last executing test programs: 12m59.216010138s ago: executing program 0 (id=685): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) 12m57.194641272s ago: executing program 0 (id=690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$can_raw(0x1d, 0x3, 0x1) 12m55.598588218s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x25, 0x365, &(0x7f0000000640)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12m54.006735735s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 12m50.383107134s ago: executing program 0 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x40000000015, 0x805, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f010000001658ccfebba3a7696f2b6d65"], 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 12m48.314800879s ago: executing program 0 (id=705): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}]) 12m33.634275602s ago: executing program 32 (id=705): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$eJzs3U1rG0cfAPD/yi9xXp7EgRCe56EUQw5NSSPHdl9S6CE9ljY00N5TYSsmWI6CJYfYDTQ5NJdeSiiU0kDpvb33GPoF+ikCbSCUYNpDLyorrxw5lmzZkS0n+v1gxcy+aGa0O8N/NRIbQN8aS19yEf+LiK+TiGMRkWTbBiPbOLa638qTW9PpkkSt9smfSX2/NN94r8Zxh7PMfyPi1y8jzuQ2lltZWp4rlErFhSw/Xp2/Pl5ZWj57db4wW5wtXpucmjr/1tTku++83bW2vn7p7+8+fvDB+a9OrXz786Pj95K4EEeybc3t2Jnh9OV285qxGMs+k6G48MzeE89X2L6T9LoC7MhA1s+HIh0DjsVA1uuBl98XEVED+lTSvv9Hsqc1AfZWIw5o3Ntvfh98dC3VfOyL7PH7qzdAG9s/uPrdSIzU740OrSTr7ozS+93RLpSflvHLH/fvpUt05XsIgM7cvhMR5wYHN45/STb+7dy51qtHmjPPlmH8g73zII1/3mgV/+TW4p9oEf8cbtF3d2Lr/p971IVi2krjv/daxr9rk1ajA1nuP/WYbyi5crVUPJdFw6dj6ECa32w+5/zKw7axcnP8ly5p+Y1YMKvHo8ED64+ZKVQL9S/uuuDxnYj/t4x/k7Xzn7Q4/+nncanDMk4W77/abtvW7d9dtR8jXmt5/p/OaCWbz0+O16+H8cZVsdFfd0/+1q78Xrc/Pf+HNm//aNI8X1vZfhk/jPxTbLdtXfuj8+t/OPm0nh7O1t0sVKsLExHDyUcb108+PbaRb+yftv/0qc3Hv1bX/8GI+KzD9t898dMrHbW/R+d/Zlvnf/uJhx9+/n278jsb/96sp05na+rj3xY6reDzfHYAAAAAAACw3+Qi4kgkufxaOpfL51d/33EiDuVK5Ur1zJXy4rWZqP9XdjSGco2Z7mNNv4eYyH4P28hPPpOfiojjEfHNwMF6Pj9dLs30uvEAAAAAAAAAAAAAAAAAAACwTxxu8///1O8Dva4dsOvaPPL76CaHjOxWXYC9teUj/7vxpCdgX9qy/wMvLf0f+pf+D/1L/4f+pf9D/1rX/036Q/+o1Wq1XtcB6BnxPwAAAAAAAAAAAAAAAAAAAAAAAAAAAHTVpYsX06W28uTWdJqfubG0OFe+cXamWJnLzy9O56fLC9fzs+XybKmYny7Pb/V+pXL5+sRkLN4crxYr1fHK0vLl+fLiterlq/OF2eLl4tCetAoAAAAAAAAAAAAAAAAAAABeLJWl5blCqVRc2LXEyO4XIbH9xGh06Q0H90VzJLqd6PXIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP/RsAAP//BGY9Dw==") r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}]) 5m30.67819508s ago: executing program 3 (id=1707): socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgroups(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff0000000000000000000000002001000000000000000028a46861bed7b4a114bb000000000000000000000000000400000000000000000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 5m30.467698504s ago: executing program 3 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73ee8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 5m28.91812169s ago: executing program 3 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xfd}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) 5m27.479344703s ago: executing program 3 (id=1721): socket(0x200000100000011, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x20048000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff000000000000000000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5m24.577379651s ago: executing program 3 (id=1727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x2, r5}, {0x2, 0x0, r5}], {0x4, 0x6}, [{0x8, 0x1, r6}, {0x8, 0x0, r8}, {0x8, 0x2, r6}, {0x8, 0x2, r6}, {0x8, 0x6, r6}]}, 0x5c, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r9, 0x0) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 5m18.740385758s ago: executing program 3 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 5m2.867598581s ago: executing program 33 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 5.679331438s ago: executing program 4 (id=3171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 5.614649749s ago: executing program 4 (id=3173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.836792972s ago: executing program 4 (id=3185): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) 4.824895992s ago: executing program 4 (id=3186): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_pidfd_open(r3, 0x0) setns(r8, 0x24020000) syz_clone3(0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0xe4, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x4000040) 3.695749051s ago: executing program 4 (id=3197): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x64000600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 3.615057432s ago: executing program 6 (id=3198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000f4ffffffff1b"], 0x14}}, 0x0) 3.614671232s ago: executing program 6 (id=3199): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d000009058202100000000009050302"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x0, 0x40, 0x5, 0x8, 0x4, 0x8000009, 0x1, 0x707f, 0x6, 0x28}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.215843335s ago: executing program 1 (id=3217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) 2.186414085s ago: executing program 1 (id=3218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.106904337s ago: executing program 1 (id=3219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000096000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.106198567s ago: executing program 5 (id=3220): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2020000, &(0x7f00000006c0)=ANY=[@ANYBLOB='dots,nodots,nodots,dots,time_offset=0x00000000000000ec,nodots,nodots,dots,check=relaxed,nodots,check=normal,nocase,nodots,time_offset=0x0000000000000466,dots,nodots,nodots,codepage=949,showaxec,errors=continue,nodots,nodots,dots,\x00'], 0xf9, 0x1d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.989526549s ago: executing program 1 (id=3221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.26887496s ago: executing program 5 (id=3222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.169734112s ago: executing program 5 (id=3223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mlockall(0x7) 1.169291882s ago: executing program 5 (id=3224): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000240)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fspick(r0, &(0x7f0000000200)='./file0\x00', 0x1) 1.167756711s ago: executing program 1 (id=3225): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b6565705f6c6173745f646f74732c756d61736b3d30303030303030303030303030303030303030303030352c757466382c6572726f72733d636f6e74696e75652c696f636861727365743d6d616363656e746575726f2c646973636172642c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00e1ee3e46128f3731e7aa706359338a91706d6543fd9e8fc3"], 0x1, 0x151a, &(0x7f0000002280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1.160166182s ago: executing program 5 (id=3226): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) setreuid(0x0, 0xee01) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 1.091056343s ago: executing program 1 (id=3228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 1.090628453s ago: executing program 2 (id=3229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x7c8c, &(0x7f00000000c0)={0x0, 0xa3e5, 0x8, 0x3, 0x1fd}) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 810.342897ms ago: executing program 6 (id=3230): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 799.638647ms ago: executing program 6 (id=3231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000005c0), &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) r6 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x89) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0xd, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) 662.47629ms ago: executing program 4 (id=3232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 620.79893ms ago: executing program 2 (id=3233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000004, 0xdc032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, 0x0) 620.39692ms ago: executing program 2 (id=3234): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 554.942691ms ago: executing program 2 (id=3235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x2, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0) 368.824965ms ago: executing program 5 (id=3236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 306.917715ms ago: executing program 6 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 262.148856ms ago: executing program 6 (id=3238): openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) 6.82255ms ago: executing program 2 (id=3239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 0s ago: executing program 2 (id=3240): r0 = syz_usb_connect$uac1(0x3, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): t (200000 ns). Using initial count to start timer. [ 976.998767][ T9520] netlink: 'syz.1.2139': attribute type 3 has an invalid length. [ 980.384712][ T24] ftdi_sio 5-1:0.239: FTDI USB Serial Device converter detected [ 980.393105][ T24] ftdi_sio ttyUSB0: unknown device type: 0xfea8 [ 980.400138][ T24] usb 5-1: USB disconnect, device number 6 [ 980.406313][ T24] ftdi_sio 5-1:0.239: device disconnected [ 980.441910][ T9538] netlink: 'syz.5.2141': attribute type 27 has an invalid length. [ 980.468348][ T9538] device gretap0 left promiscuous mode [ 980.517284][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 980.538970][ T9533] device veth0_vlan left promiscuous mode [ 980.871467][ T9533] device veth0_vlan entered promiscuous mode [ 980.878502][ T9533] device veth1_macvtap left promiscuous mode [ 980.885196][ T9533] device veth1_macvtap entered promiscuous mode [ 980.901759][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 980.909405][ T9544] usb usb1: usbfs: process 9544 (syz.1.2146) did not claim interface 0 before use [ 980.919015][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 980.929178][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 980.937668][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 980.946150][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.954537][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 980.978274][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 981.003486][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 981.062784][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 981.082855][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 981.102802][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 981.112582][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 981.120847][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 981.129004][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 981.137187][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 981.145504][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 981.153904][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.186972][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.196757][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 981.208170][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 981.257302][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 981.533655][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 981.557258][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 981.575562][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 981.587674][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 981.602274][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 981.610581][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 981.618304][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 981.625949][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 981.634305][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 981.642579][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 981.650321][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 981.658008][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 981.995478][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2150'. [ 982.024229][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2150'. [ 982.837161][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 982.837176][ T28] audit: type=1400 audit(2000000157.330:1948): avc: denied { mounton } for pid=9569 comm="syz.4.2151" path="/proc/1690/task" dev="proc" ino=46614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 983.132033][ T28] audit: type=1400 audit(2000000157.555:1949): avc: denied { listen } for pid=9574 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.298051][ T28] audit: type=1400 audit(2000000157.555:1950): avc: denied { accept } for pid=9574 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.318191][ T28] audit: type=1400 audit(2000000157.576:1951): avc: denied { associate } for pid=9569 comm="syz.4.2151" name="net_prio.prioidx" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 983.336502][ T6070] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 983.342621][ T28] audit: type=1400 audit(2000000157.716:1952): avc: denied { read } for pid=9574 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.504247][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 983.542600][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.553541][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 983.566827][ T6070] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 983.576019][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.606090][ T6070] usb 5-1: config 0 descriptor?? [ 983.613623][ T9592] syz.2.2157[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.613963][ T9592] syz.2.2157[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.744458][ T39] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 983.785775][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 983.850616][ T24] usb 2-1: config 0 has no interface number 0 [ 983.901538][ T24] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 983.960561][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.977418][ T24] usb 2-1: Product: syz [ 983.982988][ T24] usb 2-1: Manufacturer: syz [ 983.987692][ T24] usb 2-1: SerialNumber: syz [ 984.044379][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 984.066119][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.079856][ T24] usb 2-1: config 0 descriptor?? [ 984.113905][ T24] usb-storage 2-1:0.8: USB Mass Storage device detected [ 984.135431][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 984.222076][ T24] usb-storage 2-1:0.8: device ignored [ 984.603046][ T39] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.617807][ T28] audit: type=1400 audit(2000000159.250:1953): avc: denied { bind } for pid=9600 comm="syz.5.