961115][ T9] usb 1-1: Manufacturer: syz [ 994.974040][ T9] usb 1-1: SerialNumber: syz [ 994.986453][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 994.997153][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.005744][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.012969][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.021208][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.029581][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.037501][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.045232][T18398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.067613][ T9] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 995.095578][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 995.110848][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 995.123699][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 995.135043][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 995.142802][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 995.151264][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 995.161072][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 995.344181][ T5726] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 995.409870][ T46] usb 1-1: USB disconnect, device number 53 [ 995.425070][ T46] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 995.438496][ T46] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 995.449575][ T46] keyspan 1-1:1.0: device disconnected [ 995.494064][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 995.500684][ T5726] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 995.512249][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 995.522388][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 995.532400][ T5726] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 995.545790][ T5726] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 995.554922][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.787966][ T5726] usb 5-1: GET_CAPABILITIES returned 0 [ 995.799919][ T5726] usbtmc 5-1:16.0: can't read capabilities [ 995.824810][T18431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3536'. [ 996.028381][ T5726] usb 5-1: USB disconnect, device number 46 [ 996.254581][T18445] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3541'. [ 996.266266][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'. [ 996.754304][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 996.906765][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.922094][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.932622][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 996.943349][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.959193][ T9] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 996.971219][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.982211][ T9] usb 1-1: Product: syz [ 996.987179][ T9] usb 1-1: Manufacturer: syz [ 996.991961][ T9] usb 1-1: SerialNumber: syz [ 997.007515][ T9] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 997.019917][ T9] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 997.031412][ T9] usbserial_generic 1-1:1.0: generic converter detected [ 997.045826][ T9] usb 1-1: generic converter now attached to ttyUSB0 [ 997.135198][ T29] audit: type=1400 audit(2000000454.700:1170): avc: denied { setopt } for pid=18482 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 997.226410][ T9] usb 1-1: USB disconnect, device number 54 [ 997.243792][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 997.252515][ T9] usbserial_generic 1-1:1.0: device disconnected [ 997.425007][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 997.577400][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 997.591079][ T5726] IPVS: starting estimator thread 0... [ 997.606091][ T46] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 997.624832][ T46] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 997.645405][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 997.662206][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.681096][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.704639][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.704675][T18502] IPVS: using max 39 ests per chain, 93600 per kthread [ 997.724753][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 997.747048][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.795056][ T46] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 997.807501][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.832406][ T46] usb 5-1: config 0 descriptor?? [ 997.856303][T18509] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 997.972080][T18515] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18515] [ 998.030706][T18519] xt_hashlimit: size too large, truncated to 1048576 [ 998.075837][ T46] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 998.297341][ T46] usb 5-1: USB disconnect, device number 47 [ 998.317891][ T46] usblp0: removed [ 999.421346][T18584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 999.494193][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 999.654084][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 999.661180][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.671576][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.683550][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 