last executing test programs: 1m46.45701732s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m46.298244988s ago: executing program 0 (id=6): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m46.19905142s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000225000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x101, 0x100000002], 0x4, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.204892893s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m45.16744328s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='stacktrace\n', 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x400000b0}]}) 1m29.732145895s ago: executing program 32 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='stacktrace\n', 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x400000b0}]}) 42.773061216s ago: executing program 2 (id=695): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 42.759346926s ago: executing program 2 (id=696): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x49a002, 0x181) 41.021129389s ago: executing program 2 (id=709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x1, 0x101) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000580)=""/83) 40.064160738s ago: executing program 2 (id=713): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) 39.911055647s ago: executing program 2 (id=714): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 39.844139482s ago: executing program 2 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x1, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0xf, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x2000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.820174206s ago: executing program 33 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x1, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0xf, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x2000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.103985526s ago: executing program 5 (id=1266): syz_80211_join_ibss(&(0x7f00000023c0)='wlan0\x00', &(0x7f0000002400)=@random="e50ec515f7bd5f", 0x7, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x67f4}}, @nested_vmresume={0x130, 0x18, 0x1}], 0x38}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000200)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@broadcast, {0x3, 0x5}}, 0x47fd16938124e01d, 0x40, @default, @val={0x1, 0x1, [{0x75}]}, @void, [{0xdd, 0x6, "6b2910c5f7b2"}, {0xdd, 0x15, "a38ef56b335b4db127f1f683b22b957070ec82b13a"}]}, 0x40) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES16], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f00000001c0)="e9a4b920fa24", 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getrlimit(0x2, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) 2.649643793s ago: executing program 4 (id=1278): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 2.503457902s ago: executing program 4 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r4}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.5016078s ago: executing program 4 (id=1287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) 2.242054605s ago: executing program 1 (id=1283): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x80800) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff95}], 0x1}, 0x10010) 1.893736772s ago: executing program 3 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.594110181s ago: executing program 4 (id=1290): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x7f) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) r3 = socket(0x7, 0x3, 0x0) write(r3, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.592706498s ago: executing program 5 (id=1298): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x4005, 0x0, 0x7c) openat$dsp(0xffffffffffffff9c, 0x0, 0x181802, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @private=0xa010100}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x6c1, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6b3, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x6, "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"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.493291401s ago: executing program 4 (id=1291): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0x1e, 0x2, "9a70dd09a10c12c8a92f6bb5bb4a1317b0b5edf16479eb72b4a2"}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f00000001c0), 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000a, @loopback, 0xfffbf803}, 0x1c) 492.000916ms ago: executing program 5 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 491.759192ms ago: executing program 4 (id=1293): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 491.583672ms ago: executing program 1 (id=1294): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 491.380195ms ago: executing program 3 (id=1295): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 441.64274ms ago: executing program 1 (id=1296): socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x12, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 384.161448ms ago: executing program 1 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x300}, 0x8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 313.139606ms ago: executing program 1 (id=1299): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1c, {0x0, "0f01f9f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7c}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20005) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 303.929057ms ago: executing program 3 (id=1300): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 243.69529ms ago: executing program 1 (id=1301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000110)="00000001", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') (async) r3 = accept(r0, 0x0, 0x0) read(r3, &(0x7f0000000200), 0x100) read(r1, &(0x7f0000000208), 0x4) write(r3, &(0x7f0000000200)='\x00'/64, 0x40) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 243.189148ms ago: executing program 3 (id=1302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 235.560638ms ago: executing program 5 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r1) 177.075417ms ago: executing program 3 (id=1304): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 176.749527ms ago: executing program 5 (id=1305): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1) ptrace$pokeuser(0x6, r0, 0x388, 0x1) ptrace$cont(0x7, r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x2) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) tkill(r0, 0x13) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x0) 63.064356ms ago: executing program 5 (id=1306): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r5) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) kernel console output (not intermixed with test programs): ][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.164087][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.172861][ T5099] Bluetooth: hci4: command tx timeout [ 67.178589][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.186582][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.204645][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.208090][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.301071][ T1497] usb 6-1: Firmware "emi26/loader.fw" not valid IHEX records [ 67.305734][ T1497] usb 6-1: emi26_load_firmware - request_firmware() failed [ 67.308095][ T1497] usb 6-1: emi26_load_firmware - error loading firmware: error = -22 [ 67.310684][ T1497] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 67.324714][ T1497] usb 6-1: USB disconnect, device number 3 [ 67.664103][ T6470] evm: overlay not supported [ 67.765838][ T6472] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 67.771558][ T6472] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 67.777297][ T6472] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 67.781437][ T6472] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 67.785317][ T6472] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 67.789570][ T6472] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 67.793794][ T6472] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 67.797634][ T6472] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 67.801873][ T6472] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 67.806498][ T6472] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 68.231988][ T6505] orangefs_devreq_open: device cannot be opened in blocking mode [ 68.452212][ T6519] kvm: pic: level sensitive irq not supported [ 68.507023][ T6523] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 68.575142][ T6525] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.666328][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 69.201887][ T6561] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 69.227449][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 69.241410][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.242902][ T5099] Bluetooth: hci4: command tx timeout [ 69.258699][ T6567] macvlan2: entered promiscuous mode [ 69.260433][ T6567] macvlan2: entered allmulticast mode [ 69.263244][ T6567] bond1: (slave macvlan2): Opening slave failed [ 69.302862][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.452848][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 69.455715][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.459048][ T60] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 69.464841][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.472948][ T60] usb 9-1: config 0 descriptor?? [ 69.481755][ T60] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 69.560850][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.564084][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.601566][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.607272][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.682842][ T5817] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.686500][ T5817] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.690267][ T5817] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.693519][ T5817] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.102270][ T6611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.222'. [ 70.112437][ T6611] syzkaller1: entered promiscuous mode [ 70.114953][ T6611] syzkaller1: entered allmulticast mode [ 70.578454][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.637347][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.693802][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.166499][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.169230][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.252237][ T6631] syzkaller0: entered promiscuous mode [ 71.254571][ T6631] syzkaller0: entered allmulticast mode [ 71.322845][ T5099] Bluetooth: hci4: command tx timeout [ 71.862793][ T5844] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.043105][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 72.046504][ T5844] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 72.049266][ T5844] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.052401][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.055594][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.058745][ T5844] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.062822][ T5844] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.065640][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.097671][ T5818] usb 9-1: USB disconnect, device number 2 [ 72.478741][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 72.478757][ T42] audit: type=1400 audit(1785449358.241:417): avc: denied { write } for pid=6642 comm="syz.1.235" name="usbtmc0" dev="devtmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.549126][ T42] audit: type=1400 audit(1785449358.311:418): avc: denied { shutdown } for pid=6666 comm="syz.4.243" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.586382][ T6669] usb3503 pcspkr: unknown mode is requested [ 72.588427][ T6669] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 72.859350][ T42] audit: type=1400 audit(1785449358.621:419): avc: denied { append } for pid=6675 comm="syz.4.246" name="uprobe_events" dev="tracefs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 73.137674][ T6690] ªªªªªª: renamed from vlan0 (while UP) [ 73.185364][ T6693] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 73.403016][ T5099] Bluetooth: hci4: command tx timeout [ 73.412848][ T10] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 73.565508][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.569742][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.573424][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 73.577862][ T10] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 73.581055][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.586049][ T6692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 73.590143][ T10] hub 9-1:1.0: bad descriptor, ignoring hub [ 73.592140][ T10] hub 9-1:1.0: probe with driver hub failed with error -5 [ 73.594813][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 73.596479][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 73.600167][ T10] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 73.604728][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 73.754716][ T42] audit: type=1400 audit(1785449359.521:420): avc: denied { map } for pid=6698 comm="syz.3.255" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.903866][ T5818] usb 9-1: USB disconnect, device number 3 [ 73.993356][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.256'. [ 73.999065][ T6705] netlink: 76 bytes leftover after parsing attributes in process `syz.2.256'. [ 74.002940][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.256'. [ 74.262802][ T5818] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 74.362320][ T42] audit: type=1400 audit(1785449360.121:421): avc: denied { read