last executing test programs: 11.914241291s ago: executing program 4 (id=1449): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xa00a0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x4bfb, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) 9.769426619s ago: executing program 0 (id=1458): socket$qrtr(0x2a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 9.544754517s ago: executing program 0 (id=1460): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000020000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.31801166s ago: executing program 4 (id=1461): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x8, 0x75e70, 0x121, {{0x11, 0x4, 0x3, 0x3e, 0x44, 0x68, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0x3, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010101}, {@local, 0xe}]}, @lsrr={0x83, 0x3, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x3}, {0x0, 0xfff1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0x1a, 0x4, 0x2, 0x8, 0x68, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x40, 0x1, 0x5, [{@multicast2, 0x186}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@local, 0xd55d}, {@empty, 0x3e}, {@multicast2, 0x1}]}, @timestamp={0x44, 0xc, 0xbf, 0x0, 0x2, [0x0, 0x0]}, @generic={0x7, 0xc, "f941c1a74690e16ec14a"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd12000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x2000080c) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000040)) 9.136812764s ago: executing program 0 (id=1464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x8, 0xfff, 0x539, 0xffffffffffffffff, 0x80e4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x400, 0x4, 0x214, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x48) syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x7f}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x8000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x0, 0x2, 0x0, "1ce889d15b3842d403000715335701780364030000000000001649e33958916c"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x6, &(0x7f0000000280)=0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x9, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) 8.139593595s ago: executing program 4 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) stat(&(0x7f0000000a80)='./file0\x00', 0x0) lchown(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) 6.93039616s ago: executing program 2 (id=1473): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000002c0)="be", 0x1) write$char_usb(r0, 0x0, 0x0) 6.873876743s ago: executing program 4 (id=1474): socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) r1 = timerfd_create(0x7, 0x800) timerfd_gettime(r1, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioperm(0x0, 0x3, 0x7) r3 = gettid() signalfd(r2, &(0x7f0000000140)={[0x5]}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet(0x2, 0x4, 0x6) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x1, &(0x7f0000000000)=0x5, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006a07fbf908000300", @ANYRES32=r8, @ANYBLOB="05002900"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 6.871829132s ago: executing program 3 (id=1475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r0, 0x1) 6.864366161s ago: executing program 1 (id=1476): bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe3f}, {0x0}, {0x0}], 0x3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 6.657400174s ago: executing program 2 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 6.433841494s ago: executing program 3 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x400, 0xfee, 0x0, 0x4}, 0x5, 0x1, 0x1, 0x200, 0x0, 0x3, 0xd, 0xb, 0x7, 0x6, {0x5, 0x100, 0x7fffffff, 0xe, 0x8, 0xf72}}}}]}, 0x78}}, 0x0) 5.695833588s ago: executing program 1 (id=1479): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x8, 0x75e70, 0x121, {{0x11, 0x4, 0x3, 0x3e, 0x44, 0x68, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0x3, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010101}, {@local, 0xe}]}, @lsrr={0x83, 0x3, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x3}, {0x0, 0xfff1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0x1a, 0x4, 0x2, 0x8, 0x68, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x40, 0x1, 0x5, [{@multicast2, 0x186}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@local, 0xd55d}, {@empty, 0x3e}, {@multicast2, 0x1}]}, @timestamp={0x44, 0xc, 0xbf, 0x0, 0x2, [0x0, 0x0]}, @generic={0x7, 0xc, "f941c1a74690e16ec14a"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd12000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x2000080c) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000040)) 4.278969031s ago: executing program 2 (id=1480): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) 4.27712951s ago: executing program 3 (id=1481): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) 4.120703248s ago: executing program 4 (id=1482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 3.30226955s ago: executing program 3 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 2.318227486s ago: executing program 2 (id=1484): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.271898867s ago: executing program 0 (id=1485): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r1, r0) 2.250231823s ago: executing program 1 (id=1486): socket$kcm(0x21, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2.09444896s ago: executing program 4 (id=1487): syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f00000002c0)="be", 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 2.093985109s ago: executing program 3 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2040400) unshare(0x2000400) 2.048843043s ago: executing program 0 (id=1489): bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe3f}, {0x0}, {0x0}], 0x3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.956214956s ago: executing program 2 (id=1490): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.89322872s ago: executing program 1 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x400, 0xfee, 0x0, 0x4}, 0x5, 0x1, 0x1, 0x200, 0x0, 0x3, 0xd, 0xb, 0x7, 0x6, {0x5, 0x100, 0x7fffffff, 0xe, 0x8, 0xf72}}}}]}, 0x78}}, 0x0) 1.714247447s ago: executing program 3 (id=1492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x4c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000140)=0xc) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000002b40)=""/102384, 0x18ff0}], 0x1, 0x0, 0x20) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x2, 0x7}}, 0xe4) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r7, &(0x7f0000000600)="83694c790b8980a54c93519a9228074696fb84a01ee2bd98b8aace0f25966bb6ae6bcea1022a32af2268cfea767dbc46dd3d1e16aba57e1428b83690d24a6234a4a56f39472d0757f6f0e295db7c4c581ba81d554ad9f79646d9ba0169e715ffb2909cbf40e32b86b7685709e4e7c090473c59eb31488f2bf972dd792f58cd3fe6b11cf930db6ae288df924fc51b3e907aea883430330aec1eb42a18b092d78d065a2cb3e4232375ea2e4e14cff5cb9edacf9869a46b82654413f4fd71328645ad97448529b53f9d4bbc702a64490c4ae78824dfcb7dc3516cbfd98f4e0a570ff43b002fce821b04beecead603117dc305ee9a656d0a85fffd6a2c348e838f3b283b69cc1800e845226121b883190d35b978e3aaa355c9f8baf24d62a1245c3fcad5494d9720dabec7b5fa23f82996ebd8b0f5b6c51fc6d4affa56b346ef9e6206ca7359e5ad633145749b098f4e158bf72c68e695842940175aedefe171dd4206dacc63e9adcee022cd32dbd2054ded07db2055918906d5625984b09098cbd876bcea50b9642618f3c3d764a00ac207a384544535a99a8e243449d3ee37377965a8bdd8f93b3bee861dcd5255d5ca43e1c4bb501f87554a36d28a8ec5e13f8746ebab7cf5b4fcfbd27ff4d125bdf6ff4c7ab1071c65f51df1335bc614e6c197bd9f4acd62edeff4f9fc028d68a0d64a99bafaed5dbeaad45e3804727d9eb0abe0dbf9acd439a12051a94b57fb471930ce4daf39448b4378b5d3ebd4523048d44b79bb56ac4e8e2fb3903f26216d72a9ba212d1131fd37f4851ec180b309ec1668c69023037890db37ab40a2dafde329914a2fb8c27285b5014022b3bba57098f443a5736f162976d468f58018e9b7733d8a7bea45a745868af1dc57723ebcfb59d57d2280c439283d3244fb2e4cdfa91695d295f538794fd12954aaae033e67ac12bd9c733d00917e06c924503b90522283fd08b1f1d182c7411f373a6bd47dd37d83fb334b0e0cb28edb6f75867187c39fd7dcc484dff56eaf", 0x2da) 1.678442051s ago: executing program 1 (id=1493): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) 1.578169041s ago: executing program 2 (id=1494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 278.182177ms ago: executing program 1 (id=1495): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1496): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x8, 0x75e70, 0x121, {{0x11, 0x4, 0x3, 0x3e, 0x44, 0x68, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0x3, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010101}, {@local, 0xe}]}, @lsrr={0x83, 0x3, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x3}, {0x0, 0xfff1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0x1a, 0x4, 0x2, 0x8, 0x68, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x40, 0x1, 0x5, [{@multicast2, 0x186}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@local, 0xd55d}, {@empty, 0x3e}, {@multicast2, 0x1}]}, @timestamp={0x44, 0xc, 0xbf, 0x0, 0x2, [0x0, 0x0]}, @generic={0x7, 0xc, "f941c1a74690e16ec14a"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x14000070}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd12000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x2000080c) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000040)) kernel console output (not intermixed with test programs): sb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 349.311435][ T7343] fuse: Bad value for 'fd' [ 349.322832][ T25] usb 1-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 349.326324][ T1168] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 349.361448][ T25] usb 1-1: config 7 interface 122 has no altsetting 0 [ 349.393727][ T25] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 349.419972][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.444473][ T25] usb 1-1: Product: syz [ 349.460535][ T25] usb 1-1: Manufacturer: syz [ 349.538190][ T25] usb 1-1: SerialNumber: syz [ 351.025444][ C1] hrtimer: interrupt took 47917 ns [ 352.199349][ T5276] usb 3-1: USB disconnect, device number 13 [ 352.228527][ T5276] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 352.411005][ T25] xr_serial 1-1:7.122: skipping garbage [ 352.455740][ T25] xr_serial 1-1:7.122: More than one union descriptor, skipping ... [ 352.484277][ T7330] delete_channel: no stack [ 352.546737][ T25] usb 1-1: USB disconnect, device number 9 [ 354.621317][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7362 comm=syz.0.445 [ 354.676283][ T7366] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 354.895802][ T5236] Bluetooth: Unexpected start frame (len 7) [ 355.366851][ T5236] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 355.792815][ T7390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7390 comm=syz.2.449 [ 355.887249][ T7393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7393 comm=syz.3.450 [ 356.013670][ T5236] Bluetooth: Unexpected start frame (len 7) [ 356.552702][ T5236] Bluetooth: Unexpected start frame (len 7) [ 356.887093][ T7410] overlayfs: failed to resolve './file0': -2 [ 357.111104][ T7419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7419 comm=syz.4.454 [ 361.535888][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.920609][ T7490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.738131][ T7494] overlayfs: failed to resolve './file0': -2 [ 367.549347][ T7522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.687744][ T7525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7525 comm=syz.0.474 [ 368.903666][ T30] audit: type=1400 audit(1724124664.868:274): avc: denied { name_bind } for pid=7526 comm="syz.4.477" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 368.984934][ T5236] Bluetooth: Unexpected start frame (len 7) [ 369.074754][ T5236] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 369.212933][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 370.009220][ T7555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.749828][ T7576] fuse: Bad value for 'fd' [ 374.682762][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7605 comm=syz.4.488 [ 375.367777][ T7620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7620 comm=syz.1.490 [ 375.508426][ T5236] Bluetooth: Unexpected start frame (len 7) [ 375.531173][ T7624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7624 comm=syz.0.491 [ 375.757804][ T7632] input: syz1 as /devices/virtual/input/input14 [ 375.787322][ T5236] Bluetooth: Unexpected start frame (len 7) [ 376.080864][ T5236] Bluetooth: hci5: command 0x0406 tx timeout [ 376.663351][ T5305] IPVS: starting estimator thread 0... [ 376.748122][ T5236] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 376.768060][ T7640] IPVS: using max 31 ests per chain, 74400 per kthread [ 377.775745][ T5305] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 377.996178][ T5305] usb 1-1: Using ep0 maxpacket: 8 [ 378.157899][ T5305] usb 1-1: config 7 has an invalid interface number: 122 but max is 1 [ 378.166296][ T5305] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 378.184725][ T5305] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 378.193833][ T5305] usb 1-1: config 7 has no interface number 0 [ 378.947774][ T5305] usb 1-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 378.962153][ T5305] usb 1-1: config 7 interface 122 has no altsetting 0 [ 379.098142][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.110815][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.110890][ T5305] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 379.193927][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.256107][ T5305] usb 1-1: Product: syz [ 379.299964][ T5305] usb 1-1: Manufacturer: syz [ 379.326108][ T5305] usb 1-1: SerialNumber: syz [ 380.151049][ T7687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.943000][ T5305] xr_serial 1-1:7.122: skipping garbage [ 381.981674][ T5305] xr_serial 1-1:7.122: More than one union descriptor, skipping ... [ 382.050652][ T7650] delete_channel: no stack [ 382.087616][ T7695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7695 comm=syz.3.506 [ 382.108646][ T5305] usb 1-1: USB disconnect, device number 10 [ 382.233185][ T4610] Bluetooth: Unexpected start frame (len 7) [ 382.273739][ T5277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 382.337334][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 383.350601][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 383.397600][ T5277] usb 3-1: device descriptor read/all, error -71 [ 383.484565][ T7688] delete_channel: no stack [ 384.696045][ T7719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7719 comm=syz.4.512 [ 384.901993][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 386.386831][ T3023] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 387.122581][ T7722] delete_channel: no stack [ 387.287749][ T5276] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 387.507426][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 387.536271][ T7757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7757 comm=syz.1.518 [ 387.538133][ T5276] usb 4-1: config 7 has an invalid interface number: 122 but max is 1 [ 387.642839][ T5276] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 387.693394][ T5276] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 387.714787][ T4610] Bluetooth: Unexpected start frame (len 7) [ 387.735759][ T5276] usb 4-1: config 7 has no interface number 0 [ 387.742024][ T5276] usb 4-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 387.755704][ T5276] usb 4-1: config 7 interface 122 has no altsetting 0 [ 387.767012][ T5276] usb 4-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 387.778163][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.788656][ T5276] usb 4-1: Product: syz [ 387.792846][ T5276] usb 4-1: Manufacturer: syz [ 387.797816][ T5276] usb 4-1: SerialNumber: syz [ 388.263002][ T5276] xr_serial 4-1:7.122: skipping garbage [ 388.273926][ T7731] delete_channel: no stack [ 388.290824][ T5276] xr_serial 4-1:7.122: More than one union descriptor, skipping ... [ 388.344166][ T5276] usb 4-1: USB disconnect, device number 11 [ 391.360836][ T7772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7772 comm=syz.3.521 [ 391.585235][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7785 comm=syz.4.525 [ 391.621362][ T4610] Bluetooth: Unexpected start frame (len 7) [ 392.725807][ T30] audit: type=1400 audit(1724124944.677:275): avc: denied { write } for pid=7790 comm="syz.1.526" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.810428][ T30] audit: type=1400 audit(1724124944.677:276): avc: denied { open } for pid=7790 comm="syz.1.526" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.904212][ T7801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7801 comm=syz.2.527 [ 392.959993][ T30] audit: type=1400 audit(1724124944.687:277): avc: denied { ioctl } for pid=7790 comm="syz.1.526" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 393.150002][ T4610] Bluetooth: Unexpected start frame (len 7) [ 393.226239][ T4610] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 394.895613][ T3023] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 395.095605][ T3023] usb 5-1: Using ep0 maxpacket: 32 [ 395.119454][ T3023] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 395.136749][ T3023] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 395.190603][ T3023] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 395.223233][ T3023] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 395.244490][ T3023] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.256228][ T3023] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 395.276878][ T3023] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 395.290557][ T3023] usb 5-1: Product: syz [ 395.299714][ T3023] usb 5-1: Manufacturer: syz [ 395.304807][ T3023] usb 5-1: SerialNumber: syz [ 395.323905][ T3023] usb 5-1: config 0 descriptor?? [ 395.334960][ T3023] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 395.350847][ T3023] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 397.205314][ T7843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.077506][ T5276] usb 5-1: USB disconnect, device number 11 [ 398.377147][ T5276] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 399.705149][ T7857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.427877][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7859 comm=syz.3.540 [ 400.539593][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7861 comm=syz.1.541 [ 400.580620][ T4610] Bluetooth: Unexpected start frame (len 7) [ 400.615617][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 400.767014][ T4610] Bluetooth: Unexpected start frame (len 7) [ 400.795620][ T4610] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 400.984212][ T4610] Bluetooth: Unexpected start frame (len 16) [ 403.620020][ T7900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.895665][ T4610] Bluetooth: hci3: command 0x0406 tx timeout [ 405.793508][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 406.165683][ T5277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 407.071505][ T7905] delete_channel: no stack [ 407.400439][ T7934] input: syz1 as /devices/virtual/input/input15 [ 407.496973][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 409.059396][ T4610] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 409.894538][ T7965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.532942][ T7984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=7984 comm=syz.3.566 [ 412.699607][ T4610] Bluetooth: Unexpected start frame (len 7) [ 412.736678][ T7989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.837959][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 414.192724][ T8007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8007 comm=syz.3.570 [ 414.404446][ T4610] Bluetooth: Unexpected start frame (len 7) [ 414.555773][ T3023] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 415.023711][ T30] audit: type=1400 audit(1724125478.972:278): avc: denied { bind } for pid=8020 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.043223][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.442692][ T3023] usb 5-1: Using ep0 maxpacket: 8 [ 417.870667][ T3023] usb 5-1: device descriptor read/all, error -71 [ 417.906945][ T7997] delete_channel: no stack [ 420.653143][ T4610] Bluetooth: Unexpected start frame (len 16) [ 421.022076][ T8079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.688449][ T30] audit: type=1400 audit(1724125487.652:279): avc: denied { create } for pid=8097 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 423.809237][ T30] audit: type=1400 audit(1724125487.702:280): avc: denied { bind } for pid=8097 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 423.868230][ T8103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8103 comm=syz.4.588 [ 423.885885][ T8100] binder: Unknown parameter 's„Tu“tats' [ 423.891634][ T30] audit: type=1400 audit(1724125487.762:281): avc: denied { getopt } for pid=8097 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 424.424906][ T30] audit: type=1400 audit(1724125487.852:282): avc: denied { remount } for pid=8097 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 424.445576][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.523396][ T30] audit: type=1400 audit(1724125488.082:283): avc: denied { create } for pid=8097 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 424.543498][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.366219][ T8135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.917230][ T8157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8157 comm=syz.3.597 [ 429.291930][ T4610] Bluetooth: Unexpected start frame (len 7) [ 430.222414][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 430.505706][ T3023] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 430.645154][ T8181] binder: Unknown parameter 's„Tu“tats' [ 430.829149][ T3023] usb 2-1: Using ep0 maxpacket: 32 [ 431.090630][ T3023] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 431.099231][ T3023] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 431.115765][ T3023] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 431.154302][ T3023] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 431.315376][ T3023] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.357986][ T3023] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 431.440165][ T3023] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 431.470501][ T3023] usb 2-1: Product: syz [ 431.474711][ T3023] usb 2-1: Manufacturer: syz [ 431.491222][ T3023] usb 2-1: SerialNumber: syz [ 431.548528][ T3023] usb 2-1: config 0 descriptor?? [ 431.611858][ T3023] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 431.616775][ T8192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8192 comm=syz.0.605 [ 431.703744][ T3023] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 431.853612][ T4610] Bluetooth: Unexpected start frame (len 7) [ 431.939045][ T8196] input: syz1 as /devices/virtual/input/input16 [ 431.962946][ T4610] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 432.388121][ T4610] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 434.713088][ T5276] usb 2-1: USB disconnect, device number 14 [ 434.731635][ T5276] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 435.132559][ T8229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.946297][ T8236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8236 comm=syz.3.615 [ 436.906772][ T4610] Bluetooth: Unexpected start frame (len 7) [ 437.055843][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 440.718375][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.724729][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.695505][ T8321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.002118][ T8330] binder: Unknown parameter 's„Tu“tats' [ 445.378386][ T8338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.479160][ T8348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.986386][ T8364] binder: Unknown parameter 's„Tu“tats' [ 450.851563][ T8376] binder: Unknown parameter 's„Tu“tats' [ 451.606945][ T8382] binder: Unknown parameter 's„Tu“tats' [ 451.651288][ T8389] binder: Unknown parameter 's„Tu“tats' [ 451.903814][ T8392] input: syz1 as /devices/virtual/input/input17 [ 452.074170][ T4610] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 452.309803][ T30] audit: type=1400 audit(1724126028.271:284): avc: denied { append } for pid=8395 comm="syz.0.648" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.494548][ T8401] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 453.152736][ T8411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.106222][ T8412] binder: Unknown parameter 's„Tu“tats' [ 454.387504][ T8416] binder: Unknown parameter 's„Tu“tats' [ 456.699312][ T8433] binder: Unknown parameter 's„Tu“tats' [ 457.319521][ T8438] fuse: Bad value for 'rootmode' [ 457.780268][ T8446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.523645][ T5278] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 460.025539][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 460.035306][ T5278] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 460.045958][ T5278] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 460.061760][ T5278] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 460.076814][ T5278] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 460.096426][ T5278] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.122260][ T5278] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 460.132266][ T5278] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 460.143250][ T5278] usb 4-1: Product: syz [ 460.154223][ T5278] usb 4-1: Manufacturer: syz [ 460.162248][ T5278] usb 4-1: SerialNumber: syz [ 460.212248][ T5278] usb 4-1: config 0 descriptor?? [ 460.224027][ T5278] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 460.268375][ T5278] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 460.583490][ T8470] binder: Unknown parameter 's„Tu“tats' [ 463.314021][ T8485] fuse: Bad value for 'rootmode' [ 463.411560][ T8486] binder: Unknown parameter 's„Tu“tats' [ 463.823138][ T5277] usb 4-1: USB disconnect, device number 13 [ 463.969358][ T5277] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 467.015871][ T8514] binder: Unknown parameter 's„Tu“tats' [ 467.161175][ T8529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.988675][ T8534] binder: Unknown parameter 's„Tu“tats' [ 470.330554][ T8546] binder: Unknown parameter 's„Tu“tats' [ 470.648149][ T8548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8548 comm=syz.2.684 [ 471.160894][ T30] audit: type=1400 audit(1724126303.072:285): avc: denied { create } for pid=8552 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 471.886096][ T30] audit: type=1400 audit(1724126303.102:286): avc: denied { read } for pid=8552 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.700571][ T8574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8574 comm=syz.4.689 [ 473.336353][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8588 comm=syz.3.691 [ 473.419208][ T4610] Bluetooth: Unexpected start frame (len 7) [ 473.528621][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 474.285595][ T4610] Bluetooth: hci3: command 0x0406 tx timeout [ 474.811941][ T8625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8625 comm=syz.0.698 [ 475.388120][ T4610] Bluetooth: Unexpected start frame (len 7) [ 475.661376][ T4610] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 478.925587][ T4610] Bluetooth: hci4: command 0x0406 tx timeout [ 480.801268][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.475192][ T8741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.371520][ T8749] binder: Unknown parameter 