999.696455][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.709964][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 999.719484][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.964303][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 999.978116][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1000.037702][T18607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3606'. [ 1000.186860][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1000.192772][ T5613] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 1000.199085][ T9] usb 5-1: USB disconnect, device number 48 [ 1000.547899][T18635] tipc: Enabling of bearer rejected, failed to enable media [ 1001.624325][ T5711] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1001.844524][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 1001.851869][ T5711] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1001.881881][ T5711] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1001.912541][ T5711] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1001.931794][ T5711] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1001.947526][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.964120][ T5711] usb 1-1: Product: syz [ 1001.972893][ T5711] usb 1-1: Manufacturer: syz [ 1002.005775][ T5711] usb 1-1: SerialNumber: syz [ 1002.025059][ T5711] usb 1-1: config 0 descriptor?? [ 1002.178659][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3634'. [ 1002.469140][ T5711] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1002.609316][T18706] oxu210hp-hcd pcspkr: error -ENXIO: IRQ index 0 not found [ 1003.123921][ T5711] usb 1-1: USB disconnect, device number 55 [ 1004.673322][ T29] audit: type=1400 audit(2000000462.230:1171): avc: denied { write } for pid=18735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.055641][ T29] audit: type=1400 audit(2000000462.620:1172): avc: denied { write } for pid=18767 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.172632][ T29] audit: type=1400 audit(2000000462.650:1173): avc: denied { ioctl } for pid=18768 comm="syz.1.3659" path="socket:[54730]" dev="sockfs" ino=54730 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1006.648884][ T29] audit: type=1400 audit(2000000464.220:1174): avc: denied { write } for pid=18780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.874873][T18827] tipc: Enabled bearer , priority 0 [ 1006.904592][T18827] syzkaller0: entered promiscuous mode [ 1006.932997][T18827] syzkaller0: entered allmulticast mode [ 1006.962010][T18827] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1007.000490][ T29] audit: type=1400 audit(2000000464.560:1175): avc: denied { write } for pid=18830 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.046018][T18827] tipc: Resetting bearer [ 1007.079737][T18826] tipc: Resetting bearer [ 1007.216935][ T29] audit: type=1400 audit(2000000464.780:1176): avc: denied { mounton } for pid=18842 comm="syz.3.3683" path="/819/file0" dev="tmpfs" ino=4379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1007.216973][T18843] fuse: fd is not a fuse device [ 1007.245499][T18826] tipc: Disabling bearer [ 1007.878152][T18855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1008.168969][T18869] overlayfs: failed to clone lowerpath [ 1008.578912][ T29] audit: type=1400 audit(2000000466.140:1177): avc: denied { read write } for pid=18880 comm="syz.0.3696" name="file0" dev="tmpfs" ino=3396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1008.604678][ T29] audit: type=1400 audit(2000000466.140:1178): avc: denied { open } for pid=18880 comm="syz.0.3696" path="/631/file0" dev="tmpfs" ino=3396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1008.628480][ T29] audit: type=1400 audit(2000000466.140:1179): avc: denied { ioctl } for pid=18880 comm="syz.0.3696" path="/631/file0" dev="tmpfs" ino=3396 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1008.857598][T18889] tipc: Enabled bearer , priority 0 [ 1008.867878][T18889] syzkaller0: entered promiscuous mode [ 1008.873445][T18889] syzkaller0: entered allmulticast mode [ 1008.882564][T18889] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1008.896805][T18889] tipc: Resetting bearer [ 1008.904152][ T5726] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1008.912259][T18888] tipc: Resetting bearer [ 1008.937581][T18888] tipc: Disabling bearer [ 1009.054089][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 1009.068263][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.091051][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.201215][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.212762][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.223093][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.236705][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.249609][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.729031][ T5726] usb 1-1: usb_control_msg returned -32 [ 1009.742394][ T5726] usbtmc 1-1:16.0: can't read capabilities [ 1009.945189][ T9] usb 1-1: USB disconnect, device number 56 [ 1010.833590][T18932] overlayfs: failed to clone upperpath [ 1012.558788][T18977] fuse: fd is not a fuse device [ 1012.594144][ T5726] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1012.784170][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 