last executing test programs: 5m51.167157347s ago: executing program 1 (id=1330): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(0x0, 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) fcntl$setstatus(r4, 0x4, 0x2000) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000040)) shutdown(r4, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 5m49.171465643s ago: executing program 1 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x48884) 5m48.412275581s ago: executing program 1 (id=1340): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x91, 0x4, 0x1, 0x4, 0x4, 0x9}) 5m48.370471529s ago: executing program 1 (id=1342): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x20000000) 5m48.204235681s ago: executing program 1 (id=1344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x42, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_ublk_setup_io_uring(0x57b2, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 5m44.993660186s ago: executing program 1 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700ecffffff08000400ff"], 0x44}}, 0x4000) 5m43.952061309s ago: executing program 32 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700ecffffff08000400ff"], 0x44}}, 0x4000) 11.046367035s ago: executing program 3 (id=3212): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x2}) 10.864925882s ago: executing program 3 (id=3214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x9, 0x400) r2 = accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f0000000480)=0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='!+$.:\\\x00', 0x80, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000880)=""/206, 0xce}, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r7, 0x100000000) 9.699204942s ago: executing program 3 (id=3217): ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 9.483081181s ago: executing program 3 (id=3219): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e28, @loopback}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffef4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x25) accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) 8.350244239s ago: executing program 3 (id=3223): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 7.65169933s ago: executing program 0 (id=3228): ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 6.989417476s ago: executing program 3 (id=3229): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 6.723504862s ago: executing program 0 (id=3231): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x58, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004703004a0067"], 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 5.167506837s ago: executing program 5 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockname$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000100)=0x6e) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.898699s ago: executing program 5 (id=3237): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) socket$alg(0x26, 0x5, 0x0) pipe(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_robust_list(0x0, 0x0, 0x0) 4.813538823s ago: executing program 0 (id=3238): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 4.715451704s ago: executing program 2 (id=3239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, 0x0, 0x0) 4.713012045s ago: executing program 4 (id=3240): ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 4.62147921s ago: executing program 5 (id=3241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000004840)=0xd2c, 0x4) 4.44759442s ago: executing program 0 (id=3242): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)=@v2={0x2000000, [{0x1000, 0x7bb}, {0x2, 0x5}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 4.353191775s ago: executing program 5 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008503000051030000000000000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x69cc6d86, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 4.336669059s ago: executing program 2 (id=3244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 3.80278657s ago: executing program 4 (id=3245): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x2564}, &(0x7f0000000400)=0x8) 3.212400664s ago: executing program 0 (id=3246): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x77f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/ipc\x00') sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) preadv2(r5, 0x0, 0x0, 0xffffffff, 0x6, 0x2) 3.200158196s ago: executing program 4 (id=3247): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x58, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004703004a0067"], 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 2.553999518s ago: executing program 2 (id=3248): socket(0xf, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0xa0000012}) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000200)=r9) 2.47653433s ago: executing program 5 (id=3249): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001840)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) 1.941031054s ago: executing program 5 (id=3250): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.321622678s ago: executing program 4 (id=3251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad9585000000010000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.184192877s ago: executing program 0 (id=3252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0', 0xa) 1.073207157s ago: executing program 2 (id=3253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0xbf, 0x1, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='abcd', 0x4, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000800)='012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345', 0x60, 0x0, 0x0, 0x0) 1.039009854s ago: executing program 4 (id=3254): socket(0x10, 0x803, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$P9_RSTATu(r0, &(0x7f00000007c0)={0x2f9, 0x2, 0x42, {{0x500, 0x1b8, 0x0, 0xffffff25, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x115, '\xf8\xf6i\xfbqm\xcf1^%\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00L\xc3(\f\xaa\xdaZ|`?\x14\xfe\'\xf3\xcetAj6\xc8\x96\x06 ex\xebKs\xa2\xb4\xc8\xad\x89C\xbd\xec\x8e\xdfw\xff\x8b\x05\x94so\x15\xde%\f\xdc\x0e\xd3\x99\xb9\xd0\xd7b\x83g\x9f$c\x90\x0e6!\xd1\xc3\x83\nv\x15M\xff\xc9\x8d\xba6\xd8\xf2Gv\xf3-L\xe8\x18\xff\xcd\n7?\xa1\"\x88i*\xfc\x12G\x9fm\xb3k@`\xf5\x8e7\xfdE\x05\x8bg\x86\xe5\xe6\'\x1f\xac\b\xa3^O\xe5\xf5\xdf\xbc0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = fanotify_init(0x40, 0x40000) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) getdents64(r6, 0x0, 0x0) 507.32649ms ago: executing program 2 (id=3255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 63.715994ms ago: executing program 2 (id=3256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x4894) 0s ago: executing program 4 (id=3257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) kernel console output (not intermixed with test programs): e found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 543.559909][ T191] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 543.593310][ T191] usb 6-1: config 0 has no interface number 0 [ 543.612968][ T191] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 543.644558][ T191] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 543.696653][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.720692][ T191] usb 6-1: Product: syz [ 543.927176][ T191] usb 6-1: Manufacturer: syz [ 543.933638][ T191] usb 6-1: SerialNumber: syz [ 543.949121][ T191] usb 6-1: config 0 descriptor?? [ 543.962418][T12165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 543.981840][T12165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 544.203231][T12165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 544.236043][T12165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 544.483505][ T191] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 544.957360][ T191] asix 6-1:0.34: probe with driver asix failed with error -32 [ 544.964220][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.120688][ T5810] usb 6-1: USB disconnect, device number 7 [ 546.958388][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.970494][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.262536][ T3285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.279617][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.177590][ T3285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.911962][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.056088][ T30] audit: type=1400 audit(1786550698.144:536): avc: denied { read } for pid=12248 comm="syz.5.2019" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 550.331690][ T5810] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 550.466039][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.539622][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 550.568401][ T5810] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 550.613197][ T5810] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 550.655029][ T5810] usb 4-1: config 0 has no interface number 0 [ 550.831120][ T5810] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 551.191175][ T5810] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 551.339635][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.371857][ T5810] usb 4-1: Product: syz [ 551.388931][ T5810] usb 4-1: Manufacturer: syz [ 551.411936][ T5810] usb 4-1: SerialNumber: syz [ 551.423860][ T5810] usb 4-1: config 0 descriptor?? [ 551.430095][T12252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 551.438019][T12252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 551.695860][T12252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 551.709057][T12252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.177563][ T5810] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 552.198177][ T5810] asix 4-1:0.34: probe with driver asix failed with error -61 [ 552.382063][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.394507][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.013603][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.026949][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.090175][T12283] syzkaller0: entered promiscuous mode [ 553.120985][T12283] syzkaller0: entered allmulticast mode [ 553.167410][T12285] tipc: Enabled bearer , priority 0 [ 553.217294][T12282] tipc: Resetting bearer [ 553.286789][T12282] tipc: Disabling bearer [ 553.885257][ T5810] usb 4-1: USB disconnect, device number 11 [ 553.959585][ T30] audit: type=1400 audit(1786550702.064:537): avc: denied { create } for pid=12293 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 554.054218][ T30] audit: type=1400 audit(1786550702.094:538): avc: denied { read } for pid=12293 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 555.151939][ T30] audit: type=1800 audit(1786550703.224:539): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2040" name="file" dev="configfs" ino=35023 res=0 errno=0 [ 555.595541][ T3285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.628282][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.991722][T12326] syzkaller0: entered promiscuous mode [ 556.004491][T12326] syzkaller0: entered allmulticast mode [ 556.021384][T12326] tipc: Enabled bearer , priority 0 [ 556.030485][T12325] tipc: Resetting bearer [ 556.262281][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.192337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 557.377619][T12325] tipc: Disabling bearer [ 557.449737][ T5691] tipc: Node number set to 177229225 [ 557.721805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 557.875384][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 557.928611][T12347] syzkaller0: entered promiscuous mode [ 557.947666][T12347] syzkaller0: entered allmulticast mode [ 558.426062][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.432077][ T3285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.497387][ T30] audit: type=1800 audit(1786550706.584:540): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2053" name="file" dev="configfs" ino=35096 res=0 errno=0 [ 558.725262][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.790275][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.967627][ T5614] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 561.342990][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.355552][ T3285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.751049][T12404] syzkaller0: entered promiscuous mode [ 561.786404][T12404] syzkaller0: entered allmulticast mode [ 561.919802][T12411] tipc: Enabled bearer , priority 0 [ 561.983477][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.638055][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.651164][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.663373][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.030166][ T5614] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 563.032043][T12403] tipc: Resetting bearer [ 563.040802][ T5614] Bluetooth: hci1: Injecting HCI hardware error event [ 563.054733][ T5614] Bluetooth: hci1: hardware error 0x00 [ 563.178120][ T30] audit: type=1800 audit(1786550711.284:541): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2067" name="file" dev="configfs" ino=35958 res=0 errno=0 [ 563.607820][T12403] tipc: Disabling bearer [ 563.860770][ T5691] tipc: Node number set to 3018428138 [ 563.902078][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.902620][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.558312][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.579400][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.113974][ T5614] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 566.132846][T12465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.546361][T12488] syzkaller0: entered promiscuous mode [ 566.557833][T12488] syzkaller0: entered allmulticast mode [ 566.619887][T12469] tipc: Enabled bearer , priority 0 [ 566.691740][T12271] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 566.733154][T12465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.798098][T12467] tipc: Resetting bearer [ 566.843538][T12467] tipc: Disabling bearer [ 566.861784][T12271] usb 5-1: Using ep0 maxpacket: 32 [ 566.895523][T12271] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 