write } for pid=6710 comm="syz.3.258" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.370349][ T42] audit: type=1400 audit(1785449360.121:422): avc: denied { open } for pid=6710 comm="syz.3.258" path="/66/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.434551][ T5818] usb 9-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 74.438858][ T5818] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.442540][ T5818] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.447861][ T5818] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 74.451425][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.458924][ T6692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.463304][ T5818] hub 9-1:1.0: bad descriptor, ignoring hub [ 74.466403][ T5818] hub 9-1:1.0: probe with driver hub failed with error -5 [ 74.469662][ T5818] cdc_wdm 9-1:1.0: skipping garbage [ 74.471764][ T5818] cdc_wdm 9-1:1.0: skipping garbage [ 74.473894][ T5818] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 74.616249][ T5818] usb 6-1: USB disconnect, device number 4 [ 74.704758][ T42] audit: type=1326 audit(1785449360.471:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.260" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63bfd9e019 code=0x0 [ 74.773015][ T41] usb 9-1: USB disconnect, device number 4 [ 74.911517][ T42] audit: type=1400 audit(1785449360.671:424): avc: denied { write } for pid=6721 comm="syz.1.261" name="functions" dev="configfs" ino=15568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.912027][ T6722] file system registered [ 74.927921][ T42] audit: type=1400 audit(1785449360.691:425): avc: denied { mount } for pid=6721 comm="syz.1.261" name="/" dev="functionfs" ino=14220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 74.945090][ T42] audit: type=1400 audit(1785449360.711:426): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 74.945613][ T5738] ffs_data_put(): freeing [ 75.003953][ T6726] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 75.006749][ T6726] bond2: entered allmulticast mode [ 75.020230][ T6726] ip6erspan0: entered promiscuous mode [ 75.026535][ T6726] ip6erspan0: entered allmulticast mode [ 75.028570][ T6726] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 75.247188][ T6732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.268019][ T6737] syzkaller0: entered promiscuous mode [ 75.269884][ T6737] syzkaller0: entered allmulticast mode [ 75.411365][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 75.425037][ T6750] binder_alloc: 6749: binder_alloc_buf size -16 failed, no address space [ 75.430296][ T6750] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 75.490948][ T6747] netlink: 1 bytes leftover after parsing attributes in process `syz.3.271'. [ 75.523798][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.526301][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.568841][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.574007][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.653450][ T5817] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.657922][ T5817] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.661851][ T5817] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.666179][ T5817] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.899350][ T41] libceph: connect (1)[c::]:6789 error -101 [ 75.902528][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 75.906186][ T6781] ceph: No mds server is up or the cluster is laggy [ 76.069958][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:2245934231/2245934232 [ 76.073302][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:2245934231/2245934232 [ 76.442599][ T6815] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 76.470591][ T6815] bond1 (unregistering): Released all slaves [ 76.541225][ T6770] Set syz0 is full, maxelem 65536 reached [ 76.568651][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 76.578901][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 76.580391][ T6821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.628049][ T6821] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 76.643025][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.645621][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.648345][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.651692][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.687444][ T6829] batman_adv: batadv0: Adding interface: dummy0 [ 76.689765][ T6829] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.698026][ T6829] batman_adv: batadv0: Interface activated: dummy0 [ 76.707779][ T6829] batadv0: mtu less than device minimum [ 76.710868][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.714992][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.718600][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.722249][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.725928][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.729643][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.733312][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.736847][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.892863][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 76.895976][ T6840] netlink: 144 bytes leftover after parsing attributes in process `syz.2.308'. [ 76.899221][ T6840] netlink: 144 bytes leftover after parsing attributes in process `syz.2.308'. [ 77.253448][ T6853] syzkaller0: entered promiscuous mode [ 77.255828][ T6853] syzkaller0: entered allmulticast mode [ 77.415018][ T5818] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.566697][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 77.573333][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 77.586059][ T5818] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 77.588876][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.591289][ T5818] usb 7-1: Product: syz [ 77.592574][ T5818] usb 7-1: Manufacturer: syz [ 77.594215][ T5818] usb 7-1: SerialNumber: syz [ 77.602440][ T6851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.605154][ T6851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.612647][ T5818] kl5kusb105 7-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 77.617212][ T5818] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 77.991337][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 77.991351][ T42] audit: type=1400 audit(1785449363.751:448): avc: denied { create } for pid=6881 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.331616][ T42] audit: type=1400 audit(1785449364.091:449): avc: denied { write } for pid=6883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.375122][ T42] audit: type=1400 audit(1785449364.141:450): avc: denied { write } for pid=6889 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.392328][ T6891] Bluetooth: hci0: Frame reassembly failed (-90) [ 78.401830][ T5989] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.427768][ T42] audit: type=1400 audit(1785449364.191:451): avc: denied { write } for pid=6895 comm="syz.4.321" path="socket:[16382]" dev="sockfs" ino=16382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.478869][ T42] audit: type=1326 audit(1785449364.241:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.322" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef899e019 code=0x0 [ 78.825071][ T6346] usb 7-1: USB disconnect, device number 5 [ 78.831810][ T6346] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 78.835589][ T6346] kl5kusb105 7-1:1.0: device disconnected [ 78.846765][ T42] audit: type=1400 audit(1785449364.611:453): avc: denied { write } for pid=6901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.890319][ T42] audit: type=1400 audit(1785449364.651:454): avc: denied { write } for pid=6904 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.218593][ T42] audit: type=1400 audit(1785449364.981:455): avc: denied { write } for pid=6907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.257464][ T42] audit: type=1400 audit(1785449365.021:456): avc: denied { write } for pid=6913 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.264367][ T6909] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.343846][ T42] audit: type=1400 audit(1785449365.111:457): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.731351][ T6941] netlink: 'syz.4.334': attribute type 13 has an invalid length. [ 79.783933][ T6943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.933706][ T6954] e1000e 0000:00:02.0 eth1: removed PHC [ 80.133996][ T5818] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.292802][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 80.296087][ T5818] usb 7-1: unable to get BOS descriptor or descriptor too short [ 80.299328][ T5818] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 80.302059][ T5818] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 80.304941][ T5818] usb 7-1: config 14 has no interface number 0 [ 80.306913][ T5818] usb 7-1: config 14 has no interface number 1 [ 80.308954][ T5818] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 80.312284][ T5818] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 80.316117][ T5818] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 80.319723][ T5818] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 80.323507][ T5818] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 80.327072][ T5818] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.331139][ T5818] usb 7-1: config 14 interface 57 has no altsetting 0 [ 80.333448][ T5818] usb 7-1: config 14 interface 228 has no altsetting 0 [ 80.337181][ T5818] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 80.340170][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.342766][ T5818] usb 7-1: Product: syz [ 80.344101][ T5818] usb 7-1: Manufacturer: syz [ 80.345586][ T5818] usb 7-1: SerialNumber: syz [ 80.453670][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 80.454652][ T5099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.761650][ T5818] legousbtower 7-1:14.57: interrupt endpoints not found [ 81.167340][ T5818] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 81.171767][ T5818] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 81.407089][ T846] cfg80211: failed to load regulatory.db [ 82.010327][ T6346] usb 7-1: USB disconnect, device number 6 [ 82.021312][ T6346] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 82.548501][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 82.551402][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 82.847489][ T6954] e1000e 0000:00:02.0 eth1: Hardware Error [ 83.668551][ T7009] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.352'. [ 83.671646][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 84.561862][ T7013] kvm: pic: non byte read [ 84.564713][ T7013] kvm: pic: non byte read [ 84.567143][ T7013] kvm: pic: non byte read [ 84.569523][ T7013] kvm: pic: non byte read [ 84.571941][ T7013] kvm: pic: non byte read [ 84.574742][ T7013] kvm: pic: non byte read [ 84.577216][ T7013] kvm: pic: non byte read [ 84.579576][ T7013] kvm: pic: non byte read [ 84.581974][ T7013] kvm: pic: non byte read [ 84.584885][ T7013] kvm: pic: non byte read [ 85.848663][ T6954] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 85.926031][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 85.926049][ T42] audit: type=1400 audit(1785449371.691:472): avc: denied { write } for pid=7023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.970943][ T42] audit: type=1400 audit(1785449371.731:473): avc: denied { write } for pid=7026 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.022573][ T42] audit: type=1400 audit(1785449371.781:474): avc: denied { write } for pid=7031 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.040117][ T42] audit: type=1400 audit(1785449371.781:475): avc: denied { nlmsg_write } for pid=7031 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.051279][ T42] audit: type=1400 audit(1785449371.801:476): avc: denied { read } for pid=7033 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.059082][ T42] audit: type=1400 audit(1785449371.821:477): avc: denied { write } for pid=7030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.089521][ T42] audit: type=1400 audit(1785449371.851:478): avc: denied { write } for pid=7033 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.112133][ T42] audit: type=1400 audit(1785449371.871:479): avc: denied { write } for pid=7037 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.129922][ T42] audit: type=1400 audit(1785449371.891:480): avc: denied { mount } for pid=7041 comm="syz.1.360" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.161994][ T7047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.206791][ T42] audit: type=1400 audit(1785449371.971:481): avc: denied { write } for pid=7050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.250741][ T7057] lo: Caught tx_queue_len zero misconfig [ 87.213408][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.387'. [ 87.322883][ T1497] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.474490][ T1497] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.481499][ T1497] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 87.486056][ T1497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.489655][ T1497] usb 6-1: Product: syz [ 87.491566][ T1497] usb 6-1: Manufacturer: syz [ 87.494075][ T1497] usb 6-1: SerialNumber: syz [ 87.504996][ T1497] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 87.508391][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 87.511603][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 87.516590][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 87.528014][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 87.530557][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 87.533794][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 