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 984.619314][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.646757][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.655034][ T39] usb 7-1: Product: syz [ 984.659229][ T39] usb 7-1: Manufacturer: syz [ 984.664479][ T39] usb 7-1: SerialNumber: syz [ 984.670264][ T24] usb 2-1: USB disconnect, device number 9 [ 984.676926][ T9604] netlink: 'syz.2.2161': attribute type 27 has an invalid length. [ 984.679671][ T39] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 984.691699][ T39] cdc_ncm 7-1:1.0: bind() failure [ 984.707200][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.714278][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.750137][ T9604] device bridge3 left promiscuous mode [ 984.765507][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 984.778191][ T9603] device syz_tun left promiscuous mode [ 984.786866][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 984.805048][ T9603] device veth1_macvtap left promiscuous mode [ 984.811865][ T9603] device veth1_macvtap entered promiscuous mode [ 984.820506][ T9603] device syz_tun entered promiscuous mode [ 984.837881][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 984.845672][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 984.853311][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 984.861392][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.875273][ T303] usb 7-1: USB disconnect, device number 6 [ 984.877056][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.888133][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.895619][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 984.904132][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 984.912358][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.919414][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.926866][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 984.935590][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 984.943661][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 984.951788][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 984.959883][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 984.968008][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 984.976034][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 984.984196][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 984.992246][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 985.000451][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 985.008672][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 985.016986][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 985.025247][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 985.033636][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 985.041551][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 985.049717][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 985.057837][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 985.066231][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 985.075225][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 985.083712][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 985.092251][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 985.100898][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 985.108912][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 985.116407][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 985.124127][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 985.131776][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 985.139433][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 985.169689][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 985.177277][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 985.191279][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 986.568229][ T6070] usbhid 5-1:0.0: can't add hid device: -71 [ 986.595942][ T6070] usbhid: probe of 5-1:0.0 failed with error -71 [ 987.091760][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 987.100862][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 989.087878][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 989.333624][ T28] audit: type=1400 audit(2000000163.188:1954): avc: denied { read write } for pid=9622 comm="syz.5.2165" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 989.335264][ T28] audit: type=1400 audit(2000000163.188:1955): avc: denied { open } for pid=9622 comm="syz.5.2165" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 993.809391][ T6070] usb 5-1: USB disconnect, device number 7 [ 993.813721][ T24] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 993.817735][ T24] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 994.102162][ T9636] tty tty1: ldisc open failed (-12), clearing slot 0 [ 994.999346][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 995.034438][ T9659] netlink: 'syz.1.2175': attribute type 27 has an invalid length. [ 995.078720][ T9659] bridge0: port 3(syz_tun) entered disabled state [ 995.111561][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.118820][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.321710][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 996.693417][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 996.803919][ T9662] bridge0: port 3(syz_tun) entered blocking state [ 996.810398][ T9662] bridge0: port 3(syz_tun) entered forwarding state [ 996.832421][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.839908][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 996.965942][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.973048][ T9662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.994799][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.001912][ T9662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.020592][ T9687] xt_socket: unknown flags 0xc [ 997.047265][ T9662] device veth0_vlan left promiscuous mode [ 997.054714][ T9662] device veth0_vlan entered promiscuous mode [ 997.073792][ T9662] device veth1_macvtap left promiscuous mode [ 997.082243][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'. [ 997.092257][ T9662] device veth1_macvtap entered promiscuous mode [ 997.135730][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.151663][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.176798][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 997.207162][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 997.218874][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 997.227320][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 997.237266][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 997.246092][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 997.254896][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 997.263560][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 997.272007][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 997.280246][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.288735][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.298729][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.307185][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 997.315642][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 997.324082][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 997.424463][ T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 997.607068][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 997.621428][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.828276][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 997.856144][ T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 997.864181][ T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 997.876152][ T28] audit: type=1400 audit(2000000173.466:1956): avc: denied { getopt } for pid=9730 comm="syz.5.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.877355][ T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 997.939990][ T28] audit: type=1400 audit(2000000173.520:1957): avc: denied { getopt } for pid=9736 comm="syz.5.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 997.974953][ T9743] netlink: 'syz.4.2204': attribute type 27 has an invalid length. [ 998.184443][ T24] hid-generic 0008:0007:0005.000F: item fetching failed at offset 0/1 [ 998.250500][ T24] hid-generic: probe of 0008:0007:0005.000F failed with error -22 [ 998.430679][ T9755] netlink: 'syz.2.2210': attribute type 32 has an invalid length. [ 998.632828][ T24] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 998.632844][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 998.935012][ T9788] netlink: 'syz.1.2224': attribute type 27 has an invalid length. [ 998.951170][ T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 998.987765][ T9790] kvm: pic: non byte write [ 998.992740][ T9790] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 999.001745][ T9790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 999.021220][ T9788] bridge0: port 3(syz_tun) entered disabled state [ 999.059921][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.067117][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.074639][ T6] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 999.406031][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 999.432016][ T9786] bridge0: port 3(syz_tun) entered blocking state [ 999.438515][ T9786] bridge0: port 3(syz_tun) entered forwarding state [ 999.459993][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 999.468488][ T4049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 999.484437][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.491549][ T9786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.503057][ T6] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 999.513134][ T6] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 999.524986][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.532090][ T9786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.545058][ T6] usb 5-1: config 8 has no interface number 0 [ 999.551470][ T6] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid maxpacket 643, setting to 64 [ 999.573452][ T6] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 999.590678][ T9786] device veth0_vlan left promiscuous mode [ 999.609921][ T6] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 999.612588][ T9786] device veth0_vlan entered promiscuous mode [ 999.628370][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.648297][ T6] usb 5-1: Product: syz [ 999.653749][ T6] usb 5-1: Manufacturer: syz [ 999.658358][ T9786] device veth1_macvtap left promiscuous mode [ 999.661334][ T9786] device veth1_macvtap entered promiscuous mode [ 999.666681][ T6] usb 5-1: SerialNumber: syz [ 999.683695][ T9773] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 999.715977][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.734823][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.776042][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.786052][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.794432][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.802775][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.813044][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.821598][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 999.830287][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 999.839037][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.847567][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.856238][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 999.865143][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 999.874736][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 999.889150][ T6] usb 5-1: USB disconnect, device number 8 [ 999.897756][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 999.908063][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 999.916007][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 999.960244][ T303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 999.989079][ T303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1000.002852][ T303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1000.017554][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1000.091760][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2242'. [ 1003.702444][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1003.712143][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1003.730662][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1003.739620][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1003.741734][ T9860] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1003.759782][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1003.769008][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1003.789374][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1003.801681][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1003.981590][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1004.126429][ T303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1004.136184][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1004.144023][ T303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1004.178358][ T24] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1004.200662][ T28] audit: type=1400 audit(2000000180.258:1958): avc: denied { getopt } for pid=9870 comm="syz.6.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1004.206986][ T24] usb 6-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x65, skipping [ 1004.262709][ T24] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1004.291607][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1004.362060][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1004.370911][ T24] usb 6-1: SerialNumber: syz [ 1004.569911][ T24] usb 6-1: USB disconnect, device number 12 [ 1004.817428][ T9915] netlink: 'syz.6.2276': attribute type 1 has an invalid length. [ 1005.216217][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1005.224132][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1005.282330][ T9923] kvm: pic: non byte write [ 1005.288551][ T9923] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1005.297284][ T28] audit: type=1400 audit(2000000181.427:1959): avc: denied { getopt } for pid=9934 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1005.320144][ T9923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1005.435997][ T303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1005.498800][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2299'. [ 1005.561747][ T28] audit: type=1400 audit(2000000181.717:1960): avc: denied { connect } for pid=9971 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1005.636952][ T9972] kvm: pic: non byte write [ 1005.642256][ T9972] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1005.662430][ T9972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1005.741672][ T303] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1005.906695][ T24] hid-generic 0008:0007:0005.0010: item fetching failed at offset 0/1 [ 1005.919083][ T24] hid-generic: probe of 0008:0007:0005.0010 failed with error -22 [ 1005.995294][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 1006.188675][ T303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1006.197060][ T303] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1006.210083][ T303] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.222081][ T303] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1006.231229][ T303] usb 5-1: config 128 has no interface number 0 [ 1006.239000][ T303] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1006.268746][ T303] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.286033][ T303] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1006.307241][ T303] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1006.319404][ T303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.336666][ T303] usb 5-1: Product: syz [ 1006.341098][ T303] usb 5-1: Manufacturer: syz [ 1006.346478][ T28] audit: type=1400 audit(2000000182.554:1961): avc: denied { ioctl } for pid=10012 comm="syz.2.2320" path="socket:[47981]" dev="sockfs" ino=47981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1006.350876][ T303] usb 5-1: SerialNumber: syz [ 1006.626528][T10039] usb usb8: usbfs: process 10039 (syz.1.2332) did not claim interface 0 before use [ 1007.627079][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 1007.739651][ T303] usb 5-1: USB disconnect, device number 9 [ 1007.754880][ T9890] udevd[9890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1008.084542][ T28] audit: type=1400 audit(2000000184.420:1962): avc: denied { connect } for pid=10113 comm="syz.5.