566.932711][T12271] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.949602][T12465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.960249][T12271] usb 5-1: config 0 has no interface number 0 [ 566.968697][T12271] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 566.994389][T12271] usb 5-1: config 0 interface 1 has no altsetting 0 [ 567.034669][T12271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.054722][T12271] usb 5-1: Product: syz [ 567.063775][T12271] usb 5-1: Manufacturer: syz [ 567.080870][T12271] usb 5-1: SerialNumber: syz [ 567.092827][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.103979][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.119306][T12271] usb 5-1: config 0 descriptor?? [ 567.179318][T12465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.362569][T12271] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 567.388315][T12271] cx231xx 5-1:0.1: Not found matching IAD interface [ 567.436600][T12271] usb 5-1: USB disconnect, device number 14 [ 567.561749][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.661733][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.736049][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.768316][ T151] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.784659][ T151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.302226][ T30] audit: type=1800 audit(1786550716.354:542): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2096" name="file" dev="configfs" ino=35435 res=0 errno=0 [ 568.382626][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.351892][ T2161] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 569.541839][ T2161] usb 5-1: Using ep0 maxpacket: 16 [ 569.548429][ T2161] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 569.564492][ T2161] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 569.574377][ T2161] usb 5-1: config 0 has no interface number 0 [ 569.584954][ T2161] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 569.597148][ T2161] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 569.611193][ T2161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.620611][ T2161] usb 5-1: Product: syz [ 569.637705][T12533] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 569.645812][ T30] audit: type=1400 audit(1786550717.734:543): avc: denied { bind } for pid=12530 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 569.667007][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.682377][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.695626][ T2161] usb 5-1: Manufacturer: syz [ 569.705171][ T2161] usb 5-1: SerialNumber: syz [ 569.711420][ T30] audit: type=1400 audit(1786550717.744:544): avc: denied { getopt } for pid=12530 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 569.732103][ T2161] usb 5-1: config 0 descriptor?? [ 569.739305][T12520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.750479][T12520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.757789][ T30] audit: type=1400 audit(1786550717.744:545): avc: denied { bind } for pid=12530 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 569.780662][ T30] audit: type=1400 audit(1786550717.744:546): avc: denied { setopt } for pid=12530 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 569.989969][T12520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.999744][T12520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 570.303600][ T2161] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 570.322023][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.355634][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.407061][ T2161] asix 5-1:0.34: probe with driver asix failed with error -61 [ 570.441461][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803758d800: rx timeout, send abort [ 570.453294][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803758fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 570.523485][ T30] audit: type=1400 audit(1786550718.584:547): avc: denied { read } for pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 570.940340][ T30] audit: type=1400 audit(1786550718.584:548): avc: denied { search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.952287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803758d800: abort rx timeout. Force session deactivation [ 571.079437][ T30] audit: type=1400 audit(1786550718.594:549): avc: denied { write search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.160569][ T30] audit: type=1400 audit(1786550718.594:550): avc: denied { add_name } for pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.256698][ T30] audit: type=1400 audit(1786550718.594:551): avc: denied { create } for pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 572.123266][ T5601] usb 5-1: USB disconnect, device number 15 [ 572.258439][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.266041][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.627248][T12581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.469811][T12598] syzkaller0: entered promiscuous mode [ 573.482258][T12598] syzkaller0: entered allmulticast mode [ 573.504656][T12598] tipc: Enabled bearer , priority 0 [ 573.529747][T12598] tipc: Resetting bearer [ 573.531727][ T5810] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 573.551417][T12597] tipc: Resetting bearer [ 573.648958][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d18c00: rx timeout, send abort [ 573.657637][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054d18400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 573.673843][T12597] tipc: Disabling bearer [ 573.756773][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 573.756789][ T30] audit: type=1400 audit(1786550721.864:560): avc: denied { create } for pid=12608 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.040035][T12612] hub 5-0:1.0: USB hub found [ 574.050930][T12612] hub 5-0:1.0: 1 port detected [ 574.061413][ T30] audit: type=1400 audit(1786550722.144:561): avc: denied { setopt } for pid=12608 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.083976][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 574.142124][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.155363][ T5810] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 574.157243][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d18c00: abort rx timeout. Force session deactivation [ 574.178338][ T5810] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 574.192894][ T5810] usb 3-1: config 0 has no interface number 0 [ 574.203416][ T5810] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 574.215168][ T5810] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 574.431508][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.452857][ T5810] usb 3-1: Product: syz [ 574.928798][ T5810] usb 3-1: Manufacturer: syz [ 574.933586][ T5810] usb 3-1: SerialNumber: syz [ 574.940726][ T5810] usb 3-1: config 0 descriptor?? [ 574.947454][T12594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.979269][T12594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.293036][T12594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.348171][T12594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.443965][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.817708][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.022057][ T5810] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 576.088100][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.107682][ T5810] asix 3-1:0.34: probe with driver asix failed with error -61 [ 576.398466][ T30] audit: type=1400 audit(1786550724.454:562): avc: denied { ioctl } for pid=12643 comm="syz.0.2142" path="socket:[35722]" dev="sockfs" ino=35722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 576.487399][ T30] audit: type=1400 audit(1786550724.454:563): avc: denied { bind } for pid=12643 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.507805][ T30] audit: type=1400 audit(1786550724.454:564): avc: denied { write } for pid=12643 comm="syz.0.2142" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.572239][ T30] audit: type=1400 audit(1786550724.464:565): avc: denied { connect } for pid=12643 comm="syz.0.2142" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.652949][ T30] audit: type=1400 audit(1786550724.484:566): avc: denied { shutdown } for pid=12643 comm="syz.0.2142" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.695776][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.236771][T12671] syzkaller0: entered promiscuous mode [ 577.243682][T12671] syzkaller0: entered allmulticast mode [ 577.348874][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.385178][T12671] tipc: Enabled bearer , priority 0 [ 577.962295][T12669] tipc: Resetting bearer [ 577.985780][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.048260][T11933] usb 3-1: USB disconnect, device number 22 [ 578.059738][T12669] tipc: Disabling bearer [ 578.480807][T12690] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 579.892191][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.210748][T12726] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 580.481345][ T30] audit: type=1400 audit(1786550728.584:567): avc: denied { read } for pid=12733 comm="syz.0.2174" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.822518][ T30] audit: type=1400 audit(1786550728.754:568): avc: denied { read } for pid=12730 comm="syz.3.2172" path="socket:[35832]" dev="sockfs" ino=35832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.193192][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.204380][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.216465][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.227687][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.364666][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2178'. [ 583.061096][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 583.073966][T12759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12759 comm=syz.0.2184 [ 583.094814][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.431540][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2189'. [ 583.738144][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.127497][ T30] audit: type=1400 audit(1786550732.234:569): avc: denied { getopt } for pid=12778 comm="syz.4.2192" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.761441][T12809] tipc: Enabling of bearer rejected, failed to enable media [ 585.653116][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.186962][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 586.288897][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'. [ 586.292161][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.307059][T12866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12866 comm=syz.0.2223 [ 586.610100][T12877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.830145][T12877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.068693][T12877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.259845][T12877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.354799][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.581964][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.592998][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.712982][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 587.734889][ T30] audit: type=1400 audit(1786550735.834:570): avc: denied { shutdown } for pid=12888 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.758618][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 587.792468][T12890] dummy0: entered promiscuous mode [ 587.797657][T12890] dummy0: entered allmulticast mode [ 587.805307][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.855289][ T7900] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.977687][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.084326][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.218103][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.889616][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.944636][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 589.454660][T12919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 589.493424][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.085163][T12921] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.2238' sets config #0 [ 590.407532][ T30] audit: type=1400 audit(1786550738.514:571): avc: denied { listen } for pid=12927 comm="syz.2.2242" lport=42361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 590.490041][ T30] audit: type=1400 audit(1786550738.514:572): avc: denied { accept } for pid=12927 comm="syz.2.2242" lport=42361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 590.574401][T12936] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.2238' sets config #1 [ 591.175736][T12955] lo speed is unknown, defaulting to 1000 [ 591.413776][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.425158][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.211562][T12975] tipc: Enabling of bearer rejected, failed to enable media [ 593.462123][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.464341][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.638952][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.973767][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.384240][ T30] audit: type=1400 audit(1786550742.494:573): avc: denied { mount } for pid=13012 comm="syz.2.2262" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 594.891555][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.929835][ T30] audit: type=1400 audit(1786550743.014:574): avc: denied { getopt } for pid=13012 comm="syz.2.2262" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 595.631321][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.641761][ T30] audit: type=1400 audit(1786550745.634:575): avc: denied { read } for pid=13053 comm="syz.5.