's„Tu“tats' [ 488.151836][ T8768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.931837][ T8765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8765 comm=syz.3.733 [ 488.995711][ T8772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=8772 comm=syz.1.736 [ 489.125704][ T4610] Bluetooth: Unexpected start frame (len 7) [ 490.352136][ T8786] binder: Unknown parameter 's„Tu“tats' [ 490.732166][ T8794] binder: Unknown parameter 's„Tu“tats' [ 493.668314][ T8832] binder: Unknown parameter 's„Tu“tats' [ 493.729172][ T8830] binder: Unknown parameter 's„Tu“tats' [ 494.483828][ T8834] fuse: Unknown parameter '0x0000000000000003' [ 496.138627][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 497.227003][ T8847] fuse: Bad value for 'fd' [ 497.883284][ T8868] fuse: Bad value for 'fd' [ 498.113994][ T8878] binder: Unknown parameter 's„Tu“tats' [ 500.114129][ T8899] binder: Unknown parameter 's„Tu“tats' [ 501.971864][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.983145][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.441752][ T4610] Bluetooth: Unexpected start frame (len 16) [ 503.660403][ T8948] fuse: Unknown parameter '0x0000000000000003' [ 507.526363][ T8983] fuse: Unknown parameter '0x0000000000000003' [ 507.556111][ T8980] binder: Unknown parameter 's„Tu“tats' [ 509.033460][ T8988] binder: Unknown parameter 's„Tu“tats' [ 510.094269][ T9000] binder: Unknown parameter 's„Tu“tats' [ 511.064723][ T9013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.530926][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9027 comm=syz.1.798 [ 512.700194][ T9031] binder: Unknown parameter 's„Tu“tats' [ 512.782844][ T4610] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 515.236627][ T9050] binder: Unknown parameter 's„Tu“tats' [ 515.971862][ T9064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.138845][ T4610] Bluetooth: hci5: command 0x0406 tx timeout [ 518.752527][ T9078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9078 comm=syz.4.808 [ 519.467019][ T9091] binder: Unknown parameter 's„Tu“tats' [ 520.086284][ T9097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9097 comm=syz.1.812 [ 520.229343][ T4610] Bluetooth: Unexpected start frame (len 7) [ 520.428068][ T4610] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 520.865363][ T9113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.084083][ T9120] binder: Unknown parameter 's„Tu“tats' [ 522.272034][ T9126] fuse: Unknown parameter 'user_id00000000000000000000' [ 523.518719][ T9140] binder: Unknown parameter 's„Tu“tats' [ 524.295637][ T4610] Bluetooth: hci3: command 0x0406 tx timeout [ 524.693999][ T9155] binder: Unknown parameter 's„Tu“tats' [ 525.624023][ T9169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.011135][ T9196] binder: Unknown parameter 's„Tu“tats' [ 528.486792][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 529.166183][ T4610] Bluetooth: hci0: command 0x0406 tx timeout [ 529.950950][ T9214] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 533.910706][ T9254] binder: Unknown parameter 's„Tu“tats' [ 534.817058][ T9269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.690786][ T4610] Bluetooth: hci3: command 0x0406 tx timeout [ 535.753582][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 535.880258][ T4610] Bluetooth: Unexpected start frame (len 16) [ 536.149660][ T9278] fuse: Unknown parameter '0x0000000000000008' [ 536.362309][ T9281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9281 comm=syz.3.855 [ 536.485934][ T4610] Bluetooth: Unexpected start frame (len 7) [ 536.853989][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 537.785740][ T9304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9304 comm=syz.0.859 [ 538.003990][ T4610] Bluetooth: Unexpected start frame (len 7) [ 538.141517][ T4610] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 538.539365][ T9323] binder: Unknown parameter 's„Tu“tats' [ 540.067970][ T4610] Bluetooth: hci3: command 0x0406 tx timeout [ 541.424068][ T9321] syz.1.863 (9321) used greatest stack depth: 20896 bytes left [ 544.593403][ T9378] binder: Unknown parameter 's„Tu“tats' [ 545.401878][ T9398] binder: Unknown parameter 's„Tu“tats' [ 547.172241][ T4610] Bluetooth: hci5: command 0x0406 tx timeout [ 547.478946][ T9411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.210186][ T4610] Bluetooth: Unexpected start frame (len 7) [ 548.433132][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 549.445937][ T9418] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 551.360379][ T9443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9443 comm=syz.3.886 [ 551.871602][ T9454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.966836][ T9456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.128556][ T9471] binder: Unknown parameter 's„Tu“tats' [ 557.957323][ T1168] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 558.863578][ T1168] usb 3-1: Using ep0 maxpacket: 32 [ 558.888042][ T1168] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 558.917562][ T1168] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 558.969424][ T1168] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 559.021805][ T1168] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 559.098112][ T1168] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.159078][ T1168] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 559.375645][ T1168] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 559.390648][ T1168] usb 3-1: Product: syz [ 559.460379][ T9500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.378571][ T1168] usb 3-1: Manufacturer: syz [ 560.425572][ T1168] usb 3-1: SerialNumber: syz [ 560.464630][ T1168] usb 3-1: config 0 descriptor?? [ 560.539082][ T1168] usb 3-1: can't set config #0, error -71 [ 560.580761][ T1168] usb 3-1: USB disconnect, device number 17 [ 560.601753][ T4610] Bluetooth: Unexpected start frame (len 16) [ 560.720968][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.762145][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.777351][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.786103][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.795099][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.803459][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.829072][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.942644][ T9510] binder: Unknown parameter 's„Tu“tats' [ 562.288192][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.935878][ T4610] Bluetooth: hci0: command tx timeout [ 562.958741][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.229348][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.257066][ T9544] overlayfs: missing 'lowerdir' [ 563.416212][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.423615][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.929985][ T64] bridge_slave_1: left allmulticast mode [ 563.969709][ T64] bridge_slave_1: left promiscuous mode [ 564.003635][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.199068][ T9556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9556 comm=syz.4.907 [ 564.757701][ T64] bridge_slave_0: left allmulticast mode [ 564.763407][ T64] bridge_slave_0: left promiscuous mode [ 564.970978][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.030760][ T4610] Bluetooth: hci0: command tx timeout [ 565.840179][ T9572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9572 comm=syz.0.911 [ 565.996282][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.019648][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.032937][ T4610] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 566.042765][ T64] bond0 (unregistering): Released all slaves [ 566.108693][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 566.658060][ T9582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.085816][ T4610] Bluetooth: hci0: command tx timeout [ 569.645614][ T4610] Bluetooth: hci0: command tx timeout [ 570.233663][ T9592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.612687][ T9596] binder: Unknown parameter 's„Tu“tats' [ 571.341276][ T9612] binder: Unknown parameter 's„Tu“tats' [ 571.434235][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.446305][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.708491][ T9509] bridge_slave_0: entered allmulticast mode [ 571.859038][ T9509] bridge_slave_0: entered promiscuous mode [ 572.294767][ T64] hsr_slave_0: left promiscuous mode [ 572.341436][ T64] hsr_slave_1: left promiscuous mode [ 572.370634][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.398563][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.436351][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.467394][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.594995][ T64] veth1_macvtap: left promiscuous mode [ 572.612705][ T64] veth0_macvtap: left promiscuous mode [ 572.644813][ T64] veth1_vlan: left promiscuous mode [ 572.661944][ T64] veth0_vlan: left promiscuous mode [ 573.292634][ T64] team0 (unregistering): Port device team_slave_1 removed [ 573.333745][ T64] team0 (unregistering): Port device team_slave_0 removed [ 573.702731][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.712332][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.719719][ T9509] bridge_slave_1: entered allmulticast mode [ 573.732894][ T9509] bridge_slave_1: entered promiscuous mode [ 573.824914][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.843613][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.902956][ T9509] team0: Port device team_slave_0 added [ 573.917337][ T9509] team0: Port device team_slave_1 added [ 573.978408][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.985382][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.012333][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.027570][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.035642][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.064092][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.143986][ T9509] hsr_slave_0: entered promiscuous mode [ 574.150927][ T9509] hsr_slave_1: entered promiscuous mode [ 574.163716][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.171721][ T9509] Cannot create hsr debugfs directory [ 574.284831][ T64] IPVS: stop unused estimator thread 0... [ 574.871276][ T9509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.885343][ T9509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.904826][ T9509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 574.922235][ T9509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.108087][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.148297][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.164087][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.171303][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.209761][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.217100][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.319588][ T9509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.660946][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.752854][ T9509] veth0_vlan: entered promiscuous mode [ 575.774146][ T9509] veth1_vlan: entered promiscuous mode [ 575.843342][ T9509] veth0_macvtap: entered promiscuous mode [ 575.864208][ T9509] veth1_macvtap: entered promiscuous mode [ 575.899687][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.922844][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.933173][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.951431][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.961410][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.978675][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.991566][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.008209][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.024834][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.053306][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.063880][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.084673][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.095404][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.105575][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.120651][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.131328][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.146034][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.162823][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.182691][ T9509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.194625][ T9509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.204921][ T9509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.214845][ T9509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.351201][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.369315][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.420128][ T1285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.428961][ T1285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.336009][ T4610] Bluetooth: Unexpected start frame (len 16) [ 589.830570][ T9727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9727 comm=syz.3.927 [ 591.138189][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 591.245618][ T4610] Bluetooth: hci4: command 0x0406 tx timeout [ 592.349255][ T9740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=9740 comm=syz.2.929 [ 592.502647][ T4610] Bluetooth: Unexpected start frame (len 7) [ 592.668311][ T4610] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.762371][ T30] audit: type=1400 audit(1724128984.708:287): avc: denied { watch } for pid=9744 comm="syz.4.930" path="/193" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 597.429594][ T9798] fuse: Bad value for 'fd' [ 597.766693][ T3023] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 597.987392][ T3023] usb 1-1: Using ep0 maxpacket: 32 [ 598.012019][ T3023] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 598.075269][ T3023] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 598.131334][ T3023] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 598.192840][ T3023] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 598.273426][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 598.335345][ T3023] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 598.366911][ T3023] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 598.405678][ T3023] usb 1-1: Product: syz [ 598.409894][ T3023] usb 1-1: Manufacturer: syz [ 598.425095][ T3023] usb 1-1: SerialNumber: syz [ 598.468988][ T3023] usb 1-1: config 0 descriptor?? [ 600.707977][ T3023] ldusb 1-1:0.0: Interrupt in endpoint not found [ 600.755558][ T9594] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 600.955548][ T9594] usb 2-1: Using ep0 maxpacket: 32 [ 600.963319][ T9594] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 600.973812][ T9594] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 600.989151][ T9594] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 601.003690][ T9594] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 601.023678][ T9594] usb 2-1: config 0 interface 0 has no altsetting 0 [ 601.035922][ T9594] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 601.045244][ T9594] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 601.057287][ T9594] usb 2-1: Product: syz [ 601.062799][ T9594] usb 2-1: Manufacturer: syz [ 601.068875][ T9594] usb 2-1: SerialNumber: syz [ 601.083726][ T9594] usb 2-1: config 0 descriptor?? [ 601.093319][ T9594] ldusb 2-1:0.0: Interrupt in endpoint not found [ 601.201690][ T4610] Bluetooth: Unexpected start frame (len 7) [ 601.335591][ T4610] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 601.741328][ T5278] usb 1-1: USB disconnect, device number 11 [ 603.377906][ T5278] usb 2-1: USB disconnect, device number 15 [ 608.647256][ T9920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.690534][ T9933] fuse: Unknown parameter '0x0000000000000008' [ 612.016940][ T9945] binder: Unknown parameter 's„Tu“tats' [ 614.539247][ T4610] Bluetooth: Unexpected start frame (len 16) [ 614.988016][ T30] audit: type=1400 audit(1724129006.958:288): avc: denied { shutdown } for pid=9975 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 615.083956][ T30] audit: type=1400 audit(1724129007.048:289): avc: denied { write } for pid=9977 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 616.465454][ C0] sched: RT throttling activated [ 617.305947][ T30] audit: type=1400 audit(1724129008.628:290): avc: denied { map } for pid=9978 comm="syz.0.972" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 621.432936][ T30] audit: type=1400 audit(1724129013.398:291): avc: denied { name_bind } for pid=9975 comm="syz.1.970" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 621.746865][ T30] audit: type=1400 audit(1724129013.718:292): avc: denied { create } for pid=9988 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 621.774739][ T9992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.976442][ T5223] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 623.186063][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.291578][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.314092][ T5223] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 623.333105][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.891747][ T5223] usb 5-1: config 0 descriptor?? [ 624.024758][ T30] audit: type=1400 audit(1724129015.988:293): avc: denied { write } for pid=10012 comm="syz.0.983" name="udp6" dev="proc" ino=4026532962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 624.343785][ T5223] pantherlord 0003:0F30:0111.0001: item fetching failed at offset 6/7 [ 624.621362][ T5223] pantherlord 0003:0F30:0111.0001: parse failed [ 624.630324][ T5223] pantherlord 0003:0F30:0111.0001: probe with driver pantherlord failed with error -22 [ 624.662577][ T5223] usb 5-1: USB disconnect, device number 14 [ 624.802492][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.988'. [ 624.880333][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.906311][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.797896][ T30] audit: type=1400 audit(1724129017.738:294): avc: denied { write } for pid=10031 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 625.826093][ T30] audit: type=1400 audit(1724129017.738:295): avc: denied { nlmsg_write } for pid=10031 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 625.857009][ T30] audit: type=1326 audit(1724129017.828:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 626.004087][ T30] audit: type=1326 audit(1724129017.828:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 626.108096][ T30] audit: type=1326 audit(1724129017.878:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 626.167628][ T30] audit: type=1326 audit(1724129017.878:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 626.537545][ T5273] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 626.563223][ T30] audit: type=1400 audit(1724129018.528:300): avc: denied { bind } for pid=10053 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.715132][T10055] capability: warning: `syz.1.996' uses 32-bit capabilities (legacy support in use) [ 626.897855][T10055] kernel profiling enabled (shift: 9) [ 627.305723][ T30] audit: type=1400 audit(1724129018.528:301): avc: denied { setopt } for pid=10053 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.349546][ T30] audit: type=1400 audit(1724129018.798:302): avc: denied { read } for pid=10046 comm="syz.1.996" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.605974][ T30] audit: type=1400 audit(1724129018.798:303): avc: denied { open } for pid=10046 comm="syz.1.996" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.640527][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.682802][ T30] audit: type=1400 audit(1724129018.828:304): avc: denied { ioctl } for pid=10046 comm="syz.1.996" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.715539][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.715570][ T30] audit: type=1400 audit(1724129019.038:305): avc: denied { search } for pid=4654 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.737359][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.498559][ T5273] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 628.507748][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.575296][ T5273] usb 1-1: config 0 descriptor?? [ 629.166685][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1003'. [ 629.177541][ T30] audit: type=1400 audit(1724129021.118:306): avc: denied { write } for pid=10070 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 629.217623][ T5273] prodikeys 0003:041E:2801.0002: unexpected long global item [ 629.237466][ T5273] prodikeys 0003:041E:2801.0002: hid parse failed [ 629.244048][ T5273] prodikeys 0003:041E:2801.0002: probe with driver prodikeys failed with error -22 [ 629.805859][ T25] usb 1-1: USB disconnect, device number 12 [ 629.904459][T10079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.978433][ T30] audit: type=1326 audit(1724129022.948:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7ffc0000 [ 631.033236][ T30] audit: type=1326 audit(1724129022.978:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7ffc0000 [ 631.114825][ T30] audit: type=1326 audit(1724129022.988:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe0bed79e79 code=0x7ffc0000 [ 631.652654][ T3023] kernel write not supported for file bpf-prog (pid: 3023 comm: kworker/1:2) [ 632.380964][T10096] tipc: Started in network mode [ 632.402013][T10096] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 632.423601][T10096] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 632.455677][T10096] tipc: Enabled bearer , priority 10 [ 632.673320][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 632.673339][ T30] audit: type=1400 audit(1724129024.638:331): avc: denied { create } for pid=10101 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 632.767208][ T30] audit: type=1400 audit(1724129024.688:332): avc: denied { connect } for pid=10101 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 632.823658][ T30] audit: type=1400 audit(1724129024.688:333): avc: denied { name_connect } for pid=10101 comm="syz.4.1015" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 633.803931][ T30] audit: type=1400 audit(1724129024.708:334): avc: denied { read } for pid=10101 comm="syz.4.1015" lport=58748 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 633.830392][ T30] audit: type=1400 audit(1724129025.028:335): avc: denied { setopt } for pid=10099 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.906832][ T30] audit: type=1400 audit(1724129025.868:336): avc: denied { create } for pid=10108 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 634.084487][ T3023] tipc: Node number set to 1 [ 634.154299][ T30] audit: type=1400 audit(1724129025.898:337): avc: denied { module_load } for pid=10100 comm="syz.2.1014" path="/sys/kernel/fscaps" dev="sysfs" ino=1362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 635.415610][ T5273] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 635.675527][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 635.688815][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.715581][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.763896][ T5273] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 635.788664][ T5273] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 635.808431][ T30] audit: type=1400 audit(1724129027.768:338): avc: denied { bind } for pid=10126 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 635.830207][ T5273] usb 1-1: Product: syz [ 635.834484][ T5273] usb 1-1: Manufacturer: syz [ 635.864927][ T5273] usb 1-1: config 0 descriptor?? [ 635.872136][ T30] audit: type=1400 audit(1724129027.768:339): avc: denied { name_bind } for pid=10126 comm="syz.4.1022" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 635.937955][ T30] audit: type=1400 audit(1724129027.768:340): avc: denied { node_bind } for pid=10126 comm="syz.4.1022" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 636.433405][ T5273] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 5/7 [ 636.481008][ T5273] kovaplus 0003:1E7D:2D50.0003: parse failed [ 636.489296][ T5273] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -22 [ 636.869399][ T9594] usb 1-1: USB disconnect, device number 13 [ 636.901012][ T5847] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 637.315652][ T5278] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 637.505830][ T5278] usb 2-1: device descriptor read/64, error -71 [ 638.696710][ T5278] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 639.181119][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 639.302636][ T5847] usb 5-1: not running at top speed; connect to a high speed hub [ 639.329787][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2015, setting to 64 [ 639.368630][ T5278] usb 2-1: device descriptor read/64, error -71 [ 639.537415][ T5278] usb usb2-port1: attempt power cycle [ 639.556641][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.640682][ T5847] usb 5-1: string descriptor 0 read error: -71 [ 639.650267][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.661565][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.796582][ T5847] usb 5-1: can't set config #1, error -71 [ 639.812376][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 639.812392][ T30] audit: type=1400 audit(1724129031.778:343): avc: denied { setopt } for pid=10166 comm="syz.4.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 639.863392][ T5847] usb 5-1: USB disconnect, device number 15 [ 640.026597][T10162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.436867][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 642.201927][ T30] audit: type=1400 audit(1724129034.148:344): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 643.575915][T10208] usb usb8: usbfs: process 10208 (syz.0.1048) did not claim interface 0 before use [ 644.994815][ T5276] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 644.995953][ T9594] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 646.005694][ T9594] usb 2-1: Using ep0 maxpacket: 8 [ 646.019969][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.043515][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.045686][ T9594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.103820][ T9594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.105099][ T5276] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 646.139915][ T9594] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 646.159731][ T9594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.185758][ T9594] usb 2-1: config 0 descriptor?? [ 646.202339][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.307009][ T5276] usb 5-1: config 0 descriptor?? [ 646.768237][ T5276] usbhid 5-1:0.0: can't add hid device: -71 [ 646.779270][ T30] audit: type=1400 audit(1724129038.648:345): avc: denied { mount } for pid=10229 comm="syz.2.1056" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 646.822280][ T5276] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 646.834630][ T5276] usb 5-1: USB disconnect, device number 16 [ 646.852115][ T30] audit: type=1400 audit(1724129038.648:346): avc: denied { remount } for pid=10229 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 647.022629][ T30] audit: type=1400 audit(1724129038.988:347): avc: denied { read } for pid=10233 comm="syz.4.1057" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 647.135829][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 647.168561][ T9594] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 647.227945][ T9594] hid-picolcd 0003:04D8:F002.0004: item fetching failed at offset 5/7 [ 647.270989][ T9594] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 647.318979][ T9594] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 