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1009.145264][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1009.204642][T10172] __nla_validate_parse: 4 callbacks suppressed [ 1009.204657][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1009.574567][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1009.609056][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 1009.630870][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1009.932645][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 1009.942314][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 1009.966022][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2409'. [ 1009.980297][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2409'. [ 1011.009747][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1011.615743][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1015.921771][T10227] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2412'. [ 1015.921867][ T39] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1016.006762][ T28] audit: type=1400 audit(2000000192.907:1963): avc: denied { nlmsg_read } for pid=10239 comm="syz.2.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1016.159444][T10259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1016.483516][T10264] xt_hashlimit: invalid rate [ 1016.551682][T10271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2437'. [ 1016.584237][T10275] usb usb1: usbfs: process 10275 (syz.4.2439) did not claim interface 32 before use [ 1016.677686][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2447'. [ 1016.687956][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'. [ 1016.698498][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'. [ 1016.714947][ T28] audit: type=1400 audit(2000000193.680:1964): avc: denied { setopt } for pid=10302 comm="syz.1.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1016.754343][T10310] SELinux: failed to load policy [ 1016.770707][ T28] audit: type=1400 audit(2000000193.722:1965): avc: denied { load_policy } for pid=10309 comm="syz.6.2457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1016.877550][ T28] audit: type=1400 audit(2000000193.851:1966): avc: denied { append } for pid=10333 comm="syz.1.2468" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1016.920454][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2468'. [ 1016.940933][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2468'. [ 1016.974601][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1017.906435][ T303] hid-generic 0008:0007:0005.0011: item fetching failed at offset 0/1 [ 1017.922451][ T303] hid-generic: probe of 0008:0007:0005.0011 failed with error -22 [ 1019.043407][ T303] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1019.221556][ T303] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1019.248552][ T303] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.295163][ T303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1019.357134][ T303] usb 6-1: SerialNumber: syz [ 1020.383291][ T303] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1020.408134][ T303] usb 6-1: USB disconnect, device number 13 [ 1021.662022][T10476] netlink: 'syz.4.2525': attribute type 27 has an invalid length. [ 1021.773578][T10470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1021.809800][T10470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1021.818302][T10481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1021.853372][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.860965][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.890874][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.907348][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.938232][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.963931][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.983669][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1021.999893][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1022.016335][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1022.024570][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1022.032841][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1022.041066][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1022.049421][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1022.057661][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1022.065978][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1022.074417][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1022.083078][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1022.091536][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1022.099896][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1022.108175][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1022.116414][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.124780][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1022.132964][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1022.141598][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1022.152629][T10490] netlink: 'syz.5.2530': attribute type 27 has an invalid length. [ 1022.304455][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1022.342787][T10489] device veth0_vlan left promiscuous mode [ 1022.362735][T10489] device veth0_vlan entered promiscuous mode [ 1022.372446][T10489] device veth1_macvtap left promiscuous mode [ 1022.389268][T10489] device veth1_macvtap entered promiscuous mode [ 1022.413911][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1022.439997][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1022.455311][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1022.464552][ T303] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1022.471939][ T303] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1022.480851][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1022.489021][ T303] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1022.497436][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1022.506139][ T303] hid-generic 0000:0004:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1022.516256][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1022.524813][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1022.534198][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1022.542718][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1022.557963][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1022.573276][T10499] fido_id[10499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1022.587619][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1022.596353][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1022.605116][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1022.616359][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1022.624872][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1022.670798][T10501] kvm: pic: non byte write [ 1022.693640][T10501] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1022.718283][T10501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1022.758086][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.781283][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.808936][T10482] device bridge_slave_0 entered promiscuous mode [ 1022.839009][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.846055][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.871922][T10482] device bridge_slave_1 entered promiscuous mode [ 1022.903877][T10527] tmpfs: Unknown parameter 'u' [ 1023.111930][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.119040][T10482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.126348][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.133403][T10482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.169916][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.180726][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.188161][ T303] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1023.210459][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.234579][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1023.237691][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1023.259386][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.266463][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.303233][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1023.328937][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.335998][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.368520][ T303] usb 5-1: Using ep0 maxpacket: 8 [ 1023.374636][ T303] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.407106][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1023.415123][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1023.424607][ T303] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.442676][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1023.443255][ T303] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1023.449029][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.480414][ T303] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1023.491571][T10482] device veth0_vlan entered promiscuous mode [ 1023.498614][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1023.498741][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.517492][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.525848][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1023.534375][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 1023.545224][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.545612][ T303] usb 5-1: config 0 descriptor?? [ 1023.559138][ T24] usb 6-1: config 0 descriptor?? [ 1023.563227][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.578631][T10482] device veth1_macvtap entered promiscuous mode [ 1023.586883][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1023.594557][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1023.603072][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1023.612696][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.621120][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1023.638345][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1023.646867][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1023.655509][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1023.664712][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1023.965581][ T24] wacom 0003:056A:00DF.0013: Unknown device_type for 'HID 056a:00df'. Assuming pen. [ 1023.980863][ T24] wacom 0003:056A:00DF.0013: hidraw0: USB HID v0.00 Device [HID 056a:00df] on usb-dummy_hcd.5-1/input0 [ 1024.023982][ T24] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00DF.0013/input/input23 [ 1024.129249][ T303] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0x0 [ 1024.137509][ T303] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0x0 [ 1024.145480][ T303] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0x0 [ 1024.155599][ T303] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0x0 [ 1024.156887][ T24] usb 6-1: USB disconnect, device number 14 [ 1024.163615][ T303] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0x0 [ 1024.177567][ T303] steelseries_srws1 0003:1038:1410.0014: missing HID_OUTPUT_REPORT 0 [ 1024.197502][ T39] hid-generic 0008:0007:0005.0015: item fetching failed at offset 0/1 [ 1024.211798][ T303] usb 5-1: USB disconnect, device number 10 [ 1024.220308][ T39] hid-generic: probe of 0008:0007:0005.0015 failed with error -22 [ 1024.227787][T10552] fido_id[10552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1024.532092][ T28] audit: type=1400 audit(2000000202.059:1967): avc: denied { map } for pid=10559 comm="syz.1.2553" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1024.557068][ T28] audit: type=1400 audit(2000000202.070:1968): avc: denied { execute } for pid=10559 comm="syz.1.2553" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1024.729025][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1025.535689][ T6] hid-generic 0008:0007:0005.0016: item fetching failed at offset 0/1 [ 1025.544183][ T6] hid-generic: probe of 0008:0007:0005.0016 failed with error -22 [ 1025.968645][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1026.259378][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.311380][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.407817][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1026.413393][ T6] hid-generic 0008:0007:0005.0017: item fetching failed at offset 0/1 [ 1026.425224][ T6] hid-generic: probe of 0008:0007:0005.0017 failed with error -22 [ 1026.444117][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1026.503812][ T24] usb 5-1: SerialNumber: syz [ 1026.794623][ T24] usb 5-1: 0:2 : does not exist [ 1026.805173][ T24] usb 5-1: USB disconnect, device number 11 [ 1026.919264][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1027.096313][ T543] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1027.096312][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 1027.110441][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.121528][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.131324][ T6] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1027.140376][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.149497][ T6] usb 2-1: config 0 descriptor?? [ 1027.264453][ T543] usb 6-1: Using ep0 maxpacket: 32 [ 1027.279795][ T543] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.294735][ T543] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.306552][ T543] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1027.325356][ T543] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1027.334530][ T543] usb 6-1: Product: syz [ 1027.338825][ T543] usb 6-1: Manufacturer: syz [ 1027.353182][ T543] hub 6-1:4.0: USB hub found [ 1027.394461][T10661] netlink: 'syz.6.2594': attribute type 27 has an invalid length. [ 1027.418059][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.425325][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.469453][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1027.489618][T10663] device veth0_vlan left promiscuous mode [ 1027.496578][T10663] device veth0_vlan entered promiscuous mode [ 1027.507983][T10663] device veth1_macvtap left promiscuous mode [ 1027.517906][T10663] device veth1_macvtap entered promiscuous mode [ 1027.552510][ T39] hid-generic 0008:0007:0005.0018: item fetching failed at offset 0/1 [ 1027.575527][ T543] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1027.638615][ T39] hid-generic: probe of 0008:0007:0005.0018 failed with error -22 [ 1027.738506][ T6] hid-multitouch 0003:1FD2:6007.0019: report_id 1023902090 is invalid [ 1027.742211][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1027.746747][ T6] hid-multitouch 0003:1FD2:6007.0019: item 0 4 1 8 parsing failed [ 1027.762033][ T6] hid-multitouch: probe of 0003:1FD2:6007.0019 failed with error -22 [ 1027.772675][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1027.781079][ T6] usb 2-1: USB disconnect, device number 10 [ 1027.790073][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.799020][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.806071][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.813596][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.822034][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.830378][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.837419][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.845084][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.853375][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1027.861833][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1027.869884][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1027.877992][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1027.879407][ T39] usb 6-1: USB disconnect, device number 15 [ 1027.886406][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1027.899814][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1027.907938][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1027.915932][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1027.924061][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.932651][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.941165][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.949476][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.957787][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1027.965854][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1027.973942][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1027.981904][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.989872][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.998164][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1028.006408][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1028.014609][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1028.022720][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1028.030152][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1028.037891][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1028.046002][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1028.054176][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1028.061831][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1028.706467][ T28] audit: type=1326 audit(2000000206.544:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eb752ab19 code=0x7ffc0000 [ 1028.739161][ T28] audit: type=1326 audit(2000000206.576:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eb752ab19 code=0x7ffc0000 [ 1028.765080][ T28] audit: type=1326 audit(2000000206.576:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eb752ab19 code=0x7ffc0000 [ 1028.788748][ T28] audit: type=1326 audit(2000000206.576:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eb752ab19 code=0x7ffc0000 [ 1028.813185][ T28] audit: type=1326 audit(2000000206.576:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb758e929 code=0x7ffc0000 [ 1028.851835][T10716] xt_hashlimit: size too large, truncated to 1048576 [ 1028.897529][T10718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1028.898493][ T28] audit: type=1326 audit(2000000206.576:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb758e929 code=0x7ffc0000 [ 1029.008570][ T28] audit: type=1326 audit(2000000206.576:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eb752ab19 code=0x7ffc0000 [ 1029.084141][ T28] audit: type=1326 audit(2000000206.576:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb758e929 code=0x7ffc0000 [ 1029.107779][T10732] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 1029.371113][ T39] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1029.445181][ T543] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1029.577619][ T39] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1029.614343][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2641'. [ 1029.623826][ T39] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1029.634794][ T543] usb 7-1: Using ep0 maxpacket: 8 [ 1029.639956][T10767] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 1029.647985][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1029.655844][ T543] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1029.666395][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1029.676580][ T543] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1029.692937][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.701182][ T543] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1029.714185][ T39] usb 6-1: config 0 descriptor?? [ 1029.719286][ T543] usb 7-1: config 250 has no interface number 0 [ 1029.725876][ T543] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1029.738389][T10731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1029.748962][ T543] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1029.759658][ T543] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1029.772202][ T543] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1029.782836][ T543] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1029.796390][ T543] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1029.811439][ T543] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1029.820598][ T543] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1029.828928][ T543] usb 7-1: Product: syz [ 1029.833148][ T543] usb 7-1: SerialNumber: syz [ 1029.839978][ T543] hub 7-1:250.228: bad descriptor, ignoring hub [ 1029.846712][ T543] hub: probe of 7-1:250.228 failed with error -5 [ 1030.039759][ T543] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1030.147730][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.163254][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.190366][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.198088][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.212755][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.227878][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 1030.227891][ T28] audit: type=1400 audit(2000000208.174:2068): avc: denied { read write } for pid=10734 comm="syz.6.2627" name="lp0" dev="devtmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1030.228525][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.235172][ T28] audit: type=1400 audit(2000000208.174:2069): avc: denied { open } for pid=10734 comm="syz.6.2627" path="/dev/usb/lp0" dev="devtmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1030.258021][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.296332][ T39] logitech 0003:046D:C286.001A: unknown main item tag 0x0 [ 1030.304956][ T39] logitech 0003:046D:C286.001A: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 1030.312359][ C0] usblp0: nonzero read bulk status received: -71 [ 1030.323730][ T39] logitech 0003:046D:C286.001A: no inputs found [ 1030.343523][ T39] usb 6-1: USB disconnect, device number 16 [ 1030.349367][ T4049] usb 7-1: USB disconnect, device number 8 [ 1030.358053][ T4049] usblp0: removed [ 1030.392038][T10792] fido_id[10792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1030.492000][T10802] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2657'. [ 1030.567672][T10808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (155768 ns). Using initial count to start timer. [ 1030.716593][T10817] netlink: 'syz.1.2663': attribute type 12 has an invalid length. [ 1030.733027][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.740076][T10819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.204874][T10849] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1031.214200][T10849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1031.328757][T10860] tmpfs: Unknown parameter 'c' [ 1031.887239][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1032.348617][T10908] netlink: 'syz.6.2698': attribute type 27 has an invalid length. [ 1032.370504][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.377685][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.498272][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1032.514741][T10905] device veth0_vlan left promiscuous mode [ 1032.520709][T10905] device veth0_vlan entered promiscuous mode [ 1032.531473][T10905] device veth1_macvtap left promiscuous mode [ 1032.541182][T10905] device veth1_macvtap entered promiscuous mode [ 1032.696757][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1032.704316][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1032.711763][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1032.719943][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.726971][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.734329][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1032.742822][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1032.751133][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.758190][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.765846][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1032.774261][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1032.782706][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1032.790906][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1032.821007][T10931] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1032.831417][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1032.834619][T10931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1032.841288][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1032.864762][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1032.873207][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1032.881546][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1032.889907][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1032.898303][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1032.906817][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1032.915259][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1032.924057][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.935576][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.943731][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.951714][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1032.959834][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.968149][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.976487][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.985224][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1033.014580][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1033.029537][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1033.039488][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1033.047805][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1033.056125][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1033.065768][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1033.099086][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.106169][T10949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.114464][ T4049] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1033.157615][ T28] audit: type=1400 audit(2000000211.318:2070): avc: denied { shutdown } for pid=10952 comm="syz.2.2719" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1033.195110][ T28] audit: type=1400 audit(2000000211.361:2071): avc: denied { map } for pid=10958 comm="syz.2.2721" path="socket:[52313]" dev="sockfs" ino=52313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1033.304469][ T4049] usb 5-1: Using ep0 maxpacket: 16 [ 1033.310811][ T4049] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1033.329043][ T4049] usb 5-1: config 0 has no interface number 0 [ 1033.338682][ T4049] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1033.358753][ T4049] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1033.389649][ T4049] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1033.406888][ T4049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.425045][ T4049] usb 5-1: Product: syz [ 1033.429227][ T4049] usb 5-1: Manufacturer: syz [ 1033.436276][ T4049] usb 5-1: SerialNumber: syz [ 1033.457999][ T4049] usb 5-1: config 0 descriptor?? [ 1033.463323][T10934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1033.479941][T10934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1042.028448][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1044.664925][ T4049] asix: probe of 5-1:0.251 failed with error -110 [ 1044.689696][ T4049] usb 5-1: USB disconnect, device number 12 [ 1044.741384][ T543] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1045.104265][ T543] usb 6-1: device descriptor read/64, error -71 [ 1045.164164][T11044] netlink: 'syz.1.2759': attribute type 27 has an invalid length. [ 1045.178206][ T6070] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1045.187666][T11044] bridge0: port 3(syz_tun) entered disabled state [ 1045.195412][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.202580][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.250752][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1045.264341][T11046] bridge0: port 3(syz_tun) entered blocking state [ 1045.270818][T11046] bridge0: port 3(syz_tun) entered forwarding state [ 