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 597.674442][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.682963][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.773214][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 599.094261][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.211266][T13067] lo speed is unknown, defaulting to 1000 [ 600.640487][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.671978][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.689717][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.801112][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.019408][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.695275][ T30] audit: type=1400 audit(1786550750.794:576): avc: denied { mounton } for pid=13130 comm="syz.5.2306" path="/proc/484/task" dev="proc" ino=37628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 602.773624][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.932017][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.304334][T13154] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 603.499640][T13154] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 603.509565][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2315'. [ 604.085027][ C0] Unknown status report in ack skb [ 604.508117][T13182] tipc: Enabled bearer , priority 0 [ 604.561737][ T5810] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 604.573935][T13180] tipc: Disabling bearer [ 604.712044][ T5810] usb 3-1: device descriptor read/64, error -71 [ 604.857106][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.971856][ T5810] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 605.363742][ T5810] usb 3-1: device descriptor read/64, error -71 [ 605.554693][ T5810] usb usb3-port1: attempt power cycle [ 605.596767][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 605.612896][T13199] veth0_macvtap: left promiscuous mode [ 605.633242][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 605.822778][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.921698][ T5810] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 605.956545][ T5810] usb 3-1: device descriptor read/8, error -71 [ 606.132307][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.146823][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.211851][ T5810] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 606.229698][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'. [ 606.233671][ T5810] usb 3-1: device descriptor read/8, error -71 [ 606.736050][ T5810] usb usb3-port1: unable to enumerate USB device [ 606.773347][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.481516][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.057134][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.087743][ T30] audit: type=1400 audit(1786550756.194:577): avc: denied { write } for pid=13236 comm="syz.2.2351" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 608.113339][T13237] random: crng reseeded on system resumption [ 608.694488][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.920230][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2363'. [ 610.023365][T13279] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 610.616244][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.218281][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.892821][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.903734][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.917876][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.057462][T13305] syzkaller0: entered promiscuous mode [ 612.071978][T13305] syzkaller0: entered allmulticast mode [ 612.083833][T13305] tipc: Enabled bearer , priority 0 [ 612.108830][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 612.132188][T13305] tipc: Resetting bearer [ 612.153671][T13302] tipc: Resetting bearer [ 612.175441][T13302] tipc: Disabling bearer [ 612.256163][T13312] dummy0: entered promiscuous mode [ 612.427427][T13318] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 612.712214][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 612.966728][T13339] lo speed is unknown, defaulting to 1000 [ 613.479567][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.176695][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.254822][T13357] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 614.263018][T13357] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 614.270463][T13357] veth1_virt_wifi: entered allmulticast mode [ 614.278248][T13357] veth1_virt_wifi: left allmulticast mode [ 614.453999][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.712079][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 614.884149][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 614.895789][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 615.411467][ T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 615.420009][ T10] usb 6-1: config 0 has no interface number 0 [ 615.426487][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 615.442616][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 615.467875][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.492797][ T10] usb 6-1: Product: syz [ 615.500906][ T10] usb 6-1: Manufacturer: syz [ 615.516019][ T10] usb 6-1: SerialNumber: syz [ 615.537520][ T10] usb 6-1: config 0 descriptor?? [ 615.559741][T13362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.578589][T13362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.595536][T13387] random: crng reseeded on system resumption [ 615.615321][ T30] audit: type=1400 audit(1786550763.724:578): avc: denied { ioctl } for pid=13386 comm="syz.0.2405" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 615.804589][T13362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.813951][T13362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 616.022937][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 616.356605][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2410'. [ 616.785168][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.819712][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 616.845521][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 616.898113][ T10] asix 6-1:0.34: probe with driver asix failed with error -61 [ 617.022257][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.846401][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2422'. [ 618.152310][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.163665][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.258931][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.401218][ T2161] usb 6-1: USB disconnect, device number 8 [ 618.599563][T13449] netlink: 'syz.5.2426': attribute type 16 has an invalid length. [ 618.635754][T13449] netlink: 'syz.5.2426': attribute type 3 has an invalid length. [ 618.663826][T13449] netlink: 'syz.5.2426': attribute type 27 has an invalid length. [ 618.680986][T13449] netlink: 64042 bytes leftover after parsing attributes in process `syz.5.2426'. [ 618.884865][ T30] audit: type=1400 audit(1786550766.964:579): avc: denied { setopt } for pid=13457 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 618.942135][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.997187][ T30] audit: type=1400 audit(1786550767.014:580): avc: denied { append } for pid=13461 comm="syz.3.2433" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 619.573221][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.627040][T13472] hub 5-0:1.0: USB hub found [ 619.648521][T13472] hub 5-0:1.0: 1 port detected [ 620.025922][T11933] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 620.181672][T11933] usb 5-1: Using ep0 maxpacket: 16 [ 620.200072][T11933] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 620.212852][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.223578][T11933] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 620.251778][T11933] usb 5-1: config 0 has no interface number 0 [ 620.272040][T11933] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 620.303103][T11933] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 620.330402][T11933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.347991][T11933] usb 5-1: Product: syz [ 620.358422][T11933] usb 5-1: Manufacturer: syz [ 620.370160][T11933] usb 5-1: SerialNumber: syz [ 620.395314][T11933] usb 5-1: config 0 descriptor?? [ 620.412337][T13471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.428553][T13471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.792829][T13471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.859056][T13471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 621.145184][T11933] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 621.348117][T11933] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 621.379912][T11933] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 621.405725][T11933] asix 5-1:0.34: probe with driver asix failed with error -61 [ 622.132629][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.309396][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 622.587936][ T5601] usb 5-1: USB disconnect, device number 16 [ 622.773263][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.769218][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.902947][T13551] [U] [ 623.914093][T13551] [U]  [ 623.916891][T13551] [U]  [ 623.926092][T13551] [U] [ 623.928815][T13551] [U] [ 623.931514][T13551] [U] [ 623.935142][T13551] [U] [ 623.937860][T13551] [U] [ 623.940561][T13551] [U] [ 623.943255][T13551] [U] [ 624.038112][T13551] [U] [ 624.040851][T13551] [U] [ 624.043548][T13551] [U] [ 624.046240][T13551] [U] [ 624.049190][T13551] [U] [ 624.051886][T13551] [U] [ 624.054584][T13551] [U] [ 624.057290][T13551] [U] [ 624.066256][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.074860][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.092679][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.117165][T13551] [U] [ 624.119896][T13551] [U] [ 624.122597][T13551] [U] [ 624.125295][T13551] [U] [ 624.143803][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.167915][T13551] [U] [ 624.170648][T13551] [U] [ 624.173352][T13551] [U] [ 624.176051][T13551] [U] [ 624.194833][T13551] [U] [ 624.197565][T13551] [U] [ 624.200274][T13551] [U] [ 624.202971][T13551] [U] [ 624.206391][T13551] [U] [ 624.209109][T13551] [U] [ 624.211802][T13551] [U] [ 624.214495][T13551] [U] [ 624.217665][T13551] [U] [ 624.220375][T13551] [U] [ 624.223083][T13551] [U] [ 624.225777][T13551] [U] [ 624.231360][T13551] [U] [ 624.234069][T13551] [U] [ 624.236761][T13551] [U] [ 624.239442][T13551] [U] [ 624.361549][ T30] audit: type=1400 audit(1786550772.464:581): avc: denied { bind } for pid=13556 comm="syz.3.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 624.672531][T13551] [U] [ 624.675272][T13551] [U] [ 624.677978][T13551] [U] [ 624.680678][T13551] [U] [ 624.683610][T13551] [U] [ 624.686320][T13551] [U] [ 624.689018][T13551] [U] [ 624.691719][T13551] [U] [ 624.694763][T13551] [U] [ 624.697466][T13551] [U] [ 624.700163][T13551] [U] [ 624.702839][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.702852][T13551] [U] [ 624.715882][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.746025][T13551] [U] [ 624.748763][T13551] [U] [ 624.751457][T13551] [U] [ 624.754147][T13551] [U] [ 624.772592][T13551] [U] [ 624.775328][T13551] [U] [ 624.778023][T13551] [U] [ 624.780709][T13551] [U] [ 624.788473][T13551] [U] [ 624.791193][T13551] [U] [ 624.793892][T13551] [U] [ 624.796584][T13551] [U] [ 624.799275][T13551] [U] [ 624.805330][T13551] [U] [ 625.084542][T13582] netlink: 'syz.4.2474': attribute type 29 has an invalid length. [ 625.118773][T13582] netlink: 'syz.4.2474': attribute type 29 has an invalid length. [ 625.149829][T13582] netlink: 'syz.4.2474': attribute type 29 has an invalid length. [ 625.164083][T13587] netlink: 'syz.0.2477': attribute type 153 has an invalid length. [ 625.482231][ T30] audit: type=1400 audit(1786550773.584:582): avc: denied { write } for pid=13600 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 625.947252][ T30] audit: type=1400 audit(1786550774.054:583): avc: denied { read } for pid=5258 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 625.986599][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.892248][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.533071][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.997068][T13685] syzkaller0: entered promiscuous mode [ 629.008241][T13685] syzkaller0: entered allmulticast mode [ 629.184310][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.812171][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.823602][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.453980][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.465283][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.098115][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.012019][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.329439][T13733] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2534'. [ 633.447857][T13739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2536'. [ 633.567767][T13749] netlink: 'syz.3.2540': attribute type 21 has an invalid length. [ 633.597650][T13749] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.945126][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 634.051041][T13771] lo: entered allmulticast mode [ 634.068338][T13771] lo: left allmulticast mode [ 634.142847][T13777] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 634.229632][T13775] syzkaller0: entered promiscuous mode [ 634.241456][T13775] syzkaller0: entered allmulticast mode [ 634.264378][T13782] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 634.284308][T13784] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 634.309029][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.979539][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.992340][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.579733][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.212329][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.222003][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.852470][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.097559][T13805] lo: entered allmulticast mode [ 637.108218][T13805] lo: left allmulticast mode [ 637.981193][T13848] lo: entered allmulticast mode [ 637.997639][T13848] lo: left allmulticast mode [ 638.628273][T13868] netlink: 'syz.2.2589': attribute type 3 has an invalid length. [ 639.790817][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 639.987936][ T30] audit: type=1400 audit(1786550788.094:584): avc: denied { getattr } for pid=13901 comm="syz.0.2603" path="pid:[4026532785]" dev="nsfs" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 