87.536321][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 87.538734][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 87.542143][ T1497] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 87.545927][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 87.548385][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 87.550796][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 87.553273][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 87.558888][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 87.561517][ T1497] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 87.565104][ T1497] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 87.719768][ T7157] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 87.752905][ T7157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.756864][ T7157] bond1: (slave bond2): making interface the new active one [ 87.759728][ T7157] bond1: (slave bond2): Enslaving as an active interface with an up link [ 87.838823][ T5818] usb 6-1: USB disconnect, device number 5 [ 87.845605][ T5818] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 87.850242][ T5818] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 87.853655][ T5818] keyspan 6-1:1.0: device disconnected [ 87.975212][ T7172] netlink: 'syz.4.404': attribute type 5 has an invalid length. [ 88.128390][ T7179] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 88.134606][ T7179] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 88.143097][ T7179] pci 0000:00:1d.0: Adding to iommu group 7 [ 88.149275][ T7179] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 88.155419][ T7179] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 88.163947][ T7179] pci 0000:00:1d.7: Adding to iommu group 7 [ 88.169776][ T7179] pci 0000:00:1d.7: BAR 0 [mem 0x80000000-0x80000fff]: assigned [ 88.174504][ T7179] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 88.219698][ T7179] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 40995 usecs [ 88.252488][ T7179] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 88.262785][ T7179] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 88.265932][ T7179] uhci_hcd 0000:00:1d.0: detected 2 ports [ 88.272010][ T7179] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 88.278355][ T7179] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 88.281534][ T7179] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 88.284274][ T7179] usb usb1: Product: UHCI Host Controller [ 88.286072][ T7179] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 88.288176][ T7179] usb usb1: SerialNumber: 0000:00:1d.0 [ 88.303873][ T7179] hub 1-0:1.0: USB hub found [ 88.308814][ T7179] hub 1-0:1.0: 2 ports detected [ 88.387777][ T7179] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 47410 usecs [ 88.572823][ T5845] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 88.742825][ T5845] usb 1-1: not running at top speed; connect to a high speed hub [ 88.779799][ T5845] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 88.783398][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 88.786519][ T5845] usb 1-1: Product: QEMU USB Tablet [ 88.788318][ T5845] usb 1-1: Manufacturer: QEMU [ 88.790127][ T5845] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 88.821145][ T5845] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input7 [ 88.911089][ T5845] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 88.945916][ T5969] usb 1-1: USB disconnect, device number 2 [ 89.004694][ T7213] fido_id[7213]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 89.101062][ T5969] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 89.123453][ T5969] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 89.136821][ T5969] ehci-pci 0000:00:1d.7: irq 19, io mem 0x80000000 [ 89.153068][ T5969] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 89.160621][ T7219] tipc: Started in network mode [ 89.163574][ T7219] tipc: Node identity e2c03e69d4c, cluster identity 4711 [ 89.166722][ T5969] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 89.170225][ T7219] tipc: Enabled bearer , priority 0 [ 89.171979][ T5969] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 89.177727][ T5969] usb usb2: Product: EHCI Host Controller [ 89.179745][ T5969] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 89.182092][ T5969] usb usb2: SerialNumber: 0000:00:1d.7 [ 89.205095][ T5969] hub 2-0:1.0: USB hub found [ 89.210076][ T5969] hub 2-0:1.0: 6 ports detected [ 89.226414][ T7219] syzkaller0: entered promiscuous mode [ 89.228255][ T7219] syzkaller0: entered allmulticast mode [ 89.255814][ T7218] tipc: Resetting bearer [ 89.270215][ T5969] hub 3-0:1.0: USB hub found [ 89.275231][ T5969] hub 3-0:1.0: 2 ports detected [ 89.330954][ T5969] hub 4-0:1.0: USB hub found [ 89.344484][ T5969] hub 4-0:1.0: 2 ports detected [ 89.427717][ T5969] hub 1-0:1.0: USB hub found [ 89.429903][ T5969] hub 1-0:1.0: 2 ports detected [ 89.512828][ T5816] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 89.710401][ T5816] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 89.714760][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 89.718505][ T5816] usb 2-1: Product: QEMU USB Tablet [ 89.720334][ T5816] usb 2-1: Manufacturer: QEMU [ 89.722093][ T5816] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 89.790546][ T5816] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input8 [ 89.884568][ T5816] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 89.939281][ T7230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 90.715475][ T7218] tipc: Disabling bearer [ 90.729575][ T7226] bridge0: port 3(syz_tun) entered blocking state [ 90.734592][ T7226] bridge0: port 3(syz_tun) entered disabled state [ 90.736927][ T7226] syz_tun: entered allmulticast mode [ 90.739657][ T7226] syz_tun: entered promiscuous mode [ 90.741760][ T7226] bridge0: port 3(syz_tun) entered blocking state [ 90.744498][ T7226] bridge0: port 3(syz_tun) entered forwarding state [ 90.749766][ T7227] bridge0: port 3(syz_tun) entered disabled state [ 90.753125][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.756033][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.767964][ T6346] tipc: Node number set to 905985641 [ 90.823810][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.830077][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.964689][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 90.964702][ T42] audit: type=1400 audit(1785449376.731:503): avc: denied { setopt } for pid=7276 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.051744][ T7281] kvm: emulating exchange as write [ 91.174177][ T42] audit: type=1400 audit(1785449376.941:504): avc: denied { associate } for pid=7287 comm="syz.2.444" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.186318][ T7290] bridge0: port 3(syz_tun) entered blocking state [ 91.188488][ T7290] bridge0: port 3(syz_tun) entered listening state [ 91.190615][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.193571][ T7290] bridge0: port 2(bridge_slave_1) entered listening state [ 91.195767][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.198025][ T7290] bridge0: port 1(bridge_slave_0) entered listening state [ 91.232847][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.247250][ T42] audit: type=1400 audit(1785449377.011:505): avc: denied { write } for pid=7293 comm="syz.4.447" name="extensions" dev="configfs" ino=16638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.382784][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 91.385882][ T10] usb 8-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 91.389154][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.391973][ T10] usb 8-1: config 1 has no interface number 0 [ 91.394081][ T10] usb 8-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 91.397811][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 91.401233][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 91.407098][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 91.411826][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.414723][ T10] usb 8-1: Product: syz [ 91.416149][ T10] usb 8-1: Manufacturer: syz [ 91.417858][ T10] usb 8-1: SerialNumber: syz [ 91.424653][ T7299] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 91.438225][ T7299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.463259][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.477595][ T7299] bond1: (slave geneve2): making interface the new active one [ 91.481205][ T7299] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 91.530952][ T42] audit: type=1400 audit(1785449377.291:506): avc: denied { mounton } for pid=7303 comm="syz.4.451" path="/65/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.537990][ T42] audit: type=1400 audit(1785449377.291:507): avc: denied { read } for pid=7303 comm="syz.4.451" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.544660][ T42] audit: type=1400 audit(1785449377.291:508): avc: denied { read } for pid=7303 comm="syz.4.451" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.551269][ T42] audit: type=1400 audit(1785449377.291:509): avc: denied { open } for pid=7303 comm="syz.4.451" path="/65/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.559083][ T42] audit: type=1400 audit(1785449377.291:510): avc: denied { read } for pid=7303 comm="syz.4.451" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.566824][ T42] audit: type=1400 audit(1785449377.291:511): avc: denied { read } for pid=7303 comm="syz.4.451" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.573489][ T42] audit: type=1400 audit(1785449377.291:512): avc: denied { read } for pid=7303 comm="syz.4.451" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.613995][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.617481][ T60] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 91.621884][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.624774][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.627228][ T60] usb 7-1: Product: syz [ 91.628449][ T60] usb 7-1: Manufacturer: syz [ 91.629900][ T60] usb 7-1: SerialNumber: syz [ 91.641382][ T60] cdc_mbim 7-1:1.0: skipping garbage [ 91.845070][ T7292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.866217][ T7319] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 92.020737][ T7324] kvm: user requested TSC rate below hardware speed [ 92.023998][ T7324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3538623789 (113235961248 ns) > initial count (200000 ns). Using initial count to start timer. [ 92.039944][ T10] usb 8-1: USB disconnect, device number 5 [ 92.180172][ T7326] capability: warning: `syz.1.459' uses 32-bit capabilities (legacy support in use) [ 92.219340][ T7329] team0 (unregistering): Port device team_slave_0 removed [ 92.225693][ T7329] team0 (unregistering): Port device team_slave_1 removed [ 92.229077][ T7329] team0 (unregistering): Port device vlan2 removed [ 92.452627][ T7292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.455268][ T60] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 92.459145][ T60] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 92.468814][ T60] wwan wwan0: port wwan0mbim0 attached [ 92.481243][ T60] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 62:ce:2b:21:04:72 [ 92.638608][ T5450] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 92.660217][ C0] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 92.662490][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 92.664927][ C0] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 92.667030][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 92.669102][ C0] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 92.671200][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 92.673874][ C0] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 92.675911][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 92.677909][ C0] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 92.679983][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 92.681949][ C0] cdc_mbim 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 92.688168][ T5818] usb 7-1: USB disconnect, device number 7 [ 92.695420][ T5818] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 92.840533][ T5818] wwan wwan0: port wwan0mbim0 disconnected [ 93.716554][ T7389] binder_alloc: 7388: binder_alloc_buf, no vma [ 93.830240][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 94.185999][ T7373] net_ratelimit: 11 callbacks suppressed [ 94.186016][ T7373] Set syz1 is full, maxelem 65536 reached [ 94.366288][ T7407] read descriptors [ 94.370035][ T7407] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 94.389657][ T5737] ffs_data_put(): freeing [ 95.027086][ T7430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.030432][ T7430] block device autoloading is deprecated and will be removed. [ 95.111463][ T7429] block device autoloading is deprecated and will be removed. [ 95.114448][ T7429] md: invalid raid superblock magic on ram32 [ 95.116389][ T7429] md: ram32 does not have a valid v0.0 superblock, not importing! [ 95.118898][ T7429] md: md_import_device returned -22 [ 95.219895][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 95.246812][ T7440] read descriptors [ 95.247984][ T7440] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 95.261975][ T5739] ffs_data_put(): freeing [ 95.577329][ T7464] read descriptors [ 95.579614][ T7464] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 95.607675][ T6313] ffs_data_put(): freeing [ 95.762362][ T7473] syzkaller1: entered promiscuous mode [ 95.765395][ T7473] syzkaller1: entered allmulticast mode [ 96.632790][ T5818] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.784497][ T5818] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 96.788393][ T5818] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.794116][ T5818] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 