last executing test programs: 3m57.984969003s ago: executing program 3 (id=726): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.882435971s ago: executing program 3 (id=727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m56.625683262s ago: executing program 3 (id=739): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, 0x0, 0xa1e1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x40000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 3m55.825415867s ago: executing program 3 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 3m55.510047732s ago: executing program 3 (id=749): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 3m55.180398047s ago: executing program 3 (id=751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m54.857625151s ago: executing program 32 (id=751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m55.221935454s ago: executing program 5 (id=1387): bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m54.259688789s ago: executing program 5 (id=1391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x4}) fchmod(r0, 0x88) 1m49.85203671s ago: executing program 5 (id=1408): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r4, 0x1) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 1m48.585820401s ago: executing program 5 (id=1413): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m47.21705634s ago: executing program 5 (id=1416): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m46.954784949s ago: executing program 5 (id=1420): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 1m46.722014955s ago: executing program 33 (id=1420): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 1m24.499237398s ago: executing program 2 (id=1518): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0200000006"], 0x10) 1m24.215067352s ago: executing program 2 (id=1523): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r0, r0, 0x2f, 0x20, 0x4, @void, @void, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0x6, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m21.965251444s ago: executing program 2 (id=1530): socket$netlink(0x10, 0x3, 0x4) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, 0x31) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 59.44802581s ago: executing program 2 (id=1530): socket$netlink(0x10, 0x3, 0x4) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, 0x31) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 28.245556015s ago: executing program 2 (id=1530): socket$netlink(0x10, 0x3, 0x4) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, 0x31) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 7.609596156s ago: executing program 4 (id=1774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) 7.546617564s ago: executing program 0 (id=1775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.319008219s ago: executing program 0 (id=1778): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000300)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3c3400400000000000000000000107b885b3ec30f3c20d9376a58d9c3fce8a33d6b2b460481fa65ac2945c3225dc4c17fd8902a289839b9ec81f167163a7a15a04a0ead96fc2644bcb6e3823f744cdfe906beb32ac9783f8cb226870299c3aec5a021aec97e5b83e7f305822de6e8a7724f8fe5ddf0deb1860e6679fc8a7a4ad33350777df769c6b5f4a9f0f537576499a6edc81c00c587d424a6d4166393ea76e245739dd5079e6b0", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r1 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004e40)=@newtaction={0x68, 0x13, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/245, 0xf5) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040040455070000000000010902240001000040b109040000010300a10009210101000122050009058103"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x4, 0x4000105, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54) 5.520794415s ago: executing program 4 (id=1779): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ad, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.298061765s ago: executing program 1 (id=1780): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @random="7a28cd07effe", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) 4.804325307s ago: executing program 4 (id=1781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8595}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20040080) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x200448c0}, 0x0) 4.688096173s ago: executing program 1 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 4.557565162s ago: executing program 4 (id=1783): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20008090) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000080)={0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x7fff, 0xff, 0x400, 0x1, 0x1040007}) 4.040772828s ago: executing program 4 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 4.037193128s ago: executing program 0 (id=1794): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f", 0x24}], 0x1) r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x9, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r3, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x2}}}, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 3.85137161s ago: executing program 0 (id=1785): syz_clone(0x80880000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000100000008004a000000000008004b0028"], 0x30}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf5, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.349213485s ago: executing program 1 (id=1786): socket$inet(0x2, 0x4000000805, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) eventfd2(0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000) 3.343616744s ago: executing program 6 (id=1787): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 3.105484243s ago: executing program 4 (id=1788): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) write$binfmt_elf32(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000080)={0x0, 0x1f, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.965428836s ago: executing program 6 (id=1789): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000009c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a82, 0x0) fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 1.379775619s ago: executing program 1 (id=1793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x4}, 0x3}], 0x1, 0x0, 0x0) 1.309258626s ago: executing program 0 (id=1795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffff, @void, @value}, 0x94) fcntl$setsig(0xffffffffffffffff, 0xa, 0x8) 1.185580819s ago: executing program 6 (id=1796): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.120558059s ago: executing program 1 (id=1797): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) socket$unix(0x1, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000600)=0x0, &(0x7f0000000540)=0x0) r3 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r3, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x50}) io_uring_enter(r0, 0x55c2, 0x48d2, 0x0, 0x0, 0x0) 1.075827651s ago: executing program 2 (id=1530): socket$netlink(0x10, 0x3, 0x4) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, 0x31) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 1.884783ms ago: executing program 1 (id=1798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b66, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r4, 0x1, 0x7, &(0x7f0000000000)=""/57, &(0x7f00000000c0)=0x39) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) close(0x3) 0s ago: executing program 6 (id=1799): syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x2355, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x3023, 0x4000, 0x40, 0x0, 0x28) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): :2117): avc: denied { open } for pid=8879 comm="syz.4.1000" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 165.674502][ T30] audit: type=1400 audit(1745978920.397:2118): avc: denied { map } for pid=8880 comm="syz.2.1010" path="socket:[18864]" dev="sockfs" ino=18864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.701256][ T30] audit: type=1400 audit(1745978920.397:2119): avc: denied { read } for pid=8880 comm="syz.2.1010" path="socket:[18864]" dev="sockfs" ino=18864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.777880][ T5860] usb 1-1: USB disconnect, device number 7 [ 166.112155][ T8891] Unknown options in mask 5 [ 166.895198][ T8410] Bluetooth: hci5: Frame reassembly failed (-84) [ 166.948906][ T30] audit: type=1400 audit(1745978922.697:2120): avc: denied { name_bind } for pid=8903 comm="syz.0.1008" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 166.991572][ T30] audit: type=1400 audit(1745978922.697:2121): avc: denied { write } for pid=8903 comm="syz.0.1008" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.047331][ T30] audit: type=1400 audit(1745978922.697:2122): avc: denied { name_connect } for pid=8903 comm="syz.0.1008" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 167.449627][ T5935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.643271][ T5935] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 167.655931][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.671436][ T5935] usb 2-1: Product: syz [ 167.677066][ T5935] usb 2-1: Manufacturer: syz [ 167.683993][ T5935] usb 2-1: SerialNumber: syz [ 167.695397][ T5935] usb 2-1: config 0 descriptor?? [ 167.715202][ T5935] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 168.401452][ T8931] netlink: 'syz.2.1020': attribute type 8 has an invalid length. [ 168.531378][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.690665][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 168.718249][ T9] usb 1-1: config index 0 descriptor too short (expected 8978, got 18) [ 168.768759][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.803982][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 168.819059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.829276][ T9] usb 1-1: Product: syz [ 168.839611][ T9] usb 1-1: Manufacturer: syz [ 168.844490][ T9] usb 1-1: SerialNumber: syz [ 168.913719][ T9] usb 1-1: config 0 descriptor?? [ 168.969827][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.604620][ T8943] kvm: vcpu 0: requested 104 ns lapic timer period limited to 200000 ns [ 169.776517][ T5935] usb 2-1: USB disconnect, device number 7 [ 170.053389][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1024'. [ 170.092002][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1024'. [ 170.225449][ T30] audit: type=1400 audit(1745978925.977:2123): avc: denied { write } for pid=8949 comm="syz.5.1026" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 171.280309][ T92] usb 1-1: USB disconnect, device number 8 [ 171.469660][ T30] audit: type=1400 audit(1745978927.197:2124): avc: denied { create } for pid=8971 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.306063][ T8989] usb usb9: usbfs: process 8989 (syz.4.1038) did not claim interface 9 before use [ 172.575196][ T30] audit: type=1400 audit(1745978928.327:2125): avc: denied { mounton } for pid=8995 comm="syz.4.1040" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 172.600737][ T8992] syzkaller0: entered promiscuous mode [ 172.607390][ T8999] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 172.632712][ T8999] syzkaller0: Linktype set failed because interface is up [ 172.642700][ T30] audit: type=1400 audit(1745978928.387:2126): avc: denied { append } for pid=8995 comm="syz.4.1040" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.849968][ T8997] kvm: apic: phys broadcast and lowest prio [ 172.930942][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.029690][ T972] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.117696][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.149730][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.178375][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.200308][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.209639][ T972] usb 5-1: Using ep0 maxpacket: 32 [ 173.222018][ T972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.238319][ T9002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.254134][ T972] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.268477][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.284773][ T972] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.299366][ T972] usb 5-1: Product: syz [ 173.312431][ T972] usb 5-1: Manufacturer: syz [ 173.318151][ T972] usb 5-1: SerialNumber: syz [ 173.340781][ T972] usb 5-1: config 0 descriptor?? [ 173.347312][ T9004] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.385893][ T9010] ======================================================= [ 173.385893][ T9010] WARNING: The mand mount option has been deprecated and [ 173.385893][ T9010] and is ignored by this kernel. Remove the mand [ 173.385893][ T9010] option from the mount to silence this warning. [ 173.385893][ T9010] ======================================================= [ 173.511558][ T972] usb 6-1: USB disconnect, device number 2 [ 173.583901][ T9] usb 5-1: USB disconnect, device number 8 [ 174.617685][ T30] audit: type=1400 audit(1745978930.367:2127): avc: denied { write } for pid=9031 comm="syz.1.1052" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.729910][ T9036] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.145856][ T9059] xt_nat: multiple ranges no longer supported [ 177.463634][ T9079] syzkaller0: entered allmulticast mode [ 177.899567][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.099649][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 178.110884][ T5860] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 178.123097][ T5860] usb 6-1: config 0 has no interface number 0 [ 178.167422][ T5860] usb 6-1: config 0 interface 12 has no altsetting 0 [ 178.194017][ T5860] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 