last executing test programs: 4m4.247988962s ago: executing program 3 (id=170): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.804488014s ago: executing program 3 (id=171): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}], 0x1, 0x4a080) 4m0.587031805s ago: executing program 3 (id=183): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x100, 0x47e3, 0x180}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.306578572s ago: executing program 3 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r2}, 0x20) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) 3m59.833631346s ago: executing program 3 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m59.602225421s ago: executing program 3 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8808) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="c4a27d2d3ca7c4a379098226000000f1c4c25d9d3e672e0f72e0003ef2a5c48269a896ac6a3fffc744240001000000c744240258000000ff1c240f011966b86f008ec86542dbe2"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="360f01300fc5c2070f78a2c4cfbaf80c66b824cb008c66efbafc0ced0f20a20fc73afb0fc7aa7dcb6ff080ad600006", 0x2f}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m55.352810384s ago: executing program 1 (id=209): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 3m55.013684224s ago: executing program 1 (id=212): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000100)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0xa0a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m54.385484814s ago: executing program 1 (id=214): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3m53.939700606s ago: executing program 1 (id=215): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) 3m53.765081545s ago: executing program 1 (id=216): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_RGETLOCK(r3, &(0x7f00000000c0)={0x26, 0x37, 0x2, {0x1, 0xfffffffffffffffe, 0x401, 0x0, 0x8, 'hfsplus\x00'}}, 0x26) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) syz_usb_connect(0x3, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081052401000309050904100000050f090582e64103060c0309050a0330060700820905081000"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xa6, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x6, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x1, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffff9, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x4, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0xfff, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x4, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 3m53.055738213s ago: executing program 1 (id=219): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x703f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x5fad, 0xfffffffffffffda0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 3m52.94264062s ago: executing program 32 (id=219): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x703f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x5fad, 0xfffffffffffffda0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 3m44.376715876s ago: executing program 33 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8808) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="c4a27d2d3ca7c4a379098226000000f1c4c25d9d3e672e0f72e0003ef2a5c48269a896ac6a3fffc744240001000000c744240258000000ff1c240f011966b86f008ec86542dbe2"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="360f01300fc5c2070f78a2c4cfbaf80c66b824cb008c66efbafc0ced0f20a20fc73afb0fc7aa7dcb6ff080ad600006", 0x2f}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.114756627s ago: executing program 2 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) 2.874047474s ago: executing program 2 (id=2599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 2.62362537s ago: executing program 2 (id=2606): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 2.347324202s ago: executing program 2 (id=2609): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4010, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0x1, 0xfc4, 0x124, 0x4749, 0x6, 0x8, 0x9, 0x8000, 0x800, r2, r3, 0x8, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 2.347125185s ago: executing program 4 (id=2610): unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x2, 0x4, 0x8b34]}, &(0x7f0000000200)=0x54) 1.674874196s ago: executing program 0 (id=2619): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/66, 0x42) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.526124922s ago: executing program 0 (id=2620): mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1\x00', 0x2) 1.360906716s ago: executing program 0 (id=2622): memfd_create(0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.286234005s ago: executing program 0 (id=2623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c3", 0xde}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb18670", 0x13}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdc", 0x24}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e", 0xb}], 0x1}}], 0x2, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x2, 0x47da, {{0x11, 0x4, 0x0, 0x2d, 0x44, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@end, @generic={0x83, 0xd, "7d98a7e189020c2142d2b9"}, @rr={0x7, 0xf, 0x3a, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xff, 0x0, 0xc, [0x6, 0x7, 0xf]}]}}}}}) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000851) getpeername$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4c094) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c380000000000", 0x36}], 0x1) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) 1.125247197s ago: executing program 5 (id=2625): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0xffffffffffffffff, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000580)="5ab371", 0x3}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) 1.124572668s ago: executing