1012.800488][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1012.829834][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1012.841095][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1012.851362][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1012.869759][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.911891][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1012.940626][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.192091][ T5726] usb 1-1: GET_CAPABILITIES returned 0 [ 1013.208700][ T5726] usbtmc 1-1:16.0: can't read capabilities [ 1013.432746][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1013.447945][ T5711] usb 1-1: USB disconnect, device number 57 [ 1015.155053][ T5726] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1015.173102][T19080] fuse: fd is not a fuse device [ 1015.324188][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 1015.336366][ T5726] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1015.346933][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.373461][ T5726] usb 1-1: config 0 descriptor?? [ 1015.412201][ T5726] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1015.590961][T19099] overlayfs: failed to clone upperpath [ 1015.595221][ T5726] usb 1-1: Detected FT232B [ 1015.807423][ T5726] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1015.838392][ T5726] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1015.855555][ T5726] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1015.892619][ T5726] usb 1-1: USB disconnect, device number 58 [ 1015.945044][ T5726] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1015.978571][ T5726] ftdi_sio 1-1:0.0: device disconnected [ 1016.434190][ T5726] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1016.594124][ T46] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1016.604470][ T5726] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1016.612851][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.623581][ T5726] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1016.632953][ T5726] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1016.640969][ T5726] usb 5-1: Manufacturer: syz [ 1016.647633][ T5726] usb 5-1: config 0 descriptor?? [ 1016.734173][ T5726] rc_core: IR keymap rc-hauppauge not found [ 1016.749370][ T5726] Registered IR keymap rc-empty [ 1016.759774][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.772696][ T5726] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1016.795607][ T46] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1016.817776][ T5726] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 1016.839976][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.897322][ T46] usb 1-1: config 0 descriptor?? [ 1017.003607][T19113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.038149][T19113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.156913][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 1017.169614][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1017.191411][ T46] usb 1-1: USB disconnect, device number 59 [ 1017.275777][ C1] igorplugusb 5-1:0.0: receive overflow, at least 21 lost [ 1017.282986][T19126] rc rc0: two consecutive events of type pulse [ 1017.375956][T19143] 9p: Bad value for 'rfdno' [ 1017.487163][ T5726] usb 5-1: USB disconnect, device number 49 [ 1017.694961][ T46] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1017.866325][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.888808][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1017.902365][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.921634][ T46] usb 1-1: config 0 descriptor?? [ 1018.373818][T19177] JFS: discard option not supported on device [ 1018.383838][T19177] Mount JFS Failure: -5 [ 1018.390317][T19177] jfs_mount failed w/return code = -5 [ 1018.805728][ T46] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1018.813381][T19115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.828337][ T46] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 1018.839537][T19115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.152525][T19189] tipc: Enabling of bearer rejected, already enabled [ 1019.166006][T19189] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1019.178744][ T5726] usb 1-1: USB disconnect, device number 60 [ 1019.184788][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1020.218563][T19215] tipc: Enabling of bearer rejected, already enabled [ 1020.229032][T19215] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1020.362811][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3834'. [ 1020.495516][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1020.541043][T19230] l2tp_ppp: sess 2/0: no socket in recv [ 1020.926458][T19242] xt_NFQUEUE: number of total queues is 0 [ 1021.683360][ T29] audit: type=1400 audit(2000000479.240:1180): avc: denied { bind } for pid=19254 comm="syz.3.