178.204852][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.224850][ T5860] usb 6-1: Product: syz [ 178.233438][ T5860] usb 6-1: Manufacturer: syz [ 178.245244][ T5860] usb 6-1: SerialNumber: syz [ 178.261158][ T5860] usb 6-1: config 0 descriptor?? [ 178.649715][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.254589][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 179.261363][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 179.270982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.315526][ T9] usb 2-1: config 0 descriptor?? [ 179.415777][ T9109] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 179.582381][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 179.659657][ T5935] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 179.726284][ T9111] sd 0:0:1:0: PR command failed: 1026 [ 179.732099][ T9111] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 179.745195][ T9111] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 179.826851][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.839448][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 179.851484][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 179.862534][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 179.873255][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.890194][ T30] audit: type=1804 audit(1745978935.637:2128): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1079" name="/newroot/212/file1" dev="fuse" ino=1 res=1 errno=0 [ 179.892123][ T5935] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 179.914555][ T30] audit: type=1800 audit(1745978935.647:2129): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1079" name="/" dev="fuse" ino=1 res=0 errno=0 [ 179.944037][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.952612][ T5935] usb 3-1: Product: syz [ 179.956798][ T5935] usb 3-1: Manufacturer: syz [ 179.961558][ T5935] usb 3-1: SerialNumber: syz [ 179.978240][ T5935] usb 3-1: config 0 descriptor?? [ 180.001886][ T5935] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 180.014786][ T5935] imon 3-1:0.0: unable to initialize intf0, err -90 [ 180.049049][ T5935] imon:imon_probe: failed to initialize context! [ 180.079233][ T5935] imon 3-1:0.0: unable to register, err -19 [ 180.482772][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 180.488994][ T55] Bluetooth: hci1: command 0x206a tx timeout [ 180.865956][ T9124] syz.0.1090 (9124): drop_caches: 2 [ 181.009817][ T5935] usb 3-1: USB disconnect, device number 5 [ 181.070103][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 181.209016][ T5860] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 181.265679][ T5860] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 181.367277][ T5860] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 181.406196][ T5860] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 181.417655][ T9134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9134 comm=syz.4.1083 [ 181.447063][ T5860] usb 6-1: USB disconnect, device number 3 [ 181.452498][ T30] audit: type=1400 audit(1745978937.197:2130): avc: denied { read } for pid=9130 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.695021][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.807412][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 181.839207][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 181.898268][ T9] usb 2-1: USB disconnect, device number 8 [ 181.914459][ T9140] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1085'. [ 181.925888][ T9140] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1085'. [ 182.178709][ T30] audit: type=1400 audit(1745978937.927:2131): avc: denied { ioctl } for pid=9148 comm="syz.5.1088" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.303105][ T9154] uprobe: syz.1.1091:9154 failed to unregister, leaking uprobe [ 183.816524][ T30] audit: type=1400 audit(1745978939.537:2132): avc: denied { shutdown } for pid=9163 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.889277][ T30] audit: type=1400 audit(1745978939.537:2133): avc: denied { read } for pid=9163 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.257482][ T9180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.868000][ T30] audit: type=1400 audit(1745978940.617:2134): avc: denied { connect } for pid=9189 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.879701][ T5935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.980940][ T30] audit: type=1400 audit(1745978940.627:2135): avc: denied { ioctl } for pid=9189 comm="syz.0.1100" path="socket:[19438]" dev="sockfs" ino=19438 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.082154][ T5935] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.094337][ T5935] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.156486][ T30] audit: type=1400 audit(1745978940.627:2136): avc: denied { write } for pid=9189 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.211069][ T5935] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.220349][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.236794][ T9198] tmpfs: Bad value for 'mpol' [ 185.390952][ T9184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.769843][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.549629][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.709587][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 186.730410][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.742916][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 186.800194][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 186.809816][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.818120][ T10] usb 1-1: Product: syz [ 186.824500][ T10] usb 1-1: Manufacturer: syz [ 186.829360][ T10] usb 1-1: SerialNumber: syz [ 186.861588][ T10] usb 1-1: config 0 descriptor?? [ 187.279188][ T9] usb 2-1: USB disconnect, device number 9 [ 187.369783][ T972] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.379080][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.576744][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 187.697931][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.715377][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.725802][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.736879][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.748947][ T972] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.758046][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.770967][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.785604][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.800192][ T972] usb 5-1: config 0 descriptor?? [ 187.829464][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.853158][ T10] usb 3-1: config 0 descriptor?? [ 187.915534][ T30] audit: type=1400 audit(1745978943.667:2137): avc: denied { create } for pid=9230 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.940076][ T30] audit: type=1400 audit(1745978943.687:2138): avc: denied { listen } for pid=9230 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.960053][ T9231] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.969675][ T30] audit: type=1400 audit(1745978943.687:2139): avc: denied { connect } for pid=9230 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.452781][ T972] usb 5-1: string descriptor 0 read error: -22 [ 188.460324][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 188.482969][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 188.609763][ T10] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 188.682198][ T10] usb 3-1: USB disconnect, device number 6 [ 188.712738][ T972] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 188.957830][ T5860] usb 5-1: USB disconnect, device number 9 [ 189.047224][ T10] usb 1-1: USB disconnect, device number 9 [ 189.392314][ T30] audit: type=1400 audit(1745978945.067:2140): avc: denied { setopt } for pid=9265 comm="syz.5.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.969566][ T30] audit: type=1400 audit(1745978945.697:2141): avc: denied { ioctl } for pid=9296 comm="syz.4.1126" path="socket:[20176]" dev="sockfs" ino=20176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.053946][ T9295] evm: overlay not supported [ 190.148679][ T30] audit: type=1400 audit(1745978945.897:2142): avc: denied { ioctl } for pid=9300 comm="syz.5.1127" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.149703][ T9305] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.149703][ T9305] program syz.5.1127 not setting count and/or reply_len properly [ 190.596269][ T9309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.649820][ T9309] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.805791][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1130'. [ 190.835634][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 190.843488][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 190.934430][ T9326] ceph: No mds server is up or the cluster is laggy [ 193.065687][ T30] audit: type=1400 audit(1745978948.817:2143): avc: denied { map } for pid=9342 comm="syz.4.1137" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.136327][ T30] audit: type=1400 audit(1745978948.817:2144): avc: denied { execute } for pid=9342 comm="syz.4.1137" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.629616][ T5809] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.713909][ T9370] syzkaller0: entered allmulticast mode [ 193.764720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.771286][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.026952][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.050922][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.063837][ T5809] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.073854][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.083491][ T5809] usb 2-1: SerialNumber: syz [ 194.496542][ T5809] usb 2-1: 0:2 : does not exist [ 194.540234][ T5809] usb 2-1: unit 255 not found! [ 194.551076][ T5809] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 194.576405][ T5809] usb 2-1: USB disconnect, device number 10 [ 194.645587][ T30] audit: type=1400 audit(1745978950.397:2145): avc: denied { bind } for pid=9379 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.615979][ T9389] syzkaller0: entered promiscuous mode [ 195.682980][ T9389] syzkaller0: entered allmulticast mode [ 195.731800][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 195.776249][ T9394] netlink: 'syz.4.1153': attribute type 7 has an invalid length. [ 195.820340][ T9394] netlink: 'syz.4.1153': attribute type 8 has an invalid length. [ 195.916709][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 195.968774][ T30] audit: type=1400 audit(1745978951.717:2146): avc: denied { read } for pid=9396 comm="syz.1.1154" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.993116][ T30] audit: type=1400 audit(1745978951.717:2147): avc: denied { open } for pid=9396 comm="syz.1.1154" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 196.177832][ T30] audit: type=1400 audit(1745978951.927:2148): avc: denied { bind } for pid=9400 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.180334][ T9402] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.217958][ T30] audit: type=1400 audit(1745978951.927:2149): avc: denied { name_bind } for pid=9400 comm="syz.5.1155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 196.268376][ T30] audit: type=1400 audit(1745978951.927:2150): avc: denied { node_bind } for pid=9400 comm="syz.5.1155" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 196.336604][ T9402] SET target dimension over the limit! [ 197.391982][ T9397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.408405][ T9397] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.425966][ T9397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.434680][ T9397] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.448803][ T9397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.455329][ T9397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.506311][ T9397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.878854][ T9428] random: crng reseeded on system resumption [ 198.310751][ T30] audit: type=1400 audit(1745978953.627:2151): avc: denied { append } for pid=9422 comm="syz.5.1161" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.449594][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 199.455644][ T5812] Bluetooth: hci1: command 0x206a tx timeout [ 199.522474][ T9435] netlink: 'syz.5.1164': attribute type 10 has an invalid length. [ 199.530442][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 199.705011][ T9435] syz_tun: entered promiscuous mode [ 199.744211][ T9435] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 200.143830][ T30] audit: type=1804 audit(1745978955.897:2152): pid=9453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1171" name="file0" dev="ramfs" ino=20940 res=1 errno=0 [ 200.299578][ T30] audit: type=1804 audit(1745978955.917:2153): pid=9453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1171" name="file0" dev="ramfs" ino=20940 res=1 errno=0 [ 201.113032][ T9471] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 201.214647][ T9474] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 201.520560][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 201.526701][ T5126] Bluetooth: hci1: command 0x206a tx timeout [ 201.599620][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 201.797920][ T30] audit: type=1400 audit(1745978957.547:2154): avc: denied { bind } for pid=9483 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.287976][ T30] audit: type=1400 audit(1745978957.547:2155): avc: denied { setopt } for pid=9483 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.511035][ T30] audit: type=1400 audit(1745978958.237:2156): avc: denied { create } for pid=9491 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 