program 0 (id=2626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 968.841759ms ago: executing program 2 (id=2627): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 968.565078ms ago: executing program 5 (id=2628): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/66, 0x42) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 799.028288ms ago: executing program 5 (id=2629): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/disksize\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/89, 0x59, 0x7ff) 717.82181ms ago: executing program 4 (id=2630): mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1\x00', 0x2) 695.57515ms ago: executing program 5 (id=2631): memfd_create(0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 590.634341ms ago: executing program 4 (id=2632): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 431.79713ms ago: executing program 5 (id=2633): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r5, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r5, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") 331.416454ms ago: executing program 4 (id=2634): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff020002000000", 0x1b) 331.221443ms ago: executing program 5 (id=2635): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x4000fff9, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 228.723632ms ago: executing program 2 (id=2636): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') 73.54823ms ago: executing program 4 (id=2637): r0 = socket$inet(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xd) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 72.871924ms ago: executing program 0 (id=2638): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/66, 0x42) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=2639): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) kernel console output (not intermixed with test programs): 29][ T42] audit: type=1400 audit(1785492762.223:747): avc: denied { open } for pid=8268 comm="syz.2.628" path="/dev/mapper/control" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.367014][ T42] audit: type=1400 audit(1785492762.223:748): avc: denied { ioctl } for pid=8268 comm="syz.2.628" path="/dev/mapper/control" dev="devtmpfs" ino=1291 ioctlcmd=0xfd30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.745928][ T42] audit: type=1400 audit(1785492762.623:749): avc: denied { mount } for pid=8295 comm="syz.5.634" name="/" dev="ramfs" ino=26373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 215.859715][ T42] audit: type=1400 audit(1785492762.733:750): avc: denied { shutdown } for pid=8301 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.945930][ T8304] syzkaller0: entered promiscuous mode [ 215.947788][ T8304] syzkaller0: entered allmulticast mode [ 216.732977][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 217.181842][ T55] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 217.348388][ T55] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 217.351746][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.354411][ T55] usb 9-1: Product: syz [ 217.355965][ T55] usb 9-1: Manufacturer: syz [ 217.357546][ T55] usb 9-1: SerialNumber: syz [ 217.366784][ T55] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 217.389533][ T55] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 217.402300][ T55] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 218.131306][ C0] net_ratelimit: 27495 callbacks suppressed [ 218.131324][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 218.131320][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 218.131908][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 218.133506][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.138030][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 218.141565][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.146321][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 218.150111][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.154564][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 218.158528][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 218.775070][ T8362] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 218.808165][ T55] usb 9-1: USB disconnect, device number 3 [ 218.822346][ T55] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 218.838532][ T55] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 218.850890][ T55] ti_usb_3410_5052 9-1:2.0: device disconnected [ 221.303723][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 222.121402][ T5754] Bluetooth: hci0: command 0x0406 tx timeout [ 222.458341][ T8409] netlink: 'syz.5.664': attribute type 1 has an invalid length. [ 223.141425][ C3] net_ratelimit: 29334 callbacks suppressed [ 223.141442][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 223.142425][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.143633][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 223.147177][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.150648][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 223.154193][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 223.157692][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 223.161524][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.164732][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 223.168138][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.782078][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 224.805920][ T8409] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 224.810103][ T8410] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 224.856729][ T8411] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 224.906994][ T8412] bridge1: entered promiscuous mode [ 225.004720][ T8413] bridge1: entered promiscuous mode [ 225.099382][ T8425] syzkaller0: entered promiscuous mode [ 225.109426][ T8425] syzkaller0: entered allmulticast mode [ 226.865892][ T8457] syzkaller0: entered promiscuous mode [ 226.901887][ T8457] syzkaller0: entered allmulticast mode [ 226.946080][ T8457] tipc: Enabled bearer , priority 0 [ 226.983908][ T8448] tipc: Resetting bearer [ 227.064509][ T8448] tipc: Disabling bearer [ 227.423812][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 228.151570][ C3] net_ratelimit: 23926 callbacks suppressed [ 228.151591][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 228.151695][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.153253][ T42] audit: type=1400 audit(1785492775.033:751): avc: denied { create } for pid=8472 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.154335][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 228.158743][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.163422][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 228.171279][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 228.175481][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 228.179658][ T42] audit: type=1400 audit(1785492775.053:752): avc: denied { bind } for pid=8472 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.180798][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.181508][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.184463][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 228.226200][ T42] audit: type=1400 audit(1785492775.073:753): avc: denied { listen } for pid=8472 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.274277][ T8474] file system registered [ 228.277703][ T42] audit: type=1400 audit(1785492775.133:754): avc: denied { write } for pid=8471 comm="syz.4.679" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.377637][ T42] audit: type=1400 audit(1785492775.233:755): avc: denied { mount } for pid=8471 comm="syz.4.679" name="/" dev="functionfs" ino=12197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 228.403283][ T8474] read descriptors [ 228.458580][ T42] audit: type=1400 audit(1785492775.323:756): avc: denied { unmount } for pid=6556 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 228.465406][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.477449][ T6556] ffs_data_put(): freeing [ 228.519669][ T8478] overlayfs: failed to clone upperpath [ 228.631488][ T42] audit: type=1400 audit(1785492775.493:757): avc: denied { name_bind } for pid=8480 comm="syz.5.683" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 228.639085][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 228.652135][ T55] usb 5-1: config 0 has no interfaces? [ 228.656456][ T55] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 228.663105][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.673704][ T55] usb 5-1: Product: syz [ 228.675060][ T55] usb 5-1: Manufacturer: syz [ 228.685634][ T55] usb 5-1: SerialNumber: syz [ 228.724772][ T55] usb 5-1: config 0 descriptor?? [ 229.236277][ T9] usb 5-1: USB disconnect, device number 12 [ 229.321544][ T5744] Bluetooth: hci3: command tx timeout [ 229.495944][ T8499] syz_tun: left allmulticast mode [ 229.498264][ T8500] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 229.504005][ T8499] syz_tun: left promiscuous mode [ 229.510940][ T8499] bridge0: port 6(syz_tun) entered disabled state [ 229.547658][ T8499] veth0: left allmulticast mode [ 229.549720][ T8499] veth0: left promiscuous mode [ 229.632772][ T8499] bridge0: port 3(veth0) entered disabled state [ 229.639103][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.688'. [ 229.643681][ T8499] veth1: left allmulticast mode [ 229.645439][ T8499] veth1: left promiscuous mode [ 229.647462][ T8499] bridge0: port 4(veth1) entered disabled state [ 229.663380][ T8499] bridge_slave_0: left allmulticast mode [ 229.665620][ T8499] bridge_slave_0: left promiscuous mode [ 229.667929][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.676761][ T8499] bridge_slave_1: left allmulticast mode [ 229.678923][ T8499] bridge_slave_1: left promiscuous mode [ 229.681437][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.690651][ T8499] bond0: (slave bond_slave_0): Releasing backup interface [ 229.701319][ T8499] bond0: (slave c@0Ù): Releasing backup interface [ 229.735120][ T8499] team0: Port device team_slave_0 removed [ 229.742685][ T8499] team0: Port device team_slave_1 removed [ 229.746161][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.748868][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.754924][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.757577][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.777243][ T8499] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 229.779420][ T8499] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 229.781756][ T8499] bridge0: port 5(wlan1) entered disabled state [ 229.787241][ T8499] bond1: (slave veth5): Releasing backup interface [ 229.789318][ T8499] veth5: left promiscuous mode [ 229.829236][ T8500] bond3: entered promiscuous mode [ 229.831928][ T8500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.840811][ T8502] bond3: entered allmulticast mode [ 229.847054][ T8503] tipc: Enabled bearer , priority 0 [ 229.864914][ T8508] bond3: (slave bridge1): making interface the new active one [ 229.867493][ T8508] bridge1: entered promiscuous mode [ 229.869721][ T8508] bridge1: entered allmulticast mode [ 229.873135][ T8508] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 229.980957][ T42] audit: type=1400 audit(1785492776.853:758): avc: denied { write } for pid=8519 comm="syz.0.692" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.985438][ T8520] Config c1/1 of g1 needs at least one function. [ 229.991309][ T42] audit: type=1400 audit(1785492776.863:759): avc: denied { write } for pid=8519 comm="syz.0.692" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.995593][ T8520] udc dummy_udc.0: failed to start g1: -22 [ 