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1021.778340][T19257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19257 comm=syz.4.3844 [ 1022.156295][T19262] JFS: discard option not supported on device [ 1022.163969][T19262] Mount JFS Failure: -5 [ 1022.168392][T19262] jfs_mount failed w/return code = -5 [ 1023.039566][T19282] xt_NFQUEUE: number of total queues is 0 [ 1023.422964][T19278] kvm: pic: non byte read [ 1023.435102][T19278] kvm: pic: level sensitive irq not supported [ 1023.435359][T19278] kvm: pic: non byte read [ 1023.447591][T19278] kvm: pic: level sensitive irq not supported [ 1023.447645][T19278] kvm: pic: non byte read [ 1023.460440][T19278] kvm: pic: level sensitive irq not supported [ 1023.460497][T19278] kvm: pic: non byte read [ 1023.472175][T19278] kvm: pic: level sensitive irq not supported [ 1023.472236][T19278] kvm: pic: non byte read [ 1023.488191][T19278] kvm: pic: level sensitive irq not supported [ 1023.488252][T19278] kvm: pic: non byte read [ 1023.508740][T19278] kvm: pic: level sensitive irq not supported [ 1023.508800][T19278] kvm: pic: non byte read [ 1023.618860][ T29] audit: type=1400 audit(2000000481.180:1181): avc: denied { read } for pid=19284 comm="syz.0.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1024.103923][ T29] audit: type=1400 audit(2000000481.660:1182): avc: denied { lock } for pid=19303 comm="syz.1.3864" path="socket:[57521]" dev="sockfs" ino=57521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1024.207313][T19313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19313 comm=syz.2.3863 [ 1024.254523][T19316] syzkaller1: entered promiscuous mode [ 1024.267579][T19316] syzkaller1: entered allmulticast mode [ 1024.409856][T19322] fuse: fd is not a fuse device [ 1025.782716][T19365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1025.786923][ T29] audit: type=1400 audit(2000000483.340:1183): avc: denied { mounton } for pid=19364 comm="syz.0.3887" path="/660/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1025.814948][ T5805] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1025.855644][T19365] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1025.866319][T19365] overlayfs: failed to look up (tracing) for ino (-66) [ 1025.924086][T19367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19367 comm=syz.3.3886 [ 1025.974088][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 1025.982321][ T5805] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1025.994748][ T5805] usb 5-1: config 0 has no interface number 0 [ 1026.000895][ T5805] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1026.012164][ T5805] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1026.024454][ T5805] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1026.035739][ T5805] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1026.049969][ T5805] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1026.059246][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.076937][ T5805] usb 5-1: config 0 descriptor?? [ 1026.102820][ T5805] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1026.362681][ T9] usb 5-1: USB disconnect, device number 50 [ 1026.382398][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1026.464283][ T5805] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1026.891365][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.907559][ T5805] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1026.953726][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.990486][ T5805] usb 1-1: config 0 descriptor?? [ 1027.231165][ T5805] usbhid 1-1:0.0: can't add hid device: -71 [ 1027.250993][ T5805] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1027.272268][ T5805] usb 1-1: USB disconnect, device number 61 [ 1027.290148][T19390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.321191][T19390] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1027.985304][ T5805] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1028.152843][T19415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19415 comm=syz.1.3904 [ 1028.200582][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.234383][ T5805] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1028.248732][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.277857][ T5805] usb 1-1: config 0 descriptor?? [ 1029.154847][ T5805] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1029.175255][ T5805] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 1029.558949][ T46] usb 1-1: USB disconnect, device number 62 [ 1029.559020][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1030.658289][ T5726] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1030.824075][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 1030.840946][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.876393][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.912133][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.927340][ T5726] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1030.938130][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.953663][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1030.963388][ T5726] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1030.995361][ T5726] usb 1-1: Manufacturer: syz [ 1031.011078][ T5726] usb 1-1: config 0 descriptor?? [ 1031.144281][T11318] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1031.231386][T19489] tipc: Enabling of bearer rejected, failed to enable media [ 1031.287602][ T5726] rc_core: IR keymap rc-hauppauge not found [ 1031.293731][ T5726] Registered IR keymap rc-empty [ 