1045.278039][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1045.290469][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1045.308329][T11046] device veth0_vlan left promiscuous mode [ 1045.314362][T11046] device veth0_vlan entered promiscuous mode [ 1045.322084][T11046] device veth1_macvtap left promiscuous mode [ 1045.329220][T11046] device veth1_macvtap entered promiscuous mode [ 1045.355497][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1045.363167][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1045.375211][ T6070] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1045.388358][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1045.396621][ T543] usb 6-1: Using ep0 maxpacket: 16 [ 1045.402934][ T6070] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1045.412521][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.419665][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.427133][ T6070] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.438765][ T6070] usb 7-1: config 220 has no interface number 2 [ 1045.445329][ T543] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 1045.454755][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1045.462862][ T543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1045.471088][ T6070] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1045.484571][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 1045.491880][ T543] usb 6-1: Product: syz [ 1045.496133][ T543] usb 6-1: Manufacturer: syz [ 1045.500981][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1045.509077][ T6070] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1045.515969][ T543] usb 6-1: SerialNumber: syz [ 1045.518696][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.520581][ T6070] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1045.527632][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.537359][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1045.543249][ T543] r8152-cfgselector 6-1: config 0 descriptor?? [ 1045.556154][ T6070] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1045.566707][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): 5@ÿ: link becomes ready [ 1045.574528][ T6070] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1045.583977][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1045.591954][ T6070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.600368][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1045.608972][ T6070] usb 7-1: Product: syz [ 1045.613504][ T6070] usb 7-1: Manufacturer: syz [ 1045.618483][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1045.626520][ T6070] usb 7-1: SerialNumber: syz [ 1045.631459][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1045.645071][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1045.653306][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1045.661754][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1045.670329][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1045.678876][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1045.687825][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1045.696403][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1045.705277][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1045.713554][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1045.721802][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1045.729936][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1045.738351][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1045.746519][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1045.755212][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1045.764231][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1045.772719][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1045.780925][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1045.788722][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.0001: link becomes ready [ 1045.797421][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.805534][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1045.813200][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1045.821512][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.829763][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1045.837641][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1045.846455][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1045.855345][ T6070] usb 7-1: selecting invalid altsetting 0 [ 1045.861457][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1045.868851][ T6070] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1045.875290][ T6070] usb 7-1: No valid video chain found. [ 1045.881113][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1045.891834][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1045.903158][ T6070] usb 7-1: USB disconnect, device number 9 [ 1045.915504][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1045.929378][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1045.937528][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1045.950145][ T543] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1045.971146][ T543] r8152-cfgselector 6-1: bad CDC descriptors [ 1045.977515][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1045.990168][ T543] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1046.003255][ T543] r8152-cfgselector 6-1: USB disconnect, device number 17 [ 1046.014966][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1046.027372][T11069] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1046.194723][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1046.232142][ T6070] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1046.264525][ T28] audit: type=1400 audit(2000000225.384:2072): avc: denied { bind } for pid=11088 comm="syz.1.2780" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1046.288636][ T28] audit: type=1400 audit(2000000225.384:2073): avc: denied { name_bind } for pid=11088 comm="syz.1.2780" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1046.326952][ T28] audit: type=1400 audit(2000000225.384:2074): avc: denied { node_bind } for pid=11088 comm="syz.1.2780" saddr=fe80::bb src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1046.477584][ T28] audit: type=1400 audit(2000000225.598:2075): avc: denied { connect } for pid=11111 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1046.505654][ T28] audit: type=1400 audit(2000000225.641:2076): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1046.689254][ T543] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1046.950418][ T6070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1046.964575][ T6070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.117626][T11159] netlink: 'syz.4.2812': attribute type 32 has an invalid length. [ 1047.126278][T11159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2812'. [ 1047.217669][ T6070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.363011][ T6070] kernel write not supported for file /uhid (pid: 6070 comm: kworker/1:2) [ 1047.363315][ T28] audit: type=1400 audit(2000000226.564:2077): avc: denied { mounton } for pid=11170 comm="syz.5.2818" path="/403/file0" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1047.406968][T11165] overlayfs: failed to set xattr on upper [ 1047.616547][T11184] netlink: 'syz.1.2823': attribute type 27 has an invalid length. [ 1047.764805][T11184] bridge0: port 3(syz_tun) entered disabled state [ 1047.808912][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.816110][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.901044][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1047.914568][T11182] bridge0: port 3(syz_tun) entered blocking state [ 1047.921063][T11182] bridge0: port 3(syz_tun) entered forwarding state [ 1047.931681][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1047.939080][ T4049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.952505][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.959578][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.968742][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.975805][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.001916][T11182] device veth0_vlan left promiscuous mode [ 1048.009281][T11182] device veth0_vlan entered promiscuous mode [ 1048.018281][T11182] device veth1_macvtap left promiscuous mode [ 1048.026667][T11182] device veth1_macvtap entered promiscuous mode [ 1048.065381][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.079679][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1048.098932][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1048.117674][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1048.126939][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1048.138324][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1048.147170][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1048.155876][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1048.182252][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.207727][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1048.226890][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1048.238842][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1048.282984][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1048.301984][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1048.321948][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1048.338714][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1048.367107][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1048.377277][ T9279] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1048.384817][ T9279] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1048.486961][ T543] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1048.675210][ T543] usb 6-1: config 0 has no interfaces? [ 1048.683627][ T543] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1048.765291][ T543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.839871][ T543] usb 6-1: Product: syz [ 1048.879035][ T543] usb 6-1: Manufacturer: syz [ 1048.921139][ T543] usb 6-1: SerialNumber: syz [ 1048.972874][ T543] r8152-cfgselector 6-1: config 0 descriptor?? [ 1049.072448][ T4049] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1049.081885][ T4049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1049.090337][ T4049] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1049.099557][ T4049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1049.415254][ T543] usb 6-1: USB disconnect, device number 18 [ 1049.501841][T11246] netlink: 'syz.1.2846': attribute type 27 has an invalid length. [ 1049.520989][T11240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (155768 ns). Using initial count to start timer. [ 1049.609718][T11246] bridge0: port 3(syz_tun) entered disabled state [ 1049.617320][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.624592][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.770801][T11250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1049.793277][T11250] bridge0: port 3(syz_tun) entered blocking state [ 1049.799723][T11250] bridge0: port 3(syz_tun) entered forwarding state [ 1049.808897][T11250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1049.820921][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.827967][T11250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.839465][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.846603][T11250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.864086][T11250] device veth0_vlan left promiscuous mode [ 1049.870707][T11250] device veth0_vlan entered promiscuous mode [ 1049.879741][T11250] device veth1_macvtap left promiscuous mode [ 1049.887156][T11250] device veth1_macvtap entered promiscuous mode [ 1049.916526][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.942743][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.951466][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.959946][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.968535][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.976998][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.998345][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.016483][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1050.032669][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.046192][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.063011][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.079761][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.098296][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.117044][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1050.134062][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1050.159597][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1050.179002][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1050.211418][T11271] tun0: tun_chr_ioctl cmd 1074025677 [ 1050.225540][T11271] tun0: linktype set to 270 [ 1050.461754][T11285] block device autoloading is deprecated and will be removed. [ 1050.462231][ T28] audit: type=1400 audit(2000000229.879:2078): avc: denied { create } for pid=11283 comm="syz.6.2859" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1050.513580][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1050.571135][ T28] audit: type=1400 audit(2000000229.879:2079): avc: denied { read } for pid=11283 comm="syz.6.2859" name="file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1050.667050][ T28] audit: type=1400 audit(2000000229.879:2080): avc: denied { open } for pid=11283 comm="syz.6.2859" path="/39/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1050.692765][T11297] input: syz0 as /devices/virtual/input/input26 [ 1050.781087][ T543] hid-generic 0008:0007:0005.001B: item fetching failed at offset 0/1 [ 1050.832640][ T543] hid-generic: probe of 0008:0007:0005.001B failed with error -22 [ 1050.984546][ T28] audit: type=1400 audit(2000000229.976:2081): avc: denied { ioctl } for pid=11283 comm="syz.6.2859" path="/39/file0" dev="tmpfs" ino=234 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1051.040601][ T28] audit: type=1400 audit(2000000230.480:2082): avc: denied { unlink } for pid=10482 comm="syz-executor" name="file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1051.531689][ T28] audit: type=1400 audit(2000000231.027:2083): avc: denied { map } for pid=11326 comm="syz.5.2877" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1051.625532][T11341] kvm: pic: non byte write [ 1051.713982][T11354] futex_wake_op: syz.4.2888 tries to shift op by 32; fix this program [ 1052.103442][ T6] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 1052.103458][ T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1052.117940][ T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1053.196191][ T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1053.884178][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1054.295503][T11434] netlink: 'syz.2.2916': attribute type 27 has an invalid length. [ 1054.319636][T11438] input: syz0 as /devices/virtual/input/input27 [ 1054.329862][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.337070][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.355976][ T28] audit: type=1400 audit(2000000234.063:2084): avc: denied { setopt } for pid=11439 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1054.421462][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2932'. [ 1055.597103][T11491] netlink: 'syz.2.2933': attribute type 27 has an invalid length. [ 1055.607517][T11493] netlink: 'syz.1.2936': attribute type 27 has an invalid length. [ 1055.629473][T11493] bridge0: port 3(syz_tun) entered disabled state [ 1055.637187][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.644345][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.654652][ T6] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1056.418785][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 1056.421206][T11521] xt_hashlimit: size too large, truncated to 1048576 [ 1056.425525][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.504362][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.514394][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1056.528602][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1056.537919][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.548163][ T6] usb 5-1: config 0 descriptor?? [ 1056.670822][T11533] 9pnet_fd: Insufficient options for proto=fd [ 1056.707739][ T9279] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1056.773513][ T543] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1056.903471][ T9279] usb 2-1: Using ep0 maxpacket: 16 [ 1056.911159][ T9279] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1056.920647][ T9279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.928826][ T9279] usb 2-1: Product: syz [ 1056.933341][ T9279] usb 2-1: Manufacturer: syz [ 1056.938142][ T9279] usb 2-1: SerialNumber: syz [ 1056.942559][ T543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.953762][ T9279] usb 2-1: config 0 descriptor?? [ 1056.960428][ T9279] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1056.964020][ T543] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1056.977044][ T9279] usb 2-1: Detected FT232H [ 1056.977156][ T543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.993410][ T543] usb 7-1: config 0 descriptor?? [ 1057.139663][ T6] usb 5-1: USB disconnect, device number 13 [ 1057.150249][ T9279] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1057.313894][T11539] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 1057.323803][ T28] audit: type=1400 audit(2000000237.250:2085): avc: denied { relabelto } for pid=11538 comm="syz.2.2962" name="579" dev="tmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 1057.351426][ T28] audit: type=1400 audit(2000000237.250:2086): avc: denied { associate } for pid=11538 comm="syz.2.2962" name="579" dev="tmpfs" ino=3168 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_state_t:s0" [ 1057.379425][ T28] audit: type=1400 audit(2000000237.282:2087): avc: denied { write } for pid=286 comm="syz-executor" name="579" dev="tmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 1057.380389][ T543] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1057.406465][ T28] audit: type=1400 audit(2000000237.282:2088): avc: denied { remove_name } for pid=286 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 1057.416798][ T543] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001D/input/input28 [ 1057.443252][ T28] audit: type=1400 audit(2000000237.282:2089): avc: denied { rmdir } for pid=286 comm="syz-executor" name="579" dev="tmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 1057.489286][T11545] syz.2.2965[11545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.489340][T11545] syz.2.2965[11545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.512733][ T543] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1057.544446][ T9279] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1057.610953][ T28] audit: type=1400 audit(2000000237.550:2090): avc: denied { relabelfrom } for pid=11553 comm="syz.2.2969" name="" dev="pipefs" ino=15439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1057.634378][T11554] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 1057.666144][ T28] audit: type=1400 audit(2000000237.593:2091): avc: denied { relabelto } for pid=11553 comm="syz.2.2969" name="" dev="pipefs" ino=15439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1057.726919][ T543] usb 2-1: USB disconnect, device number 11 [ 1057.734335][ T543] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1057.744453][ T543] ftdi_sio 2-1:0.0: device disconnected [ 1057.792914][ T9279] usb 7-1: USB disconnect, device number 10 [ 1058.613734][ T28] audit: type=1400 audit(2000000238.634:2092): avc: denied { mounton } for pid=11595 comm="syz.6.2986" path="/60/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1058.625980][T11596] block device autoloading is deprecated and will be removed. [ 1058.645518][T11596] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1058.654874][T11596] FAT-fs (loop13): unable to read boot sector [ 1058.667780][T11600] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2988'. [ 1059.095590][ T28] audit: type=1326 audit(2000000239.149:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761ff8e929 code=0x7fc00000 [ 1059.266642][T11648] block device autoloading is deprecated and will be removed. [ 1059.274457][T11648] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1059.283642][T11648] FAT-fs (loop3): unable to read boot sector [ 1059.672659][T11668] netlink: 'syz.5.3014': attribute type 27 has an invalid length. [ 1059.774846][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.965668][T11659] device veth0_vlan left promiscuous mode [ 1060.167175][T11659] device veth0_vlan entered promiscuous mode [ 1060.174338][T11659] device veth1_macvtap left promiscuous mode [ 1060.190413][T11659] device veth1_macvtap entered promiscuous mode [ 1060.207311][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.216604][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.225449][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.235427][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.243980][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1060.252478][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1060.260947][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1060.269279][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1060.277568][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1060.286042][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1060.296586][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1060.304760][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1060.312969][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1060.321051][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1060.329235][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1060.337535][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1060.345930][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1060.354201][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1060.362863][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1060.370906][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1060.378981][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1060.387335][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1060.395490][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1060.403855][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1060.412923][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1060.422104][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1060.430649][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1060.439525][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1060.447751][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1060.456597][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1060.507359][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1060.516741][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1060.529722][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1060.967253][ T543] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1061.173055][ T543] usb 7-1: Using ep0 maxpacket: 32 [ 1061.180033][ T543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.217658][ T543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.270286][ T543] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1061.327181][T11727] netlink: 'syz.1.3042': attribute type 27 has an invalid length. [ 1061.376880][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1061.385163][ T543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.407029][T11727] bridge0: port 3(syz_tun) entered blocking state [ 1061.413477][T11727] bridge0: port 3(syz_tun) entered forwarding state [ 1061.420580][ T543] usb 7-1: config 0 descriptor?? [ 1061.434593][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1061.450999][ T6070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1061.461367][ T543] hub 7-1:0.0: USB hub found [ 1061.470183][T11727] device veth0_vlan left promiscuous mode [ 1061.477161][T11727] device veth0_vlan entered promiscuous mode [ 1061.490672][T11727] device veth1_macvtap left promiscuous mode [ 1061.497511][T11727] device veth1_macvtap entered promiscuous mode [ 1061.523857][ T28] audit: type=1400 audit(2000000241.756:2094): avc: denied { write } for pid=11736 comm="syz.4.3047" name="file0" dev="tmpfs" ino=3266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1061.526876][T11739] block device autoloading is deprecated and will be removed. [ 1061.562248][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.570667][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1061.587510][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.600463][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.608368][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.616916][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.623985][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.632039][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.640533][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 1061.648469][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.656802][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.663887][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.674703][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.683642][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): 5@ÿ: link becomes ready [ 1061.691388][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.699783][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1061.707906][ T543] hub 7-1:0.0: 1 port detected [ 1061.708511][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.721283][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.730549][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.738744][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.746910][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.761473][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1061.783093][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1061.792839][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1061.802810][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1061.880940][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.896167][ T543] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1061.925375][ T543] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1061.954583][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.995965][ T543] usbhid 7-1:0.0: can't add hid device: -71 [ 1062.003379][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.011442][ T543] usbhid: probe of 7-1:0.0 failed with error -71 [ 1062.016945][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1062.031875][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1062.040622][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1062.049276][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1062.057407][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1062.065643][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1062.073300][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.0001: link becomes ready [ 1062.081967][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1062.089772][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1062.097438][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1062.105759][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1062.114123][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.121760][ T543] usb 7-1: USB disconnect, device number 11 [ 1062.129487][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1062.137214][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1062.147807][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1062.155510][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1062.163213][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1062.170783][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1062.182263][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1062.190789][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1062.206879][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1062.228188][T11768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1062.300410][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1062.617924][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1062.632437][T11787] netlink: 'syz.5.3065': attribute type 27 has an invalid length. [ 1062.944505][T11786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1062.967772][T11786] device veth0_vlan left promiscuous mode [ 1062.975483][T11786] device veth0_vlan entered promiscuous mode [ 1062.983063][T11786] device veth1_macvtap left promiscuous mode [ 1062.989654][T11786] device veth1_macvtap entered promiscuous mode [ 1062.990145][ T543] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1063.009876][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1063.019356][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.050353][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.058448][ T28] audit: type=1400 audit(2000000243.398:2095): avc: denied { setopt } for pid=11791 comm="syz.1.