640.106485][ T30] audit: type=1400 audit(1786550788.214:585): avc: denied { mount } for pid=13901 comm="syz.0.2603" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 640.695546][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.708666][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.712415][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.774973][ T30] audit: type=1400 audit(1786550788.884:586): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 641.198530][ T30] audit: type=1400 audit(1786550789.304:587): avc: denied { write } for pid=13938 comm="syz.3.2618" name="nullb" dev="configfs" ino=1763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.238997][T13943] loop9: detected capacity change from 0 to 524287997 [ 641.254940][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.313676][ T30] audit: type=1400 audit(1786550789.304:588): avc: denied { create } for pid=13938 comm="syz.3.2618" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 641.334430][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.407044][ T30] audit: type=1800 audit(1786550789.394:589): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2618" name="power" dev="configfs" ino=40786 res=0 errno=0 [ 641.618872][T13940] null_blk: disk nullb1 created [ 642.167484][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.596035][T13970] netlink: 'syz.4.2627': attribute type 29 has an invalid length. [ 642.613650][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.624525][T13970] netlink: 'syz.4.2627': attribute type 29 has an invalid length. [ 642.895648][T13981] netlink: 'syz.5.2632': attribute type 10 has an invalid length. [ 642.926670][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.936669][T13981] team0: Port device bond0 added [ 643.066458][ T30] audit: type=1800 audit(1786550791.174:590): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2634" name="power" dev="configfs" ino=41452 res=0 errno=0 [ 643.968544][T14003] tipc: Enabled bearer , priority 0 [ 644.700404][T14002] tipc: Disabling bearer [ 644.724288][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2644'. [ 644.795986][T14022] syzkaller0: entered promiscuous mode [ 644.809478][T14022] syzkaller0: entered allmulticast mode [ 644.831989][T14022] tipc: Enabled bearer , priority 0 [ 644.842986][T14022] tipc: Resetting bearer [ 644.855562][T14021] tipc: Resetting bearer [ 645.003249][ T30] audit: type=1800 audit(1786550793.114:591): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2648" name="power" dev="configfs" ino=41554 res=0 errno=0 [ 645.088448][T14021] tipc: Disabling bearer [ 645.208694][T14037] netlink: 'syz.5.2654': attribute type 29 has an invalid length. [ 645.350070][T14037] netlink: 'syz.5.2654': attribute type 29 has an invalid length. [ 645.812904][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.453197][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.475078][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.606401][ T30] audit: type=1800 audit(1786550794.714:592): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2664" name="power" dev="configfs" ino=41632 res=0 errno=0 [ 647.092340][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.105656][T14080] loop9: detected capacity change from 0 to 524287997 [ 647.232556][T14078] veth0_vlan: left promiscuous mode [ 647.266397][T14087] lo: entered allmulticast mode [ 647.470100][ T30] audit: type=1800 audit(1786550795.574:593): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2676" name="power" dev="configfs" ino=41683 res=0 errno=0 [ 647.736202][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.373315][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.436097][ T30] audit: type=1800 audit(1786550796.544:594): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2687" name="power" dev="configfs" ino=42186 res=0 errno=0 [ 648.574431][ T30] audit: type=1326 audit(1786550796.684:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.5.2690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67db9e0d9 code=0x7ffc0000 [ 648.675055][ T30] audit: type=1326 audit(1786550796.754:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.5.2690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67db9e0d9 code=0x7ffc0000 [ 649.276348][ T30] audit: type=1326 audit(1786550796.754:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.5.2690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa67db9e0d9 code=0x7ffc0000 [ 649.302972][ T30] audit: type=1326 audit(1786550796.764:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.5.2690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67db9e0d9 code=0x7ffc0000 [ 649.331111][ T30] audit: type=1326 audit(1786550796.764:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.5.2690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67db9e0d9 code=0x7ffc0000 [ 650.009581][T14146] loop9: detected capacity change from 0 to 524287997 [ 650.788318][T14159] syzkaller0: entered promiscuous mode [ 650.826785][T14159] syzkaller0: entered allmulticast mode [ 650.950689][ T30] audit: type=1800 audit(1786550799.054:600): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2702" name="power" dev="configfs" ino=41854 res=0 errno=0 [ 651.937137][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.214553][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.226383][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.226383][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.285574][T14189] loop9: detected capacity change from 0 to 524287997 [ 652.686907][ T30] audit: type=1400 audit(1786550800.794:601): avc: denied { ioctl } for pid=14199 comm="syz.5.2713" path="socket:[42329]" dev="sockfs" ino=42329 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 652.745548][ T30] audit: type=1400 audit(1786550800.854:602): avc: denied { write } for pid=14188 comm="syz.2.2708" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 652.770051][T14201] binder: 14188:14201 ioctl c0306201 0 returned -14 [ 652.779854][T14201] binder: 14188:14201 ioctl c0306201 200000000040 returned -22 [ 653.359935][ T30] audit: type=1800 audit(1786550801.464:603): pid=14203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2714" name="power" dev="configfs" ino=41914 res=0 errno=0 [ 653.427644][T14208] syzkaller0: entered promiscuous mode [ 653.457179][T14208] syzkaller0: entered allmulticast mode [ 653.494052][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.505267][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.538192][T14214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2719'. [ 653.687109][ T30] audit: type=1400 audit(1786550801.794:604): avc: denied { read } for pid=14221 comm="syz.3.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 654.141198][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.935895][ T30] audit: type=1800 audit(1786550803.044:605): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2729" name="power" dev="configfs" ino=42397 res=0 errno=0 [ 655.746641][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2733'. [ 655.773386][T14258] syzkaller0: entered promiscuous mode [ 655.792682][T14258] syzkaller0: entered allmulticast mode [ 656.046686][ T30] audit: type=1800 audit(1786550804.154:606): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2742" name="power" dev="configfs" ino=42462 res=0 errno=0 [ 656.309473][T14277] CIFS: Attempting to mount //127.0.0.1/share [ 656.323334][T14277] CIFS: VFS: Error connecting to socket. Aborting operation. [ 656.330848][T14277] CIFS: VFS: cifs_mount failed w/return code = -111 [ 656.955881][T14281] Invalid ELF header type: 3 != 1 [ 657.124393][ T30] audit: type=1400 audit(1786550805.014:607): avc: denied { module_load } for pid=14272 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 657.286019][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.498510][ T30] audit: type=1400 audit(1786550805.594:608): avc: denied { unmount } for pid=10259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 657.616763][ T30] audit: type=1400 audit(1786550805.724:609): avc: denied { accept } for pid=14289 comm="syz.2.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 658.131795][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.154712][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.173249][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.402191][T14310] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 658.622046][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.682117][T14322] lo: entered allmulticast mode [ 659.266856][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.819728][T14335] syzkaller0: entered promiscuous mode [ 659.847004][T14335] syzkaller0: entered allmulticast mode [ 659.894955][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.583403][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.247730][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2770'. [ 661.468377][T14372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2773'. [ 662.035941][T14375] netlink: 'syz.3.2774': attribute type 3 has an invalid length. [ 662.094652][T14377] syzkaller0: entered promiscuous mode [ 662.109583][T14377] syzkaller0: entered allmulticast mode [ 662.456143][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.074062][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.074582][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.085210][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.099273][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.022779][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.217466][T14433] syzkaller0: entered promiscuous mode [ 665.228657][T14433] syzkaller0: entered allmulticast mode [ 666.292167][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.302547][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.382366][ T30] audit: type=1400 audit(1786550814.494:610): avc: denied { read } for pid=14448 comm="syz.3.2802" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 666.417243][ T30] audit: type=1400 audit(1786550814.494:611): avc: denied { open } for pid=14448 comm="syz.3.2802" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 668.212364][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.173316][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.247824][T14475] loop9: detected capacity change from 0 to 524287997 [ 669.553620][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.564900][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.587951][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.601052][ T30] audit: type=1400 audit(1786550817.604:612): avc: denied { create } for pid=14477 comm="syz.3.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 669.713017][ T30] audit: type=1400 audit(1786550817.604:613): avc: denied { ioctl } for pid=14477 comm="syz.3.2809" path="socket:[42810]" dev="sockfs" ino=42810 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 669.791446][T14487] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2811'. [ 669.989085][T14491] netlink: set zone limit has 8 unknown bytes [ 670.429254][ T30] audit: type=1400 audit(1786550818.534:614): avc: denied { append } for pid=14509 comm="syz.5.2820" name="video5" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 671.122056][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.250544][T14519] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2823'. [ 671.422227][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.695036][ T30] audit: type=1400 audit(1786550819.804:615): avc: denied { write } for pid=14533 comm="syz.4.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 671.818763][T14538] exFAT-fs (nullb0): invalid boot record signature [ 671.835724][T14538] exFAT-fs (nullb0): failed to read boot sector [ 671.849809][T14538] exFAT-fs (nullb0): failed to recognize exfat type [ 672.052085][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.194698][T14550] syzkaller0: entered promiscuous mode [ 672.200457][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2841'. [ 672.206226][T14550] syzkaller0: entered allmulticast mode [ 673.305588][T14550] tipc: Enabled bearer , priority 0 [ 673.326997][T14550] tipc: Resetting bearer [ 673.360542][T14549] tipc: Resetting bearer [ 673.424380][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.457482][T14549] tipc: Disabling bearer [ 673.841967][ T5719] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 674.061987][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 674.106028][ T5719] usb 1-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=5e.3f [ 674.156054][ T5719] usb 1-1: config 6 has an invalid interface number: 221 but max is 0 [ 674.185524][ T5719] usb 1-1: config 6 has no interface number 0 [ 674.207068][ T5719] usb 1-1: config 6 interface 221 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 674.238463][ T5719] usb 1-1: config 6 interface 221 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 674.263752][ T5719] usb 1-1: config 6 interface 221 has no altsetting 0 [ 674.280227][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.301895][ T5719] usb 1-1: Product: syz [ 674.311635][ T5719] usb 1-1: Manufacturer: syz [ 674.323218][ T5719] usb 1-1: SerialNumber: syz [ 674.406466][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'. [ 674.588982][ T5719] ftdi_sio 1-1:6.221: FTDI USB Serial Device converter detected [ 674.617310][ T5719] ftdi_sio ttyUSB0: unknown device type: 0x5e3f [ 674.624019][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.680258][ T5719] usb 1-1: USB disconnect, device number 15 [ 674.732455][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2855'. [ 674.751812][ T5719] ftdi_sio 1-1:6.221: device disconnected [ 674.804369][T14591] netlink: set zone limit has 8 unknown bytes [ 675.861404][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.861526][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.877724][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.278117][T14601] syzkaller0: entered promiscuous mode [ 676.306847][T14601] syzkaller0: entered allmulticast mode [ 676.317582][T14601] tipc: Enabled bearer , priority 0 [ 676.327406][T14601] tipc: Resetting bearer [ 676.392383][T14598] tipc: Resetting bearer [ 676.462688][T14598] tipc: Disabling bearer [ 676.533216][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.541832][ T30] audit: type=1400 audit(1786550825.534:616): avc: denied { relabelfrom } for pid=14615 comm="syz.4.