647.367929][ T9594] usb 2-1: USB disconnect, device number 19 [ 647.458060][ T30] audit: type=1400 audit(1724129039.428:348): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 647.675728][ T30] audit: type=1400 audit(1724129039.638:349): avc: denied { write } for pid=10239 comm="syz.2.1059" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 648.262458][ T30] audit: type=1400 audit(1724129039.638:350): avc: denied { watch } for pid=10239 comm="syz.2.1059" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 648.295641][ T30] audit: type=1400 audit(1724129039.638:351): avc: denied { watch_sb watch_reads } for pid=10239 comm="syz.2.1059" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 648.323654][ T30] audit: type=1400 audit(1724129040.178:352): avc: denied { ioctl } for pid=10238 comm="syz.4.1061" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24624 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 649.678576][ T30] audit: type=1400 audit(1724129041.638:353): avc: denied { ioctl } for pid=10258 comm="syz.0.1067" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 651.906972][T10304] ======================================================= [ 651.906972][T10304] WARNING: The mand mount option has been deprecated and [ 651.906972][T10304] and is ignored by this kernel. Remove the mand [ 651.906972][T10304] option from the mount to silence this warning. [ 651.906972][T10304] ======================================================= [ 653.941728][T10308] Illegal XDP return value 4294967274 on prog (id 381) dev N/A, expect packet loss! [ 656.114628][T10330] Bluetooth: MGMT ver 1.23 [ 656.123851][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 656.821231][ T30] audit: type=1400 audit(1724129048.078:354): avc: denied { write } for pid=10325 comm="syz.4.1091" path="socket:[24057]" dev="sockfs" ino=24057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.169065][T10334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1094'. [ 658.135845][ T5223] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 658.348636][ T5223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.389562][ T5223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.411476][ T5223] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 658.429431][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 658.468930][ T5223] usb 4-1: SerialNumber: syz [ 659.239113][ T30] audit: type=1400 audit(1724129051.208:355): avc: denied { name_connect } for pid=10353 comm="syz.2.1102" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 659.249941][ T5223] usb 4-1: 0:2 : does not exist [ 659.527396][ T5223] usb 4-1: USB disconnect, device number 14 [ 659.620800][ T30] audit: type=1400 audit(1724129051.588:356): avc: denied { mount } for pid=10366 comm="syz.1.1108" name="/" dev="autofs" ino=24118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 659.698815][ T30] audit: type=1400 audit(1724129051.628:357): avc: denied { read } for pid=10366 comm="syz.1.1108" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 659.785569][ T30] audit: type=1400 audit(1724129051.628:358): avc: denied { open } for pid=10366 comm="syz.1.1108" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 659.853491][ T30] audit: type=1400 audit(1724129051.628:359): avc: denied { mounton } for pid=10366 comm="syz.1.1108" path="/35/file1/file0" dev="autofs" ino=24119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 659.853538][ T30] audit: type=1400 audit(1724129051.628:360): avc: denied { ioctl } for pid=10366 comm="syz.1.1108" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 659.853573][ T30] audit: type=1400 audit(1724129051.648:361): avc: denied { unmount } for pid=9509 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 660.595357][T10380] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1112'. [ 660.664451][T10380] : entered promiscuous mode [ 660.809220][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 661.411744][T10390] input: syz0 as /devices/virtual/input/input18 [ 661.511531][ T30] audit: type=1400 audit(1724129053.348:362): avc: denied { write } for pid=10384 comm="syz.0.1114" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 662.002508][ T30] audit: type=1400 audit(1724129053.968:363): avc: denied { relabelfrom } for pid=10392 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 662.114212][ T30] audit: type=1400 audit(1724129054.008:364): avc: denied { relabelto } for pid=10392 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 662.624819][T10403] input: syz0 as /devices/virtual/input/input19 [ 663.335545][ T30] audit: type=1326 audit(1724129055.298:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 663.432219][ T30] audit: type=1326 audit(1724129055.298:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 663.530074][ T30] audit: type=1326 audit(1724129055.338:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 663.554395][ T30] audit: type=1326 audit(1724129055.338:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 663.589601][ T30] audit: type=1326 audit(1724129055.338:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 663.626569][ T30] audit: type=1326 audit(1724129055.338:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 664.255662][ T30] audit: type=1326 audit(1724129055.338:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 664.414615][ T30] audit: type=1326 audit(1724129055.338:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b979e79 code=0x7ffc0000 [ 666.128098][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 666.333264][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 666.350531][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 666.365256][ T25] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 666.396954][ T25] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 666.412720][ T25] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 666.425631][ T25] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 666.453219][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 666.465516][ T25] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 666.474599][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.503563][ T25] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 666.792671][ T25] scsi host1: usb-storage 1-1:1.0 [ 668.005048][ T3952] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 668.102627][ T3952] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 670.546005][ T25] usb 1-1: USB disconnect, device number 14 [ 670.806774][ T64] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 671.146166][ T64] sd 1:0:0:0: [sdb] Sense not available. [ 671.153631][ T64] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 671.229388][ T64] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 671.285848][ T64] sd 1:0:0:0: [sdb] Write Protect is off [ 671.334180][ T64] sd 1:0:0:0: [sdb] Asking for cache data failed [ 671.394906][ T64] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 671.566929][ T64] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 672.065631][T10496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.081391][ T9860] udevd[9860]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 672.117567][T10496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.136296][T10496] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.148009][T10496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.195688][T10496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 672.205020][T10496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 673.070444][ T2557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.215772][ T5847] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 673.468499][ T2557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.615801][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 673.889356][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.889592][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.889742][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 673.890452][ T5847] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 673.890611][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.201648][ T5847] usb 1-1: config 0 descriptor?? [ 674.298475][ T4610] Bluetooth: hci2: command tx timeout [ 674.471675][ T2557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.767414][ T2557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.803261][ T5847] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 674.803327][ T5847] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 674.803357][ T5847] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 674.803386][ T5847] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 674.803415][ T5847] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 674.814585][T10494] chnl_net:caif_netlink_parms(): no params data found [ 674.823351][ T5847] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 675.411283][ T5847] ntrig 0003:1B96:000A.0005: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 675.637340][ T5847] usb 1-1: USB disconnect, device number 15 [ 676.133278][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.309720][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.380824][ T4610] Bluetooth: hci2: command tx timeout [ 676.419266][T10494] bridge_slave_0: entered allmulticast mode [ 676.605932][T10494] bridge_slave_0: entered promiscuous mode [ 676.627633][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 676.627652][ T30] audit: type=1326 audit(1724129068.598:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 676.677697][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.684876][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.724213][T10538] netlink: 'syz.3.1161': attribute type 2 has an invalid length. [ 677.701610][T10494] bridge_slave_1: entered allmulticast mode [ 677.715672][ T30] audit: type=1326 audit(1724129068.628:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 677.751067][T10494] bridge_slave_1: entered promiscuous mode [ 678.076138][ T30] audit: type=1326 audit(1724129068.658:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 678.141394][ T30] audit: type=1326 audit(1724129068.658:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 678.339426][ T30] audit: type=1326 audit(1724129068.658:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 678.405671][ T30] audit: type=1326 audit(1724129068.658:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 678.450377][ T4610] Bluetooth: hci2: command tx timeout [ 678.515991][ T2557] bridge_slave_1: left allmulticast mode [ 678.557631][ T2557] bridge_slave_1: left promiscuous mode [ 678.564596][ T2557] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.587907][ T30] audit: type=1326 audit(1724129068.658:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 678.888373][ T2557] bridge_slave_0: left allmulticast mode [ 679.118524][ T2557] bridge_slave_0: left promiscuous mode [ 679.147780][ T30] audit: type=1326 audit(1724129068.658:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 679.185282][ T2557] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.265255][ T30] audit: type=1326 audit(1724129068.658:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 679.299536][ T30] audit: type=1326 audit(1724129068.658:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 680.525772][ T4610] Bluetooth: hci2: command tx timeout [ 681.636159][ T2557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.694990][ T2557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.717069][ T2557] bond0 (unregistering): Released all slaves [ 681.818273][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.887453][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.471308][T10494] team0: Port device team_slave_0 added [ 682.509811][T10494] team0: Port device team_slave_1 added [ 683.396580][ T2557] hsr_slave_0: left promiscuous mode [ 683.505514][ T2557] hsr_slave_1: left promiscuous mode [ 683.537481][ T2557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.544993][ T2557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.609572][ T2557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.635555][ T2557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.781393][ T2557] veth1_macvtap: left promiscuous mode [ 683.815994][ T2557] veth0_macvtap: left promiscuous mode [ 683.821775][ T2557] veth1_vlan: left promiscuous mode [ 683.871366][ T2557] veth0_vlan: left promiscuous mode [ 685.622441][ T2557] team0 (unregistering): Port device team_slave_1 removed [ 686.192223][ T2557] team0 (unregistering): Port device team_slave_0 removed [ 686.292639][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.305707][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.508059][T10645] xt_hashlimit: size too large, truncated to 1048576 [ 687.647316][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 687.714999][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.734452][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.770037][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.788121][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.795289][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.827089][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.184635][T10494] hsr_slave_0: entered promiscuous mode [ 688.225231][T10494] hsr_slave_1: entered promiscuous mode [ 688.254481][T10494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.272394][T10494] Cannot create hsr debugfs directory [ 688.709295][T10674] netlink: 'syz.2.1198': attribute type 3 has an invalid length. [ 688.805155][T10674] netlink: 'syz.2.1198': attribute type 3 has an invalid length. [ 691.062518][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 691.062537][ T30] audit: type=1400 audit(1724129083.028:440): avc: denied { lock } for pid=10708 comm="syz.2.1208" path="socket:[25414]" dev="sockfs" ino=25414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 