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1063.111861][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1063.121080][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.130524][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1063.139273][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1063.147558][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1063.156083][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1063.164408][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1063.173136][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1063.181378][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1063.189751][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1063.197952][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1063.206477][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1063.214898][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1063.223438][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1063.231753][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.240358][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.248492][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1063.256738][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1063.264917][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1063.273231][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1063.281743][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1063.290571][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1063.298689][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1063.306780][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1063.314432][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1063.322188][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1063.344484][ T9279] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1063.363914][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1063.372611][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1063.382334][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1063.390246][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1063.409880][ T28] audit: type=1400 audit(2000000243.784:2096): avc: denied { shutdown } for pid=11772 comm="syz.6.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1063.461510][ T28] audit: type=1400 audit(2000000243.816:2097): avc: denied { connect } for pid=11772 comm="syz.6.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1063.482650][ T28] audit: type=1400 audit(2000000243.827:2098): avc: denied { read } for pid=11802 comm="syz.4.3071" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1063.510061][T11807] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1063.511643][ T28] audit: type=1400 audit(2000000243.827:2099): avc: denied { ioctl } for pid=11802 comm="syz.4.3071" path="/600/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1063.556153][ T28] audit: type=1400 audit(2000000243.838:2100): avc: denied { getopt } for pid=11804 comm="syz.6.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1063.578317][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1063.586088][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1063.594917][ T9279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.618392][ T9279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.628515][ T28] audit: type=1400 audit(2000000243.902:2101): avc: denied { relabelto } for pid=11805 comm="syz.4.3073" name="601" dev="tmpfs" ino=3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1063.662251][ T9279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1063.683293][ T28] audit: type=1400 audit(2000000243.902:2102): avc: denied { associate } for pid=11805 comm="syz.4.3073" name="601" dev="tmpfs" ino=3313 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1063.698252][ T9279] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1063.711046][ T28] audit: type=1400 audit(2000000243.934:2103): avc: denied { write } for pid=283 comm="syz-executor" name="601" dev="tmpfs" ino=3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1063.755427][ T9279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.775123][ T9279] usb 2-1: config 0 descriptor?? [ 1063.830922][ T28] audit: type=1400 audit(2000000243.934:2104): avc: denied { remove_name } for pid=283 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1064.199789][ T9279] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 1064.210305][ T9279] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1064.225224][ T9279] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 1064.243265][ T9279] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1064.503757][ T9279] usb 2-1: USB disconnect, device number 12 [ 1064.816714][ T24] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1065.060962][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1065.074272][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.084241][ T24] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1065.093620][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.184776][ T24] usb 7-1: config 0 descriptor?? [ 1065.488732][T11899] kvm: pic: non byte write [ 1065.494216][T11899] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1065.503027][T11899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1065.662429][ T24] chicony 0003:04F2:1236.001F: item fetching failed at offset 0/1 [ 1065.672114][ T24] chicony 0003:04F2:1236.001F: Chicony hid parse failed: -22 [ 1065.683105][ T24] chicony: probe of 0003:04F2:1236.001F failed with error -22 [ 1065.849593][ T24] usb 7-1: USB disconnect, device number 12 [ 1065.946762][T11920] xt_hashlimit: size too large, truncated to 1048576 [ 1067.067505][T11971] kvm [11970]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2000000001c0 [ 1067.200874][T11978] kvm: pic: non byte write [ 1067.205998][T11978] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1067.214848][T11978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1067.333516][T11985] netlink: 'syz.6.3143': attribute type 27 has an invalid length. [ 1067.365415][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.372622][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.454713][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1067.454729][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1067.501897][T11989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1067.544416][T11989] device veth0_vlan left promiscuous mode [ 1067.562163][T11989] device veth0_vlan entered promiscuous mode [ 1067.586706][T11989] device veth1_macvtap left promiscuous mode [ 1067.601252][T11989] device veth1_macvtap entered promiscuous mode [ 1067.616241][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.628277][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.664857][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.767209][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.774303][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.881628][ T9279] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1067.896403][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.905196][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.913464][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.920544][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.927933][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.936356][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1067.944510][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1067.952816][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1067.962037][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1067.986602][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1068.012798][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1068.029230][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1068.045482][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1068.062780][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1068.070815][ T9279] usb 5-1: Using ep0 maxpacket: 8 [ 1068.076912][ T9279] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.088093][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1068.098076][ T9279] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.106800][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1068.116118][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1068.117075][ T9279] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1068.131012][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1068.133722][ T9279] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1068.148082][ T9279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.153702][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1068.164955][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1068.168369][ T9279] usb 5-1: config 0 descriptor?? [ 1068.173694][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1068.191794][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1068.200475][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.208770][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.217041][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.225178][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.234290][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.242406][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.252208][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.261184][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1068.278236][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1068.396376][T12019] xt_hashlimit: size too large, truncated to 1048576 [ 1068.556443][ T9279] steelseries_srws1 0003:1038:1410.0020: unknown main item tag 0x1 [ 1068.574871][ T9279] steelseries_srws1 0003:1038:1410.0020: item fetching failed at offset 3/5 [ 1068.605478][ T9279] steelseries_srws1 0003:1038:1410.0020: parse failed [ 1068.628795][ T9279] steelseries_srws1: probe of 0003:1038:1410.0020 failed with error -22 [ 1068.750841][ T9279] usb 5-1: USB disconnect, device number 14 [ 1068.778861][T12034] netlink: 'syz.6.3159': attribute type 1 has an invalid length. [ 1068.786675][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3159'. [ 1068.819273][T12031] kvm: pic: non byte write [ 1068.824295][T12031] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 1068.833256][T12031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 1069.187914][ T39] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1069.302342][T12058] netlink: 'syz.4.3169': attribute type 27 has an invalid length. [ 1069.392946][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 1069.399427][ T39] usb 7-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 1069.440657][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.465644][ T39] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.490568][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.569254][ T39] usb 7-1: Product: syz [ 1069.575914][ T39] usb 7-1: Manufacturer: syz [ 1069.580805][ T39] usb 7-1: SerialNumber: syz [ 1069.928080][T12079] kvm: pic: non byte write [ 1069.935090][T12086] device bridge0 entered promiscuous mode [ 1069.992256][ T39] usb 7-1: 0:2 : does not exist [ 1070.003166][T12089] netlink: 'syz.5.3181': attribute type 27 has an invalid length. [ 1070.077887][T12089] device bridge0 left promiscuous mode [ 1070.448671][ T39] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1070.510757][ T39] usb 7-1: USB disconnect, device number 13 [ 1070.745080][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1070.745098][ T28] audit: type=1400 audit(2000000251.648:2107): avc: denied { setcurrent } for pid=12109 comm="syz.5.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1071.444563][ T39] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1071.453545][ T39] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1071.498369][T12135] fido_id[12135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1071.700412][T12146] overlayfs: failed to clone upperpath [ 1071.714391][ T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1072.310077][ T39] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1072.489241][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1072.546131][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1072.557963][ T39] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1072.569301][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.580590][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 1072.592950][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.602741][T12167] incfs: Error accessing: ./bus/file0. [ 1072.608259][T12167] incfs: mount failed -2 [ 1072.612751][ T39] usb 7-1: Product: syz [ 1072.619034][ T39] usb 7-1: Manufacturer: syz [ 1072.625200][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.636830][ T6] usb 5-1: config 0 has no interfaces? [ 1072.642327][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1072.646729][ T39] usb 7-1: SerialNumber: syz [ 1072.652793][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.665603][ T6] usb 5-1: config 0 descriptor?? [ 1072.734175][T12139] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1072.843900][T12182] netlink: 'syz.5.3216': attribute type 27 has an invalid length. [ 1072.873778][T12182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1072.891323][T12182] device veth0_vlan left promiscuous mode [ 1072.897373][T12182] device veth0_vlan entered promiscuous mode [ 1072.905000][T12182] device veth1_macvtap left promiscuous mode [ 1072.911697][T12182] device veth1_macvtap entered promiscuous mode [ 1072.954392][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1072.962245][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1072.974845][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.987087][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1072.996672][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1073.008252][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1073.039691][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1073.049129][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1073.057625][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1073.066838][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1073.076135][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1073.089328][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1073.098651][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1073.114250][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1073.133442][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1073.150921][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1073.159418][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1073.168726][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1073.178073][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1073.486622][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1073.636407][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1073.644450][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1073.765769][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1073.773951][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1073.782364][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1073.790863][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1073.799296][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1073.807345][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1073.815090][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1073.822646][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1073.852344][ T39] cdc_ncm 7-1:1.0: bind() failure [ 1073.861495][ T39] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 1073.872438][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1073.876411][ T39] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 1073.883016][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1073.896200][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1073.903337][ T39] usb 7-1: USB disconnect, device number 14 [ 1073.903795][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1074.389723][T12225] netlink: 'syz.6.3231': attribute type 27 has an invalid length. [ 1074.404516][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.411727][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.444312][T12226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1074.462018][ T4049] usb 5-1: USB disconnect, device number 15 [ 1074.468051][T12226] device veth0_vlan left promiscuous mode [ 1074.476188][T12226] device veth0_vlan entered promiscuous mode [ 1074.483341][T12226] device veth1_macvtap left promiscuous mode [ 1074.492892][T12226] device veth1_macvtap entered promiscuous mode [ 1074.499569][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1074.509136][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1074.518840][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1074.527359][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.534413][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.542245][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1074.550622][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1074.560165][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.567210][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.574729][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1074.583150][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1074.591709][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1074.600031][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1074.608212][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1074.616319][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1074.624338][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1074.632648][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1074.640897][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1074.649035][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1074.657269][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1074.665571][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1074.673858][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1074.682162][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1074.690219][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1074.698326][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1074.706340][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1074.714403][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.722768][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1074.731126][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.739121][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.746991][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1074.754426][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1074.761901][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1074.770146][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1074.778436][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1074.787749][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1074.836195][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1074.846156][ T4049] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1074.854005][T10482] ------------[ cut here ]------------ [ 1074.859588][T10482] WARNING: CPU: 1 PID: 10482 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 1074.867773][T10482] Modules linked in: [ 1074.871663][T10482] CPU: 1 PID: 10482 Comm: syz-executor Not tainted 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 1074.881813][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1074.891985][T10482] RIP: 0010:drop_nlink+0xc5/0x110 [ 1074.897006][T10482] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 eb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b 8f ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1074.916791][T10482] RSP: 0018:ffffc90009487c38 EFLAGS: 00010293 [ 1074.922900][T10482] RAX: ffffffff81c36825 RBX: ffff888111ca8bd8 RCX: ffff88814847e540 [ 1074.930913][T10482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1074.938906][T10482] RBP: ffffc90009487c60 R08: 0000000000000004 R09: 0000000000000003 [ 1074.946902][T10482] R10: fffff52001290f78 R11: 1ffff92001290f78 R12: dffffc0000000000 [ 1074.954919][T10482] R13: 1ffff11022395184 R14: ffff888111ca8c20 R15: 0000000000000000 [ 1074.962921][T10482] FS: 0000555575ff1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1074.971967][T10482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1074.978603][T10482] CR2: 00005555760144e8 CR3: 0000000129744000 CR4: 00000000003506a0 [ 1074.986637][T10482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1074.994615][T10482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1075.002607][T10482] Call Trace: [ 1075.005927][T10482] [ 1075.008883][T10482] shmem_rmdir+0x5b/0x90 [ 1075.013133][T10482] vfs_rmdir+0x393/0x500 [ 1075.017403][T10482] incfs_kill_sb+0x105/0x220 [ 1075.021995][T10482] deactivate_locked_super+0xb5/0x120 [ 1075.023672][ T4049] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1075.027423][T10482] deactivate_super+0xaf/0xe0 [ 1075.038622][ T4049] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1075.043104][T10482] cleanup_mnt+0x45f/0x4e0 [ 1075.053116][ T4049] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1075.057320][T10482] __cleanup_mnt+0x19/0x20 [ 1075.070827][T10482] task_work_run+0x1db/0x240 [ 1075.075468][T10482] ? __cfi_task_work_run+0x10/0x10 [ 1075.080654][T10482] ? __x64_sys_umount+0x125/0x160 [ 1075.085710][T10482] ? __cfi___x64_sys_umount+0x10/0x10 [ 1075.091166][T10482] exit_to_user_mode_loop+0x9b/0xb0 [ 1075.091217][ T4049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.096374][T10482] exit_to_user_mode_prepare+0x5a/0xa0 [ 1075.096395][T10482] syscall_exit_to_user_mode+0x1a/0x30 [ 1075.115335][T10482] do_syscall_64+0x58/0xa0 [ 1075.119822][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.124520][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.129271][T10482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.135276][T10482] RIP: 0033:0x7f952898fc57 [ 1075.139742][T10482] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1075.159399][T10482] RSP: 002b:00007ffd23d8a078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1075.167868][T10482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f952898fc57 [ 1075.175880][T10482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd23d8a130 [ 1075.183898][T10482] RBP: 00007ffd23d8a130 R08: 0000000000000000 R09: 0000000000000000 [ 1075.191902][T10482] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd23d8b1c0 [ 1075.199904][T10482] R13: 00007f9528a10925 R14: 00000000001143c2 R15: 00007ffd23d8b200 [ 1075.207926][T10482] [ 1075.210982][T10482] ---[ end trace 0000000000000000 ]--- [ 1075.218312][T10482] ================================================================== [ 1075.226380][T10482] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1075.232609][T10482] Write of size 4 at addr 0000000000000170 by task syz-executor/10482 [ 1075.240740][T10482] [ 1075.243047][T10482] CPU: 0 PID: 10482 Comm: syz-executor Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 1075.254570][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.264606][T10482] Call Trace: [ 1075.267870][T10482] [ 1075.270783][T10482] __dump_stack+0x21/0x24 [ 1075.275103][T10482] dump_stack_lvl+0xee/0x150 [ 1075.279690][T10482] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1075.284737][T10482] ? ihold+0x20/0x60 [ 1075.288624][T10482] ? ihold+0x20/0x60 [ 1075.292499][T10482] ? ihold+0x20/0x60 [ 1075.296386][T10482] print_report+0x3d/0x60 [ 1075.300701][T10482] kasan_report+0x122/0x150 [ 1075.305189][T10482] ? ihold+0x20/0x60 [ 1075.309072][T10482] kasan_check_range+0x280/0x290 [ 1075.313990][T10482] __kasan_check_write+0x14/0x20 [ 1075.318917][T10482] ihold+0x20/0x60 [ 1075.322617][T10482] vfs_rmdir+0x25f/0x500 [ 1075.326842][T10482] incfs_kill_sb+0x105/0x220 [ 1075.331414][T10482] deactivate_locked_super+0xb5/0x120 [ 1075.336771][T10482] deactivate_super+0xaf/0xe0 [ 1075.341430][T10482] cleanup_mnt+0x45f/0x4e0 [ 1075.345841][T10482] __cleanup_mnt+0x19/0x20 [ 1075.350254][T10482] task_work_run+0x1db/0x240 [ 1075.354839][T10482] ? __cfi_task_work_run+0x10/0x10 [ 1075.359939][T10482] ? __x64_sys_umount+0x125/0x160 [ 1075.364948][T10482] ? __cfi___x64_sys_umount+0x10/0x10 [ 1075.370310][T10482] exit_to_user_mode_loop+0x9b/0xb0 [ 1075.375493][T10482] exit_to_user_mode_prepare+0x5a/0xa0 [ 1075.380938][T10482] syscall_exit_to_user_mode+0x1a/0x30 [ 1075.386384][T10482] do_syscall_64+0x58/0xa0 [ 1075.390783][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.395451][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.400119][T10482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.406001][T10482] RIP: 0033:0x7f952898fc57 [ 1075.410409][T10482] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1075.430029][T10482] RSP: 002b:00007ffd23d8a078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1075.438425][T10482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f952898fc57 [ 1075.446388][T10482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd23d8a130 [ 1075.454340][T10482] RBP: 00007ffd23d8a130 R08: 0000000000000000 R09: 0000000000000000 [ 1075.462293][T10482] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd23d8b1c0 [ 1075.470246][T10482] R13: 00007f9528a10925 R14: 00000000001143c2 R15: 00007ffd23d8b200 [ 1075.478204][T10482] [ 1075.481205][T10482] ================================================================== [ 1075.491807][T10482] Disabling lock debugging due to kernel taint [ 1075.498052][T10482] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1075.505858][T10482] #PF: supervisor write access in kernel mode [ 1075.511927][T10482] #PF: error_code(0x0002) - not-present page [ 1075.517909][T10482] PGD 14029c067 P4D 14029c067 PUD 0 [ 1075.523205][T10482] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1075.528408][T10482] CPU: 1 PID: 10482 Comm: syz-executor Tainted: G B W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 1075.540031][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.550086][T10482] RIP: 0010:ihold+0x26/0x60 [ 1075.554597][T10482] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1075.574279][T10482] RSP: 0018:ffffc90009487c78 EFLAGS: 00010246 [ 1075.580338][T10482] RAX: ffff88814847e500 RBX: 0000000000000000 RCX: ffff88814847e540 [ 1075.588306][T10482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1075.596357][T10482] RBP: ffffc90009487c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1075.604320][T10482] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888111ca8be4 [ 1075.612285][T10482] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1075.620252][T10482] FS: 0000555575ff1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1075.629171][T10482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.635753][T10482] CR2: 0000000000000170 CR3: 0000000129744000 CR4: 00000000003506a0 [ 1075.643722][T10482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1075.651691][T10482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1075.659655][T10482] Call Trace: [ 1075.662920][T10482] [ 1075.665848][T10482] vfs_rmdir+0x25f/0x500 [ 1075.670092][T10482] incfs_kill_sb+0x105/0x220 [ 1075.674684][T10482] deactivate_locked_super+0xb5/0x120 [ 1075.680067][T10482] deactivate_super+0xaf/0xe0 [ 1075.684735][T10482] cleanup_mnt+0x45f/0x4e0 [ 1075.689158][T10482] __cleanup_mnt+0x19/0x20 [ 1075.693575][T10482] task_work_run+0x1db/0x240 [ 1075.698160][T10482] ? __cfi_task_work_run+0x10/0x10 [ 1075.703263][T10482] ? __x64_sys_umount+0x125/0x160 [ 1075.708281][T10482] ? __cfi___x64_sys_umount+0x10/0x10 [ 1075.713644][T10482] exit_to_user_mode_loop+0x9b/0xb0 [ 1075.718830][T10482] exit_to_user_mode_prepare+0x5a/0xa0 [ 1075.724278][T10482] syscall_exit_to_user_mode+0x1a/0x30 [ 1075.729730][T10482] do_syscall_64+0x58/0xa0 [ 1075.734140][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.738823][T10482] ? clear_bhb_loop+0x30/0x80 [ 1075.743494][T10482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.749386][T10482] RIP: 0033:0x7f952898fc57 [ 1075.753792][T10482] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1075.773388][T10482] RSP: 002b:00007ffd23d8a078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1075.781789][T10482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f952898fc57 [ 1075.789750][T10482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd23d8a130 [ 1075.797740][T10482] RBP: 00007ffd23d8a130 R08: 0000000000000000 R09: 0000000000000000 [ 1075.805734][T10482] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd23d8b1c0 [ 1075.813706][T10482] R13: 00007f9528a10925 R14: 00000000001143c2 R15: 00007ffd23d8b200 [ 1075.821675][T10482] [ 1075.824684][T10482] Modules linked in: [ 1075.828687][T10482] CR2: 0000000000000170 [ 1075.832825][T10482] ---[ end trace 0000000000000000 ]--- [ 1075.838267][T10482] RIP: 0010:ihold+0x26/0x60 [ 1075.842764][T10482] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1075.862365][T10482] RSP: 0018:ffffc90009487c78 EFLAGS: 00010246 [ 1075.868421][T10482] RAX: ffff88814847e500 RBX: 0000000000000000 RCX: ffff88814847e540 [ 1075.876382][T10482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1075.884343][T10482] RBP: ffffc90009487c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1075.892304][T10482] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888111ca8be4 [ 1075.900266][T10482] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1075.908316][T10482] FS: 0000555575ff1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1075.917241][T10482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.923823][T10482] CR2: 0000000000000170 CR3: 0000000129744000 CR4: 00000000003506a0 [ 1075.931787][T10482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1075.939762][T10482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1075.947739][T10482] Kernel panic - not syncing: Fatal exception [ 1075.954180][T10482] Kernel Offset: disabled [ 1075.958493][T10482] Rebooting in 86400 seconds..