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 677.630711][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.746294][ T30] audit: type=1400 audit(1786550825.534:617): avc: denied { relabelto } for pid=14615 comm="syz.4.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 677.813535][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.343586][ T30] audit: type=1400 audit(1786550826.444:618): avc: denied { audit_write } for pid=14626 comm="syz.5.2869" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 678.636236][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 678.955586][T14642] netlink: 'syz.3.2873': attribute type 61 has an invalid length. [ 679.237973][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.697073][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.345839][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.420704][ T30] audit: type=1400 audit(1786550829.524:619): avc: denied { ioctl } for pid=14675 comm="syz.2.2885" path="socket:[43759]" dev="sockfs" ino=43759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 681.514858][ T30] audit: type=1400 audit(1786550829.574:620): avc: denied { map } for pid=14675 comm="syz.2.2885" path="/dev/video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 681.652192][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.664058][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.808056][ T30] audit: type=1400 audit(1786550829.914:621): avc: denied { lock } for pid=14684 comm="syz.3.2890" path="socket:[44228]" dev="sockfs" ino=44228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 682.297095][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.945422][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.583372][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.569759][T14721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2901'. [ 684.665710][T14722] hub 5-0:1.0: USB hub found [ 684.671654][T14722] hub 5-0:1.0: 1 port detected [ 685.493355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.500926][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.512720][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.524623][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.507278][ C0] Unknown status report in ack skb [ 686.775419][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.797117][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 686.972135][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 686.989268][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 687.014287][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 687.035635][ T10] usb 4-1: config 0 has no interface number 0 [ 687.059372][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.084400][ T10] usb 4-1: Product: syz [ 687.096592][ T10] usb 4-1: Manufacturer: syz [ 687.112687][ T10] usb 4-1: SerialNumber: syz [ 687.133838][ T10] usb 4-1: config 0 descriptor?? [ 687.149812][T14766] netlink: 'syz.4.2915': attribute type 3 has an invalid length. [ 687.352660][ T10] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 687.369344][ T10] uvcvideo 4-1:0.31: No valid video chain found. [ 687.379731][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'. [ 687.391174][ T10] usb 4-1: USB disconnect, device number 12 [ 687.412605][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.553991][T14779] syzkaller0: entered promiscuous mode [ 687.559623][T14779] syzkaller0: entered allmulticast mode [ 687.593578][ T30] audit: type=1400 audit(1786550835.674:622): avc: denied { write } for pid=14778 comm="syz.2.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 688.055719][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.520724][T14793] openvswitch: netlink: IP tunnel dst address not specified [ 688.710132][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.332990][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.956725][T14829] Invalid ELF header type: 3 != 1 [ 691.150657][T14840] tipc: Enabled bearer , priority 0 [ 691.182666][T14840] tipc: Resetting bearer [ 691.323960][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.750863][T14839] tipc: Disabling bearer [ 691.892822][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.173075][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.794993][T14877] dummy0: left promiscuous mode [ 693.812605][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.909546][T14877] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 693.985348][T14877] 8021q: adding VLAN 0 to HW filter on device eth0 [ 694.027266][T14877] 8021q: adding VLAN 0 to HW filter on device eth1 [ 694.075518][T14877] 8021q: adding VLAN 0 to HW filter on device eth2 [ 694.097311][T14877] 8021q: adding VLAN 0 to HW filter on device eth3 [ 694.133118][T14877] batman_adv: batadv0: Interface activated: vxlan0 [ 694.200881][T14882] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 694.264423][ T8303] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.318241][ T8303] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.361836][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.387303][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.547145][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 694.576783][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.014758][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.025572][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.035046][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.042970][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.051684][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.117943][T14923] Invalid ELF header type: 3 != 1 [ 696.620716][ T30] audit: type=1400 audit(1786550844.724:623): avc: denied { setopt } for pid=14926 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 696.985877][T14941] netlink: zone id is out of range [ 697.004106][T14941] netlink: zone id is out of range [ 697.013327][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.035825][T14941] netlink: zone id is out of range [ 697.052959][T14941] netlink: zone id is out of range [ 697.067969][T14941] netlink: zone id is out of range [ 697.091136][T14941] netlink: zone id is out of range [ 697.107955][T14941] netlink: set zone limit has 8 unknown bytes [ 697.745499][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.588824][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2983'. [ 698.611738][ T5614] Bluetooth: hci5: command tx timeout [ 699.142146][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.244789][T14914] lo speed is unknown, defaulting to 1000 [ 699.573662][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.844813][ T6460] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.864728][T14986] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 699.876519][T14986] tipc: Enabled bearer , priority 10 [ 700.222519][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.258326][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.517739][T14990] syzkaller0: entered promiscuous mode [ 700.523308][T14990] syzkaller0: entered allmulticast mode [ 700.867660][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.107690][ T5614] Bluetooth: hci5: command tx timeout [ 701.130565][ T6460] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.129594][ T5810] tipc: Node number set to 3913845979 [ 702.170704][T15008] netlink: zone id is out of range [ 702.175884][T15008] netlink: zone id is out of range [ 702.180991][T15008] netlink: zone id is out of range [ 702.186471][T15008] netlink: zone id is out of range [ 702.193411][T15008] netlink: zone id is out of range [ 702.199483][T15008] netlink: zone id is out of range [ 702.203852][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.213622][T15008] netlink: set zone limit has 4 unknown bytes [ 702.378371][T14914] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.385772][T14914] bridge_slave_0: entered allmulticast mode [ 702.397859][T14914] bridge_slave_0: entered promiscuous mode [ 702.514154][ T6460] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.910845][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.937496][T14914] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.945230][T14914] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.952547][T14914] bridge_slave_1: entered allmulticast mode [ 702.961704][T14914] bridge_slave_1: entered promiscuous mode [ 703.181686][ T5614] Bluetooth: hci5: command tx timeout [ 703.281826][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.476695][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.804936][ T6460] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.877754][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.046401][T14914] team0: Port device team_slave_0 added [ 704.061341][T14914] team0: Port device team_slave_1 added [ 704.607170][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.622525][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.677177][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.694312][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.784561][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.841967][T15045] netlink: zone id is out of range [ 704.847194][T15045] netlink: zone id is out of range [ 704.853509][T15045] netlink: zone id is out of range [ 704.928564][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.251631][ T5614] Bluetooth: hci5: command tx timeout [ 705.335411][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.785170][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.811251][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.972750][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.985053][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.466050][T14914] hsr_slave_0: entered promiscuous mode [ 706.480574][T14914] hsr_slave_1: entered promiscuous mode [ 706.496225][T14914] debugfs: 'hsr0' already exists in 'hsr' [ 706.502575][T14914] Cannot create hsr debugfs directory [ 706.614723][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 707.756867][ T6460] bridge_slave_1: left allmulticast mode [ 707.775066][ T6460] bridge_slave_1: left promiscuous mode [ 707.795072][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.826655][ T6460] bridge_slave_0: left allmulticast mode [ 707.844941][ T6460] bridge_slave_0: left promiscuous mode [ 707.856818][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.964637][ T6460] lo: left allmulticast mode [ 708.165514][T15085] hub 5-0:1.0: USB hub found [ 708.185278][T15085] hub 5-0:1.0: 1 port detected [ 708.559485][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.929805][ T6460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.015489][ T6460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.075377][ T6460] bond0 (unregistering): Released all slaves [ 709.260165][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.872196][T15099] dummy0: entered promiscuous mode [ 709.952273][ T6460] tipc: Left network mode [ 710.452638][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.482092][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.092897][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.592140][ T5719] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 711.801827][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 711.827248][ T5719] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 711.849344][T15136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3039'. [ 712.089413][ T5719] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.374304][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.411373][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.422244][ T5719] usb 6-1: Product: syz [ 712.426527][ T5719] usb 6-1: Manufacturer: syz [ 712.438309][ T5719] usb 6-1: SerialNumber: syz [ 712.751767][ T5719] usb 6-1: config 0 descriptor?? [ 712.768322][ T5719] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 712.914832][ T6460] hsr_slave_0: left promiscuous mode [ 712.926852][ T6460] hsr_slave_1: left promiscuous mode [ 712.936731][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.947043][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.955447][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.971681][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.993715][ T6460] veth1_macvtap: left promiscuous mode [ 713.000390][ T6460] veth0_macvtap: left promiscuous mode [ 713.006550][ T6460] veth1_vlan: left promiscuous mode [ 713.029243][ T6460] veth0_vlan: left promiscuous mode [ 713.634655][ T5719] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 713.669063][ T5719] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 713.679259][ T30] audit: type=1400 audit(1786550861.784:624): avc: denied { write } for pid=15137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.970787][ T30] audit: type=1400 audit(1786550862.074:625): avc: denied { write } for pid=15164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.023601][ T5719] usb 6-1: USB disconnect, device number 9 [ 714.299216][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.361347][ T6460] team0 (unregistering): Port device team_slave_1 removed [ 714.407730][ T6460] team0 (unregistering): Port device team_slave_0 removed [ 714.632018][ T5810] lo speed is unknown, defaulting to 1000 [ 714.644040][ T5810] syz2: Port: 1 Link DOWN [ 714.679716][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 714.705239][T15198] syzkaller0: entered promiscuous mode [ 714.713940][T15198] syzkaller0: entered allmulticast mode [ 714.748920][ T5884] smbdirect: ib_dev[syz2] removed [ 714.938690][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.626835][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.212791][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.454395][ T6460] IPVS: stop unused estimator thread 0... [ 716.639186][ T30] audit: type=1400 audit(1786550864.744:626): avc: denied { write } for pid=15216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.865212][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.895966][ T30] audit: type=1400 audit(1786550865.004:627): avc: denied { write } for pid=15259 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.191631][T11933] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 