202.679013][ T30] audit: type=1400 audit(1745978958.247:2157): avc: denied { sys_admin } for pid=9491 comm="syz.0.1183" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 202.877500][ T9498] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1184'. [ 202.906235][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 203.042742][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d6b0800: rx timeout, send abort [ 203.048867][ T30] audit: type=1400 audit(1745978958.797:2158): avc: denied { create } for pid=9504 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 203.072553][ T5126] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 203.081958][ T5126] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 203.091050][ T5126] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 203.158866][ T30] audit: type=1400 audit(1745978958.907:2159): avc: denied { watch watch_reads } for pid=9509 comm="syz.0.1189" path="pipe:[21537]" dev="pipefs" ino=21537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 203.409330][ T30] audit: type=1400 audit(1745978959.157:2160): avc: denied { create } for pid=9516 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.425044][ T9517] lo speed is unknown, defaulting to 1000 [ 203.437605][ T9517] lo speed is unknown, defaulting to 1000 [ 203.444789][ T9517] lo speed is unknown, defaulting to 1000 [ 203.454287][ T9517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.465474][ T9517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.485426][ T9517] lo speed is unknown, defaulting to 1000 [ 203.492894][ T9517] lo speed is unknown, defaulting to 1000 [ 203.499306][ T9517] lo speed is unknown, defaulting to 1000 [ 203.505781][ T9517] lo speed is unknown, defaulting to 1000 [ 203.512222][ T9517] lo speed is unknown, defaulting to 1000 [ 203.518613][ T9517] lo speed is unknown, defaulting to 1000 [ 203.529718][ T30] audit: type=1400 audit(1745978959.177:2161): avc: denied { write } for pid=9516 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.552683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d6b0800: abort rx timeout. Force session deactivation [ 203.682814][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 204.236558][ T30] audit: type=1326 audit(1745978959.987:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7fc00000 [ 204.277330][ T30] audit: type=1400 audit(1745978959.987:2163): avc: denied { read } for pid=9534 comm="syz.1.1198" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.998875][ T9579] overlayfs: failed to clone upperpath [ 206.089707][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 206.189570][ T972] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.242719][ T10] usb 6-1: config index 0 descriptor too short (expected 72, got 10) [ 206.250965][ T10] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 206.258191][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 206.272357][ T9573] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1210'. [ 206.281783][ T9573] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 206.299561][ T5935] psmouse serio2: Failed to reset mouse on : -5 [ 206.309160][ T10] usb 6-1: string descriptor 0 read error: -71 [ 206.316868][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 206.327725][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.338294][ T10] usb 6-1: can't set config #1, error -71 [ 206.347352][ T10] usb 6-1: USB disconnect, device number 4 [ 206.355761][ T972] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 206.364633][ T972] usb 2-1: config 0 has no interface number 0 [ 206.371876][ T972] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 206.383107][ T972] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 206.396593][ T972] usb 2-1: config 0 interface 255 has no altsetting 0 [ 206.403932][ T972] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 206.413212][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.423046][ T972] usb 2-1: config 0 descriptor?? [ 206.429931][ T972] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 206.636661][ T10] usb 2-1: USB disconnect, device number 11 [ 206.695948][ T9593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1218'. [ 206.705032][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 206.715029][ T9593] 8021q: VLANs not supported on ip_vti0 [ 207.512828][ T9610] syzkaller0: entered promiscuous mode [ 207.518317][ T9610] syzkaller0: entered allmulticast mode [ 208.290670][ T9622] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 208.362287][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 208.362304][ T30] audit: type=1400 audit(1745978964.087:2170): avc: denied { execute } for pid=9621 comm="syz.2.1228" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=21266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 208.637659][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 208.814950][ T30] audit: type=1400 audit(1745978964.557:2171): avc: denied { block_suspend } for pid=9640 comm="syz.5.1232" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.696006][ T9651] block device autoloading is deprecated and will be removed. [ 209.889543][ T5935] misc userio: Buffer overflowed, userio client isn't keeping up [ 210.048282][ T9622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.063718][ T9627] bond1: (slave dummy0): making interface the new active one [ 210.072545][ T9627] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 210.122499][ T9637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.172726][ T30] audit: type=1400 audit(1745978965.927:2172): avc: denied { ioctl } for pid=9667 comm="syz.0.1238" path="socket:[21784]" dev="sockfs" ino=21784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.224393][ T9637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.290387][ T9637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.332831][ T9637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.373963][ T30] audit: type=1107 audit(1745978966.127:2173): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 210.406565][ T9637] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.423644][ T9637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.436577][ T9637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.460540][ T9637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.544911][ T30] audit: type=1400 audit(1745978966.297:2174): avc: denied { read } for pid=9676 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.609601][ T30] audit: type=1804 audit(1745978966.357:2175): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1242" name="/newroot/259/file0" dev="tmpfs" ino=1431 res=1 errno=0 [ 210.748003][ T30] audit: type=1400 audit(1745978966.497:2176): avc: denied { name_bind } for pid=9683 comm="syz.0.1244" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 210.936294][ T9691] overlayfs: failed to get inode (-116) [ 210.975501][ T9691] overlayfs: failed to get inode (-116) [ 211.674168][ T5935] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 211.779571][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 211.819856][ T30] audit: type=1400 audit(1745978967.557:2177): avc: denied { read append } for pid=9706 comm="syz.4.1251" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 211.843652][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.930018][ T5935] psmouse serio2: Failed to enable mouse on [ 211.963807][ T10] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 212.419547][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.430403][ T30] audit: type=1400 audit(1745978967.557:2178): avc: denied { open } for pid=9706 comm="syz.4.1251" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.453994][ T10] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 212.462988][ T10] usb 6-1: config 0 has no interface number 0 [ 212.474737][ T10] usb 6-1: config 0 has no interface number 1 [ 212.487753][ T10] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 212.538063][ T30] audit: type=1400 audit(1745978968.287:2179): avc: denied { map } for pid=9706 comm="syz.4.1251" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.561526][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.599778][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.681396][ T10] usb 6-1: config 0 descriptor?? [ 212.692437][ T10] usb 6-1: unknown number of interfaces: 2 [ 213.383473][ T9729] lo speed is unknown, defaulting to 1000 [ 213.469739][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.486971][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.732883][ T10] usb 6-1: USB disconnect, device number 5 [ 213.975313][ T9741] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1260'. [ 214.518604][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 214.518622][ T30] audit: type=1400 audit(1745978970.237:2181): avc: denied { read } for pid=9752 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.407589][ T9760] syz.2.1266 (9760): drop_caches: 2 [ 215.415948][ T9760] syz.2.1266 (9760): drop_caches: 2 [ 216.109459][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 216.119287][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 216.185134][ T30] audit: type=1400 audit(1745978971.937:2182): avc: denied { watch } for pid=9780 comm="syz.4.1276" path="/246/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 216.241728][ T30] audit: type=1400 audit(1745978971.987:2183): avc: denied { watch_sb watch_reads } for pid=9780 comm="syz.4.1276" path="/246/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.799786][ T9789] syz.5.1278 (9789): drop_caches: 2 [ 216.808782][ T9789] syz.5.1278 (9789): drop_caches: 2 [ 219.081071][ T30] audit: type=1400 audit(1745978974.717:2184): avc: denied { bind } for pid=9811 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.690449][ T30] audit: type=1400 audit(1745978974.717:2185): avc: denied { write } for pid=9811 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.741901][ T30] audit: type=1400 audit(1745978975.487:2186): avc: denied { ioctl } for pid=9814 comm="syz.5.1286" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 219.925120][ T9819] netlink: set zone limit has 8 unknown bytes [ 221.219133][ T9847] netlink: 6048 bytes leftover after parsing attributes in process `syz.5.1298'. [ 221.249121][ T30] audit: type=1400 audit(1745978976.997:2187): avc: denied { ioctl } for pid=9846 comm="syz.5.1298" path="socket:[22186]" dev="sockfs" ino=22186 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.574707][ T30] audit: type=1400 audit(1745978977.327:2188): avc: denied { append } for pid=9852 comm="syz.5.1299" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.604342][ T9855] IPv6: sit1: Disabled Multicast RS [ 223.020333][ T5935] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.150932][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.298834][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.339597][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.358591][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 223.383475][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 223.402624][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.406001][ T5935] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 223.414735][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.437043][ T30] audit: type=1400 audit(1745978979.187:2189): avc: denied { mount } for pid=9877 comm="syz.0.1305" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 223.476529][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.512374][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.529618][ T30] audit: type=1400 audit(1745978979.187:2190): avc: denied { watch } for pid=9877 comm="syz.0.1305" path="/260/file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.556065][ T10] usb 6-1: SerialNumber: syz [ 223.599783][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.607814][ T5935] usb 5-1: Product: syz [ 223.628783][ T5935] usb 5-1: Manufacturer: syz [ 223.642714][ T5935] usb 5-1: SerialNumber: syz [ 223.661835][ T5935] usb 5-1: config 0 descriptor?? [ 223.696849][ T30] audit: type=1400 audit(1745978979.447:2191): avc: denied { connect } for pid=9883 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.759252][ T30] audit: type=1400 audit(1745978979.447:2192): avc: denied { write } for pid=9883 comm="syz.1.1308" path="socket:[22729]" dev="sockfs" ino=22729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.811673][ T10] usb 6-1: 0:2 : does not exist [ 223.816624][ T10] usb 6-1: unit 5: unexpected type 0x09 [ 223.868418][ T30] audit: type=1400 audit(1745978979.617:2193): avc: denied { create } for pid=9889 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 223.893775][ T5935] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 223.905667][ T10] usb 6-1: USB disconnect, device number 6 [ 223.956611][ T30] audit: type=1400 audit(1745978979.617:2194): avc: denied { connect } for pid=9889 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 223.997845][ T7516] udevd[7516]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.141356][ T92] usb 5-1: USB disconnect, device number 10 [ 224.175883][ T9897] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 224.230454][ T9897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.277105][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 224.305980][ T9897] vlan2: entered promiscuous mode [ 224.311552][ T9897] bond1: entered promiscuous mode [ 224.336187][ T9897] dummy0: entered promiscuous mode [ 224.343315][ T9863] adutux: No device or device unplugged -19 [ 224.369079][ T9863] adutux: No device or device unplugged -19 [ 224.390391][ T92] libceph: connect (1)[c::]:6789 error -101 [ 224.403482][ T9897] bond1: (slave dummy0): making interface the new active one [ 224.416166][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 