230.002932][ T42] audit: type=1400 audit(1785492776.863:760): avc: denied { write } for pid=8519 comm="syz.0.692" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.009230][ T8520] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 230.019106][ T8520] UDC core: g1: couldn't find an available UDC or it's busy [ 230.438114][ T8552] tipc: Resetting bearer [ 230.439878][ T8556] sctp: [Deprecated]: syz.0.702 (pid 8556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.439878][ T8556] Use struct sctp_sack_info instead [ 230.527569][ T8552] 8021q: adding VLAN 0 to HW filter on device eth0 [ 230.537158][ T8552] 8021q: adding VLAN 0 to HW filter on device eth1 [ 230.704304][ T8565] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 230.736737][ T8565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.767397][ T8565] bond1: (slave geneve2): making interface the new active one [ 230.774714][ T8565] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 230.860428][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 230.886785][ T10] tipc: Node number set to 1797981729 [ 231.791398][ T848] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 231.858928][ T8629] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 231.880256][ T8629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.904273][ T8629] gretap2: entered promiscuous mode [ 231.909945][ T8629] bond5: (slave gretap2): making interface the new active one [ 231.914053][ T8629] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 231.933738][ T8629] macvlan3: entered promiscuous mode [ 231.935746][ T8629] macvlan3: entered allmulticast mode [ 231.938299][ T8629] bond5: entered promiscuous mode [ 231.943570][ T848] usb 7-1: config 0 has no interfaces? [ 231.944454][ T8629] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 231.946769][ T848] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.948912][ T8629] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 231.950869][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.950883][ T848] usb 7-1: Product: syz [ 231.957719][ T8629] bond5: left promiscuous mode [ 231.960111][ T848] usb 7-1: Manufacturer: syz [ 231.960124][ T848] usb 7-1: SerialNumber: syz [ 231.962929][ T848] usb 7-1: config 0 descriptor?? [ 232.189676][ T5892] usb 7-1: USB disconnect, device number 7 [ 232.222504][ T8636] loop0: detected capacity change from 0 to 32768 [ 232.233422][ T8636] loop3: detected capacity change from 0 to 32768 [ 232.285430][ T8636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.374913][ T5744] Bluetooth: hci3: command 0x0406 tx timeout [ 232.428575][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.432595][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.492883][ T8638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.499797][ T8638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.592286][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.599626][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.606135][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.651431][ T5792] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.666936][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 232.720109][ T8647] bond2: entered promiscuous mode [ 232.725953][ T8647] bond2: entered allmulticast mode [ 232.917160][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 232.917646][ T8656] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 232.925612][ T8660] syzkaller0: entered promiscuous mode [ 232.928124][ T8660] syzkaller0: entered allmulticast mode [ 232.928223][ T8656] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 232.936453][ T8656] cramfs: wrong magic [ 233.165817][ T8677] tipc: Resetting bearer [ 233.218775][ T8682] batadv_slave_1: entered promiscuous mode [ 233.389452][ T8691] team0 (unregistering): Port device team_slave_0 removed [ 233.394330][ T8691] team0 (unregistering): Port device team_slave_1 removed [ 233.451514][ T8202] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 233.593345][ T8700] syzkaller0: entered promiscuous mode [ 233.595360][ T8700] syzkaller0: entered allmulticast mode [ 233.603109][ T8202] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 233.610531][ T8202] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.614070][ T8202] usb 5-1: config 0 has no interfaces? [ 233.615863][ T8202] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 233.619085][ T8202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.626148][ T8202] usb 5-1: config 0 descriptor?? [ 233.867032][ T8202] usb 5-1: string descriptor 0 read error: -71 [ 233.872429][ T8202] usb 5-1: USB disconnect, device number 13 [ 234.064074][ T8710] batadv_slave_1: entered promiscuous mode [ 234.110561][ T5744] Bluetooth: hci3: unexpected event for opcode 0x041b [ 234.160114][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 234.191049][ T5744] Bluetooth: hci3: unexpected event for opcode 0x202d [ 234.218704][ T5744] Bluetooth: hci3: Malformed HCI Event [ 234.266199][ T5744] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 234.383719][ T8747] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.437692][ T5744] Bluetooth: hci1: unexpected event for opcode 0x202d [ 234.456857][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 234.500509][ T5744] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 234.586026][ T8766] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 234.752680][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 234.752697][ T42] audit: type=1400 audit(1785492781.633:772): avc: denied { create } for pid=8782 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 234.752997][ T8783] usb usb8: usbfs: process 8783 (syz.2.790) did not claim interface 0 before use [ 234.757571][ T42] audit: type=1400 audit(1785492781.633:773): avc: denied { write } for pid=8782 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 