96.797611][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.800606][ T5818] usb 6-1: Product: syz [ 96.801896][ T5818] usb 6-1: Manufacturer: syz [ 96.803453][ T5818] usb 6-1: SerialNumber: syz [ 96.807797][ T7484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.810681][ T7484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.815070][ T5818] kl5kusb105 6-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 96.821471][ T5818] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 98.027811][ T2329] usb 6-1: USB disconnect, device number 6 [ 98.035718][ T2329] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 98.039478][ T2329] kl5kusb105 6-1:1.0: device disconnected [ 98.562014][ T7495] read descriptors [ 98.563364][ T7495] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 98.578582][ T5738] ffs_data_put(): freeing [ 98.597566][ T5816] IPVS: starting estimator thread 0... [ 98.615066][ T7499] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.703177][ T7500] IPVS: using max 44 ests per chain, 105600 per kthread [ 98.931672][ T7514] netlink: 68 bytes leftover after parsing attributes in process `syz.4.520'. [ 98.957546][ C3] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 99.812743][ T7521] team_slave_1: Caught tx_queue_len zero misconfig [ 100.066110][ T2329] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 100.242913][ T2329] usb 9-1: Using ep0 maxpacket: 32 [ 100.246081][ T2329] usb 9-1: config 2 has an invalid interface number: 194 but max is 0 [ 100.251188][ T2329] usb 9-1: config 2 has no interface number 0 [ 100.253121][ T2329] usb 9-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 100.256306][ T2329] usb 9-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 100.259592][ T2329] usb 9-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 100.262866][ T2329] usb 9-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 100.265631][ T2329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.270675][ T7521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.273096][ T7521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.484794][ T2329] usb 9-1: string descriptor 0 read error: -71 [ 100.491864][ T2329] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.530878][ T2329] usb 9-1: USB disconnect, device number 5 [ 100.722836][ T5817] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.725609][ T5817] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.728396][ T5817] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.731107][ T5817] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.987867][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 101.000407][ T7562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.022071][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 101.022084][ T42] audit: type=1400 audit(1785449386.781:538): avc: denied { search } for pid=7564 comm="syz.4.542" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.040775][ T42] audit: type=1400 audit(1785449386.781:539): avc: denied { search } for pid=7564 comm="syz.4.542" name="events" dev="tracefs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.045358][ T7562] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 101.052774][ T42] audit: type=1400 audit(1785449386.781:540): avc: denied { search } for pid=7564 comm="syz.4.542" name="kvm" dev="tracefs" ino=16838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.058954][ T42] audit: type=1400 audit(1785449386.781:541): avc: denied { search } for pid=7564 comm="syz.4.542" name="kvm_hv_stimer_set_config" dev="tracefs" ino=16840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.299061][ T7571] serio: Serial port ptm0 [ 101.342844][ T6346] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 101.492809][ T6346] usb 8-1: Using ep0 maxpacket: 32 [ 101.495850][ T6346] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 101.503075][ T6346] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 101.506719][ T6346] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.510079][ T6346] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 101.516103][ T6346] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.519444][ T6346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.521997][ T6346] usb 8-1: Product: syz [ 101.523648][ T6346] usb 8-1: Manufacturer: syz [ 101.525107][ T6346] usb 8-1: SerialNumber: syz [ 101.531332][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 101.539947][ T6346] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input9 [ 101.754263][ T6346] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 101.758103][ T6346] (id 0x00) [ 101.812918][ T6346] rc_core: IR keymap rc-imon-pad not found [ 101.815294][ T6346] Registered IR keymap rc-empty [ 101.816965][ T6346] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 101.820678][ T6346] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.955104][ T6346] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 101.959611][ T6346] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input10 [ 101.967311][ T6346] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:6> initialized [ 102.874414][ T42] audit: type=1400 audit(1785449388.641:542): avc: denied { create } for pid=7598 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.895460][ T42] audit: type=1400 audit(1785449388.641:543): avc: denied { setopt } for pid=7598 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.917549][ T10] usb 8-1: USB disconnect, device number 6 [ 102.919486][ T7591] imon:send_packet: packet tx failed (-71) [ 102.943673][ T7591] imon:vfd_write: send packet #2 failed [ 102.954553][ T42] audit: type=1400 audit(1785449388.721:544): avc: denied { bind } for pid=7598 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.011846][ T7626] CIFS: Attempting to mount //127.0.0.1/share [ 103.015743][ T7626] CIFS: VFS: Error connecting to socket. Aborting operation. [ 103.019540][ T7626] CIFS: VFS: cifs_mount failed w/return code = -101 [ 103.069506][ T7624] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 103.463789][ T42] audit: type=1400 audit(1785449389.221:545): avc: denied { bind } for pid=7638 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.470750][ T42] audit: type=1400 audit(1785449389.231:546): avc: denied { listen } for pid=7638 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.483357][ T42] audit: type=1400 audit(1785449389.241:547): avc: denied { write } for pid=7640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.810940][ T7662] orangefs_devreq_write_iter: failed to copy head. [ 103.918456][ T7671] binder: 7670:7671 ioctl c0306201 200000000680 returned -14 [ 103.979559][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 104.265911][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 104.292824][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 104.346099][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 104.408594][ T7709] create_pit_timer: 11 callbacks suppressed [ 104.408606][ T7709] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.415080][ T7715] binder: 7714:7715 ioctl c0306201 200000000080 returned -14 [ 104.419412][ T7715] binder: 7714:7715 ioctl c0306201 2000000003c0 returned -14 [ 104.476945][ T10] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 104.479764][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.482175][ T10] usb 9-1: Product: syz [ 104.485285][ T10] usb 9-1: Manufacturer: syz [ 104.486758][ T10] usb 9-1: SerialNumber: syz [ 104.496004][ T10] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 104.502319][ T10] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 104.507459][ T10] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 104.658411][ T7735] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.595'. [ 104.753700][ T5818] playstation 0003:054C:05C4.0005: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 104.759706][ T5818] playstation 0003:054C:05C4.0005: Invalid byte count transferred, expected 16 got 0 [ 104.762619][ T5818] playstation 0003:054C:05C4.0005: Failed to retrieve DualShock4 pairing info: -22 [ 104.766197][ T5818] playstation 0003:054C:05C4.0005: Failed to get MAC address from DualShock4 [ 104.768979][ T5818] playstation 0003:054C:05C4.0005: Failed to create dualshock4. [ 104.775335][ T5818] playstation 0003:054C:05C4.0005: probe with driver playstation failed with error -22 [ 104.783167][ T7746] fido_id[7746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.020877][ T7762] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5429, magic 54 != 6b] [ 105.813169][ T7749] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 105.821241][ T2329] usb 9-1: USB disconnect, device number 6 [ 105.829995][ T2329] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 105.840334][ T2329] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 105.845300][ T2329] ti_usb_3410_5052 9-1:2.0: device disconnected [ 105.976009][ T7790] tipc: Started in network mode [ 105.978016][ T7786] orangefs_devreq_write_iter: failed to copy head. [ 105.980522][ T7790] tipc: Node identity 1000001, cluster identity 4369 [ 105.983108][ T7790] tipc: Node number set to 16777217 [ 105.985127][ T7790] tipc: Cannot configure node identity twice [ 105.993667][ T7790] tipc: Enabling of bearer rejected, failed to enable media [ 106.018359][ T7793] CIFS: Attempting to mount //127.0.0.1/share [ 106.020739][ T7793] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.025010][ T7793] CIFS: VFS: cifs_mount failed w/return code = -101 [ 106.141513][ T7799] binder: 7798:7799 ioctl c0306201 200000000080 returned -14 [ 106.147965][ T7799] binder: 7798:7799 ioctl c0306201 2000000003c0 returned -14 [ 106.401796][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 106.401808][ T42] audit: type=1400 audit(1785449392.161:560): avc: denied { mmap_zero } for pid=7812 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 106.667468][ T7819] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.034330][ T7837] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.627'. [ 107.076400][ T42] audit: type=1400 audit(1785449392.841:561): avc: denied { connect } for pid=7843 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.122017][ T5816] playstation 0003:054C:05C4.0006: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 107.124602][ T42] audit: type=1400 audit(1785449392.891:562): avc: denied { shutdown } for pid=7843 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.137188][ T5816] playstation 0003:054C:05C4.0006: Invalid byte count transferred, expected 16 got 0 [ 107.141215][ T5816] playstation 0003:054C:05C4.0006: Failed to retrieve DualShock4 pairing info: -22 [ 107.146090][ T5816] playstation 0003:054C:05C4.0006: Failed to get MAC address from DualShock4 [ 107.149561][ T5816] playstation 0003:054C:05C4.0006: Failed to create dualshock4. [ 107.158113][ T5816] playstation 0003:054C:05C4.0006: probe with driver playstation failed with error -22 [ 107.181261][ T7850] fido_id[7850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.252091][ T42] audit: type=1400 audit(1785449393.011:563): avc: denied { write } for pid=7854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.298202][ T42] audit: type=1400 audit(1785449393.061:564): avc: denied { write } for pid=7863 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.398433][ T42] audit: type=1400 audit(1785449393.161:565): avc: denied { write } for pid=7870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.417947][ T42] audit: type=1400 audit(1785449393.181:566): avc: denied { write } for pid=7876 comm="syz.4.637" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.453733][ T42] audit: type=1400 audit(1785449393.211:567): avc: denied { write } for pid=7878 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.682899][ T7893] tipc: Started in network mode [ 107.684665][ T7893] tipc: Node identity 1000001, cluster identity 4369 [ 107.688687][ T7893] tipc: Node number set to 16777217 [ 107.690776][ T7893] tipc: Cannot configure node identity twice [ 107.696568][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 108.299564][ T42] audit: type=1400 audit(1785449394.061:568): avc: denied { write } for pid=7922 comm="syz.2.659" name="functions" dev="configfs" ino=15568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.307170][ T42] audit: type=1400 audit(1785449394.061:569): avc: denied { write } for pid=7922 comm="syz.2.659" name="configs" dev="configfs" ino=15569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.326633][ T7935] tipc: Enabling of bearer rejected, failed to enable media [ 109.424203][ T7937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 109.680696][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.741011][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.745033][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.749153][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.132853][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.286091][ T29] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 110.289113][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.291696][ T29] usb 8-1: Product: syz [ 110.297498][ T29] usb 8-1: Manufacturer: syz [ 110.318737][ T29] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 110.330477][ T29] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 110.332432][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 110.347852][ T7981] bridge0: port 3(syz_tun) entered disabled state [ 110.370014][ T7981] syz_tun (unregistering): left allmulticast mode [ 110.372166][ T7981] syz_tun (unregistering): left promiscuous mode [ 110.375875][ T7981] bridge0: port 3(syz_tun) entered disabled state [ 111.244658][ T8015] Line length is too long: Should be less than 4094 [ 111.486066][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 111.657220][ T29] usb 8-1: USB disconnect, device number 7 [ 111.685206][ T29] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 