224.447116][ T9897] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 224.467984][ T9895] ceph: No mds server is up or the cluster is laggy [ 225.138648][ T9923] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.1320'. [ 225.151073][ T9923] netlink: zone id is out of range [ 225.518276][ T9925] lo speed is unknown, defaulting to 1000 [ 225.884370][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 226.047955][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 226.668392][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1328'. [ 226.689183][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1328'. [ 226.777567][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1328'. [ 226.798772][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1328'. [ 229.428678][ T9995] Set syz0 is full, maxelem 0 reached [ 229.601936][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 229.601951][ T30] audit: type=1400 audit(1745978985.357:2200): avc: denied { read } for pid=9997 comm="syz.0.1343" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.663941][ T30] audit: type=1400 audit(1745978985.417:2201): avc: denied { setopt } for pid=9996 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.900639][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 229.941294][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 230.126828][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'. [ 230.256349][T10013] vlan2: entered promiscuous mode [ 230.287602][T10013] bridge0: entered promiscuous mode [ 231.440657][ T5126] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 232.355893][T10048] syz_tun: entered allmulticast mode [ 232.375624][T10048] syz_tun: left allmulticast mode [ 232.649835][ T92] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 232.674052][ T30] audit: type=1326 audit(1745978988.427:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 232.719786][ T30] audit: type=1326 audit(1745978988.427:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 232.744109][T10056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 232.749190][ T30] audit: type=1326 audit(1745978988.447:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 232.857048][ T92] usb 2-1: config index 0 descriptor too short (expected 64092, got 92) [ 232.869607][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.799588][ T30] audit: type=1326 audit(1745978988.457:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 233.829654][ T30] audit: type=1326 audit(1745978988.457:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 233.856396][ T30] audit: type=1326 audit(1745978988.457:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd6b958d37c code=0x7ffc0000 [ 233.888672][ T30] audit: type=1326 audit(1745978988.467:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 233.904169][ T92] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.912872][ T30] audit: type=1326 audit(1745978988.467:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b958e969 code=0x7ffc0000 [ 235.175468][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.182107][T10072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.189516][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.204576][ T92] usb 2-1: Product: syz [ 235.209137][ T92] usb 2-1: Manufacturer: syz [ 235.213809][ T92] usb 2-1: SerialNumber: syz [ 235.218963][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 235.218978][ T30] audit: type=1400 audit(1745978990.967:2228): avc: denied { create } for pid=10071 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.298042][ T92] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 235.306924][ T92] cdc_ncm 2-1:1.0: bind() failure [ 235.332968][ T10] usb 2-1: USB disconnect, device number 12 [ 235.391673][ T30] audit: type=1400 audit(1745978991.097:2229): avc: denied { listen } for pid=10071 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.946633][ T30] audit: type=1400 audit(1745978997.687:2230): avc: denied { write } for pid=10166 comm="syz.4.1397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 243.383140][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.391533][T10167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.473923][ T30] audit: type=1400 audit(1745978999.227:2231): avc: denied { setattr } for pid=10144 comm="syz.5.1391" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 245.239658][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.411475][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 245.441135][ T92] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 245.468636][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.490170][ T92] usb 2-1: Product: syz [ 245.504444][ T92] usb 2-1: Manufacturer: syz [ 245.563006][ T92] usb 2-1: SerialNumber: syz [ 245.629991][ T92] r8152-cfgselector 2-1: Unknown version 0x0000 [ 245.663285][ T92] r8152-cfgselector 2-1: config 0 descriptor?? [ 247.379623][ T92] r8152-cfgselector 2-1: Unknown version 0x3860 [ 247.386053][ T92] r8152-cfgselector 2-1: bad CDC descriptors [ 247.555422][T10218] bond0: (slave rose0): Enslaving as an active interface with an up link [ 247.555883][ T30] audit: type=1400 audit(1745979003.307:2232): avc: denied { ioctl } for pid=10217 comm="syz.2.1412" path="socket:[24097]" dev="sockfs" ino=24097 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 247.650669][ T92] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 247.722212][ T7805] bond0: (slave syz_tun): Releasing backup interface [ 248.553548][ T8412] bridge_slave_1: left allmulticast mode [ 248.565316][ T8412] bridge_slave_1: left promiscuous mode [ 248.605242][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.667331][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.677474][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.686077][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.696672][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.704216][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.741879][ T8412] bridge_slave_0: left allmulticast mode [ 248.805487][ T8412] bridge_slave_0: left promiscuous mode [ 248.811465][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.120961][ T8412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.134528][ T8412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.164706][ T8412] bond0 (unregistering): Released all slaves [ 250.235875][T10267] lo speed is unknown, defaulting to 1000 [ 250.582022][ T30] audit: type=1400 audit(1745979006.337:2233): avc: denied { getopt } for pid=10279 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.732301][T10234] lo speed is unknown, defaulting to 1000 [ 250.803728][ T5812] Bluetooth: hci4: command tx timeout [ 251.818886][ T8412] hsr_slave_0: left promiscuous mode [ 251.828793][ T8412] hsr_slave_1: left promiscuous mode [ 251.848030][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.873968][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.958980][ T8412] veth3 (unregistering): left allmulticast mode [ 251.976739][ T8412] team0 (unregistering): Port device veth3 removed [ 252.287921][ T8412] team_slave_1 (unregistering): left allmulticast mode [ 252.296187][ T8412] team0 (unregistering): Port device team_slave_1 removed [ 252.328113][ T8412] team_slave_0 (unregistering): left allmulticast mode [ 252.336747][ T8412] team0 (unregistering): Port device team_slave_0 removed [ 252.879992][ T5812] Bluetooth: hci4: command tx timeout [ 252.888926][T10333] netlink: 'syz.2.1442': attribute type 5 has an invalid length. [ 252.905788][T10234] chnl_net:caif_netlink_parms(): no params data found [ 252.913929][T10326] ref_ctr_offset mismatch. inode: 0x6bc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7110110900006800 [ 252.953200][T10333] netlink: 'syz.2.1442': attribute type 5 has an invalid length. [ 253.184922][ T8412] IPVS: stop unused estimator thread 0... [ 253.194399][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.244319][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.273401][T10234] bridge_slave_0: entered allmulticast mode [ 253.300716][T10234] bridge_slave_0: entered promiscuous mode [ 253.312509][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.818385][ T30] audit: type=1400 audit(1745979009.127:2234): avc: denied { connect } for pid=10348 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.963638][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.001891][T10234] bridge_slave_1: entered allmulticast mode [ 254.043318][ T30] audit: type=1400 audit(1745979009.737:2235): avc: denied { override_creds } for pid=10360 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 254.151023][T10234] bridge_slave_1: entered promiscuous mode [ 254.302076][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.395179][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.591282][T10234] team0: Port device team_slave_0 added [ 254.611530][T10234] team0: Port device team_slave_1 added [ 254.689552][ T5860] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.801486][ T30] audit: type=1400 audit(1745979010.557:2236): avc: denied { listen } for pid=10378 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.844097][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.859757][ T30] audit: type=1400 audit(1745979010.557:2237): avc: denied { accept } for pid=10378 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.875615][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.914358][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.925909][ T5860] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.937346][ T5860] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.947699][ T5860] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.959571][ T5812] Bluetooth: hci4: command tx timeout [ 254.967274][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.974644][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.999621][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.028618][T10372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.036192][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.050663][ T30] audit: type=1400 audit(1745979010.807:2238): avc: denied { getopt } for pid=10375 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.053698][ T5860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.203985][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.210855][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.889795][ T5860] usb 5-1: USB disconnect, device number 11 [ 256.154314][T10234] hsr_slave_0: entered promiscuous mode [ 256.201988][T10234] hsr_slave_1: entered promiscuous mode [ 256.219272][T10234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.235057][T10234] Cannot create hsr debugfs directory [ 257.039687][ T5812] Bluetooth: hci4: command tx timeout [ 257.176118][T10234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.471237][T10234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.509097][T10234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 258.030062][T10234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 258.347453][ T30] audit: type=1400 audit(1745979014.097:2239): avc: denied { connect } for pid=10430 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.444157][ T30] audit: type=1400 audit(1745979014.157:2240): avc: denied { setopt } for pid=10430 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.684189][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.708455][T10234] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.780135][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.787250][ T8404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.836444][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.843539][ T8404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.149844][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.270878][T10458] veth0_vlan: entered allmulticast mode [ 259.415363][T10458] veth0_vlan: left promiscuous mode [ 259.438855][T10458] veth0_vlan: entered promiscuous mode [ 259.731036][T10470] lo speed is unknown, defaulting to 1000 [ 259.801479][T10234] veth0_vlan: entered promiscuous mode [ 259.823231][T10234] veth1_vlan: entered promiscuous mode [ 259.883488][T10234] veth0_macvtap: entered promiscuous mode [ 259.892757][T10234] veth1_macvtap: entered promiscuous mode [ 259.913562][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.924810][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.947480][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.958135][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.972777][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.149872][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.198555][T10470] netlink: 'syz.0.1470': attribute type 27 has an invalid length. [ 260.289554][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.361970][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.372375][ T30] audit: type=1400 audit(1745979016.117:2241): avc: denied { create } for pid=10478 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 260.399588][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 260.493261][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.635582][T10479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.810232][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.843512][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.853645][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.865066][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.876920][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.888558][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.942679][T10234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.967104][T10234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.997784][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.012973][T10234] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.022820][T10234] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.043433][T10234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.052262][T10234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.275890][T10479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.486761][T10500] Set