1031.299578][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.317408][T11318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.328066][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.335751][T11318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1031.345341][T11318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1031.356772][T11318] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1031.367104][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1031.380175][T11318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.394492][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 1031.409639][T19472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1031.428069][T11318] hub 5-1:1.0: bad descriptor, ignoring hub [ 1031.441220][T11318] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1031.451388][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.468052][T11318] cdc_wdm 5-1:1.0: skipping garbage [ 1031.481152][T11318] cdc_wdm 5-1:1.0: skipping garbage [ 1031.494171][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.502134][T19467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.513427][T11318] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1031.521675][T11318] cdc_wdm 5-1:1.0: Unknown control protocol [ 1031.531167][T19467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.539239][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.564175][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.596748][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.624237][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.649478][ T29] audit: type=1400 audit(2000000489.210:1184): avc: denied { read write } for pid=19471 comm="syz.4.3927" name="cdc-wdm0" dev="devtmpfs" ino=3675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1031.682611][ T29] audit: type=1400 audit(2000000489.210:1185): avc: denied { open } for pid=19471 comm="syz.4.3927" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1031.706895][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.734393][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.758353][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.775045][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1031.781931][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1031.789377][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1031.795990][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1031.802293][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1031.808887][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1031.815261][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1031.821861][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1031.828340][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1031.834937][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1031.854341][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.888990][ T5726] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1031.898143][ T5726] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1031.957942][ T5726] usb 1-1: USB disconnect, device number 63 [ 1032.111426][ T9] usb 5-1: USB disconnect, device number 51 [ 1032.281607][T19524] tipc: Enabling of bearer rejected, failed to enable media [ 1032.550707][T19538] overlayfs: failed to clone upperpath [ 1033.161408][T19548] JFS: discard option not supported on device [ 1033.181824][T19548] Mount JFS Failure: -5 [ 1033.186717][T19548] jfs_mount failed w/return code = -5 [ 1033.343282][T19563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1033.427478][T19565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1033.491096][T19565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1033.585750][ T804] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1033.794904][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 1033.855785][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.913882][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.942561][ T804] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1033.951950][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.966730][ T804] usb 5-1: config 0 descriptor?? [ 1034.414884][ T804] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1034.441606][ T804] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1034.630221][ T804] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 1034.860662][ T804] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1035.058540][ T804] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 1035.310250][T19562] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x3f43, size 0, write) [ 1035.333477][ T804] usb 5-1: USB disconnect, device number 52 [ 1035.558288][T19612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19612 comm=syz.2.3977 [ 1036.031611][T19624] binder: 19623:19624 ioctl c0306201 200000000080 returned -14 [ 1036.073919][T19624] binder: 19623:19624 ioctl c0306201 2000000003c0 returned -14 [ 1036.857422][T19643] xt_hashlimit: size too large, truncated to 1048576 [ 1036.975454][T19646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3990'. [ 1037.183739][T19653] tipc: Enabled bearer , priority 0 [ 1037.280948][T19651] kvm: user requested TSC rate below hardware speed [ 1037.296547][T19653] syzkaller0: entered promiscuous mode [ 1037.314922][T19653] syzkaller0: entered allmulticast mode [ 1037.332706][T19653] tipc: Resetting bearer [ 1037.417901][T19652] tipc: Resetting bearer [ 1037.593352][ T29] audit: type=1800 