691.154566][T10494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 691.186648][T10714] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 691.194721][T10714] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 691.220710][T10494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 691.236881][ T30] audit: type=1326 audit(1724129083.198:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 691.270001][T10494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 691.295005][T10494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 691.303933][ T30] audit: type=1326 audit(1724129083.198:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 695.977544][ T30] audit: type=1326 audit(1724129087.948:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bed79e79 code=0x7fc00000 [ 696.365980][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.432853][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.442730][ T30] audit: type=1400 audit(1724129088.398:444): avc: denied { bind } for pid=10734 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 696.511651][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.519003][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.647211][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.654556][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.270860][ T30] audit: type=1400 audit(1724129089.238:445): avc: denied { bind } for pid=10755 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.376188][ T30] audit: type=1400 audit(1724129089.238:446): avc: denied { name_bind } for pid=10755 comm="syz.0.1219" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 697.473537][ T30] audit: type=1400 audit(1724129089.238:447): avc: denied { node_bind } for pid=10755 comm="syz.0.1219" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 697.794300][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.880119][T10496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.893810][T10496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.903806][T10496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.914316][T10496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.930012][T10496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 697.931418][T10773] 9pnet_fd: Insufficient options for proto=fd [ 697.947987][T10496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.152604][T10494] veth0_vlan: entered promiscuous mode [ 698.241251][T10494] veth1_vlan: entered promiscuous mode [ 698.606135][T10494] veth0_macvtap: entered promiscuous mode [ 698.721751][T10494] veth1_macvtap: entered promiscuous mode [ 699.306189][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.380575][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.423125][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.444252][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.486251][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.004247][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.055153][T10496] Bluetooth: hci0: command tx timeout [ 700.152284][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.245542][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.283480][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.399271][T10809] bridge0: port 3(macvlan2) entered blocking state [ 700.442392][T10809] bridge0: port 3(macvlan2) entered disabled state [ 700.485113][T10809] macvlan2: entered allmulticast mode [ 700.527976][T10809] macvlan2: entered promiscuous mode [ 700.581266][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.622761][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.657385][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.702644][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.741041][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.776950][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.815630][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.826331][ T30] audit: type=1400 audit(1724129092.788:448): avc: denied { ioctl } for pid=10818 comm="syz.2.1232" path="socket:[26761]" dev="sockfs" ino=26761 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 700.881300][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.917882][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.951683][T10770] chnl_net:caif_netlink_parms(): no params data found [ 701.010509][T10494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.044600][T10494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.105529][T10494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.114278][T10494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.820637][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.846397][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.877384][T10770] bridge_slave_0: entered allmulticast mode [ 701.909603][T10770] bridge_slave_0: entered promiscuous mode [ 701.969432][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.986365][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.018865][T10770] bridge_slave_1: entered allmulticast mode [ 702.060678][T10770] bridge_slave_1: entered promiscuous mode [ 702.126332][T10496] Bluetooth: hci0: command tx timeout [ 702.283174][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.323764][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.449506][ T30] audit: type=1400 audit(1724129094.418:449): avc: denied { ioctl } for pid=10842 comm="syz.2.1238" path="socket:[26066]" dev="sockfs" ino=26066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.551044][ T30] audit: type=1400 audit(1724129094.448:450): avc: denied { bind } for pid=10842 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.582867][T10770] team0: Port device team_slave_0 added [ 702.591248][ T30] audit: type=1400 audit(1724129094.478:451): avc: denied { connect } for pid=10842 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.614008][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 702.642260][ T30] audit: type=1400 audit(1724129094.478:452): avc: denied { setopt } for pid=10842 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.821946][T10770] team0: Port device team_slave_1 added [ 702.988235][ T9584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.019394][ T9584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.170955][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.211930][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.247072][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.210485][T10496] Bluetooth: hci0: command tx timeout [ 704.218451][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.254801][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.281954][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.308640][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.319293][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.341532][T10847] netlink: 'syz.0.1237': attribute type 9 has an invalid length. [ 704.349520][T10847] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1237'. [ 704.793919][ T30] audit: type=1400 audit(1724129096.738:453): avc: denied { create } for pid=10851 comm="syz.0.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 705.447196][ T5278] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 705.529888][ T3728] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.686602][T10770] hsr_slave_0: entered promiscuous mode [ 705.697372][ T5278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.720173][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 705.740384][ T5278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.20 [ 705.757056][T10770] hsr_slave_1: entered promiscuous mode [ 705.765644][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.773677][ T5278] usb 2-1: Product: syz [ 705.795644][T10770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.815160][ T5278] usb 2-1: Manufacturer: syz [ 705.820934][T10770] Cannot create hsr debugfs directory [ 705.821699][ T5278] usb 2-1: SerialNumber: syz [ 705.849325][T10853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 705.901424][ T3728] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.286134][T10496] Bluetooth: hci0: command tx timeout [ 707.658591][T10869] delete_channel: no stack [ 707.667566][ T30] audit: type=1400 audit(1724129099.348:454): avc: denied { write } for pid=10869 comm="syz.2.1246" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 707.788229][ T3728] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.928533][T10877] tunl0: entered promiscuous mode [ 707.957682][T10877] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 707.983062][T10877] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1247'. [ 708.072570][ T5278] cdc_ncm 2-1:1.0: failed to get mac address [ 708.160399][ T3728] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.279857][ T5278] cdc_ncm 2-1:1.0: bind() failure [ 708.309018][ T5278] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 708.326743][ T5278] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 708.355889][ T5278] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 708.390449][ T5278] usb 2-1: USB disconnect, device number 20 [ 708.436392][ T5847] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 709.215079][ T30] audit: type=1326 audit(1724129101.048:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 709.258277][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 709.610184][ T30] audit: type=1326 audit(1724129101.048:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 709.620435][ T5847] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 709.796131][ T30] audit: type=1326 audit(1724129101.068:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facfc978810 code=0x7ffc0000 [ 709.855369][ T5847] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 709.901490][ T5847] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 709.921641][ T30] audit: type=1326 audit(1724129101.078:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 709.949941][ T5847] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 710.008268][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.042092][ T30] audit: type=1326 audit(1724129101.078:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 710.042130][ T5847] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 710.153621][ T5847] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 710.192381][ T5847] usb 3-1: Product: syz [ 710.192391][ T30] audit: type=1326 audit(1724129101.098:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 710.192445][ T30] audit: type=1326 audit(1724129101.108:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 710.197364][ T5847] usb 3-1: Manufacturer: syz [ 710.316579][ T3728] bridge_slave_1: left allmulticast mode [ 710.322935][ T3728] bridge_slave_1: left promiscuous mode [ 710.336614][ T30] audit: type=1326 audit(1724129101.108:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 710.381076][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.404467][ T5847] usb 3-1: SerialNumber: syz [ 710.409453][ T30] audit: type=1326 audit(1724129101.118:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfc979e79 code=0x7ffc0000 [ 710.441826][ T3728] bridge_slave_0: left allmulticast mode [ 710.457433][ T5847] usb 3-1: config 0 descriptor?? [ 710.472736][ T3728] bridge_slave_0: left promiscuous mode [ 710.495069][ T5847] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 710.505336][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.529292][ T5847] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 711.038316][ T5847] usb 3-1: USB disconnect, device number 18 [ 711.061379][ T5847] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 713.100619][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.228350][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.294988][ T3728] bond0 (unregistering): Released all slaves [ 713.425628][T10903] @ÿ: renamed from veth0_vlan (while UP) [ 715.911699][T10972] batadv0: entered promiscuous mode [ 715.946343][T10972] batadv_slave_0: entered promiscuous mode [ 715.965850][T10972] batadv_slave_0: left promiscuous mode [ 715.981427][T10972] batadv0: left promiscuous mode [ 716.388165][ T3728] hsr_slave_0: left promiscuous mode [ 716.544451][ T3728] hsr_slave_1: left promiscuous mode [ 716.566411][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 716.566453][ T30] audit: type=1400 audit(1724129108.528:479): avc: denied { create } for pid=10991 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 716.797513][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.933355][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.204929][ T30] audit: type=1400 audit(1724129108.688:480): avc: denied { create } for pid=10991 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 717.230836][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.241392][T10992] 9pnet_fd: Insufficient options for proto=fd [ 717.281157][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.402602][ T3728] veth1_macvtap: left promiscuous mode [ 717.425772][ T3728] veth0_macvtap: left promiscuous mode [ 717.503937][ T3728] veth1_vlan: left promiscuous mode [ 717.519595][ T3728] veth0_vlan: left promiscuous mode [ 717.743960][ T30] audit: type=1400 audit(1724129109.708:481): avc: denied { setopt } for pid=11008 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 717.784400][ T30] audit: type=1400 audit(1724129109.748:482): avc: denied { accept } for pid=11008 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 719.691822][T11033] 9pnet_fd: Insufficient options for proto=fd [ 720.521440][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 720.623284][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 722.175779][T11023] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 722.232097][T11056] netlink: 'syz.1.1300': attribute type 4 has an invalid length. [ 722.355682][T11023] usb 1-1: Using ep0 maxpacket: 16 [ 