syz0 is full, maxelem 0 reached [ 261.541682][T10479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.825187][T10479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.092041][T10510] bridge_slave_0: default FDB implementation only supports local addresses [ 262.245010][T10479] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.435900][T10479] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.457126][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.476969][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.499546][ T5935] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 262.564288][T10479] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.659645][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 262.667953][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.709189][ T5935] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 262.737645][T10479] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.779587][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.812999][ T8412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.822977][ T5935] usb 3-1: config 0 descriptor?? [ 262.887153][ T8412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.371678][ T5935] ryos 0003:1E7D:3138.0004: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 263.825413][ T30] audit: type=1326 audit(1745979019.577:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.0.1489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450178e969 code=0x0 [ 263.910560][T10556] lo speed is unknown, defaulting to 1000 [ 264.049692][ T30] audit: type=1400 audit(1745979019.797:2243): avc: denied { read append } for pid=10565 comm="syz.6.1492" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.194256][ T10] usb 3-1: USB disconnect, device number 7 [ 264.349614][ T30] audit: type=1400 audit(1745979019.797:2244): avc: denied { open } for pid=10565 comm="syz.6.1492" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.514353][T10578] lo speed is unknown, defaulting to 1000 [ 264.835896][ T30] audit: type=1400 audit(1745979020.207:2245): avc: denied { setopt } for pid=10571 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 265.868757][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1496'. [ 266.680686][ T30] audit: type=1400 audit(1745979022.027:2246): avc: denied { ioctl } for pid=10597 comm="syz.6.1499" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.133899][ T30] audit: type=1804 audit(1745979023.877:2247): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1505" name="/newroot/286/file1" dev="fuse" ino=1 res=1 errno=0 [ 268.292312][ T30] audit: type=1800 audit(1745979023.907:2248): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1505" name="/" dev="fuse" ino=1 res=0 errno=0 [ 269.401353][T10661] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.408702][T10661] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.738402][T10671] openvswitch: netlink: Message has 24 unknown bytes. [ 270.208471][T10671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.492828][T10683] netlink: 'syz.6.1519': attribute type 2 has an invalid length. [ 270.537965][T10687] overlayfs: failed to clone upperpath [ 270.603271][ T30] audit: type=1400 audit(1745979026.347:2249): avc: denied { connect } for pid=10688 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.645061][ T30] audit: type=1400 audit(1745979027.397:2250): avc: denied { accept } for pid=10694 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 273.283079][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.355282][ T30] audit: type=1326 audit(1745979029.097:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.4.1532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafa798e969 code=0x0 [ 273.628288][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.947547][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.016409][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.104534][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.125296][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.134831][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.144184][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.151906][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.197034][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 274.282366][T10747] netlink: 'syz.4.1537': attribute type 3 has an invalid length. [ 274.359334][T10740] lo speed is unknown, defaulting to 1000 [ 274.371499][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 274.390595][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 274.424517][ T9] usb 7-1: config 4 has an invalid interface number: 247 but max is 0 [ 274.433104][ T9] usb 7-1: config 4 has no interface number 0 [ 274.504837][ T9] usb 7-1: config 4 interface 247 has no altsetting 0 [ 274.565377][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=5f.d1 [ 274.578063][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.605153][ T9] usb 7-1: Product: syz [ 274.621368][ T9] usb 7-1: Manufacturer: syz [ 274.637491][ T13] bridge_slave_1: left allmulticast mode [ 274.645295][ T9] usb 7-1: SerialNumber: syz [ 274.664158][ T13] bridge_slave_1: left promiscuous mode [ 274.703168][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.729414][ T13] bridge_slave_0: left allmulticast mode [ 274.744015][ T13] bridge_slave_0: left promiscuous mode [ 274.777050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.034111][ T9] f81232 7-1:4.247: f81534a converter detected [ 275.057285][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 275.071342][ T30] audit: type=1400 audit(1745979030.817:2252): avc: denied { create } for pid=10752 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.103948][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 275.124615][ T9] usb 7-1: USB disconnect, device number 2 [ 275.131898][ T30] audit: type=1400 audit(1745979030.817:2253): avc: denied { bind } for pid=10752 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.132591][ T9] f81232 7-1:4.247: device disconnected [ 275.195582][ T30] audit: type=1400 audit(1745979030.817:2254): avc: denied { node_bind } for pid=10752 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 275.824148][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.838727][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.851786][ T13] bond0 (unregistering): Released all slaves [ 275.874813][T10761] lo speed is unknown, defaulting to 1000 [ 275.976038][ T13] : left promiscuous mode [ 276.017943][T10755] lo speed is unknown, defaulting to 1000 [ 276.134752][ T13] IPVS: stopping master sync thread 10056 ... [ 276.245058][ T5812] Bluetooth: hci1: command tx timeout [ 276.443827][T10740] chnl_net:caif_netlink_parms(): no params data found [ 276.654457][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 276.661757][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 276.694491][T10797] ceph: No mds server is up or the cluster is laggy [ 276.725476][ T13] hsr_slave_0: left promiscuous mode [ 276.793176][ T13] hsr_slave_1: left promiscuous mode [ 276.802759][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.920017][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.957151][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.415295][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.451834][ T13] veth0_macvtap: left promiscuous mode [ 277.459599][ T13] veth1_vlan: left promiscuous mode [ 277.464899][ T13] veth0_vlan: left promiscuous mode [ 278.431000][ T5812] Bluetooth: hci1: command tx timeout [ 278.468224][ T30] audit: type=1400 audit(1745979034.047:2255): avc: denied { write } for pid=10821 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.671085][ T30] audit: type=1400 audit(1745979034.057:2256): avc: denied { read } for pid=10821 comm="syz.1.1553" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.789689][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 279.192320][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.200614][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 279.209249][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.220875][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 279.239575][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.252181][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.343501][ T13] team0 (unregistering): Port device team_slave_1 removed [ 279.694930][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.702989][ T9] usb 5-1: Product: syz [ 279.707152][ T9] usb 5-1: Manufacturer: syz [ 279.711790][ T9] usb 5-1: SerialNumber: syz [ 279.795335][ T13] team0 (unregistering): Port device team_slave_0 removed [ 280.078646][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.091938][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.509576][ T5812] Bluetooth: hci1: command tx timeout [ 280.642593][ T30] audit: type=1400 audit(1745979035.927:2257): avc: denied { write } for pid=10838 comm="syz.0.1557" path="socket:[26807]" dev="sockfs" ino=26807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 280.748488][ T9] usb 5-1: USB disconnect, device number 12 [ 281.065486][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.075912][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.083351][T10740] bridge_slave_0: entered allmulticast mode [ 281.090723][T10740] bridge_slave_0: entered promiscuous mode [ 281.107704][T10819] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 281.118920][T10819] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 281.126201][T10842] wg1: entered promiscuous mode [ 281.149996][T10842] wg1: entered allmulticast mode [ 281.189721][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.215719][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.249762][T10740] bridge_slave_1: entered allmulticast mode [ 281.256990][T10740] bridge_slave_1: entered promiscuous mode [ 281.474135][T10858] wg2: entered promiscuous mode [ 281.481811][T10858] wg2: entered allmulticast mode [ 281.563598][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.628834][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.851050][ T30] audit: type=1400 audit(1745979037.597:2258): avc: denied { bind } for pid=10862 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.984892][T10740] team0: Port device team_slave_0 added [ 282.027035][T10740] team0: Port device team_slave_1 added [ 282.054359][ T13] IPVS: stop unused estimator thread 0... [ 282.217670][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.226620][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.294086][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.483005][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.512367][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.560776][ T5812] Bluetooth: hci1: command tx timeout [ 282.581896][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.959926][T10740] hsr_slave_0: entered promiscuous mode [ 282.966181][T10740] hsr_slave_1: entered promiscuous mode [ 282.981422][ T30] audit: type=1400 audit(1745979038.737:2259): avc: denied { getopt } for pid=10884 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.001531][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.009094][T10740] Cannot create hsr debugfs directory [ 285.000852][T10887] lo speed is unknown, defaulting to 1000 [ 285.038295][T10910] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 285.065956][T10910] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1574'. [ 285.256020][ T30] audit: type=1400 audit(1745979040.977:2260): avc: denied { shutdown } for pid=10911 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.324885][T10952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=10952 comm=syz.0.1582 [ 287.718506][T10740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.816558][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 288.001157][T10740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.101152][T10740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.147579][T10740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.154337][ T10] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 288.154359][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.154377][ T10] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 288.278676][ T10] usb 5-1: config 0 has no interface number 0 [ 288.565594][ T10] usb 5-1: config 0 has no interface number 1 [ 288.582979][ T10] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 288.607398][T10976] lo speed is unknown, defaulting to 1000 [ 288.619545][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.651744][ T10] usb 5-1: config 0 descriptor?? [ 288.679382][ T10] usb 5-1: unknown number of interfaces: 2 [ 288.873849][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.930500][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.132991][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.140183][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.193877][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.201066][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.242463][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.303631][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.338948][T11004] lo speed is unknown, defaulting to 1000 [ 289.565183][ T5900] usb 5-1: USB disconnect, device number 13 [ 290.120700][T11026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1597'. [ 290.130009][T11026] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 290.302722][T11038] overlayfs: failed to clone upperpath [ 