717.383306][T14914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 717.848557][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.900841][T14914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 717.925128][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.937865][T14914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 717.955789][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.973602][T15268] syzkaller0: entered promiscuous mode [ 717.987832][T15268] syzkaller0: entered allmulticast mode [ 717.996956][T14914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.007164][T11933] usb 1-1: Using ep0 maxpacket: 16 [ 718.013505][T11933] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.029031][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.037952][T11933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.059070][T11933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.079881][T11933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 718.090103][T11933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 718.127939][T11933] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.141376][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.192814][T11933] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.200950][T11933] usb 1-1: Manufacturer: syz [ 718.218350][T11933] usb 1-1: config 0 descriptor?? [ 718.775421][T14914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.812594][T14914] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.868688][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.875855][ T8303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.882572][T11933] rc_core: IR keymap rc-hauppauge not found [ 718.898713][T11933] Registered IR keymap rc-empty [ 718.919007][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.941136][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.948280][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.962149][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.025781][T11933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 719.119829][T11933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 719.160365][T15302] net_ratelimit: 4 callbacks suppressed [ 719.160382][T15302] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 719.234401][T15307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3074'. [ 719.252518][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.282139][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.321873][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.373447][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.399412][ T30] audit: type=1400 audit(1786550867.504:628): avc: denied { write } for pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.431895][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.505435][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.571818][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.621991][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.626503][ T30] audit: type=1400 audit(1786550867.734:629): avc: denied { write } for pid=15320 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.674145][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.732029][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.772684][T11933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 719.830981][T11933] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 719.878575][T11933] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 719.929682][T11933] usb 1-1: USB disconnect, device number 16 [ 721.098746][ T30] audit: type=1400 audit(1786550869.204:630): avc: denied { write } for pid=15330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.194373][T15364] hub 5-0:1.0: USB hub found [ 721.199262][T15364] hub 5-0:1.0: 1 port detected [ 721.333233][ T135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.415753][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.465689][ T30] audit: type=1400 audit(1786550869.574:631): avc: denied { write } for pid=15371 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.646950][T14914] veth0_vlan: entered promiscuous mode [ 721.690493][T14914] veth1_vlan: entered promiscuous mode [ 721.803008][T14914] veth0_macvtap: entered promiscuous mode [ 721.829116][T14914] veth1_macvtap: entered promiscuous mode [ 721.878212][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.912869][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.962035][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.273599][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.451911][ T5884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.552259][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.612852][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.745483][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.791885][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.843578][ T30] audit: type=1400 audit(1786550871.954:632): avc: denied { write } for pid=15380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.846030][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.902574][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.033993][ T30] audit: type=1400 audit(1786550872.144:633): avc: denied { write } for pid=15408 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.167981][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.188741][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.535976][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.728852][ T30] audit: type=1400 audit(1786550872.834:634): avc: denied { unmount } for pid=14914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 725.831989][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.092815][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.411647][ T5719] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 727.484088][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 727.502029][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 727.511172][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 727.523395][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 727.545129][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 727.581824][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 727.617448][ T5719] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 727.639654][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.778386][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.930142][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.055819][ T5719] usb 3-1: config 0 descriptor?? [ 728.372146][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.465142][T15463] netlink: 'syz.3.3112': attribute type 1 has an invalid length. [ 728.524622][T15463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.563286][ T5719] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 728.592752][ T5719] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 728.692007][ T5601] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 728.735739][ T5719] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 728.775019][ T5719] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 728.799893][ T5719] usb 3-1: USB disconnect, device number 27 [ 728.869588][ T5601] usb 6-1: Using ep0 maxpacket: 16 [ 728.875848][ T5601] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 728.887700][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.898256][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.909390][ T5601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.925029][ T5601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.943683][ T5601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.958926][ T5601] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.977612][ T5601] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.993143][ T5601] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 729.001803][ T5601] usb 6-1: Manufacturer: syz [ 729.010471][ T5601] usb 6-1: config 0 descriptor?? [ 729.015812][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.095338][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.136819][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.391713][ T5601] rc_core: IR keymap rc-hauppauge not found [ 729.399527][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.411870][ T5601] Registered IR keymap rc-empty [ 729.423526][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.437795][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.471660][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.524001][ T5601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 729.556547][ T5601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 729.571763][ T5614] Bluetooth: hci4: command tx timeout [ 729.647881][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.654095][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.701771][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.713017][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.752156][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.757563][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3119'. [ 729.769683][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.811814][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.823490][T15483] syzkaller0: entered promiscuous mode [ 729.845131][T15483] syzkaller0: entered allmulticast mode [ 729.853451][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.911819][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.942081][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 729.981818][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 730.012425][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 730.046025][ T5601] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 730.090725][ T5601] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 730.100075][ T5601] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 730.185886][ T5601] usb 6-1: USB disconnect, device number 10 [ 730.293378][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.651105][T15451] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.672571][T15451] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.704438][T15451] bridge_slave_0: entered allmulticast mode [ 730.813376][T15451] bridge_slave_0: entered promiscuous mode [ 730.863091][T15451] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.889682][T15451] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.906559][T15451] bridge_slave_1: entered allmulticast mode [ 730.935132][ T30] audit: type=1400 audit(1786550879.044:635): avc: denied { append } for pid=15514 comm="syz.2.3126" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 730.958400][T15451] bridge_slave_1: entered promiscuous mode [ 731.116583][T15451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.170645][T15451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.245221][T15525] fuse: Bad value for 'user_id' [ 731.265427][T15525] fuse: Bad value for 'user_id' [ 731.339537][T15524] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 731.514232][T15451] team0: Port device team_slave_0 added [ 731.531675][ T29] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 731.547218][T15451] team0: Port device team_slave_1 added [ 731.581575][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.651807][ T5614] Bluetooth: hci4: command tx timeout [ 731.717021][ T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 731.833879][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.004029][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.167498][T15451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.174908][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.185499][T15451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.220092][ T29] usb 3-1: config 0 descriptor?? [ 732.233379][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 732.245362][T15451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.265503][T15451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.279908][T15451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.344883][T15451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.527293][ T12] bridge_slave_1: left allmulticast mode [ 732.544506][ T29] usb 3-1: USB disconnect, device number 28 [ 732.554301][ T12] bridge_slave_1: left promiscuous mode [ 732.574112][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.589556][ T12] bridge_slave_0: left allmulticast mode [ 732.608005][ T12] bridge_slave_0: left promiscuous mode [ 732.618463][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.631945][ T12] pimreg: left allmulticast mode [ 732.650755][ T12] batman_adv: batadv0: Interface deactivated: vxlan0 [ 732.921111][ T12] batman_adv: batadv0: Removing interface: vxlan0 [ 732.923385][ T30] audit: type=1400 audit(1786550881.024:636): avc: denied { write } for pid=15544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.992185][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.002314][ T29] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 733.043915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.072312][ T12] bond0 (unregistering): Released all slaves [ 733.128394][ T30] audit: type=1400 audit(1786550881.234:637): avc: denied { write } for pid=15559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.173598][ T29] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 733.194050][T15562] mmap: syz.3.3138 (15562): VmData 37584896 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 733.235103][T15451] hsr_slave_0: entered promiscuous mode [ 733.242855][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.264269][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 733.274781][T15451] hsr_slave_1: entered promiscuous mode [ 733.299225][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.304398][T15451] debugfs: 'hsr0' already exists in 'hsr' [ 733.336921][T15451] Cannot create hsr debugfs directory [ 733.350186][ T12] tipc: Disabling bearer [ 733.356088][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.371891][ T12] tipc: Left network mode [ 733.379456][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 733.387420][ T29] usb 3-1: Product: syz [ 733.425011][ T29] usb 3-1: Manufacturer: syz [ 733.430635][ T29] usb 3-1: SerialNumber: syz [ 733.711439][ T5810] usb 3-1: USB disconnect, device number 29 [ 733.731676][ T5614] Bluetooth: hci4: command tx timeout [ 734.050184][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 734.134466][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 734.456425][ T12] hsr_slave_0: left promiscuous mode [ 734.469523][ T30] audit: type=1400 audit(1786550882.574:638): avc: denied { write } for pid=15571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.776796][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 734.940368][ T12] hsr_slave_1: left promiscuous mode [ 734.975723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.014088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.030761][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.042863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.115730][ T30] audit: type=1400 audit(1786550883.224:639): avc: denied { write } for pid=15606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.154641][ T12] veth1_macvtap: left promiscuous mode [ 735.168589][ T12] veth0_macvtap: left promiscuous mode [ 735.174322][ T12] veth1_vlan: left promiscuous mode [ 735.179622][ T12] veth0_vlan: left promiscuous mode [ 735.325811][ T5614] Bluetooth: hci2: unexpected event for opcode 0x000d [ 735.419630][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.709358][ T30] audit: type=1400 audit(1786550883.814:640): avc: denied { lock } for pid=15617 comm="syz.0.3154" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 735.894229][ T5614] Bluetooth: hci4: command tx timeout [ 736.629001][ T12] team0 (unregistering): Port device team_slave_1 removed [ 736.667054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 736.901511][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 736.925023][ T30] audit: type=1400 audit(1786550885.004:641): avc: denied { recv } for pid=15634 comm="syz.3.3162" saddr=10.128.0.169 src=30006 daddr=10.128.1.14 dest=43790 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 736.925859][T15611] syz_tun: entered allmulticast mode [ 736.963879][T15611] syz_tun: left allmulticast mode [ 737.340853][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.835448][T15645] kAFS: Invalid Command on /proc/fs/afs/cells file [ 739.902666][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.261971][ T5601] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 740.416122][ T30] audit: type=1400 audit(1786550888.524:642): avc: denied { write } for pid=15652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.475919][ T5601] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 740.499921][ T5601] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 740.541112][ T5601] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.563193][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.584430][ T5601] usb 4-1: config 0 descriptor?? [ 740.592799][T15679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 740.613766][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.633164][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.686464][ T30] audit: type=1400 audit(1786550888.794:643): avc: denied { write } for pid=15684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.072013][ T5601] hid (null): unknown global tag 0xe [ 741.081689][ T5601] hid (null): invalid report_size 32040 [ 741.099037][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.106665][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.113848][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.124225][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.134002][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.146000][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.155258][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.167738][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.176748][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.190140][ T5601] razer 0003:1532:010D.0003: unknown main item tag 0x0 [ 741.208978][ T5601] razer 0003:1532:010D.0003: unknown global tag 0xe [ 741.216874][ T5601] razer 0003:1532:010D.0003: item 0 0 1 14 parsing failed [ 741.228066][ T5601] razer 0003:1532:010D.0003: probe with driver razer failed with error -22 [ 741.315269][ T30] audit: type=1400 audit(1786550889.424:644): avc: denied { getopt } for pid=15666 comm="syz.3.3170" lport=52126 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 741.346551][ T5601] usb 4-1: USB disconnect, device number 13 [ 741.377051][ T30] audit: type=1400 audit(1786550889.444:645): avc: denied { ioctl } for pid=15666 comm="syz.3.3170" path="socket:[47832]" dev="sockfs" ino=47832 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 741.549149][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 741.810649][ T12] IPVS: stop unused estimator thread 0... [ 742.024483][T15707] kAFS: Invalid Command on /proc/fs/afs/cells file [ 742.772913][T15705] dummy0: entered promiscuous mode [ 742.819556][T15705] dummy0: entered allmulticast mode [ 742.851637][ T30] audit: type=1400 audit(1786550890.954:646): avc: denied { bind } for pid=15710 comm="syz.3.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 743.083611][T15716] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 743.099417][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.552155][ T5601] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 743.752029][ T5601] usb 1-1: Using ep0 maxpacket: 16 [ 743.767428][ T5601] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.796609][ T5601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.824094][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.844150][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 743.845557][T15451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 743.853999][ T5601] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 743.877847][ T30] audit: type=1400 audit(1786550891.984:647): avc: denied { write } for pid=15712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.880305][ T5601] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.056628][ T5601] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 744.066129][ T5601] usb 1-1: Manufacturer: syz [ 744.075016][ T5601] usb 1-1: config 0 descriptor?? [ 744.079352][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.125558][T15451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.140022][ T30] audit: type=1400 audit(1786550892.244:648): avc: denied { write } for pid=15749 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.347964][T15758] kAFS: Invalid Command on /proc/fs/afs/cells file [ 744.650401][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.799156][T15451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 745.072155][T15762] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3193'. [ 745.081015][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.109613][T15451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 745.131722][ T5601] rc_core: IR keymap rc-hauppauge not found [ 745.141117][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.155627][ T5601] Registered IR keymap rc-empty [ 745.166170][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.211924][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.254185][ T5601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 745.276808][ T5601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 745.293596][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.331921][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.442100][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.506267][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.564633][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.601014][T15451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.614851][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.652049][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.665477][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.691694][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.730542][T15451] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.731730][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.799303][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.806464][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.815612][ T5601] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.858731][ T5601] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 745.858880][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.874966][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.889987][ T5601] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 745.908293][ T30] audit: type=1400 audit(1786550894.014:649): avc: denied { write } for pid=15763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.989734][ T5601] usb 1-1: USB disconnect, device number 17 [ 746.006171][ T30] audit: type=1400 audit(1786550894.074:650): avc: denied { egress } for pid=5810 comm="kworker/0:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 746.107235][ T30] audit: type=1400 audit(1786550894.074:651): avc: denied { sendto } for pid=5810 comm="kworker/0:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 746.293083][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.304103][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.397562][ T30] audit: type=1400 audit(1786550894.504:652): avc: denied { write } for pid=15795 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.932924][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.960999][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.203720][T15451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.329441][ T30] audit: type=1400 audit(1786550895.434:653): avc: denied { write } for pid=15815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.029671][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.306625][ T30] audit: type=1400 audit(1786550897.414:654): avc: denied { write } for pid=15844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.603077][T15451] veth0_vlan: entered promiscuous mode [ 749.664386][T15451] veth1_vlan: entered promiscuous mode [ 749.957733][T15451] veth0_macvtap: entered promiscuous mode [ 749.975316][T15451] veth1_macvtap: entered promiscuous mode [ 750.958184][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.972854][T15451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.221174][T15888] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3219'. [ 751.331674][ T30] audit: type=1400 audit(1786550899.434:655): avc: denied { write } for pid=15862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.570092][ T5810] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 751.769780][ T5810] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 751.886410][ T5810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 751.935916][T15451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.993733][ T5810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.052982][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.058043][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.116651][ T6460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.158182][ T5810] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 752.170028][ T6460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.210816][ T5810] usb 6-1: Product: syz [ 752.352571][ T5810] usb 6-1: Manufacturer: syz [ 752.379876][ T30] audit: type=1400 audit(1786550900.484:656): avc: denied { write } for pid=15903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.413483][ T5810] hub 6-1:4.0: USB hub found [ 752.413661][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.569118][ T8303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.578992][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.651926][ T8303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.739077][ T5810] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 752.760105][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.770843][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.063089][ T5810] usb 6-1: USB disconnect, device number 11 [ 753.909613][ T30] audit: type=1400 audit(1786550902.014:657): avc: denied { write } for pid=15915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.978156][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.008723][T15948] No such timeout policy "s" [ 755.026151][T15948] netlink: Failed to associated timeout policy 's' [ 755.319273][T15954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 755.335350][T15954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 755.346183][T15954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 755.360084][T15954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 755.371710][T15954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.478802][T15958] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 755.938374][ T30] audit: type=1400 audit(1786550904.044:658): avc: denied { write } for pid=15970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.545946][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.196366][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.212525][T15954] Bluetooth: hci5: command 0x2016 tx timeout [ 757.279008][T15991] loop2: detected capacity change from 0 to 7 [ 757.391708][T15991] Dev loop2: unable to read RDB block 7 [ 757.420787][T15991] loop2: unable to read partition table [ 757.421079][T16000] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 757.448776][T15991] loop2: partition table beyond EOD, truncated [ 757.472846][T15991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 757.543849][ T5614] Bluetooth: hci3: command tx timeout [ 757.824970][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.902633][ T30] audit: type=1400 audit(1786550907.004:659): avc: denied { name_bind } for pid=16012 comm="syz.5.3250" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 759.253474][ T5614] Bluetooth: hci5: command 0x2016 tx timeout [ 759.382282][T16020] vhci_hcd vhci_hcd.0: remove, state 4 [ 759.395828][T16020] usb usb34: USB disconnect, device number 1 [ 759.572965][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 759.670180][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 759.691064][ T5884] vhci_hcd vhci_hcd.0: release socket [ 759.715139][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 759.744841][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 759.761634][ T5884] vhci_hcd vhci_hcd.0: release socket [ 759.776134][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 760.027490][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 760.217273][ T5884] vhci_hcd vhci_hcd.0: release socket [ 760.239975][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 760.245489][T16020] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 760.273886][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 760.293667][ T5884] vhci_hcd vhci_hcd.0: release socket [ 760.321618][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 760.348221][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 760.374644][ T6460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.398789][ T5884] vhci_hcd vhci_hcd.0: release socket [ 760.425423][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 760.523624][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 760.528860][ T5884] vhci_hcd vhci_hcd.0: release socket [ 760.530826][T16020] vhci_hcd vhci_hcd.0: remove, state 4 [ 760.534400][ T5884] ================================================================== [ 760.547801][ T5884] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 760.556219][ T5884] Read of size 4 at addr ffff88802aba0fe0 by task kworker/u8:9/5884 [ 760.564359][ T5884] [ 760.566695][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.566727][ T5884] Tainted: [L]=SOFTLOCKUP [ 760.566734][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 760.566752][ T5884] Workqueue: usbip_event event_handler [ 760.566780][ T5884] Call Trace: [ 760.566787][ T5884] [ 760.566795][ T5884] dump_stack_lvl+0x100/0x190 [ 760.566825][ T5884] print_report+0x13d/0x4b0 [ 760.566853][ T5884] ? __virt_addr_valid+0x239/0x430 [ 760.566881][ T5884] ? vhci_cleanup_unlink_list+0x44/0x456 [ 760.566911][ T5884] kasan_report+0xdf/0x1c0 [ 760.566939][ T5884] ? vhci_cleanup_unlink_list+0x44/0x456 [ 760.566972][ T5884] vhci_cleanup_unlink_list+0x44/0x456 [ 760.567006][ T5884] vhci_shutdown_connection.cold+0x165/0x37c [ 760.567043][ T5884] event_handler+0x216/0x570 [ 760.567064][ T5884] process_one_work+0xa23/0x1940 [ 760.567092][ T5884] ? __pfx_process_one_work+0x10/0x10 [ 760.567119][ T5884] ? __pfx_event_handler+0x10/0x10 [ 760.567140][ T5884] worker_thread+0x5ef/0xe50 [ 760.567165][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 760.567187][ T5884] ? kthread+0x13a/0x450 [ 760.567206][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 760.567227][ T5884] kthread+0x370/0x450 [ 760.567246][ T5884] ? __pfx_kthread+0x10/0x10 [ 760.567267][ T5884] ret_from_fork+0x72b/0xd50 [ 760.567296][ T5884] ? __pfx_ret_from_fork+0x10/0x10 [ 760.567324][ T5884] ? __switch_to+0x800/0x10f0 [ 760.567346][ T5884] ? __pfx_kthread+0x10/0x10 [ 760.567366][ T5884] ret_from_fork_asm+0x1a/0x30 [ 760.567401][ T5884] [ 760.567408][ T5884] [ 760.721714][ T5884] Allocated by task 1: [ 760.725777][ T5884] kasan_save_stack+0x30/0x50 [ 760.730453][ T5884] kasan_save_track+0x14/0x30 [ 760.735120][ T5884] __kasan_kmalloc+0xaa/0xb0 [ 760.739697][ T5884] __kmalloc_noprof+0x322/0x820 [ 760.744542][ T5884] __usb_create_hcd+0x5e/0xac0 [ 760.749298][ T5884] vhci_hcd_probe+0x1a5/0x4e0 [ 760.753963][ T5884] platform_probe+0x106/0x1d0 [ 760.758625][ T5884] really_probe+0x241/0xa60 [ 760.763116][ T5884] __driver_probe_device+0x20e/0x450 [ 760.768390][ T5884] driver_probe_device+0x4a/0x140 [ 760.773404][ T5884] __device_attach_driver+0x1df/0x320 [ 760.778770][ T5884] bus_for_each_drv+0x159/0x1e0 [ 760.783606][ T5884] __device_attach+0x1e4/0x4d0 [ 760.788358][ T5884] device_initial_probe+0xaf/0xd0 [ 760.793372][ T5884] bus_probe_device+0x64/0x160 [ 760.798121][ T5884] device_add+0x121d/0x1970 [ 760.802616][ T5884] platform_device_add+0x35a/0x800 [ 760.807712][ T5884] platform_device_register_full+0x5cf/0x830 [ 760.813679][ T5884] vhci_hcd_init+0x1a1/0x2f0 [ 760.818259][ T5884] do_one_initcall+0x11d/0x700 [ 760.823104][ T5884] kernel_init_freeable+0x6ea/0x7b0 [ 760.828298][ T5884] kernel_init+0x1f/0x1e0 [ 760.832610][ T5884] ret_from_fork+0x72b/0xd50 [ 760.837193][ T5884] ret_from_fork_asm+0x1a/0x30 [ 760.841954][ T5884] [ 760.844259][ T5884] Freed by task 16020: [ 760.848302][ T5884] kasan_save_stack+0x30/0x50 [ 760.852967][ T5884] kasan_save_track+0x14/0x30 [ 760.857631][ T5884] kasan_save_free_info+0x3b/0x70 [ 760.862638][ T5884] __kasan_slab_free+0x5f/0x80 [ 760.867391][ T5884] kfree+0x22b/0x6c0 [ 760.871268][ T5884] usb_put_hcd+0x149/0x1f0 [ 760.875674][ T5884] vhci_hcd_remove+0xb5/0x1b0 [ 760.880339][ T5884] platform_remove+0x5f/0x80 [ 760.884922][ T5884] device_remove+0xcb/0x180 [ 760.889411][ T5884] device_release_driver_internal+0x44e/0x620 [ 760.895470][ T5884] unbind_store+0xf8/0x110 [ 760.899871][ T5884] drv_attr_store+0x74/0xb0 [ 760.904371][ T5884] sysfs_kf_write+0xf2/0x150 [ 760.908943][ T5884] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.914218][ T5884] vfs_write+0x6ac/0x1050 [ 760.918530][ T5884] ksys_write+0x12a/0x250 [ 760.922842][ T5884] do_syscall_64+0x115/0x870 [ 760.927422][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.933299][ T5884] [ 760.935615][ T5884] Last potentially related work creation: [ 760.941306][ T5884] kasan_save_stack+0x30/0x50 [ 760.945971][ T5884] kasan_record_aux_stack+0xa7/0xc0 [ 760.951163][ T5884] insert_work+0x36/0x230 [ 760.955477][ T5884] __queue_work+0x9bc/0x12b0 [ 760.960058][ T5884] queue_work_on+0x1a9/0x1e0 [ 760.964634][ T5884] usb_hcd_giveback_urb+0x330/0x4a0 [ 760.969827][ T5884] unlink1+0x418/0x510 [ 760.973890][ T5884] usb_hcd_unlink_urb+0x131/0x210 [ 760.978908][ T5884] usb_kill_urb+0x121/0x320 [ 760.983406][ T5884] hub_quiesce+0x1e9/0x320 [ 760.987807][ T5884] hub_suspend+0x4ab/0x9e0 [ 760.992210][ T5884] usb_suspend_both+0x288/0x950 [ 760.997048][ T5884] usb_runtime_suspend+0x49/0x120 [ 761.002064][ T5884] __rpm_callback+0xc8/0x620 [ 761.006643][ T5884] rpm_callback+0x16a/0x1b0 [ 761.011135][ T5884] rpm_suspend+0x2f4/0x11a0 [ 761.015629][ T5884] __pm_runtime_suspend+0xba/0x1a0 [ 761.020736][ T5884] usb_new_device.part.0+0x1653/0x1686 [ 761.026194][ T5884] register_root_hub+0x4e6/0x639 [ 761.031131][ T5884] usb_add_hcd.cold+0xccd/0x1158 [ 761.036059][ T5884] vhci_hcd_probe+0x1c2/0x4e0 [ 761.040726][ T5884] platform_probe+0x106/0x1d0 [ 761.045393][ T5884] really_probe+0x241/0xa60 [ 761.049888][ T5884] __driver_probe_device+0x20e/0x450 [ 761.055166][ T5884] driver_probe_device+0x4a/0x140 [ 761.060446][ T5884] __device_attach_driver+0x1df/0x320 [ 761.065821][ T5884] bus_for_each_drv+0x159/0x1e0 [ 761.070669][ T5884] __device_attach+0x1e4/0x4d0 [ 761.075428][ T5884] device_initial_probe+0xaf/0xd0 [ 761.080448][ T5884] bus_probe_device+0x64/0x160 [ 761.085198][ T5884] device_add+0x121d/0x1970 [ 761.089695][ T5884] platform_device_add+0x35a/0x800 [ 761.094795][ T5884] platform_device_register_full+0x5cf/0x830 [ 761.100767][ T5884] vhci_hcd_init+0x1a1/0x2f0 [ 761.105351][ T5884] do_one_initcall+0x11d/0x700 [ 761.110114][ T5884] kernel_init_freeable+0x6ea/0x7b0 [ 761.115311][ T5884] kernel_init+0x1f/0x1e0 [ 761.119626][ T5884] ret_from_fork+0x72b/0xd50 [ 761.124207][ T5884] ret_from_fork_asm+0x1a/0x30 [ 761.128964][ T5884] [ 761.131265][ T5884] Second to last potentially related work creation: [ 761.137827][ T5884] kasan_save_stack+0x30/0x50 [ 761.142493][ T5884] kasan_record_aux_stack+0xa7/0xc0 [ 761.147691][ T5884] insert_work+0x36/0x230 [ 761.152011][ T5884] __queue_work+0x9bc/0x12b0 [ 761.156587][ T5884] queue_work_on+0x1a9/0x1e0 [ 761.161164][ T5884] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 761.166355][ T5884] usb_hcd_submit_urb+0xab7/0x2150 [ 761.171460][ T5884] usb_submit_urb+0x827/0x19b0 [ 761.176212][ T5884] usb_start_wait_urb+0x10e/0x580 [ 761.181222][ T5884] usb_control_msg+0x328/0x4b0 [ 761.185969][ T5884] hub_suspend+0x826/0x9e0 [ 761.190376][ T5884] usb_suspend_both+0x288/0x950 [ 761.195219][ T5884] usb_runtime_suspend+0x49/0x120 [ 761.200236][ T5884] __rpm_callback+0xc8/0x620 [ 761.204815][ T5884] rpm_callback+0x16a/0x1b0 [ 761.209307][ T5884] rpm_suspend+0x2f4/0x11a0 [ 761.213799][ T5884] __pm_runtime_suspend+0xba/0x1a0 [ 761.218901][ T5884] usb_new_device.part.0+0x1653/0x1686 [ 761.224350][ T5884] register_root_hub+0x4e6/0x639 [ 761.229275][ T5884] usb_add_hcd.cold+0xccd/0x1158 [ 761.234200][ T5884] vhci_hcd_probe+0x1c2/0x4e0 [ 761.238863][ T5884] platform_probe+0x106/0x1d0 [ 761.243526][ T5884] really_probe+0x241/0xa60 [ 761.248018][ T5884] __driver_probe_device+0x20e/0x450 [ 761.253293][ T5884] driver_probe_device+0x4a/0x140 [ 761.258311][ T5884] __device_attach_driver+0x1df/0x320 [ 761.263671][ T5884] bus_for_each_drv+0x159/0x1e0 [ 761.268506][ T5884] __device_attach+0x1e4/0x4d0 [ 761.273261][ T5884] device_initial_probe+0xaf/0xd0 [ 761.278278][ T5884] bus_probe_device+0x64/0x160 [ 761.283030][ T5884] device_add+0x121d/0x1970 [ 761.287527][ T5884] platform_device_add+0x35a/0x800 [ 761.292625][ T5884] platform_device_register_full+0x5cf/0x830 [ 761.298595][ T5884] vhci_hcd_init+0x1a1/0x2f0 [ 761.303175][ T5884] do_one_initcall+0x11d/0x700 [ 761.308031][ T5884] kernel_init_freeable+0x6ea/0x7b0 [ 761.313238][ T5884] kernel_init+0x1f/0x1e0 [ 761.317551][ T5884] ret_from_fork+0x72b/0xd50 [ 761.322135][ T5884] ret_from_fork_asm+0x1a/0x30 [ 761.326892][ T5884] [ 761.329195][ T5884] The buggy address belongs to the object at ffff88802aba0000 [ 761.329195][ T5884] which belongs to the cache kmalloc-8k of size 8192 [ 761.343229][ T5884] The buggy address is located 4064 bytes inside of [ 761.343229][ T5884] freed 8192-byte region [ffff88802aba0000, ffff88802aba2000) [ 761.357183][ T5884] [ 761.359490][ T5884] The buggy address belongs to the physical page: [ 761.365890][ T5884] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aba0 [ 761.374636][ T5884] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 761.383117][ T5884] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 761.390654][ T5884] page_type: f5(slab) [ 761.394622][ T5884] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 761.403195][ T5884] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 761.411765][ T5884] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 761.420419][ T5884] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 761.429075][ T5884] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 761.437729][ T5884] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 761.446382][ T5884] page dumped because: kasan: bad access detected [ 761.452787][ T5884] page_owner tracks the page as allocated [ 761.458483][ T5884] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6765837383, free_ts 0 [ 761.478094][ T5884] post_alloc_hook+0xfd/0x120 [ 761.482763][ T5884] get_page_from_freelist+0xf48/0x3530 [ 761.488209][ T5884] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 761.494088][ T5884] new_slab+0xa2/0x640 [ 761.498141][ T5884] refill_objects+0xe3/0x410 [ 761.502713][ T5884] __pcs_replace_empty_main+0x376/0x680 [ 761.508244][ T5884] __kmalloc_cache_noprof+0x479/0x6c0 [ 761.513598][ T5884] dummy_hcd_init+0x3ce/0xc00 [ 761.518262][ T5884] do_one_initcall+0x11d/0x700 [ 761.523020][ T5884] kernel_init_freeable+0x6ea/0x7b0 [ 761.528214][ T5884] kernel_init+0x1f/0x1e0 [ 761.532526][ T5884] ret_from_fork+0x72b/0xd50 [ 761.537111][ T5884] ret_from_fork_asm+0x1a/0x30 [ 761.541873][ T5884] page_owner free stack trace missing [ 761.547217][ T5884] [ 761.549520][ T5884] Memory state around the buggy address: [ 761.555129][ T5884] ffff88802aba0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.563173][ T5884] ffff88802aba0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.571217][ T5884] >ffff88802aba0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.579254][ T5884] ^ [ 761.586428][ T5884] ffff88802aba1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.594472][ T5884] ffff88802aba1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.602512][ T5884] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 761.625327][T16020] usb usb33: USB disconnect, device number 1 [ 761.648163][ T30] audit: type=1400 audit(1786550909.754:660): avc: denied { recv } for pid=4945 comm="syslogd" saddr=10.128.0.169 src=43128 daddr=10.128.1.14 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.673947][ T5611] Bluetooth: hci3: command 0x041b tx timeout [ 761.678927][ T5884] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 761.678947][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.678984][ T5884] Tainted: [L]=SOFTLOCKUP [ 761.678992][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 761.679008][ T5884] Workqueue: usbip_event event_handler [ 761.679032][ T5884] Call Trace: [ 761.679040][ T5884] [ 761.679048][ T5884] dump_stack_lvl+0x100/0x190 [ 761.679075][ T5884] vpanic+0x552/0x970 [ 761.679094][ T5884] ? __pfx_vpanic+0x10/0x10 [ 761.679114][ T5884] ? mark_held_locks+0x40/0x70 [ 761.679142][ T5884] ? vhci_cleanup_unlink_list+0x44/0x456 [ 761.679173][ T5884] panic+0xd1/0xe0 [ 761.679192][ T5884] ? __pfx_panic+0x10/0x10 [ 761.679212][ T5884] ? vhci_cleanup_unlink_list+0x44/0x456 [ 761.679243][ T5884] ? preempt_schedule_common+0x42/0xc0 [ 761.679271][ T5884] ? check_panic_on_warn+0x1f/0x90 [ 761.679293][ T5884] check_panic_on_warn.cold+0x19/0x34 [ 761.679316][ T5884] end_report.part.0+0x3a/0x90 [ 761.679346][ T5884] kasan_report.cold+0xe/0x18 [ 761.679375][ T5884] ? vhci_cleanup_unlink_list+0x44/0x456 [ 761.679411][ T5884] vhci_cleanup_unlink_list+0x44/0x456 [ 761.679445][ T5884] vhci_shutdown_connection.cold+0x165/0x37c [ 761.679479][ T5884] event_handler+0x216/0x570 [ 761.679501][ T5884] process_one_work+0xa23/0x1940 [ 761.679530][ T5884] ? __pfx_process_one_work+0x10/0x10 [ 761.679558][ T5884] ? __pfx_event_handler+0x10/0x10 [ 761.679580][ T5884] worker_thread+0x5ef/0xe50 [ 761.679606][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 761.679629][ T5884] ? kthread+0x13a/0x450 [ 761.679648][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 761.679670][ T5884] kthread+0x370/0x450 [ 761.679690][ T5884] ? __pfx_kthread+0x10/0x10 [ 761.679711][ T5884] ret_from_fork+0x72b/0xd50 [ 761.679741][ T5884] ? __pfx_ret_from_fork+0x10/0x10 [ 761.679771][ T5884] ? __switch_to+0x800/0x10f0 [ 761.679793][ T5884] ? __pfx_kthread+0x10/0x10 [ 761.679814][ T5884] ret_from_fork_asm+0x1a/0x30 [ 761.679851][ T5884] [ 761.680846][ T5884] Kernel Offset: disabled