722.390542][T10770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.397621][T11023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.487553][T11023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.557239][T10770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.641405][T11023] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 722.982956][T11023] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.986073][T10770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.104270][T11023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.135312][T10770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.142810][ T1168] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 723.154554][T11066] 9pnet_fd: Insufficient options for proto=fd [ 723.183237][T11023] usb 1-1: config 0 descriptor?? [ 723.344118][ T3728] IPVS: stop unused estimator thread 0... [ 723.366687][ T1168] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 723.383730][ T1168] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.398398][ T30] audit: type=1400 audit(1724129115.358:483): avc: denied { write } for pid=4654 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.434245][ T1168] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.690115][ T30] audit: type=1400 audit(1724129115.358:484): avc: denied { remove_name } for pid=4654 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.732014][ T30] audit: type=1400 audit(1724129115.358:485): avc: denied { add_name } for pid=4654 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.736706][T11023] usbhid 1-1:0.0: can't add hid device: -71 [ 723.760747][ T1168] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.779991][ T1168] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.789807][ T1168] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.801493][T11023] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 723.809464][ T1168] usb 3-1: config 0 interface 0 has no altsetting 0 [ 729.312600][T11023] usb 1-1: USB disconnect, device number 16 [ 729.458435][ T1168] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 729.477988][ T1168] usb 3-1: can't read configurations, error -71 [ 729.673763][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.807464][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.828148][ T30] audit: type=1400 audit(1724129121.798:486): avc: denied { mounton } for pid=11084 comm="syz.0.1307" path="/proc/724/task" dev="proc" ino=28700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 729.883648][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.890884][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.972734][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.980016][ T9584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.117005][ T3023] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 730.149281][ T30] audit: type=1400 audit(1724129122.098:487): avc: denied { create } for pid=11096 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 730.225335][ T30] audit: type=1400 audit(1724129122.158:488): avc: denied { listen } for pid=11096 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 730.330174][ T30] audit: type=1400 audit(1724129122.158:489): avc: denied { accept } for pid=11096 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 730.379898][ T3023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.448396][ T3023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.469013][ T3023] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.498258][ T3023] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.522562][ T30] audit: type=1400 audit(1724129122.238:490): avc: denied { connect } for pid=11096 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 730.525973][ T3023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.611984][ T3023] usb 5-1: config 0 descriptor?? [ 730.651615][ T30] audit: type=1400 audit(1724129122.338:491): avc: denied { bind } for pid=11096 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 731.013836][T10770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.135211][ T3023] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 731.166699][T11129] 9pnet_fd: Insufficient options for proto=fd [ 731.195804][ T3023] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 731.270803][ T3023] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 731.320440][T10770] veth0_vlan: entered promiscuous mode [ 731.403943][T10770] veth1_vlan: entered promiscuous mode [ 736.866978][T11139] gretap0: refused to change device tx_queue_len [ 736.875091][T11139] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 736.909470][T10770] veth0_macvtap: entered promiscuous mode [ 736.969069][T10770] veth1_macvtap: entered promiscuous mode [ 737.006094][ T3023] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 737.154516][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.270953][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.319253][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.329985][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.340037][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.350653][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.391286][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.443693][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.468437][T10770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.498323][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.532844][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.552989][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.565554][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.576378][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.587632][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.598423][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.612677][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.639286][T10770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.695670][ T5223] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 737.729344][T10770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.756236][T10770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.774575][T10770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.796269][T10770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.928995][ T5223] usb 3-1: Using ep0 maxpacket: 8 [ 737.952268][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1327'. [ 737.967416][ T5847] usb 5-1: USB disconnect, device number 17 [ 737.973393][ T5223] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 737.996253][ T5223] usb 3-1: config 0 has no interface number 0 [ 738.015275][ T5223] usb 3-1: config 0 interface 25 has no altsetting 0 [ 738.058032][ T5223] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 738.095615][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.134089][ T5223] usb 3-1: Product: syz [ 738.158535][ T5223] usb 3-1: Manufacturer: syz [ 738.163459][ T5223] usb 3-1: SerialNumber: syz [ 738.207212][ T5223] usb 3-1: config 0 descriptor?? [ 738.248925][ T2557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.275419][ T2557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.419020][ T1285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.446000][ T1285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.500288][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.515273][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.597170][T11023] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 738.613469][ T5305] usb 3-1: USB disconnect, device number 21 [ 738.775810][ T5847] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 738.788906][T11023] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 738.812642][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.833986][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.876660][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 738.891804][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.911059][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.922268][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 738.936312][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.945813][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.958667][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 738.976763][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.980893][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 738.990034][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.015560][ T5847] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 739.025241][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.027468][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.039937][ T5847] usb 5-1: config 0 has no interface number 0 [ 739.053512][ T5847] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 739.069997][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.070496][ T5847] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 739.084239][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.098186][ T5847] usb 5-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 739.112553][ T5847] usb 5-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 739.123920][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.129686][ T5847] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 739.162020][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.180145][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.191285][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.200860][ T5847] usb 5-1: Product: syz [ 739.221801][ T5847] usb 5-1: Manufacturer: syz [ 739.232498][ T5847] usb 5-1: SerialNumber: syz [ 739.233665][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.256302][ T5847] usb 5-1: config 0 descriptor?? [ 739.279254][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.294650][ T5847] ttusb_dec_send_command: command bulk message failed: error -8 [ 739.305267][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.338637][ T5847] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8 [ 739.340781][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.382983][ T5847] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 739.410416][T11023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.448037][T11023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.503016][T11023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.574103][T11023] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 739.603661][T11023] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 739.629612][T11023] usb 1-1: Product: syz [ 739.639758][T11023] usb 1-1: Manufacturer: syz [ 739.652041][T11023] usb 1-1: SerialNumber: syz [ 739.711352][T11023] usb 1-1: config 0 descriptor?? [ 739.734598][T11023] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 740.928451][T11023] usb 5-1: USB disconnect, device number 18 [ 741.399931][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 741.410239][T11023] usb 1-1: USB disconnect, device number 17 [ 741.413780][T11191] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 741.418848][T11023] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 742.084461][ T30] audit: type=1400 audit(1724129133.978:492): avc: denied { connect } for pid=11204 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 742.146473][ T30] audit: type=1400 audit(1724129134.048:493): avc: denied { write } for pid=11204 comm="syz.3.1338" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 742.199622][ T30] audit: type=1400 audit(1724129134.058:494): avc: denied { ioctl } for pid=11204 comm="syz.3.1338" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 742.395798][ T3023] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 742.609850][ T3023] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 742.661167][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.703436][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.719697][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.732755][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.742495][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.753979][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.764192][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.773396][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.787246][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.797959][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.807561][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.819273][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.832636][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.852516][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.885414][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.924692][ T3023] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.958584][ T3023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 743.005362][ T3023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 743.060444][ T3023] usb 1-1: unable to read config index 6 descriptor/start: -71 [ 743.104878][ T3023] usb 1-1: can't read configurations, error -71 [ 744.485879][ T5223] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 744.585023][ T30] audit: type=1400 audit(1724129136.548:495): avc: denied { create } for pid=11237 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 744.605738][ T3023] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 744.705583][ T5223] usb 3-1: Using ep0 maxpacket: 32 [ 744.720891][ T5223] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 744.736643][ T5223] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 744.752632][ T5223] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 744.764127][ T5223] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 744.805085][ T5223] usb 3-1: config 0 interface 0 has no altsetting 0 [ 744.821185][ T5223] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 744.830483][ T3023] usb 2-1: Using ep0 maxpacket: 16 [ 744.838727][ T5223] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 744.848946][ T3023] usb 2-1: config 2 has an invalid interface number: 170 but max is 3 [ 744.857303][ T3023] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 744.867655][ T5223] usb 3-1: Product: syz [ 744.877862][ T5223] usb 3-1: Manufacturer: syz [ 744.893293][ T5223] usb 3-1: SerialNumber: syz [ 744.899894][ T3023] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 744.922861][ T5223] usb 3-1: config 0 descriptor?? [ 744.945590][ T3023] usb 2-1: config 2 has no interface number 0 [ 744.961239][ T5223] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 744.995272][ T3023] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=41.72 [ 745.031044][ T5223] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 745.043282][ T3023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.082498][ T3023] usb 2-1: Product: syz [ 745.101195][ T3023] usb 2-1: Manufacturer: syz [ 745.110669][ T3023] usb 2-1: SerialNumber: syz [ 745.173241][ T3023] kl5kusb105 2-1:2.170: KL5KUSB105D / PalmConnect converter detected [ 745.254248][ T3023] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 747.202513][ T5278] usb 2-1: USB disconnect, device number 21 [ 747.261076][ T5278] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 747.336517][ T5278] kl5kusb105 2-1:2.170: device disconnected [ 747.730020][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.736465][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.125976][ T30] audit: type=1400 audit(1724129140.348:496): avc: denied { module_request } for pid=11279 comm="syz.1.1368" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 749.655593][ T5278] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 750.781140][T11228] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 751.087211][ T30] audit: type=1400 audit(1724129142.068:497): avc: denied { mount } for pid=11292 comm="syz.0.1372" name="/" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 751.434532][ T30] audit: type=1400 audit(1724129142.948:498): avc: denied { setattr } for pid=11292 comm="syz.0.1372" name="/" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.479000][ T3023] usb 3-1: USB disconnect, device number 22 [ 751.583936][ T3023] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 751.781103][ T30] audit: type=1400 audit(1724129143.748:499): avc: denied { unmount } for pid=6411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 752.093519][ T5278] usb 4-1: device descriptor read/all, error -71 [ 753.134220][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 753.202192][T11314] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 753.675311][ T30] audit: type=1400 audit(1724129145.638:500): avc: denied { append } for pid=11331 comm="syz.2.1387" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 753.778188][ T3023] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 753.911022][T11338] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 753.952865][T11340] syz.2.1390 uses obsolete (PF_INET,SOCK_PACKET) [ 754.000725][T11340] warning: `syz.2.1390' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 754.012507][ T3023] usb 5-1: Using ep0 maxpacket: 32 [ 754.024653][ T3023] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 754.040913][ T3023] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 754.867261][ T3023] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 754.885728][ T3023] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 754.899006][ T3023] usb 5-1: config 0 interface 0 has no altsetting 0 [ 754.911319][ T3023] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 754.920773][ T3023] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 754.935574][ T3023] usb 5-1: Product: syz [ 754.939860][ T3023] usb 5-1: Manufacturer: syz [ 754.944476][ T3023] usb 5-1: SerialNumber: syz [ 754.954841][ T3023] usb 5-1: config 0 descriptor?? [ 754.968140][ T3023] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 754.979705][ T3023] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 755.100773][T11346] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1392'. [ 755.914555][T11366] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1399'. [ 756.917524][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 757.946997][ T5278] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 758.151326][ T5278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 758.174167][ T5278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 758.230937][ T5278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 758.255958][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.282528][ T5278] usb 4-1: Product: syz [ 758.300635][ T5278] usb 4-1: Manufacturer: syz [ 758.308898][ T5278] usb 4-1: SerialNumber: syz [ 758.324798][T11381] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 758.638280][ T5278] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 759.160105][T11399] netlink: 'syz.0.1411': attribute type 3 has an invalid length. [ 759.168507][T11399] netlink: 'syz.0.1411': attribute type 3 has an invalid length. [ 760.301664][T11325] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 760.417401][ T5847] usb 4-1: USB disconnect, device number 17 [ 760.469880][ T5847] usblp1: removed [ 760.785240][ T5278] usb 5-1: USB disconnect, device number 19 [ 761.930780][ T5278] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 762.645891][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 764.002096][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 764.025164][T11440] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 764.243816][T11441] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 764.252419][T11441] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 765.239973][ T5275] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 765.735677][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 765.743033][ T5275] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 765.755791][ T5275] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 765.797046][ T5275] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 766.059913][ T5275] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 766.388467][ T5275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 766.437918][ T5275] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 767.275520][ T5275] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 767.284001][ T5275] usb 1-1: Product: syz [ 767.305906][ T5275] usb 1-1: Manufacturer: syz [ 767.310563][ T5275] usb 1-1: SerialNumber: syz [ 767.328863][ T5275] usb 1-1: config 0 descriptor?? [ 767.395958][ T5275] usb 1-1: can't set config #0, error -71 [ 767.440536][ T5275] usb 1-1: USB disconnect, device number 20 [ 767.752193][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 769.349846][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 769.782865][T11494] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 769.790974][T11494] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 770.653432][T11504] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 772.817412][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 772.851911][T11530] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 774.760717][T11553] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 774.956124][T10496] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 775.266400][T11538] netlink: 'syz.2.1455': attribute type 3 has an invalid length. [ 775.290246][T11538] netlink: 'syz.2.1455': attribute type 3 has an invalid length. [ 777.290113][T11588] overlayfs: missing 'lowerdir' [ 777.370974][T11592] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 777.546620][ T30] audit: type=1400 audit(1724129169.508:501): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 779.313222][T10496] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 779.334142][T10496] Bluetooth: hci0: Injecting HCI hardware error event [ 779.947410][T10496] Bluetooth: hci0: hardware error 0x00 [ 780.065846][ T30] audit: type=1400 audit(1724129171.738:502): avc: denied { ioctl } for pid=11602 comm="syz.4.1474" path="socket:[29682]" dev="sockfs" ino=29682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 782.045712][T10496] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 782.203823][ T30] audit: type=1400 audit(1724129174.168:503): avc: denied { bind } for pid=11623 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 782.278338][ T30] audit: type=1400 audit(1724129174.168:504): avc: denied { name_bind } for pid=11623 comm="syz.2.1484" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 782.375691][ T30] audit: type=1400 audit(1724129174.168:505): avc: denied { node_bind } for pid=11623 comm="syz.2.1484" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 782.393407][T11633] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 782.455694][ T30] audit: type=1400 audit(1724129174.168:506): avc: denied { listen } for pid=11623 comm="syz.2.1484" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 782.628194][T11641] overlayfs: overlapping lowerdir path [ 782.745822][ T5278] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 786.237522][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 889.675432][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 889.682424][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2557/1:b..l [ 889.690735][ C0] rcu: (detected by 0, t=10502 jiffies, g=51633, q=391 ncpus=2) [ 889.698437][ C0] task:kworker/u8:8 state:R running task stack:23296 pid:2557 tgid:2557 ppid:2 flags:0x00004000 [ 889.711061][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 889.717318][ C0] Call Trace: [ 889.720578][ C0] [ 889.723509][ C0] __schedule+0xe37/0x5490 [ 889.727924][ C0] ? __pfx_mark_lock+0x10/0x10 [ 889.732695][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 889.737444][ C0] ? batadv_mcast_mla_update+0x1ead/0x3200 [ 889.743236][ C0] ? __pfx___schedule+0x10/0x10 [ 889.748078][ C0] ? mark_held_locks+0x9f/0xe0 [ 889.752829][ C0] preempt_schedule_irq+0x51/0x90 [ 889.757842][ C0] irqentry_exit+0x36/0x90 [ 889.762244][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 889.768221][ C0] RIP: 0010:__rcu_read_unlock+0x3d/0x580 [ 889.773866][ C0] Code: 53 48 8d bd 44 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 42 02 00 00 65 4c 8b 25 f3 67 92 7e 49 8d bc 24 44 04 [ 889.793463][ C0] RSP: 0018:ffffc9000946faf8 EFLAGS: 00000202 [ 889.799518][ C0] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffc9000946fab0 [ 889.807474][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc7c0 RDI: ffff88802a77de44 [ 889.815438][ C0] RBP: ffff88802a77da00 R08: 0000000000000000 R09: fffffbfff2025e9b [ 889.823422][ C0] R10: ffffffff9012f4df R11: 0000000000000000 R12: ffff88802d4f8000 [ 889.831385][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 889.839353][ C0] batadv_mcast_mla_update+0x1e47/0x3200 [ 889.844978][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 889.850167][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 889.856134][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 889.861141][ C0] ? __pfx_lock_release+0x10/0x10 [ 889.866152][ C0] process_one_work+0x9c5/0x1b40 [ 889.871097][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 889.877101][ C0] ? __pfx_process_one_work+0x10/0x10 [ 889.882461][ C0] ? assign_work+0x1a0/0x250 [ 889.887036][ C0] worker_thread+0x6c8/0xf20 [ 889.891611][ C0] ? __kthread_parkme+0x148/0x220 [ 889.896627][ C0] ? __pfx_worker_thread+0x10/0x10 [ 889.901722][ C0] kthread+0x2c1/0x3a0 [ 889.905781][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 889.910988][ C0] ? __pfx_kthread+0x10/0x10 [ 889.915573][ C0] ret_from_fork+0x45/0x80 [ 889.919985][ C0] ? __pfx_kthread+0x10/0x10 [ 889.924576][ C0] ret_from_fork_asm+0x1a/0x30 [ 889.929338][ C0] [ 889.932361][ C0] rcu: rcu_preempt kthread starved for 10364 jiffies! g51633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 889.943546][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 889.953495][ C0] rcu: RCU grace-period kthread stack dump: [ 889.959362][ C0] task:rcu_preempt state:R running task stack:27200 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 889.971073][ C0] Call Trace: [ 889.974344][ C0] [ 889.977277][ C0] __schedule+0xe37/0x5490 [ 889.981693][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 889.986972][ C0] ? __pfx___schedule+0x10/0x10 [ 889.991836][ C0] ? schedule+0x298/0x350 [ 889.996153][ C0] ? __pfx_lock_release+0x10/0x10 [ 890.001172][ C0] ? __pfx___mod_timer+0x10/0x10 [ 890.006108][ C0] ? lock_acquire+0x1b1/0x560 [ 890.010779][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 890.016229][ C0] schedule+0xe7/0x350 [ 890.020309][ C0] schedule_timeout+0x136/0x2a0 [ 890.025149][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 890.030509][ C0] ? __pfx_process_timeout+0x10/0x10 [ 890.035787][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 890.041586][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 890.047039][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 890.051791][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 890.057062][ C0] ? rcu_gp_init+0xc82/0x1630 [ 890.061724][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 890.067543][ C0] rcu_gp_kthread+0x271/0x380 [ 890.072239][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 890.077439][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 890.082629][ C0] ? __kthread_parkme+0x148/0x220 [ 890.087649][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 890.092831][ C0] kthread+0x2c1/0x3a0 [ 890.096896][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 890.102108][ C0] ? __pfx_kthread+0x10/0x10 [ 890.106684][ C0] ret_from_fork+0x45/0x80 [ 890.111188][ C0] ? __pfx_kthread+0x10/0x10 [ 890.115770][ C0] ret_from_fork_asm+0x1a/0x30 [ 890.120529][ C0] [ 890.123530][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 890.129873][ C0] Sending NMI from CPU 0 to CPUs 1: [ 890.135274][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20