290.998168][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.017033][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 291.188516][ T30] audit: type=1400 audit(1745979046.937:2261): avc: denied { map } for pid=11039 comm="syz.4.1610" path="socket:[27096]" dev="sockfs" ino=27096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.229594][ T30] audit: type=1400 audit(1745979046.937:2262): avc: denied { read accept } for pid=11039 comm="syz.4.1610" path="socket:[27096]" dev="sockfs" ino=27096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.243417][T10740] veth0_vlan: entered promiscuous mode [ 292.274036][T10740] veth1_vlan: entered promiscuous mode [ 292.339708][T11067] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1604'. [ 292.351494][T10740] veth0_macvtap: entered promiscuous mode [ 292.375458][T10740] veth1_macvtap: entered promiscuous mode [ 292.409976][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.442670][T11067] tmpfs: Unknown parameter 'quïtÁvÌï?a' [ 292.449080][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.489799][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.529638][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.554036][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.037905][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.052101][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.062582][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.082216][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.093931][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.106958][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.254983][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.284813][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.299486][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.322637][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.791360][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.802554][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.813584][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.857289][T10740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.889569][T10740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.899068][T10740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.932094][T10740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.248038][ T8410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.260211][ T8410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.353053][ T8412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.376987][ T8412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.388952][T11099] netlink: zone id is out of range [ 294.403428][T11099] netlink: zone id is out of range [ 294.433561][T11099] netlink: zone id is out of range [ 294.443895][T11099] netlink: zone id is out of range [ 294.483909][T11099] netlink: zone id is out of range [ 294.499392][T11099] netlink: zone id is out of range [ 294.545526][T11099] netlink: zone id is out of range [ 294.575475][T11099] netlink: zone id is out of range [ 294.607175][T11099] netlink: zone id is out of range [ 294.683037][T11099] netlink: zone id is out of range [ 295.304742][T11113] netlink: 'syz.6.1615': attribute type 1 has an invalid length. [ 295.356381][T11113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.333676][ T8412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.421972][T11116] ip6erspan0: entered promiscuous mode [ 296.430944][T11116] bond1: (slave ip6erspan0): making interface the new active one [ 296.442876][T11116] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 296.472336][T11113] vlan2: entered allmulticast mode [ 296.477496][T11113] bond1: entered allmulticast mode [ 296.489694][T11113] ip6erspan0: entered allmulticast mode [ 296.497761][T11113] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 296.552866][ T30] audit: type=1400 audit(1745979052.307:2263): avc: denied { create } for pid=11125 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 298.039225][ T8412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.323867][ T8412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.390305][ T30] audit: type=1400 audit(1745979054.147:2264): avc: denied { map } for pid=11144 comm="syz.6.1623" path="socket:[27422]" dev="sockfs" ino=27422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 298.428821][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.443904][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.483463][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.491643][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.498958][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.123742][ T8412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.277565][T11150] lo speed is unknown, defaulting to 1000 [ 300.060139][ T8412] bridge_slave_1: left allmulticast mode [ 300.072457][ T8412] bridge_slave_1: left promiscuous mode [ 300.085704][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.620778][ T5126] Bluetooth: hci1: command tx timeout [ 300.730513][ T8412] bridge_slave_0: left allmulticast mode [ 300.736203][ T8412] bridge_slave_0: left promiscuous mode [ 300.833493][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.222137][ T8412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.234834][ T8412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.252858][ T30] audit: type=1326 audit(1745979058.007:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7fc00000 [ 302.278538][ T8412] bond0 (unregistering): Released all slaves [ 302.289256][T11150] chnl_net:caif_netlink_parms(): no params data found [ 302.289622][ T5900] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 302.312612][T11205] team0: Device gtp1 is of different type [ 302.451385][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 302.462794][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.478843][ T5900] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.505902][ T5900] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 302.515062][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.527206][ T5900] usb 7-1: Product: syz [ 302.531466][T11150] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.533049][ T5900] usb 7-1: Manufacturer: syz [ 302.541034][ T5900] usb 7-1: SerialNumber: syz [ 302.554209][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.568248][T11150] bridge_slave_0: entered allmulticast mode [ 302.568706][ T5900] usb 7-1: config 0 descriptor?? [ 302.575561][T11150] bridge_slave_0: entered promiscuous mode [ 302.600108][T11215] lo speed is unknown, defaulting to 1000 [ 302.640413][ T5126] Bluetooth: hci1: command tx timeout [ 302.680975][T11150] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.688100][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.724618][T11150] bridge_slave_1: entered allmulticast mode [ 302.745371][T11150] bridge_slave_1: entered promiscuous mode [ 302.916747][ T30] audit: type=1326 audit(1745979058.637:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a0932ab39 code=0x7fc00000 [ 302.921149][T11150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.391521][T11150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.413443][ T30] audit: type=1400 audit(1745979059.167:2267): avc: denied { setattr } for pid=11196 comm="syz.6.1630" name="nbd6" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.448768][ T30] audit: type=1400 audit(1745979059.197:2268): avc: denied { wake_alarm } for pid=11227 comm="syz.1.1639" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.450136][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1630'. [ 303.482906][T11228] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 303.493731][T11229] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.497229][T11228] overlayfs: missing 'lowerdir' [ 303.528227][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1630'. [ 303.715207][T11231] block nbd6: shutting down sockets [ 303.817256][ T8412] hsr_slave_0: left promiscuous mode [ 303.861800][ T8412] hsr_slave_1: left promiscuous mode [ 303.868265][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.875907][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.884706][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.892162][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.911676][ T8412] veth1_macvtap: left promiscuous mode [ 303.917234][ T8412] veth0_macvtap: left promiscuous mode [ 304.361799][ T8412] veth1_vlan: left promiscuous mode [ 304.367160][ T8412] veth0_vlan: left promiscuous mode [ 304.719830][ T5126] Bluetooth: hci1: command tx timeout [ 304.799641][ T30] audit: type=1400 audit(1745979060.507:2269): avc: denied { ioctl } for pid=11251 comm="syz.1.1642" path="socket:[29767]" dev="sockfs" ino=29767 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.131277][ T5809] usb 7-1: USB disconnect, device number 3 [ 305.957762][ T8412] team0 (unregistering): Port device team_slave_1 removed [ 306.008483][ T8412] team0 (unregistering): Port device team_slave_0 removed [ 306.869572][ T5126] Bluetooth: hci1: command tx timeout [ 307.022070][T11278] Option 'D' to dns_resolver key: bad/missing value [ 307.439417][T11150] team0: Port device team_slave_0 added [ 307.480133][T11150] team0: Port device team_slave_1 added [ 307.806544][ T30] audit: type=1400 audit(1745979063.547:2270): avc: denied { ioctl } for pid=11286 comm="syz.1.1650" path="socket:[28777]" dev="sockfs" ino=28777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.132933][T11150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.141390][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.186702][T11150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.218841][T11150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.253776][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.297290][T11150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.389811][T11150] hsr_slave_0: entered promiscuous mode [ 308.404151][T11150] hsr_slave_1: entered promiscuous mode [ 308.416820][T11150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.433581][T11150] Cannot create hsr debugfs directory [ 310.187796][T11335] tipc: Started in network mode [ 310.234216][T11335] tipc: Node identity 6e9c669c1fad, cluster identity 4711 [ 310.263631][T11335] tipc: Enabled bearer , priority 0 [ 310.434482][T11325] syzkaller0: entered promiscuous mode [ 310.440168][T11325] syzkaller0: entered allmulticast mode [ 310.446434][T11325] tipc: Resetting bearer [ 310.773561][T11324] tipc: Resetting bearer [ 311.150386][T11352] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1665'. [ 311.538006][ T5935] tipc: Node number set to 1899062940 [ 311.919408][T11363] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 311.927293][T11363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'. [ 315.486372][T11324] tipc: Disabling bearer [ 315.511969][T11363] team0: Port device geneve0 added [ 316.646903][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.798038][T11423] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 317.834030][T11429] netlink: 'syz.6.1685': attribute type 4 has an invalid length. [ 317.899331][T11429] netlink: 'syz.6.1685': attribute type 4 has an invalid length. [ 318.513597][T11150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.557330][ T30] audit: type=1400 audit(1745979074.277:2271): avc: denied { write } for pid=11451 comm="syz.6.1687" name="file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.586125][ T30] audit: type=1400 audit(1745979074.277:2272): avc: denied { open } for pid=11451 comm="syz.6.1687" path="/42/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.662831][T11150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.724879][T11150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.518954][T11461] team_slave_0: entered promiscuous mode [ 319.535216][T11461] team_slave_0: entered allmulticast mode [ 319.556644][T11461] team0: Port device team_slave_0 removed [ 319.642422][T11150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.826415][T11150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.900070][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 319.910391][T11150] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.085685][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.092864][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.152760][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.163700][ T5900] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.202768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.209867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.224995][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.325575][ T5900] usb 7-1: config 0 descriptor?? [ 320.345325][ T5900] pwc: Askey VC010 type 2 USB webcam detected. [ 321.145441][ T5900] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.154354][ T5900] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.167884][ T5900] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.207025][ T5900] pwc: recv_control_msg error -32 req 04 val 1000 [ 321.232815][ T5900] pwc: recv_control_msg error -32 req 04 val 1300 [ 321.254414][ T5900] pwc: recv_control_msg error -32 req 04 val 1400 [ 321.273041][ T5900] pwc: recv_control_msg error -32 req 02 val 2000 [ 321.299620][ T5900] pwc: recv_control_msg error -32 req 02 val 2100 [ 321.318175][ T5900] pwc: recv_control_msg error -32 req 04 val 1500 [ 321.355872][ T5900] pwc: recv_control_msg error -32 req 02 val 2500 [ 321.383167][T11150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.450057][ T5809] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 321.494395][T11150] veth0_vlan: entered promiscuous mode [ 321.522196][T11150] veth1_vlan: entered promiscuous mode [ 321.585726][ T5900] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.597669][ T5900] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.600779][T11150] veth0_macvtap: entered promiscuous mode [ 321.614548][ T5900] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.642121][ T5900] pwc: recv_control_msg error -71 req 04 val 1100 [ 321.643352][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 321.656327][T11150] veth1_macvtap: entered promiscuous mode [ 321.656563][ T5900] pwc: recv_control_msg error -71 req 04 val 1200 [ 321.695314][ T5900] pwc: Registered as video103. [ 321.698523][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.744440][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.757623][ T5900] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 321.799667][ T5809] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 321.809645][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.831842][ T5900] usb 7-1: USB disconnect, device number 4 [ 321.838618][ T5809] usb 5-1: config 0 descriptor?? [ 321.844022][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 321.853756][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.899601][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.933059][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.959540][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.988861][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.009063][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.019914][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.036703][T11150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.070590][ T7518] udevd[7518]: setting mode of /dev/input/event5 to 020660 failed: No such file or directory [ 322.096470][ T7518] udevd[7518]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 322.403236][ T5809] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 322.435580][ T5809] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 322.480535][ T5809] hid-steam 0003:28DE:1102.0005: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 322.526105][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.547543][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.611107][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.878170][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.979608][ T5900] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 323.020055][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.029127][ T5809] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' connected [ 323.065835][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.075380][ T5809] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0005/input/input11 [ 323.099855][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.119110][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.170428][ T5809] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 323.178168][ T5809] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 323.187924][T11150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.259725][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 323.277765][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.295537][T11150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.303450][ T5900] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 323.308888][ T5809] hid-steam 0003:28DE:1102.0006: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 323.317702][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.343986][T11150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.353121][T11150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.392316][ T5900] usb 7-1: config 0 descriptor?? [ 323.404584][T11150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.456444][T11525] lo speed is unknown, defaulting to 1000 [ 323.616401][ T5809] usb 5-1: USB disconnect, device number 14 [ 324.171475][ T5809] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 324.193856][ T5900] usbhid 7-1:0.0: can't add hid device: -71 [ 324.242547][ T5900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 324.316183][ T5900] usb 7-1: USB disconnect, device number 5 [ 324.408076][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.439570][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.104842][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.113321][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.147024][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 325.433091][ T5935] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 325.603637][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 325.625210][ T5935] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.634040][ T5935] usb 5-1: config 0 has no interface number 0 [ 325.645216][ T5935] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.656267][ T5935] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.691258][ T5935] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.719515][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.727876][ T5935] usb 5-1: Product: syz [ 325.734717][ T5935] usb 5-1: SerialNumber: syz [ 325.752635][ T5935] usb 5-1: config 0 descriptor?? [ 325.926815][ T5935] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 325.939029][ T5935] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input12 [ 325.969018][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.362472][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.517741][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 326.755971][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.760891][T11549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.062904][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.087970][ T9] usb 5-1: USB disconnect, device number 15 [ 327.111081][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 327.646962][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.879552][T11601] trusted_key: encrypted_key: insufficient parameters specified [ 328.494825][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.689652][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.705033][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.716227][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.725572][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.733245][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.356630][T11608] lo speed is unknown, defaulting to 1000 [ 329.766047][ T12] bridge_slave_1: left allmulticast mode [ 329.780964][ T12] bridge_slave_1: left promiscuous mode [ 329.953001][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.496506][ T30] audit: type=1400 audit(1745979086.107:2273): avc: denied { setopt } for pid=11627 comm="syz.6.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 330.528925][ T30] audit: type=1400 audit(1745979086.127:2274): avc: denied { connect } for pid=11627 comm="syz.6.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 330.879597][ T5812] Bluetooth: hci1: command tx timeout [ 331.235642][ T12] bridge_slave_0: left allmulticast mode [ 331.740908][ T12] bridge_slave_0: left promiscuous mode [ 331.755724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.830653][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 331.865011][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 332.969664][ T5812] Bluetooth: hci1: command tx timeout [ 333.211038][ T30] audit: type=1400 audit(1745979088.947:2275): avc: denied { create } for pid=11672 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 333.404031][ T30] audit: type=1400 audit(1745979088.947:2276): avc: denied { create } for pid=11672 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 333.428101][ T30] audit: type=1400 audit(1745979088.947:2277): avc: denied { bind } for pid=11672 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 333.531363][ T30] audit: type=1400 audit(1745979088.947:2278): avc: denied { connect } for pid=11672 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 333.600152][ T30] audit: type=1400 audit(1745979088.947:2279): avc: denied { sendto } for pid=11672 comm="syz.4.1727" path="/327/file0" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 333.977326][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.012108][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.033042][ T12] bond0 (unregistering): Released all slaves [ 334.410295][T11703] netlink: 'syz.4.1731': attribute type 16 has an invalid length. [ 334.450568][T11703] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1731'. [ 335.149211][ T5812] Bluetooth: hci1: command tx timeout [ 335.231579][ T30] audit: type=1400 audit(1745979090.947:2280): avc: denied { getopt } for pid=11714 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.715689][T11608] chnl_net:caif_netlink_parms(): no params data found [ 336.346972][ T12] hsr_slave_0: left promiscuous mode [ 336.483595][ T12] hsr_slave_1: left promiscuous mode [ 336.494594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.503530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.994363][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.010666][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.035473][ T12] veth1_macvtap: left promiscuous mode [ 337.044075][ T12] veth0_macvtap: left promiscuous mode [ 337.053876][ T12] veth1_vlan: left promiscuous mode [ 337.066528][ T12] veth0_vlan: left promiscuous mode [ 337.268180][ T5812] Bluetooth: hci1: command tx timeout [ 337.501056][T11754] netlink: 'syz.6.1744': attribute type 21 has an invalid length. [ 338.393790][ T12] team0 (unregistering): Port device team_slave_1 removed [ 338.453468][ T12] team0 (unregistering): Port device team_slave_0 removed [ 338.786852][T11754] netlink: 'syz.6.1744': attribute type 6 has an invalid length. [ 338.820502][T11754] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1744'. [ 339.661306][ T30] audit: type=1400 audit(1745979094.997:2281): avc: denied { getopt } for pid=11781 comm="syz.6.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.664037][T11795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 339.882438][ T8410] net_ratelimit: 6 callbacks suppressed [ 339.882455][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.951908][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.008989][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.020585][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.049559][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.087603][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.312595][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.469660][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.533102][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.541873][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.569629][T11608] bridge_slave_0: entered allmulticast mode [ 340.590554][T11608] bridge_slave_0: entered promiscuous mode [ 340.669811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.681177][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.882217][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.950176][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.957851][T11608] bridge_slave_1: entered allmulticast mode [ 340.995177][T11608] bridge_slave_1: entered promiscuous mode [ 341.152938][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.185576][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.244187][T11608] team0: Port device team_slave_0 added [ 341.261711][T11608] team0: Port device team_slave_1 added [ 341.406622][ T5862] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 342.539586][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 342.549019][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.559173][ T5862] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 342.795166][ T30] audit: type=1400 audit(1745979098.377:2282): avc: denied { name_bind } for pid=11822 comm="syz.0.1758" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 342.989156][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.017441][ T5862] usb 5-1: Product: syz [ 343.032417][ T5862] usb 5-1: Manufacturer: syz [ 343.066575][ T5862] usb 5-1: SerialNumber: syz [ 343.072975][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.074946][ T5862] usb 5-1: config 0 descriptor?? [ 343.091922][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.133257][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.266340][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.282556][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.424727][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.959769][ T5862] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 344.058575][T11845] 9pnet_fd: Insufficient options for proto=fd [ 344.065549][T11608] hsr_slave_0: entered promiscuous mode [ 344.074981][T11608] hsr_slave_1: entered promiscuous mode [ 344.081757][T11608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.089583][T11608] Cannot create hsr debugfs directory [ 344.364871][ T5862] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 344.400055][ T5862] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 344.422483][ T5862] usb 5-1: USB disconnect, device number 16 [ 344.540307][ T30] audit: type=1400 audit(1745979100.297:2283): avc: denied { create } for pid=11853 comm="syz.0.