audit(2000000495.150:1186): pid=19667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3998" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1037.789587][T19664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19664 comm=syz.2.3996 [ 1041.225341][T19652] tipc: Disabling bearer [ 1041.521107][T19700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1043.172025][T19724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19724 comm=syz.2.4014 [ 1043.377103][ T29] audit: type=1326 audit(2000000500.940:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19730 comm="syz.1.4015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aa039e019 code=0x0 [ 1043.684082][ T5726] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1043.845804][ T5726] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1043.866838][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1043.886249][ T5726] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1043.895678][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1043.914570][ T5726] usb 5-1: Product: syz [ 1043.925493][ T5726] usb 5-1: Manufacturer: syz [ 1043.936302][ T5726] usb 5-1: SerialNumber: syz [ 1043.952460][ T5726] usb 5-1: config 0 descriptor?? [ 1043.976224][ T5726] usb 5-1: selecting invalid altsetting 0 [ 1044.185809][ T5711] usb 5-1: USB disconnect, device number 53 [ 1045.865416][T19777] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus) [ 1047.479186][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1047.773454][ T29] audit: type=1800 audit(2000000505.260:1188): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4039" name="bus" dev="tmpfs" ino=4730 res=0 errno=0 [ 1047.928346][T19816] syzkaller0: entered promiscuous mode [ 1047.934848][T19816] syzkaller0: entered allmulticast mode [ 1048.458110][T19829] overlayfs: failed to clone upperpath [ 1048.481560][ T29] audit: type=1400 audit(2000000506.040:1189): avc: denied { watch_sb } for pid=19828 comm="syz.2.4046" path="/862/file0" dev="tmpfs" ino=4601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1049.686592][ T29] audit: type=1400 audit(2000000507.000:1190): avc: denied { read } for pid=19830 comm="syz.4.4047" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1050.118213][T19831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1050.137561][T19831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1050.815511][ T29] audit: type=1400 audit(2000000508.380:1191): avc: denied { mount } for pid=19852 comm="syz.2.4054" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1050.888461][T19831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1050.910940][T19831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1050.943877][T19831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1050.958367][T19831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1051.324224][ T5805] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1051.494067][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 1051.513523][ T5805] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1051.536787][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.564085][ T5805] usb 1-1: Product: syz [ 1051.573660][ T5805] usb 1-1: Manufacturer: syz [ 1051.588731][ T5805] usb 1-1: SerialNumber: syz [ 1051.641741][ T5805] usb 1-1: config 0 descriptor?? [ 1051.883869][ T5805] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1052.144247][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1052.890563][T19893] overlayfs: failed to clone lowerpath [ 1052.954360][ T5613] Bluetooth: hci2: command 0x0401 tx timeout [ 1053.039226][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 1053.363553][ T5805] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1053.393371][ T5805] usb 1-1: USB disconnect, device number 64 [ 1054.217992][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.226915][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.039159][ T5613] Bluetooth: hci2: command 0x0401 tx timeout [ 1055.544357][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 1056.512815][T19940] JFS: discard option not supported on device [ 1056.521485][T19940] Mount JFS Failure: -5 [ 1056.525966][T19940] jfs_mount failed w/return code = -5 [ 1056.817332][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1058.844363][T19995] Cannot find del_set index 2 as target [ 1061.111543][T20011] xt_NFQUEUE: number of total queues is 0 [ 1063.245023][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1063.347050][T20030] bond61: entered promiscuous mode [ 1063.360988][T20030] bond61: entered allmulticast mode [ 1064.636680][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1065.120300][ T29] audit: type=1400 audit(2000000522.680:1192): avc: denied { create } for pid=20056 comm="syz.2.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.157302][T20057] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1065.345601][ T29] audit: type=1400 audit(2000000522.720:1193): avc: denied { write } for pid=20056 comm="syz.2.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.443303][T20061] xt_NFQUEUE: number of total queues is 0 [ 1065.819818][ T29] audit: type=1400 audit(2000000522.720:1194): avc: denied { nlmsg_write } for pid=20056 comm="syz.2.