111.693842][ T29] iuu_phoenix 8-1:1.0: device disconnected [ 111.919752][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 111.919764][ T42] audit: type=1400 audit(1785449397.681:584): avc: denied { create } for pid=8032 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.975458][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.032979][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.354542][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 112.419802][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 112.685216][ T42] audit: type=1400 audit(1785449398.451:585): avc: denied { write } for pid=8054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.739320][ T42] audit: type=1400 audit(1785449398.501:586): avc: denied { write } for pid=8059 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.796721][ T8064] Line length is too long: Should be less than 4094 [ 112.829119][ T42] audit: type=1400 audit(1785449398.591:587): avc: denied { write } for pid=8062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.914594][ T42] audit: type=1400 audit(1785449398.681:588): avc: denied { write } for pid=8069 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.021542][ T8077] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.202803][ T6346] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 113.357046][ T6346] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 113.360030][ T6346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 113.363917][ T6346] usb 6-1: Product: syz [ 113.365483][ T6346] usb 6-1: Manufacturer: syz [ 113.373524][ T6346] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 113.383153][ T6346] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 113.836703][ T8090] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.836703][ T8090] The task syz.2.709 (8090) triggered the difference, watch for misbehavior. [ 114.232866][ T42] audit: type=1400 audit(1785449399.991:589): avc: denied { write } for pid=8094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.272048][ T42] audit: type=1400 audit(1785449400.031:590): avc: denied { write } for pid=8097 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.278998][ T42] audit: type=1400 audit(1785449400.031:591): avc: denied { mounton } for pid=8098 comm="syz.4.711" path="/proc/350/cgroup" dev="proc" ino=28846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.288170][ T42] audit: type=1400 audit(1785449400.051:592): avc: denied { remount } for pid=8098 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 114.562835][ T5818] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 114.714108][ T5818] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 114.717054][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.721500][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.725499][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.730720][ T5818] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.734699][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.749789][ T5818] usb 9-1: config 0 descriptor?? [ 114.768519][ T6346] usb 6-1: USB disconnect, device number 7 [ 114.780909][ T6346] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 114.786303][ T6346] iuu_phoenix 6-1:1.0: device disconnected [ 114.977288][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.982366][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.985645][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.988571][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.991280][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.171689][ T5818] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 115.206430][ T5818] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 115.279762][ T5817] bridge_slave_1: left allmulticast mode [ 115.281651][ T5817] bridge_slave_1: left promiscuous mode [ 115.286981][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.296586][ T5817] bridge_slave_0: left allmulticast mode [ 115.298424][ T5817] bridge_slave_0: left promiscuous mode [ 115.300379][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.378775][ T5817] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 115.397021][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.400973][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.404986][ T5817] bond0 (unregistering): Released all slaves [ 115.410133][ T5817] bond1 (unregistering): Released all slaves [ 115.420612][ T5817] bond2 (unregistering): Released all slaves [ 115.432267][ T41] usb 9-1: USB disconnect, device number 7 [ 115.492839][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.495865][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.498754][ T8110] bridge_slave_0: entered allmulticast mode [ 115.502582][ T8110] bridge_slave_0: entered promiscuous mode [ 115.512885][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.516040][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.519009][ T8110] bridge_slave_1: entered allmulticast mode [ 115.522129][ T8110] bridge_slave_1: entered promiscuous mode [ 115.530011][ T5817] tipc: Left network mode [ 115.530222][ T42] audit: type=1400 audit(1785449401.291:593): avc: denied { write } for pid=8134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.548362][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.555529][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.598497][ T8110] team0: Port device team_slave_0 added [ 115.604534][ T8110] team0: Port device team_slave_1 added [ 115.645240][ T5450] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.657043][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.659278][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.668286][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.716255][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.718534][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.727678][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.939175][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 117.087794][ T64] Bluetooth: hci0: command tx timeout [ 117.122208][ T8158] tipc: Enabling of bearer rejected, failed to enable media [ 117.165261][ T8110] hsr_slave_0: entered promiscuous mode [ 117.167882][ T8110] hsr_slave_1: entered promiscuous mode [ 117.171360][ T8110] debugfs: 'hsr0' already exists in 'hsr' [ 117.173819][ T8110] Cannot create hsr debugfs directory [ 117.220100][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 117.220112][ T42] audit: type=1400 audit(1785449402.981:595): avc: denied { mount } for pid=8171 comm="syz.1.727" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.249153][ T5817] hsr_slave_0: left promiscuous mode [ 117.257970][ T5817] hsr_slave_1: left promiscuous mode [ 117.260040][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.266642][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.296208][ T42] audit: type=1400 audit(1785449403.061:596): avc: denied { write } for pid=8174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.339946][ T42] audit: type=1400 audit(1785449403.101:597): avc: denied { write } for pid=8182 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.402383][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 117.411490][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 117.479022][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 117.533026][ T846] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 117.564872][ T42] audit: type=1400 audit(1785449403.321:598): avc: denied { write } for pid=8185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.602385][ T8110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.604823][ T42] audit: type=1400 audit(1785449403.371:599): avc: denied { write } for pid=8188 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.615311][ T8110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.618215][ T8110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.622092][ T8110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.625260][ T8110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.629317][ T8110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.632173][ T8110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.637369][ T8110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.644676][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 117.690762][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.731'. [ 117.715673][ T846] usb 6-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 117.724548][ T846] usb 6-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 117.728686][ T42] audit: type=1400 audit(1785449403.491:600): avc: denied { write } for pid=8201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.740009][ T846] usb 6-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 117.743839][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.747080][ T846] usb 6-1: Product: syz [ 117.748718][ T846] usb 6-1: Manufacturer: syz [ 117.750644][ T846] usb 6-1: SerialNumber: syz [ 117.755155][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.766061][ T42] audit: type=1400 audit(1785449403.531:601): avc: denied { write } for pid=8204 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.789723][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.798135][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.801010][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.806615][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.808946][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.818625][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 117.913897][ T846] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 117.985805][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.026844][ T42] audit: type=1400 audit(1785449403.791:602): avc: denied { read } for pid=8225 comm="syz.4.736" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.036687][ T42] audit: type=1400 audit(1785449403.791:603): avc: denied { open } for pid=8225 comm="syz.4.736" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.096822][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.129439][ T42] audit: type=1400 audit(1785449403.891:604): avc: denied { ioctl } for pid=8234 comm="syz.4.737" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.237773][ T8110] veth0_vlan: entered promiscuous mode [ 118.245153][ T8110] veth1_vlan: entered promiscuous mode [ 118.249062][ T8243] binder: 8242:8243 ioctl c0306201 0 returned -14 [ 118.262142][ T8110] veth0_macvtap: entered promiscuous mode [ 118.275095][ T8110] veth1_macvtap: entered promiscuous mode [ 118.284773][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.296441][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.333753][ T5791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.336697][ T5791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.339519][ T5791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.375875][ T5791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.399785][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.404360][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.425201][ T5987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.427672][ T5987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.158540][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.172907][ T64] Bluetooth: hci0: command tx timeout [ 119.408748][ T8282] binder: 8281:8282 ioctl c0306201 0 returned -14 [ 119.507906][ T8285] kvm: pic: non byte write [ 119.526794][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 119.549016][ T8291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8291 comm=syz.1.753 [ 119.797463][ T846] usb 6-1: [UEAGLE-ATM] urb submission failed with error -19 [ 119.802321][ T846] ueagle-atm 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 119.813771][ T846] usb 6-1: USB disconnect, device number 8 [ 120.437492][ T8351] kvm: pic: non byte write [ 120.927565][ T8391] binder: 8389:8391 ioctl c0306201 200000000680 returned -14 [ 121.173150][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 121.249082][ T8404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8404 comm=syz.3.783 [ 121.253176][ T64] Bluetooth: hci0: command tx timeout [ 121.379806][ T8413] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 121.382593][ T8413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.387348][ T8413] vhci_hcd vhci_hcd.0: Device attached [ 121.453567][ T8416] vhci_hcd: connection closed [ 121.460285][ T5791] vhci_hcd vhci_hcd.1: stop threads [ 121.468430][ T5791] vhci_hcd vhci_hcd.1: release socket [ 121.470551][ T5791] vhci_hcd vhci_hcd.1: disconnect device [ 121.724939][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 121.729206][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 122.497350][ T8453] kvm: pic: non byte write [ 122.503031][ T8456] binder: 8455:8456 ioctl c0306201 200000000680 returned -14 [ 122.652800][ T1497] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 122.683956][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.801576][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 122.801590][ T42] audit: type=1400 audit(1785449408.561:627): avc: denied { write } for pid=8465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.830090][ T1497] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 122.835711][ T1497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.841515][ T1497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.846846][ T1497] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.854288][ T1497] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.860929][ T1497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.868297][ T1497] usb 6-1: config 0 descriptor?? [ 122.885653][ T42] audit: type=1400 audit(1785449408.651:628): avc: denied { write } for pid=8470 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.005202][ T42] audit: type=1400 audit(1785449408.771:629): avc: denied { write } for pid=8472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.060038][ T42] audit: type=1400 audit(1785449408.821:630): avc: denied { write } for pid=8477 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.165596][ T8483] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 123.220933][ T8485] syzkaller0: entered promiscuous mode [ 123.225341][ T8485] syzkaller0: entered allmulticast mode [ 123.231743][ T8485] tipc: Enabled bearer , priority 0 [ 123.235808][ T8484] tipc: Resetting bearer [ 123.250388][ T8484] tipc: Disabling bearer [ 123.290329][ T1497] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 123.301298][ T1497] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 123.323103][ T64] Bluetooth: hci0: command tx timeout [ 123.464740][ T8490] syzkaller0: entered promiscuous mode [ 123.466538][ T8490] syzkaller0: entered allmulticast mode [ 123.552806][ T2329] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 123.593662][ T1497] usb 6-1: USB disconnect, device number 9 [ 123.630629][ T8492] syzkaller0: entered promiscuous mode [ 123.632425][ T8492] syzkaller0: entered allmulticast mode [ 123.718892][ T2329] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 123.726212][ T2329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.733021][ T2329] usb 8-1: Product: syz [ 123.734699][ T2329] usb 8-1: Manufacturer: syz [ 123.742929][ T2329] usb 8-1: SerialNumber: syz [ 123.751214][ T2329] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 123.758890][ T2329] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 123.765226][ T2329] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 124.594479][ T8525] binder: 8524:8525 ioctl c0306201 200000000080 returned -14 [ 124.600130][ T8525] binder: 8524:8525 ioctl c0306201 2000000003c0 returned -14 [ 124.669454][ T42] audit: type=1400 audit(1785449410.431:631): avc: denied { bind } for pid=8526 comm="syz.5.