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.584638][ T30] audit: type=1400 audit(1745979100.337:2284): avc: denied { ioctl } for pid=11853 comm="syz.0.1764" path="socket:[30914]" dev="sockfs" ino=30914 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.741288][T11861] block nbd6: shutting down sockets [ 344.766432][T11866] block nbd6: NBD_DISCONNECT [ 344.773965][T11866] block nbd6: Send disconnect failed -32 [ 345.279635][ T5864] net_ratelimit: 18 callbacks suppressed [ 345.279652][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.153491][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.287786][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.303430][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.321475][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.335070][T11608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.374903][T11608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.391826][T11881] lo speed is unknown, defaulting to 1000 [ 346.403538][T11608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.467761][T11608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.025432][T11893] lo speed is unknown, defaulting to 1000 [ 347.041131][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.126204][T11608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.360667][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.373600][T11608] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.722851][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.729988][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.948753][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.955878][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.339534][ T5860] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 348.400692][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.508961][ T5860] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 348.522505][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.569396][ T5860] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 348.599691][ T5860] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 348.607819][ T5860] usb 7-1: Manufacturer: syz [ 348.710491][ T5860] usb 7-1: config 0 descriptor?? [ 348.893093][ T30] audit: type=1326 audit(1745979104.557:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.171268][T11930] lo speed is unknown, defaulting to 1000 [ 349.217102][ T30] audit: type=1326 audit(1745979104.557:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.309741][ T5860] rc_core: IR keymap rc-hauppauge not found [ 349.325184][ T30] audit: type=1326 audit(1745979104.567:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.329715][ T5860] Registered IR keymap rc-empty [ 349.422703][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 349.485709][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.491173][ T30] audit: type=1326 audit(1745979104.567:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.531832][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 349.547239][ T30] audit: type=1326 audit(1745979104.567:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.605460][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.632087][ T30] audit: type=1326 audit(1745979104.567:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.682703][ T30] audit: type=1326 audit(1745979104.567:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.689528][T11953] rc rc0: two consecutive events of type space [ 349.707048][ T30] audit: type=1326 audit(1745979104.567:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.707096][ T30] audit: type=1326 audit(1745979104.567:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.707132][ T30] audit: type=1326 audit(1745979104.567:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11927 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0938e969 code=0x7ffc0000 [ 349.795951][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 349.921716][T11608] veth0_vlan: entered promiscuous mode [ 349.961651][T11608] veth1_vlan: entered promiscuous mode [ 350.070037][T11960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11960 comm=syz.4.1781 [ 350.082927][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.116074][T11948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11948 comm=syz.6.1776 [ 350.129919][T11608] veth0_macvtap: entered promiscuous mode [ 350.168497][T11608] veth1_macvtap: entered promiscuous mode [ 350.208188][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.237779][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.276661][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.312090][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.352895][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.363723][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.365451][ T5862] usb 7-1: USB disconnect, device number 6 [ 350.383909][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.399041][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.452141][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 350.540692][T11608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.569172][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.580233][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.591554][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.607958][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.618501][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.634021][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.644322][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.656525][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.677760][T11608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.685303][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.881254][T11608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.890154][T11608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.898938][T11608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.907901][T11608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.106329][T11976] random: crng reseeded on system resumption [ 351.535771][T11979] syz_tun: entered allmulticast mode [ 351.542968][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 351.566989][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.602400][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.744857][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 351.759871][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.783991][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.834333][T11977] syz_tun: left allmulticast mode [ 351.847172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.121908][ T5862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 352.503658][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.661525][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 352.683224][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 352.727688][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.737393][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.808299][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.840108][ T5862] usb 5-1: Product: syz [ 352.844317][ T5862] usb 5-1: Manufacturer: syz [ 352.848917][ T5862] usb 5-1: SerialNumber: syz [ 353.314665][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.328416][ T5862] usb 5-1: config 0 descriptor?? [ 353.357480][ T5862] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 353.369068][ T5862] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 353.846648][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.148224][ T5862] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 354.174071][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.297231][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.401713][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.482202][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.671978][ T5862] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 354.722052][ T5862] em28xx 5-1:0.0: board has no eeprom [ 354.847507][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.881648][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.899333][T12024] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 354.911447][T12024] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 354.920134][T12024] CPU: 0 UID: 0 PID: 12024 Comm: syz.1.1798 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 354.932330][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.942423][T12024] RIP: 0010:ip6_create_rt_rcu+0x272/0x590 [ 354.948346][T12024] Code: c4 21 9f f7 45 0f b7 e4 e8 4b 27 50 01 49 8d 87 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d6 02 00 00 49 8b 87 08 01 00 00 44 89 e1 ba ff [ 354.967970][T12024] RSP: 0018:ffffc90004c8f580 EFLAGS: 00010206 [ 354.974047][T12024] RAX: dffffc0000000000 RBX: ffff888146bcdb2c RCX: ffffc90004dc2000 [ 354.982008][T12024] RDX: 0000000000000021 RSI: ffffffff8a1c0f3c RDI: 0000000000000001 [ 354.989964][T12024] RBP: ffffc90004c8f6e0 R08: 0000000000000001 R09: 0000000000000000 [ 354.997917][T12024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.005871][T12024] R13: 1ffff92000991eb2 R14: ffff888146bcdb00 R15: 0000000000000000 [ 355.013827][T12024] FS: 00007f0a0a2226c0(0000) GS:ffff8881249e4000(0000) knlGS:0000000000000000 [ 355.022741][T12024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.029308][T12024] CR2: 000000110c343bf4 CR3: 000000005c49f000 CR4: 00000000003526f0 [ 355.037266][T12024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.045224][T12024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.053182][T12024] Call Trace: [ 355.056447][T12024] [ 355.059363][T12024] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 355.064858][T12024] ip6_pol_route_lookup+0xbfb/0x1e10 [ 355.070159][T12024] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 355.075946][T12024] ? kasan_save_stack+0x42/0x60 [ 355.080788][T12024] ? kasan_save_stack+0x33/0x60 [ 355.085639][T12024] ? kasan_save_track+0x14/0x30 [ 355.090481][T12024] ? __kasan_kmalloc+0xaa/0xb0 [ 355.095237][T12024] ? __kmalloc_noprof+0x223/0x510 [ 355.100254][T12024] ? sock_kmalloc+0x111/0x170 [ 355.104920][T12024] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 355.110624][T12024] fib6_rule_lookup+0x5e8/0x720 [ 355.115463][T12024] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 355.120842][T12024] rt6_lookup+0x16b/0x220 [ 355.125177][T12024] ? __pfx_rt6_lookup+0x10/0x10 [ 355.130044][T12024] ipv6_sock_ac_join+0x643/0x800 [ 355.134981][T12024] ? __local_bh_enable_ip+0xa4/0x120 [ 355.140254][T12024] do_ipv6_setsockopt+0x3684/0x4420 [ 355.145437][T12024] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 355.150962][T12024] ? avc_has_perm_noaudit+0x117/0x3b0 [ 355.156325][T12024] ? avc_has_perm_noaudit+0x149/0x3b0 [ 355.161696][T12024] ? avc_has_perm+0x11a/0x1c0 [ 355.166363][T12024] ? __pfx_avc_has_perm+0x10/0x10 [ 355.171378][T12024] ? __pfx_futex_wake_mark+0x10/0x10 [ 355.176654][T12024] ? sock_has_perm+0x259/0x2f0 [ 355.181400][T12024] ? __pfx_sock_has_perm+0x10/0x10 [ 355.186494][T12024] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 355.192913][T12024] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 355.199668][T12024] ? futex_wait+0x120/0x380 [ 355.204163][T12024] ? ipv6_setsockopt+0xcb/0x170 [ 355.208996][T12024] ipv6_setsockopt+0xcb/0x170 [ 355.213653][T12024] tcp_setsockopt+0xa4/0x100 [ 355.218231][T12024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 355.224106][T12024] do_sock_setsockopt+0x221/0x470 [ 355.229115][T12024] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 355.234649][T12024] __sys_setsockopt+0x1a0/0x230 [ 355.239491][T12024] __x64_sys_setsockopt+0xbd/0x160 [ 355.244600][T12024] ? do_syscall_64+0x91/0x260 [ 355.249275][T12024] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.254458][T12024] do_syscall_64+0xcd/0x260 [ 355.258947][T12024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.264822][T12024] RIP: 0033:0x7f0a0938e969 [ 355.269217][T12024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.288813][T12024] RSP: 002b:00007f0a0a222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.297209][T12024] RAX: ffffffffffffffda RBX: 00007f0a095b5fa0 RCX: 00007f0a0938e969 [ 355.305162][T12024] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 355.313115][T12024] RBP: 00007f0a09410ab1 R08: 0000000000000014 R09: 0000000000000000 [ 355.321081][T12024] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 355.329054][T12024] R13: 0000000000000000 R14: 00007f0a095b5fa0 R15: 00007ffd77acd2b8 [ 355.337020][T12024] [ 355.340029][T12024] Modules linked in: [ 355.345108][T12024] ---[ end trace 0000000000000000 ]--- [ 355.369560][T12024] RIP: 0010:ip6_create_rt_rcu+0x272/0x590 [ 355.375399][T12024] Code: c4 21 9f f7 45 0f b7 e4 e8 4b 27 50 01 49 8d 87 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d6 02 00 00 49 8b 87 08 01 00 00 44 89 e1 ba ff [ 355.382180][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 355.382197][ T30] audit: type=1400 audit(1745979111.117:2301): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[3729]" dev="pipefs" ino=3729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 355.445814][T12024] RSP: 0018:ffffc90004c8f580 EFLAGS: 00010206 [ 355.455003][T12024] RAX: dffffc0000000000 RBX: ffff888146bcdb2c RCX: ffffc90004dc2000 [ 355.525303][T12024] RDX: 0000000000000021 RSI: ffffffff8a1c0f3c RDI: 0000000000000001 [ 355.557852][T12024] RBP: ffffc90004c8f6e0 R08: 0000000000000001 R09: 0000000000000000 [ 355.568555][T12024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.579270][T12024] R13: 1ffff92000991eb2 R14: ffff888146bcdb00 R15: 0000000000000000 [ 355.589484][ T5862] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 355.597318][ T5862] em28xx 5-1:0.0: dvb set to bulk mode. [ 355.604238][T12024] FS: 00007f0a0a2226c0(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 355.609468][ T972] em28xx 5-1:0.0: Binding DVB extension [ 355.613354][T12024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.619792][ T5862] usb 5-1: USB disconnect, device number 17 [ 355.626515][T12024] CR2: 000055eca2d38d40 CR3: 000000005c49f000 CR4: 00000000003526f0 [ 355.639130][T12024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.648041][ T5862] em28xx 5-1:0.0: Disconnecting em28xx [ 355.670269][T12024] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 355.678284][T12024] Kernel panic - not syncing: Fatal exception [ 355.684590][T12024] Kernel Offset: disabled [ 355.688899][T12024] Rebooting in 86400 seconds..