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1067.443889][ T29] audit: type=1326 audit(2000000525.000:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1067.544409][ T29] audit: type=1326 audit(2000000525.040:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1067.694328][ T29] audit: type=1326 audit(2000000525.040:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1067.720992][ T29] audit: type=1326 audit(2000000525.040:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1067.752314][ T29] audit: type=1326 audit(2000000525.040:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1067.849756][ T29] audit: type=1326 audit(2000000525.040:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1068.002335][ T29] audit: type=1326 audit(2000000525.040:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1339e019 code=0x7ffc0000 [ 1070.516828][T20106] xt_NFQUEUE: number of total queues is 0 [ 1073.175240][T20159] xt_NFQUEUE: number of total queues is 0 [ 1073.630757][T20156] syzkaller0: entered promiscuous mode [ 1073.667584][T20156] syzkaller0: entered allmulticast mode [ 1074.804238][ T5726] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1075.019268][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 1075.049442][ T5726] usb 1-1: config 0 has no interfaces? [ 1075.078490][ T5726] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1075.114057][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.145892][ T5726] usb 1-1: Product: syz [ 1075.167582][ T5726] usb 1-1: Manufacturer: syz [ 1075.187880][ T5726] usb 1-1: SerialNumber: syz [ 1075.227737][ T5726] usb 1-1: config 0 descriptor?? [ 1077.471257][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1077.471274][ T29] audit: type=1400 audit(2000000535.030:1248): avc: denied { write } for pid=20213 comm="syz.4.4169" name="functions" dev="configfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1077.624413][ T804] usb 1-1: USB disconnect, device number 65 [ 1077.731997][ T29] audit: type=1400 audit(2000000535.030:1249): avc: denied { read } for pid=20213 comm="syz.4.4169" name="c_chmask" dev="configfs" ino=60096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1077.831580][ T29] audit: type=1400 audit(2000000535.230:1250): avc: denied { write } for pid=20213 comm="syz.4.4169" name="c.1" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1077.900877][T20218] ================================================================== [ 1077.908961][T20218] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 1077.917194][T20218] Read of size 128 at addr ffffffff9ba57740 by task syz.4.4169/20218 [ 1077.925252][T20218] [ 1077.927578][T20218] CPU: 1 UID: 0 PID: 20218 Comm: syz.4.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.927599][T20218] Tainted: [L]=SOFTLOCKUP [ 1077.927604][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.927612][T20218] Call Trace: [ 1077.927617][T20218] [ 1077.927621][T20218] dump_stack_lvl+0x100/0x190 [ 1077.927641][T20218] print_report+0x13d/0x4b0 [ 1077.927659][T20218] ? __virt_addr_valid+0x239/0x430 [ 1077.927675][T20218] ? usb_copy_descriptors+0x18d/0x320 [ 1077.927691][T20218] kasan_report+0xdf/0x1c0 [ 1077.927708][T20218] ? usb_copy_descriptors+0x18d/0x320 [ 1077.927726][T20218] kasan_check_range+0x10f/0x1e0 [ 1077.927743][T20218] __asan_memcpy+0x23/0x60 [ 1077.927754][T20218] usb_copy_descriptors+0x18d/0x320 [ 1077.927770][T20218] usb_assign_descriptors+0xd2/0x470 [ 1077.927786][T20218] f_audio_bind+0x243a/0x3950 [ 1077.927806][T20218] ? __pfx_f_audio_bind+0x10/0x10 [ 1077.927823][T20218] usb_add_function+0x219/0x890 [ 1077.927839][T20218] configfs_composite_bind+0xd83/0x1960 [ 1077.927858][T20218] gadget_bind_driver+0x28c/0xbf0 [ 1077.927871][T20218] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1077.927882][T20218] really_probe+0x241/0xa60 [ 1077.927898][T20218] __driver_probe_device+0x20e/0x450 [ 1077.927913][T20218] driver_probe_device+0x4a/0x140 [ 1077.927928][T20218] __driver_attach+0x21f/0x5b0 [ 1077.927942][T20218] ? __pfx___driver_attach+0x10/0x10 [ 1077.927956][T20218] bus_for_each_dev+0x13e/0x1d0 [ 1077.927968][T20218] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1077.927979][T20218] ? bus_add_driver+0x2b5/0x5b0 [ 1077.927994][T20218] bus_add_driver+0x305/0x5b0 [ 1077.928007][T20218] driver_register+0x1e2/0x360 [ 1077.928023][T20218] usb_gadget_register_driver_owner+0x132/0x210 [ 1077.928043][T20218] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1077.928059][T20218] configfs_write_iter+0x302/0x4e0 [ 1077.928074][T20218] vfs_write+0x6ac/0x1050 [ 1077.928091][T20218] ? __pfx_configfs_write_iter+0x10/0x10 [ 1077.928105][T20218] ? __pfx_vfs_write+0x10/0x10 [ 1077.928127][T20218] ksys_write+0x12a/0x250 [ 1077.928144][T20218] ? __pfx_ksys_write+0x10/0x10 [ 1077.928163][T20218] do_syscall_64+0x115/0x870 [ 1077.928178][T20218] ? clear_bhb_loop+0x40/0x90 [ 1077.928192][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.928211][T20218] RIP: 0033:0x7f699079e019 [ 1077.928224][T20218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.928236][T20218] RSP: 002b:00007f6991705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1077.928249][T20218] RAX: ffffffffffffffda RBX: 00007f6990a26090 RCX: 00007f699079e019 [ 1077.928258][T20218] RDX: 000000000000000d RSI: 0000200000000280 RDI: 0000000000000005 [ 1077.928266][T20218] RBP: 00007f699083500c R08: 0000000000000000 R09: 0000000000000000 [ 