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.897994][ T8546] overlayfs: failed to clone upperpath [ 125.072957][ T6346] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 125.093090][ T8512] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 125.097673][ T1497] usb 8-1: USB disconnect, device number 8 [ 125.106478][ T1497] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 125.114313][ T1497] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 125.118993][ T1497] ti_usb_3410_5052 8-1:2.0: device disconnected [ 125.222819][ T6346] usb 9-1: Using ep0 maxpacket: 8 [ 125.225715][ T6346] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.228226][ T6346] usb 9-1: config 0 has no interface number 0 [ 125.230732][ T6346] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.234382][ T6346] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.237835][ T6346] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.241186][ T6346] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.245631][ T6346] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.248449][ T6346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.252658][ T6346] usb 9-1: config 0 descriptor?? [ 125.257044][ T6346] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 125.282042][ T8557] fuse: Bad value for 'fd' [ 125.350945][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 125.514121][ T1497] usb 9-1: USB disconnect, device number 8 [ 125.515019][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 125.522843][ T8540] ldusb 9-1:0.55: Couldn't submit interrupt_out_urb -19 [ 125.526353][ T1497] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 125.737610][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.845'. [ 125.746214][ T8583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8583 comm=syz.5.845 [ 126.058062][ T8590] binder: 8589:8590 ioctl c0306201 200000000080 returned -14 [ 126.066038][ T8590] binder: 8589:8590 ioctl c0306201 2000000003c0 returned -14 [ 126.116572][ T42] audit: type=1400 audit(1785449411.881:632): avc: denied { read } for pid=8593 comm="syz.5.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.221665][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.851'. [ 126.689554][ T8611] team0 (unregistering): Port device team_slave_0 removed [ 126.701997][ T8611] team0 (unregistering): Port device team_slave_1 removed [ 126.712983][ T42] audit: type=1400 audit(1785449412.481:633): avc: denied { setopt } for pid=8612 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.720958][ T42] audit: type=1400 audit(1785449412.481:634): avc: denied { write } for pid=8612 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.962375][ T42] audit: type=1400 audit(1785449412.721:635): avc: denied { mount } for pid=8627 comm="syz.1.864" name="/" dev="ramfs" ino=32934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.517268][ T8651] fuse: Bad value for 'fd' [ 127.529381][ T8650] gfs2: error -5 reading superblock [ 127.652002][ T8664] netlink: 'syz.3.886': attribute type 39 has an invalid length. [ 127.775059][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.881'. [ 127.815716][ T8673] netlink: 11 bytes leftover after parsing attributes in process `syz.4.880'. [ 127.949812][ T8692] syzkaller0: entered promiscuous mode [ 127.953969][ T8692] syzkaller0: entered allmulticast mode [ 128.012799][ T6194] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 128.103608][ T8698] binder: 8697:8698 ioctl c0306201 0 returned -14 [ 128.164088][ T6194] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 128.170628][ T6194] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.176265][ T6194] usb 10-1: config 0 has no interfaces? [ 128.178073][ T6194] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 128.193008][ T6194] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.197559][ T6194] usb 10-1: config 0 descriptor?? [ 128.430291][ T6194] usb 10-1: string descriptor 0 read error: -71 [ 128.433833][ T6194] usb 10-1: USB disconnect, device number 2 [ 128.759982][ T8716] ceph: No mds server is up or the cluster is laggy [ 128.762653][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 128.765382][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 128.940990][ T42] audit: type=1400 audit(1785449414.701:636): avc: denied { write } for pid=8730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.992967][ T42] audit: type=1400 audit(1785449414.751:637): avc: denied { write } for pid=8736 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.065074][ T8743] netlink: 11 bytes leftover after parsing attributes in process `syz.3.902'. [ 129.084394][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.124701][ T42] audit: type=1400 audit(1785449414.891:638): avc: denied { write } for pid=8754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.138963][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.161704][ T42] audit: type=1400 audit(1785449414.921:639): avc: denied { write } for pid=8758 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.194127][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.229643][ T42] audit: type=1400 audit(1785449414.991:640): avc: denied { write } for pid=8761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.258236][ T8765] binder: 8764:8765 unknown command 0 [ 129.260015][ T8765] binder: 8764:8765 ioctl c0306201 2000000001c0 returned -22 [ 129.262409][ T42] audit: type=1400 audit(1785449415.021:641): avc: denied { transfer } for pid=8764 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.271447][ T42] audit: type=1400 audit(1785449415.031:642): avc: denied { write } for pid=8766 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.290167][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.906'. [ 129.337814][ T8769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8769 comm=syz.5.906 [ 129.565199][ T42] audit: type=1400 audit(1785449415.331:643): avc: denied { write } for pid=8776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.611586][ T42] audit: type=1400 audit(1785449415.371:644): avc: denied { write } for pid=8781 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.834914][ T8798] team0 (unregistering): Port device team_slave_0 removed [ 129.840051][ T8798] team0 (unregistering): Port device team_slave_1 removed [ 129.880572][ T8802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.915'. [ 129.939645][ T42] audit: type=1400 audit(1785449415.701:645): avc: denied { setopt } for pid=8807 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.966694][ T8813] fuse: fd is not a fuse device [ 130.001995][ T8817] fuse: fd is not a fuse device [ 130.158624][ T8823] syz_tun: entered allmulticast mode [ 130.214299][ T8823] netlink: 11 bytes leftover after parsing attributes in process `syz.1.925'. [ 130.347330][ T8830] syzkaller0: entered promiscuous mode [ 130.349641][ T8830] syzkaller0: entered allmulticast mode [ 130.437270][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 130.496560][ T8841] fuse: fd is not a fuse device [ 130.503629][ T8839] Bluetooth: Error in BCSP hdr checksum [ 130.990897][ T8821] syz_tun: left allmulticast mode [ 131.036864][ T8847] fuse: fd is not a fuse device [ 131.090220][ T8851] netlink: 88 bytes leftover after parsing attributes in process `syz.3.937'. [ 131.377373][ T8871] bridge3: port 1(macvlan2) entered blocking state [ 131.379617][ T8871] bridge3: port 1(macvlan2) entered disabled state [ 131.381833][ T8871] macvlan2: entered allmulticast mode [ 131.493414][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 131.729149][ T8893] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 131.731573][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 131.762819][ T2329] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 131.932945][ T2329] usb 8-1: Using ep0 maxpacket: 32 [ 131.937067][ T2329] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 131.941425][ T2329] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 131.946705][ T2329] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.951315][ T2329] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 131.959499][ T2329] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 131.964936][ T2329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.968375][ T2329] usb 8-1: Product: syz [ 131.970152][ T2329] usb 8-1: Manufacturer: syz [ 131.972135][ T2329] usb 8-1: SerialNumber: syz [ 131.986129][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 131.993365][ T2329] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input13 [ 132.122577][ T8901] fuse: fd is not a fuse device [ 132.214090][ T2329] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 132.216762][ T2329] (id 0x00) [ 132.272813][ T2329] rc_core: IR keymap rc-imon-pad not found [ 132.274684][ T2329] Registered IR keymap rc-empty [ 132.276207][ T2329] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 132.279339][ T2329] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 132.358108][ T8909] netlink: 'syz.1.961': attribute type 11 has an invalid length. [ 132.394971][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.400134][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.415117][ T2329] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 132.419581][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.422909][ T2329] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input14 [ 132.429949][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.439192][ T2329] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:9> initialized [ 132.443137][ T8909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.447955][ T8909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.454242][ T8909] veth1_vlan: left promiscuous mode [ 132.456823][ T8909] veth0_vlan: left promiscuous mode [ 132.464355][ T8909] veth0_vlan: entered promiscuous mode [ 132.473993][ T8909] veth1_vlan: entered promiscuous mode [ 132.483521][ T8909] veth1_macvtap: left promiscuous mode [ 132.488699][ T8909] veth0_macvtap: left promiscuous mode [ 132.493345][ T8909] veth0_macvtap: entered promiscuous mode [ 132.497903][ T8909] veth1_macvtap: entered promiscuous mode [ 132.506160][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.509080][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.511737][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.515102][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.518427][ T8909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.521120][ T8909] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 132.523465][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 132.526700][ T5099] Bluetooth: hci3: command 0x1003 tx timeout [ 132.533855][ T8909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.534012][ T5817] bond2: (slave ip6erspan0): link status down again after 0 ms [ 132.537979][ T8909] ip6gretap0: entered promiscuous mode [ 132.560988][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.563385][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.568068][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.570298][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.611621][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.669137][ T8915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8915 comm=syz.1.963 [ 132.685475][ T8915] netlink: 'syz.1.963': attribute type 12 has an invalid length. [ 132.688035][ T8915] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 132.690480][ T8915] netlink: 148 bytes leftover after parsing attributes in process `syz.1.963'. [ 132.695677][ T8915] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 132.702777][ T8915] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 132.707867][ T8915] netlink: 11 bytes leftover after parsing attributes in process `syz.1.963'. [ 132.733551][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.741792][ T8917] bridge1: port 1(macvlan2) entered blocking state [ 132.744196][ T8917] bridge1: port 1(macvlan2) entered disabled state [ 