1077.928274][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.928281][T20218] R13: 00007f6990a26128 R14: 00007f6990a26090 R15: 00007ffed9e06cf8 [ 1077.928294][T20218] [ 1077.928298][T20218] [ 1078.221037][T20218] The buggy address belongs to the variable: [ 1078.226990][T20218] ac_header_desc+0x0/0x40 [ 1078.231393][T20218] [ 1078.233694][T20218] The buggy address belongs to the physical page: [ 1078.240095][T20218] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba57 [ 1078.248845][T20218] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1078.256724][T20218] raw: 00fff00000002000 ffffea00006e95c8 ffffea00006e95c8 0000000000000000 [ 1078.265304][T20218] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1078.273870][T20218] page dumped because: kasan: bad access detected [ 1078.280270][T20218] page_owner info is not present (never set?) [ 1078.286309][T20218] [ 1078.288616][T20218] Memory state around the buggy address: [ 1078.294230][T20218] ffffffff9ba57600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1078.302287][T20218] ffffffff9ba57680: 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1078.310344][T20218] >ffffffff9ba57700: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1078.318409][T20218] ^ [ 1078.324806][T20218] ffffffff9ba57780: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 1078.332856][T20218] ffffffff9ba57800: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 1078.340900][T20218] ================================================================== [ 1078.411279][ T29] audit: type=1400 audit(2000000535.230:1251): avc: denied { write } for pid=20213 comm="syz.4.4169" name="c.1" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1078.678057][ T29] audit: type=1800 audit(2000000535.260:1252): pid=20218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4169" name="UDC" dev="configfs" ino=61104 res=0 errno=0 [ 1078.850494][T20218] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1078.857719][T20218] CPU: 0 UID: 0 PID: 20218 Comm: syz.4.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.868631][T20218] Tainted: [L]=SOFTLOCKUP [ 1078.872928][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1078.882969][T20218] Call Trace: [ 1078.886226][T20218] [ 1078.889150][T20218] dump_stack_lvl+0x100/0x190 [ 1078.893806][T20218] vpanic+0x552/0x970 [ 1078.897776][T20218] ? __pfx_vpanic+0x10/0x10 [ 1078.902264][T20218] ? usb_copy_descriptors+0x18d/0x320 [ 1078.907618][T20218] panic+0xd1/0xe0 [ 1078.911324][T20218] ? __pfx_panic+0x10/0x10 [ 1078.915716][T20218] ? usb_copy_descriptors+0x18d/0x320 [ 1078.921066][T20218] ? preempt_schedule_common+0x42/0xc0 [ 1078.926503][T20218] check_panic_on_warn.cold+0x19/0x34 [ 1078.931849][T20218] end_report.part.0+0x3a/0x90 [ 1078.936590][T20218] kasan_report.cold+0xe/0x18 [ 1078.941246][T20218] ? usb_copy_descriptors+0x18d/0x320 [ 1078.946605][T20218] kasan_check_range+0x10f/0x1e0 [ 1078.951526][T20218] __asan_memcpy+0x23/0x60 [ 1078.955916][T20218] usb_copy_descriptors+0x18d/0x320 [ 1078.961094][T20218] usb_assign_descriptors+0xd2/0x470 [ 1078.966357][T20218] f_audio_bind+0x243a/0x3950 [ 1078.971016][T20218] ? __pfx_f_audio_bind+0x10/0x10 [ 1078.976017][T20218] usb_add_function+0x219/0x890 [ 1078.980847][T20218] configfs_composite_bind+0xd83/0x1960 [ 1078.986373][T20218] gadget_bind_driver+0x28c/0xbf0 [ 1078.991387][T20218] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1078.996907][T20218] really_probe+0x241/0xa60 [ 1079.001390][T20218] __driver_probe_device+0x20e/0x450 [ 1079.006651][T20218] driver_probe_device+0x4a/0x140 [ 1079.011652][T20218] __driver_attach+0x21f/0x5b0 [ 1079.016392][T20218] ? __pfx___driver_attach+0x10/0x10 [ 1079.021655][T20218] bus_for_each_dev+0x13e/0x1d0 [ 1079.026489][T20218] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1079.031836][T20218] ? bus_add_driver+0x2b5/0x5b0 [ 1079.036682][T20218] bus_add_driver+0x305/0x5b0 [ 1079.041340][T20218] driver_register+0x1e2/0x360 [ 1079.046085][T20218] usb_gadget_register_driver_owner+0x132/0x210 [ 1079.052311][T20218] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1079.057947][T20218] configfs_write_iter+0x302/0x4e0 [ 1079.063045][T20218] vfs_write+0x6ac/0x1050 [ 1079.067360][T20218] ? __pfx_configfs_write_iter+0x10/0x10 [ 1079.072986][T20218] ? __pfx_vfs_write+0x10/0x10 [ 1079.077738][T20218] ksys_write+0x12a/0x250 [ 1079.082058][T20218] ? __pfx_ksys_write+0x10/0x10 [ 1079.086897][T20218] do_syscall_64+0x115/0x870 [ 1079.091465][T20218] ? clear_bhb_loop+0x40/0x90 [ 1079.096127][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.102007][T20218] RIP: 0033:0x7f699079e019 [ 1079.106397][T20218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.125980][T20218] RSP: 002b:00007f6991705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1079.134455][T20218] RAX: ffffffffffffffda RBX: 00007f6990a26090 RCX: 00007f699079e019 [ 1079.142402][T20218] RDX: 000000000000000d RSI: 0000200000000280 RDI: 0000000000000005 [ 1079.150341][T20218] RBP: 00007f699083500c R08: 0000000000000000 R09: 0000000000000000 [ 1079.158285][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.166227][T20218] R13: 00007f6990a26128 R14: 00007f6990a26090 R15: 00007ffed9e06cf8 [ 1079.174197][T20218] [ 1079.177415][T20218] Kernel Offset: disabled [ 1079.181738][T20218] Rebooting in 86400 seconds..