132.746444][ T8917] macvlan2: entered allmulticast mode [ 132.752912][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.756422][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.759221][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.775142][ T13] bond2: (slave ip6erspan0): link status definitely up, 0 Mbps full duplex [ 132.780944][ T13] bond2: active interface up! [ 132.809515][ T8923] syzkaller0: entered promiscuous mode [ 132.811329][ T8923] syzkaller0: entered allmulticast mode [ 132.824327][ T8923] tipc: Started in network mode [ 132.825934][ T8923] tipc: Node identity 66f1779a4691, cluster identity 4711 [ 132.828406][ T8923] tipc: Enabled bearer , priority 0 [ 132.833891][ T8922] tipc: Resetting bearer [ 132.845109][ T8922] tipc: Disabling bearer [ 133.002150][ T8938] fuse: fd is not a fuse device [ 133.216611][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.980'. [ 133.255874][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.258243][ T8961] batadv0: mtu less than device minimum [ 133.260492][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.266074][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.269762][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.273487][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.277124][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.281524][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.285351][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.288914][ T8961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.298628][ T8961] batadv_slave_1: entered promiscuous mode [ 133.339143][ T8968] fuse: fd is not a fuse device [ 133.954581][ T8994] netlink: 'syz.5.992': attribute type 1 has an invalid length. [ 133.964756][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 133.966612][ T8996] fuse: fd is not a fuse device [ 133.969998][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 133.973910][ T64] Bluetooth: hci1: hardware error 0x00 [ 133.979807][ T8994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.010809][ T8994] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.042136][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 134.514987][ T846] usb 8-1: USB disconnect, device number 9 [ 134.891839][ T9018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.894433][ T9018] batadv_slave_1: entered promiscuous mode [ 134.930978][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 134.930991][ T42] audit: type=1400 audit(1785449420.691:658): avc: denied { bind } for pid=9021 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.940103][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 134.942049][ T42] audit: type=1400 audit(1785449420.691:659): avc: denied { setopt } for pid=9021 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.068105][ T42] audit: type=1326 audit(1785449420.831:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9039 comm="syz.1.1012" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f007f99e019 code=0x0 [ 135.109927][ T42] audit: type=1400 audit(1785449420.871:661): avc: denied { shutdown } for pid=9041 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.173668][ T9047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.176789][ T9047] batadv_slave_1: entered promiscuous mode [ 135.967549][ T9073] syzkaller0: entered promiscuous mode [ 135.969590][ T9073] syzkaller0: entered allmulticast mode [ 136.053038][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 136.060111][ T42] audit: type=1400 audit(1785449421.821:662): avc: denied { setopt } for pid=9082 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.098260][ T9091] tipc: Failed to remove unknown binding: 66,0,0/905985641:2236009506/2236009508 [ 136.101677][ T9091] tipc: Failed to remove unknown binding: 66,0,0/905985641:2236009506/2236009507 [ 136.106301][ T9091] tipc: Failed to remove unknown binding: 66,0,0/905985641:2236009506/2236009508 [ 136.109913][ T9091] tipc: Failed to remove unknown binding: 66,0,0/905985641:2236009506/2236009507 [ 136.118044][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.122577][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.129424][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.134436][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.138222][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.149600][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.151309][ T9096] syzkaller0: entered promiscuous mode [ 136.154768][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.157856][ T9096] syzkaller0: entered allmulticast mode [ 136.161603][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.168269][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.1032 [ 136.835221][ T9131] netlink: 'syz.3.1047': attribute type 3 has an invalid length. [ 136.843160][ T9131] netlink: 'syz.3.1047': attribute type 3 has an invalid length. [ 136.872530][ T42] audit: type=1400 audit(1785449422.631:663): avc: denied { read } for pid=9133 comm="syz.3.1048" name="g1" dev="configfs" ino=15567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.891750][ T9134] configfs-gadget.g1 gadget.32: HOST MAC 26:4b:9d:13:66:0d [ 136.892175][ T42] audit: type=1400 audit(1785449422.631:664): avc: denied { read open } for pid=9133 comm="syz.3.1048" path="/260/my_configfs/usb_gadget/g1" dev="configfs" ino=15567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.899628][ T9134] configfs-gadget.g1 gadget.32: MAC de:91:49:9d:e4:87 [ 136.912571][ T42] audit: type=1400 audit(1785449422.631:665): avc: denied { write } for pid=9133 comm="syz.3.1048" name="c.1" dev="configfs" ino=27213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.921334][ T42] audit: type=1400 audit(1785449422.631:666): avc: denied { write } for pid=9133 comm="syz.3.1048" name="c.1" dev="configfs" ino=27213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.017005][ T42] audit: type=1400 audit(1785449422.781:667): avc: denied { write } for pid=9138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.130403][ T9154] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 137.163243][ T9154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.260600][ T9154] bond2: (slave veth5): Enslaving as an active interface with a down link [ 137.281959][ T9164] bond2: (slave dummy0): making interface the new active one [ 137.299358][ T9154] netlink: 'syz.5.1053': attribute type 10 has an invalid length. [ 137.299572][ T9164] dummy0: entered promiscuous mode [ 137.306500][ T9164] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 137.317999][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1053'. [ 137.345995][ T9154] bond2: (slave dummy0): Releasing active interface [ 137.430124][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 137.442900][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 137.709960][ T9198] netlink: 'syz.5.1063': attribute type 1 has an invalid length. [ 137.721967][ T9198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.750285][ T9198] vlan2: entered allmulticast mode [ 137.752111][ T9198] macsec0: entered allmulticast mode [ 137.753982][ T9198] veth1_macvtap: entered allmulticast mode [ 137.756881][ T9198] bond3: (slave vlan2): Error -34 calling dev_set_mtu [ 137.924502][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'. [ 137.937973][ T9207] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 137.946436][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'. [ 137.949176][ T9207] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 138.017663][ T9228] fuse: fd is not a fuse device [ 138.721549][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 138.833919][ T9265] sch_tbf: burst 2 is lower than device lo mtu (16) ! [ 138.865586][ T9267] geneve3: entered promiscuous mode [ 138.899977][ T64] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 139.021837][ T9284] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 139.025855][ T12] bond0: (slave bond_slave_0): interface is now down [ 139.031795][ T12] bond0: (slave bond_slave_1): interface is now down [ 139.037744][ T12] bond0: now running without any active interface! [ 139.069998][ T9287] netlink: 'syz.4.1095': attribute type 8 has an invalid length. [ 139.072553][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 139.147939][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 139.191464][ T9293] bridge1: port 1(veth3) entered blocking state [ 139.193683][ T9293] bridge1: port 1(veth3) entered disabled state [ 139.195736][ T9293] veth3: entered allmulticast mode [ 139.198286][ T9293] veth3: entered promiscuous mode [ 139.203165][ T9295] netlink: 'syz.5.1099': attribute type 3 has an invalid length. [ 139.205683][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1099'. [ 139.210310][ T9293] bridge1: port 2(veth0_to_bond) entered blocking state [ 139.215840][ T9293] bridge1: port 2(veth0_to_bond) entered disabled state [ 139.222838][ T9293] veth0_to_bond: entered allmulticast mode [ 139.226144][ T9293] veth0_to_bond: entered promiscuous mode [ 139.278587][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'. [ 139.302104][ T9301] bond3: entered promiscuous mode [ 139.304348][ T9301] bond3: entered allmulticast mode [ 139.308710][ T9304] binder_alloc: 9303: binder_alloc_buf, no vma [ 140.940923][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 140.940936][ T42] audit: type=1326 audit(1785449426.701:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 140.950576][ T42] audit: type=1326 audit(1785449426.711:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 140.957763][ T42] audit: type=1326 audit(1785449426.711:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 140.965909][ T42] audit: type=1326 audit(1785449426.711:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 140.973454][ T42] audit: type=1326 audit(1785449426.711:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 141.000021][ T42] audit: type=1326 audit(1785449426.761:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 141.007458][ T42] audit: type=1326 audit(1785449426.761:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f007f95e84e code=0x7ffc0000 [ 141.016111][ T42] audit: type=1326 audit(1785449426.761:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 141.023569][ T42] audit: type=1326 audit(1785449426.761:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 141.030667][ T42] audit: type=1326 audit(1785449426.761:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f007f99e019 code=0x7ffc0000 [ 141.885779][ T9378] syzkaller0: entered promiscuous mode [ 141.887603][ T9378] syzkaller0: entered allmulticast mode [ 142.030129][ T9384] syzkaller0: entered promiscuous mode [ 142.031843][ T9384] syzkaller0: entered allmulticast mode [ 142.132808][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 142.706662][ T9397] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 142.880667][ T9399] __nla_validate_parse: 1 callbacks suppressed [ 142.880685][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1135'. [ 142.890864][ T9399] ip6gre1: entered promiscuous mode [ 142.892584][ T9399] ip6gre1: entered allmulticast mode [ 142.902216][ T9399] netlink: 'syz.5.1135': attribute type 6 has an invalid length. [ 142.904819][ T9399] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1135'. [ 142.977503][ T9403] zram0: detected capacity change from 0 to 8 [ 143.311179][ T9417] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 144.153459][ T9353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.265785][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1153'. [ 144.269462][ T9451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1153'. [ 144.272986][ T9451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1153'. [ 144.276879][ T9451] bridge0: port 4(veth0) entered blocking state [ 144.279465][ T9451] bridge0: port 4(veth0) entered disabled state [ 144.282045][ T9451] veth0: entered allmulticast mode [ 144.284907][ T9451] veth0: entered promiscuous mode [ 144.287111][ T9451] bridge0: port 4(veth0) entered blocking state [ 144.289181][ T9451] bridge0: port 4(veth0) entered forwarding state [ 144.294661][ T9451] bridge0: port 5(veth1) entered blocking state [ 144.297143][ T9451] bridge0: port 5(veth1) entered disabled state [ 144.299795][ T9451] veth1: entered allmulticast mode [ 144.303799][ T9451] veth1: entered promiscuous mode [ 144.306759][ T9451] bridge0: port 5(veth1) entered blocking state [ 144.309249][ T9451] bridge0: port 5(veth1) entered forwarding state [ 144.623667][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1158'. [ 144.938320][ T9468] xt_hashlimit: size too large, truncated to 1048576 [ 145.032429][ T9472] uprobe: syz.1.1161:9472 failed to unregister, leaking uprobe [ 145.483383][ T9494] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 145.512633][ T9494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.527296][ T9494] bond4: (slave bond5): making interface the new active one [ 145.538147][ T9494] bond4: (slave bond5): Enslaving as an active interface with an up link [ 145.556587][ T9494] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 146.435650][ T9527] fuse: fd is not a fuse device [ 146.674198][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 146.674211][ T42] audit: type=1804 audit(1785449432.441:687): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1187" name="file0" dev="tmpfs" ino=1541 res=1 errno=0 [ 146.676176][ T9541] uprobe: syz.4.1187:9541 failed to unregister, leaking uprobe [ 146.765242][ T9551] fuse: fd is not a fuse device [ 146.776131][ T9553] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 146.803508][ T9553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.819473][ T9553] bond6: entered allmulticast mode [ 146.835882][ T9553] bond6: (slave ip6gretap1): making interface the new active one [ 146.850308][ T9553] ip6gretap1: entered allmulticast mode [ 146.856892][ T9553] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.035446][ T42] audit: type=1804 audit(1785449432.801:688): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1199" name="/newroot/115/file0" dev="tmpfs" ino=616 res=1 errno=0 [ 147.037172][ T9572] uprobe: syz.5.1199:9572 failed to unregister, leaking uprobe [ 147.163838][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.173637][ T12] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.231046][ T42] audit: type=1400 audit(1785449432.991:689): avc: denied { map } for pid=9580 comm="syz.3.1202" path="socket:[38069]" dev="sockfs" ino=38069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.242761][ T42] audit: type=1400 audit(1785449432.991:690): avc: denied { read write } for pid=9580 comm="syz.3.1202" path="socket:[38069]" dev="sockfs" ino=38069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.269882][ T9583] overlayfs: missing 'lowerdir' [ 147.542924][ T846] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 147.692890][ T846] usb 8-1: Using ep0 maxpacket: 8 [ 147.695919][ T846] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 147.698978][ T846] usb 8-1: config 0 has no interface number 0 [ 147.701591][ T846] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 147.704949][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.709522][ T846] usb 8-1: config 0 descriptor?? [ 147.834324][ T846] viperboard 8-1:0.143: version 0.00 found at bus 008 address 010 [ 147.859389][ T846] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 147.865081][ T846] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 147.967576][ T9587] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 147.969629][ T9588] WARNING! power/level is deprecated; use power/control instead [ 148.082287][ T9597] fuse: fd is not a fuse device [ 148.091347][ T42] audit: type=1400 audit(1785449433.851:691): avc: denied { bpf } for pid=9598 comm="syz.5.1209" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.098461][ T42] audit: type=1400 audit(1785449433.851:692): avc: denied { perfmon } for pid=9598 comm="syz.5.1209" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.332517][ T9603] kvm: pic: single mode not supported [ 148.332532][ T9603] kvm: pic: level sensitive irq not supported [ 148.344645][ T9603] picdev_read: 4 callbacks suppressed [ 148.344658][ T9603] kvm: pic: non byte read [ 148.349672][ T9603] kvm: pic: non byte read [ 148.351069][ T9603] kvm: pic: non byte read [ 148.352466][ T9603] kvm: pic: non byte read [ 148.354185][ T9603] kvm: pic: non byte read [ 148.355609][ T9603] kvm: pic: non byte read [ 148.357030][ T9603] kvm: pic: non byte read [ 148.358409][ T9603] kvm: pic: non byte read [ 148.359788][ T9603] kvm: pic: non byte read [ 148.361146][ T9603] kvm: pic: non byte read [ 148.690102][ T9618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.734696][ T42] audit: type=1400 audit(1785449434.501:693): avc: denied { write } for pid=9619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.747631][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.802611][ T42] audit: type=1400 audit(1785449434.561:694): avc: denied { write } for pid=9624 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.811537][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.918397][ T1497] usb 8-1: USB disconnect, device number 10 [ 149.452994][ T9621] syz.1.1215 (9621) used greatest stack depth: 18792 bytes left [ 149.522329][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 149.529189][ T9644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 150.479206][ T9670] vlan2: entered promiscuous mode [ 150.480811][ T9670] hsr0: entered promiscuous mode [ 150.486577][ T9670] vlan2: entered allmulticast mode [ 150.488127][ T9670] hsr0: entered allmulticast mode [ 150.489673][ T9670] hsr_slave_0: entered allmulticast mode [ 150.491341][ T9670] hsr_slave_1: entered allmulticast mode [ 150.534658][ T9674] syzkaller0: entered promiscuous mode [ 150.536306][ T9674] syzkaller0: entered allmulticast mode [ 150.657450][ T9681] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 150.754583][ T9690] syzkaller0: entered promiscuous mode [ 150.756433][ T9690] syzkaller0: entered allmulticast mode [ 150.765893][ T9690] tipc: Enabled bearer , priority 0 [ 150.769056][ T9689] tipc: Resetting bearer [ 150.782739][ T9689] tipc: Disabling bearer [ 150.843814][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 150.871519][ T9694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.904221][ T9694] bond3: (slave veth5): Enslaving as an active interface with an up link [ 150.907708][ T42] audit: type=1400 audit(1785449436.671:695): avc: denied { create } for pid=9691 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.927891][ T9694] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 150.930829][ T9694] dummy0: entered promiscuous mode [ 151.210243][ T9716] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1249'. [ 151.213721][ T9708] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1249'. [ 151.216865][ T9710] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1249'. [ 151.258241][ T9720] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.260738][ T9720] @0Ù: renamed from bond_slave_1 (while UP) [ 151.484758][ T42] audit: type=1400 audit(1785449437.251:696): avc: denied { bind } for pid=9726 comm="syz.5.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.517166][ T9751] fuse: fd is not a fuse device [ 151.600475][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.642506][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.723827][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1270'. [ 151.802824][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.805316][ C1] bridge0: topology change detected, propagating [ 151.807597][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.809872][ C1] bridge0: topology change detected, propagating [ 151.822573][ T9779] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 151.838484][ T9779] gretap2: entered allmulticast mode [ 151.843953][ T9779] bond7: (slave gretap2): making interface the new active one [ 151.846761][ T9779] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 151.882914][ T6194] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 152.032802][ T6194] usb 10-1: Using ep0 maxpacket: 8 [ 152.036257][ T6194] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 152.038976][ T6194] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 152.042437][ T6194] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.045638][ T6194] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 152.049504][ T6194] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.053049][ T6194] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.057344][ T6194] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.060296][ T6194] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.266092][ T6194] usb 10-1: GET_CAPABILITIES returned 0 [ 152.267899][ T6194] usbtmc 10-1:16.0: can't read capabilities [ 152.471121][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 152.477895][ T9759] usbtmc 10-1:16.0: Unable to send data, error -71 [ 152.511119][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 152.511132][ T42] audit: type=1400 audit(1785449438.271:700): avc: denied { map } for pid=9814 comm="syz.1.1283" path="socket:[36526]" dev="sockfs" ino=36526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.517179][ T9818] tipc: New replicast peer: 255.255.255.255 [ 152.524484][ T9818] tipc: Enabled bearer , priority 10 [ 152.537639][ T6194] usb 10-1: USB disconnect, device number 3 [ 154.154233][ T9834] syzkaller0: entered promiscuous mode [ 154.156744][ T9834] syzkaller0: entered allmulticast mode [ 154.162981][ T9835] tipc: Enabled bearer , priority 0 [ 154.166374][ T9844] batadv_slave_0: Caught tx_queue_len zero misconfig [ 154.169260][ T9845] syz_tun: entered allmulticast mode [ 154.171378][ T9845] syz_tun: left allmulticast mode [ 154.173919][ T9847] syz_tun: entered allmulticast mode [ 154.179502][ T9830] tipc: Resetting bearer [ 154.228076][ T9830] tipc: Disabling bearer [ 154.310939][ T9862] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1295'. [ 154.345447][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 154.351697][ T9865] tipc: Started in network mode [ 154.355323][ T9865] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 154.367866][ T9865] tipc: Enabling of bearer rejected, failed to enable media [ 154.504510][ T9876] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 154.577478][ T9883] syzkaller0: entered promiscuous mode [ 154.580402][ T9883] syzkaller0: entered allmulticast mode [ 154.707405][ T42] audit: type=1400 audit(1785449440.471:701): avc: denied { write } for pid=9888 comm="syz.3.1307" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 154.723522][ C1] process 9884 (syz.5.1305) no longer affine to cpu1 [ 154.775535][ T9889] smpboot: CPU 1 is now offline [ 154.835607][ T9891] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 154.839976][ T0] Disabled fast string operations [ 154.841802][ T0] ------------[ cut here ]------------ [ 154.843600][ T0] alternatives_patched [ 154.843606][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 154.848712][ T0] Modules linked in: [ 154.850257][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 154.853860][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 154.855933][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.859208][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 154.861017][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 d5 71 0f 31 ff 89 ee e8 a8 c5 59 00 85 ed 0f 84 7d fd ff ff e8 2b cb 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 15 cb 59 00 8b [ 154.867906][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 154.870531][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 154.873857][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 154.877211][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 154.880484][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 154.883600][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 154.886867][ T0] FS: 0000000000000000(0000) GS:ffff8880d5eda000(0000) knlGS:0000000000000000 [ 154.890695][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.893527][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 154.897034][ T0] Call Trace: [ 154.898414][ T0] [ 154.899636][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 154.901855][ T0] ? _printk+0xcf/0x110 [ 154.903582][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 154.905852][ T0] ? early_init_intel.cold+0x129/0x1eb [ 154.908063][ T0] early_init_intel.cold+0x13f/0x1eb [ 154.910209][ T0] init_intel+0x1c/0x7b0 [ 154.911932][ T0] identify_cpu+0x8b0/0x1c30 [ 154.913817][ T0] identify_secondary_cpu+0x178/0x270 [ 154.915984][ T0] start_secondary+0xcf/0x2d0 [ 154.917886][ T0] ? __pfx_start_secondary+0x10/0x10 [ 154.920032][ T0] common_startup_64+0x13e/0x158 [ 154.922108][ T0] [ 154.923378][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.926254][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 154.930420][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 154.932924][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.936890][ T0] Call Trace: [ 154.938232][ T0] [ 154.939459][ T0] dump_stack_lvl+0x100/0x190 [ 154.941317][ T0] vpanic+0x552/0x970 [ 154.942951][ T0] ? __pfx_vpanic+0x10/0x10 [ 154.944809][ T0] panic+0xd1/0xe0 [ 154.946327][ T0] ? __pfx_panic+0x10/0x10 [ 154.948147][ T0] ? check_panic_on_warn+0x1f/0x90 [ 154.950238][ T0] check_panic_on_warn.cold+0x19/0x34 [ 154.952420][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 154.954487][ T0] __warn.cold+0x191/0x318 [ 154.956327][ T0] __report_bug+0x30f/0x440 [ 154.958229][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 154.960286][ T0] ? __pfx___report_bug+0x10/0x10 [ 154.962361][ T0] ? prb_read_valid+0x78/0xa0 [ 154.964298][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 154.966400][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 154.968564][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 154.970622][ T0] report_bug+0xb2/0x220 [ 154.972342][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 154.974395][ T0] handle_bug+0x16a/0x2a0 [ 154.976173][ T0] exc_invalid_op+0x17/0x50 [ 154.978016][ T0] asm_exc_invalid_op+0x1a/0x20 [ 154.979984][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 154.982251][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 d5 71 0f 31 ff 89 ee e8 a8 c5 59 00 85 ed 0f 84 7d fd ff ff e8 2b cb 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 15 cb 59 00 8b [ 154.989817][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 154.991975][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 154.994736][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 154.997845][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 155.001031][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 155.004171][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 155.007342][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 155.009399][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 155.011470][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 155.013524][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 155.015328][ T0] ? _printk+0xcf/0x110 [ 155.016724][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 155.018541][ T0] ? early_init_intel.cold+0x129/0x1eb [ 155.020769][ T0] early_init_intel.cold+0x13f/0x1eb [ 155.022933][ T0] init_intel+0x1c/0x7b0 [ 155.024487][ T0] identify_cpu+0x8b0/0x1c30 [ 155.026029][ T0] identify_secondary_cpu+0x178/0x270 [ 155.027800][ T0] start_secondary+0xcf/0x2d0 [ 155.029369][ T0] ? __pfx_start_secondary+0x10/0x10 [ 155.031114][ T0] common_startup_64+0x13e/0x158 [ 155.032773][ T0] [ 155.034498][ T0] Kernel Offset: disabled [ 155.035937][ T0] Rebooting in 86400 seconds..