234.796153][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 234.802887][ T5744] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 234.847825][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 234.919462][ T8804] RDS: rds_bind could not find a transport for fe88::6, load rds_tcp or rds_rdma? [ 234.993328][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 235.001071][ T8816] netlink: 48 bytes leftover after parsing attributes in process `syz.5.807'. [ 235.047244][ T5744] Bluetooth: hci3: unexpected event for opcode 0x200c [ 235.108335][ T8832] capability: warning: `syz.0.815' uses 32-bit capabilities (legacy support in use) [ 235.118431][ T8834] IPVS: ip_vs_add_dest(): server weight less than zero [ 235.158149][ T5744] Bluetooth: hci2: unexpected cc 0x0c2d length: 5 > 4 [ 235.160980][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 235.203875][ T8846] befs: (nullb0): No write support. Marking filesystem read-only [ 235.207613][ T8846] befs: (nullb0): invalid magic header [ 235.243414][ T24] IPVS: starting estimator thread 0... [ 235.253677][ T5754] Bluetooth: hci3: Malformed Event: 0x02 [ 235.331339][ T8852] IPVS: using max 45 ests per chain, 108000 per kthread [ 235.428492][ T42] audit: type=1400 audit(1785492782.303:774): avc: denied { write } for pid=8861 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.441929][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 235.465109][ T42] audit: type=1400 audit(1785492782.343:775): avc: denied { write } for pid=8865 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.697654][ T8880] tipc: Resetting bearer [ 235.706506][ T42] audit: type=1400 audit(1785492782.583:776): avc: denied { append } for pid=8881 comm="syz.4.839" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 235.926261][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 236.002653][ T8904] bond2: left allmulticast mode [ 236.048296][ T5754] Bluetooth: Unexpected continuation frame (len 16) [ 236.131959][ T8912] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 236.139728][ T8912] net_ratelimit: 7569 callbacks suppressed [ 236.139744][ T8912] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.154666][ T8914] netlink: 156 bytes leftover after parsing attributes in process `syz.2.855'. [ 236.249950][ T8921] netlink: 96 bytes leftover after parsing attributes in process `syz.0.859'. [ 236.299330][ T42] audit: type=1400 audit(1785492783.173:777): avc: denied { write } for pid=8926 comm="syz.2.861" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 236.311354][ T42] audit: type=1400 audit(1785492783.173:778): avc: denied { ioctl } for pid=8926 comm="syz.2.861" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 236.344592][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.864'. [ 236.346096][ T5754] Bluetooth: hci3: Malformed LE Event: 0x0b [ 236.526254][ T42] audit: type=1400 audit(1785492783.403:779): avc: denied { connect } for pid=8946 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.629638][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 236.637866][ T8955] tipc: Started in network mode [ 236.639491][ T8955] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 236.642946][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 236.686767][ T8959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.877'. [ 236.879324][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 237.068320][ T5744] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 237.077042][ T8996] usb usb8: usbfs: process 8996 (syz.4.894) did not claim interface 0 before use [ 237.154601][ T9009] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 237.186866][ T42] audit: type=1400 audit(1785492784.063:780): avc: denied { write } for pid=9011 comm="syz.4.902" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.189028][ T9012] Config c1/1 of g1 needs at least one function. [ 237.198802][ T9012] udc usbip-vudc.0: failed to start g1: -22 [ 237.200880][ T9012] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 237.208390][ T9012] UDC core: g1: couldn't find an available UDC or it's busy [ 237.299521][ T42] audit: type=1400 audit(1785492784.173:781): avc: denied { getopt } for pid=9021 comm="syz.5.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.351505][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 237.504404][ T24] usb 5-1: config 0 has no interfaces? [ 237.512614][ T24] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 237.517045][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.518574][ T9036] vlan2: entered promiscuous mode [ 237.520516][ T24] usb 5-1: Product: syz [ 237.523150][ T9036] bridge0: entered promiscuous mode [ 237.525341][ T24] usb 5-1: Manufacturer: syz [ 237.527823][ T24] usb 5-1: SerialNumber: syz [ 237.533881][ T24] usb 5-1: config 0 descriptor?? [ 237.567913][ T5754] Bluetooth: hci2: unexpected cc 0x2003 length: 4 < 9 [ 237.570886][ T5754] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 237.646226][ T9049] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 237.672065][ T9049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.700843][ T9049] bond3: (slave gretap1): making interface the new active one [ 237.705245][ T9049] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 237.716276][ T9049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9049 comm=syz.4.919 [ 237.744074][ T5754] Bluetooth: unknown link type 174 [ 237.746556][ T5754] Bluetooth: hci1: connection err: -111 [ 237.750764][ T5828] usb 5-1: USB disconnect, device number 14 [ 237.903940][ T9064] warning: `syz.5.926' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.008796][ T5754] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 238.013989][ T5754] CPU: 2 UID: 0 PID: 5754 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.014022][ T5754] Tainted: [L]=SOFTLOCKUP [ 238.014035][ T5754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.014059][ T5754] Workqueue: hci0 hci_rx_work [ 238.014178][ T5754] Call Trace: [ 238.014204][ T5754] [ 238.014212][ T5754] dump_stack_lvl+0x100/0x190 [ 238.014278][ T5754] sysfs_warn_dup.cold+0x1c/0x28 [ 238.014316][ T5754] sysfs_create_dir_ns+0x24b/0x2b0 [ 238.014376][ T5754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.014407][ T5754] ? find_held_lock+0x2b/0x80 [ 238.014440][ T5754] ? kobject_add_internal+0x25f/0x930 [ 238.014484][ T5754] ? kobject_add_internal+0x25f/0x930 [ 238.014517][ T5754] ? do_raw_spin_unlock+0x145/0x1e0 [ 238.014547][ T5754] kobject_add_internal+0x2c8/0x930 [ 238.014580][ T5754] kobject_add+0x16a/0x1e0 [ 238.014608][ T5754] ? __pfx_kobject_add+0x10/0x10 [ 238.014635][ T5754] ? class_to_subsys+0x10f/0x150 [ 238.014711][ T5754] ? kobject_put+0xb9/0x640 [ 238.014737][ T5754] ? _raw_spin_unlock+0x28/0x50 [ 238.014764][ T5754] device_add+0x294/0x1970 [ 238.014799][ T5754] ? __pfx_dev_set_name+0x10/0x10 [ 238.014830][ T5754] ? __pfx_device_add+0x10/0x10 [ 238.014858][ T5754] ? mgmt_send_event_skb+0x2fb/0x460 [ 238.014888][ T5754] hci_conn_add_sysfs+0x1a3/0x260 [ 238.014915][ T5754] le_conn_complete_evt+0x11eb/0x1f60 [ 238.014944][ T5754] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.014967][ T5754] ? hci_event_packet+0x186/0xcd0 [ 238.014985][ T5754] ? hci_event_packet+0x186/0xcd0 [ 238.015013][ T5754] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 238.015042][ T5754] ? skb_pull_data+0x15f/0x1e0 [ 238.015098][ T5754] hci_le_meta_evt+0x34a/0x5f0 [ 238.015122][ T5754] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 238.015147][ T5754] hci_event_packet+0x51c/0xcd0 [ 238.015168][ T5754] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.015191][ T5754] ? __pfx_hci_event_packet+0x10/0x10 [ 238.015214][ T5754] ? kcov_remote_start+0x384/0x670 [ 238.015239][ T5754] ? lockdep_hardirqs_on+0x78/0x100 [ 238.015267][ T5754] hci_rx_work+0x451/0xfc0 [ 238.015325][ T5754] process_one_work+0xa23/0x1940 [ 238.015364][ T5754] ? __pfx_process_one_work+0x10/0x10 [ 238.015395][ T5754] ? __pfx_hci_rx_work+0x10/0x10 [ 238.015418][ T5754] worker_thread+0x5ef/0xe50 [ 238.015451][ T5754] ? kthread+0x13a/0x450 [ 238.015469][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 238.015489][ T5754] kthread+0x370/0x450 [ 238.015507][ T5754] ? __pfx_kthread+0x10/0x10 [ 238.015528][ T5754] ret_from_fork+0x72b/0xd50 [ 238.015557][ T5754] ? __pfx_ret_from_fork+0x10/0x10 [ 238.015586][ T5754] ? __switch_to+0x800/0x10f0 [ 238.015608][ T5754] ? __pfx_kthread+0x10/0x10 [ 238.015628][ T5754] ret_from_fork_asm+0x1a/0x30 [ 238.015670][ T5754] [ 238.015698][ T5754] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.140835][ T5754] Bluetooth: hci0: failed to register connection device [ 238.540272][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 238.590207][ T9118] No source specified [ 238.591376][ T5828] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.649364][ T9129] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 238.685576][ T9134] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 238.694556][ T9134] CIFS: Attempting to mount //127.0.0.1/share [ 238.743689][ T5828] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.747104][ T5828] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 238.750937][ T5828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.754630][ T5828] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.758701][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 238.762625][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.767895][ T5828] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.768943][ T9145] IPv6: Can't replace route, no match found [ 238.770994][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.771015][ T5828] usb 5-1: Product: syz [ 238.771029][ T5828] usb 5-1: Manufacturer: syz [ 238.776406][ T9098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.783696][ T5828] cdc_wdm 5-1:1.0: skipping garbage [ 238.785247][ T5828] cdc_wdm 5-1:1.0: skipping garbage [ 238.789020][ T5828] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 238.790936][ T5828] cdc_wdm 5-1:1.0: Unknown control protocol [ 238.900019][ T5754] Bluetooth: hci0: connection err: -111 [ 238.982589][ T9167] ip_tables: iptables: counters copy to user failed while replacing table [ 238.989394][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.992180][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.994882][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.997553][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.000179][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 239.002785][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.005497][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 239.008072][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.010665][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 239.013296][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.015984][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 239.018624][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.026840][ T5828] usb 5-1: USB disconnect, device number 15 [ 239.083589][ T9173] usb 2-1: USB disconnect, device number 2 [ 239.511347][ T1045] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 239.521788][ T9134] CIFS: VFS: Error connecting to socket. Aborting operation. [ 239.525091][ T9134] CIFS: VFS: cifs_mount failed w/return code = -4 [ 239.672065][ T1045] usb 7-1: Using ep0 maxpacket: 32 [ 239.676290][ T1045] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 239.679614][ T1045] usb 7-1: config 0 has no interface number 0 [ 239.682708][ T1045] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.687213][ T1045] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 239.692187][ T1045] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 239.696330][ T1045] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.705446][ T1045] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 239.709373][ T1045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.712799][ T1045] usb 7-1: Product: syz [ 239.715035][ T1045] usb 7-1: Manufacturer: syz [ 239.718939][ T1045] usb 7-1: SerialNumber: syz [ 239.737625][ T1045] usb 7-1: config 0 descriptor?? [ 239.743431][ T9181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 239.752504][ T1045] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input11 [ 239.767329][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 239.767363][ T42] audit: type=1400 audit(1785492786.643:789): avc: denied { read } for pid=5134 comm="acpid" name="mouse1" dev="devtmpfs" ino=3387 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.778835][ T5134] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 239.781060][ T42] audit: type=1400 audit(1785492786.643:790): avc: denied { open } for pid=5134 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3387 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.797679][ T42] audit: type=1400 audit(1785492786.673:791): avc: denied { ioctl } for pid=5134 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3387 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.935096][ T42] audit: type=1400 audit(1785492786.813:792): avc: denied { connect } for pid=9198 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.942527][ T42] audit: type=1400 audit(1785492786.823:793): avc: denied { ioctl } for pid=9198 comm="syz.5.985" path="socket:[27587]" dev="sockfs" ino=27587 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.975439][ T1045] usb 7-1: USB disconnect, device number 8 [ 240.430964][ T9224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.993'. [ 240.658685][ T42] audit: type=1400 audit(1785492787.533:794): avc: denied { write } for pid=9231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.724409][ T42] audit: type=1400 audit(1785492787.603:795): avc: denied { write } for pid=9240 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.788383][ T42] audit: type=1400 audit(1785492787.663:796): avc: denied { write } for pid=9245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.796063][ T42] audit: type=1400 audit(1785492787.673:797): avc: denied { write } for pid=9249 comm="syz.2.1000" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.803211][ T42] audit: type=1400 audit(1785492787.673:798): avc: denied { open } for pid=9249 comm="syz.2.1000" path="/dev/input/event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 241.071388][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 241.241991][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 241.246337][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.249954][ T29] usb 7-1: config 179 has no interface number 0 [ 241.253116][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 241.257884][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 241.265341][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.270294][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 241.275619][ T29] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.281802][ T29] usb 7-1: config 179 interface 65 has no altsetting 0 [ 241.285069][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 241.288988][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.316407][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input12 [ 241.333335][ T9276] ffs_data_put(): freeing [ 241.402022][ T8202] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 241.502985][ T29] usb 7-1: USB disconnect, device number 9 [ 241.504861][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 241.563266][ T8202] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.566730][ T8202] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.570201][ T8202] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.573830][ T8202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.578416][ T9267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 241.588064][ T8202] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.796139][ T29] usb 9-1: USB disconnect, device number 4 [ 242.115052][ T9319] fuse: blksize only supported for fuseblk [ 242.411360][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 242.563063][ T29] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 242.565853][ T29] usb 5-1: config 1 has no interface number 0 [ 242.568242][ T29] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 242.572996][ T29] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 242.578993][ T29] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 242.582825][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.586079][ T8202] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 242.589139][ T29] usb 5-1: Product: syz [ 242.591133][ T29] usb 5-1: Manufacturer: syz [ 242.594835][ T29] usb 5-1: SerialNumber: syz [ 242.601189][ T9327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.741352][ T8202] usb 7-1: Using ep0 maxpacket: 8 [ 242.745518][ T8202] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 242.748659][ T8202] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.752815][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.756512][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.760261][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.763950][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.769312][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.790173][ T8202] usb 7-1: config 168 interface 0 has no altsetting 0 [ 242.794673][ T8202] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 242.798041][ T8202] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.802849][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.807644][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.813063][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.817154][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.820867][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.826734][ T8202] usb 7-1: config 168 interface 0 has no altsetting 0 [ 242.831161][ T8202] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 242.834414][ T8202] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.837751][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.841381][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.845923][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.849576][ T8202] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.852966][ T8202] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.856867][ T8202] usb 7-1: config 168 interface 0 has no altsetting 0 [ 242.866581][ T8202] usb 7-1: string descriptor 0 read error: -22 [ 242.868485][ T8202] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.871087][ T8202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.890239][ T8202] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 243.009968][ T9327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.089777][ T8202] usb 7-1: USB disconnect, device number 10 [ 243.170058][ T9380] fuse: Bad value for 'fd' [ 243.214554][ T29] usb 5-1: Incompatible driver and firmware versions [ 243.225376][ T29] usb 5-1: USB disconnect, device number 16 [ 243.265598][ T5754] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 243.329378][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1057'. [ 243.344954][ T9396] macsec1: entered promiscuous mode [ 243.347372][ T9396] batadv0: entered promiscuous mode [ 243.349802][ T9396] macsec1: entered allmulticast mode [ 243.353682][ T9396] batadv0: entered allmulticast mode [ 243.356853][ T9396] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 243.359891][ T9396] batadv0: left allmulticast mode [ 243.362084][ T9396] batadv0: left promiscuous mode [ 243.501668][ T8202] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 243.619751][ T9410] ffs_data_put(): freeing [ 243.663425][ T8202] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 243.667198][ T8202] usb 9-1: config 1 has no interface number 0 [ 243.670193][ T8202] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 243.675621][ T8202] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 243.682521][ T8202] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 243.686295][ T8202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.689588][ T8202] usb 9-1: Product: syz [ 243.691974][ T8202] usb 9-1: Manufacturer: syz [ 243.694048][ T8202] usb 9-1: SerialNumber: syz [ 243.699982][ T9392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.851545][ T5828] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 243.990019][ T9441] pimreg: entered allmulticast mode [ 243.994293][ T9441] pimreg: left allmulticast mode [ 244.026482][ T5828] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 244.029498][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 244.032214][ T5828] usb 7-1: Product: syz [ 244.033584][ T5828] usb 7-1: Manufacturer: syz [ 244.035090][ T5828] usb 7-1: SerialNumber: syz [ 244.039185][ T5828] usb 7-1: config 0 descriptor?? [ 244.120347][ T8202] usb 9-1: Error in usbnet_get_endpoints (-71) [ 244.164757][ T8202] usb 9-1: USB disconnect, device number 5 [ 244.247370][ T5843] usb 7-1: USB disconnect, device number 11 [ 244.396073][ T9463] team0 (unregistering): Port device team_slave_0 removed [ 244.408767][ T9463] team0 (unregistering): Port device team_slave_1 removed [ 244.513989][ T1045] IPVS: starting estimator thread 0... [ 244.612963][ T9475] IPVS: using max 24 ests per chain, 57600 per kthread [ 244.799378][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 244.799396][ T42] audit: type=1400 audit(1785492791.673:812): avc: denied { connect } for pid=9506 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.874101][ T9519] pim6reg: entered allmulticast mode [ 244.878798][ T9519] pim6reg: left allmulticast mode [ 244.920128][ T9529] macsec0: entered promiscuous mode [ 244.922264][ T9529] macsec0: entered allmulticast mode [ 244.925039][ T9529] veth1_macvtap: entered allmulticast mode [ 244.927158][ T9529] macsec0: left promiscuous mode [ 244.928341][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 244.928868][ T9529] macsec0: left allmulticast mode [ 244.934222][ T9529] veth1_macvtap: left allmulticast mode [ 245.017911][ T9543] team0: entered allmulticast mode [ 245.019884][ T9543] team_slave_0: entered allmulticast mode [ 245.022420][ T9543] team_slave_1: entered allmulticast mode [ 245.070746][ T9551] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 245.986355][ T9572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 245.989275][ T9572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.002495][ T9572] vhci_hcd vhci_hcd.0: Device attached [ 246.019959][ T42] audit: type=1400 audit(1785492792.893:813): avc: denied { write } for pid=9581 comm="syz.2.1146" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.028819][ T42] audit: type=1400 audit(1785492792.893:814): avc: denied { open } for pid=9581 comm="syz.2.1146" path="/268/mnt/events/netlink/netlink_extack/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.037685][ T42] audit: type=1400 audit(1785492792.913:815): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 246.040467][ T9584] Bluetooth: MGMT ver 1.23 [ 246.074372][ T9579] vhci_hcd: connection closed [ 246.082490][ T9589] tipc: Enabled bearer , priority 10 [ 246.085800][ T13] vhci_hcd vhci_hcd.0: stop threads [ 246.087038][ T42] audit: type=1400 audit(1785492792.963:816): avc: denied { setopt } for pid=9590 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.088555][ T13] vhci_hcd vhci_hcd.0: release socket [ 246.097730][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 246.111038][ T9593] bridge0: port 3(syz_tun) entered blocking state [ 246.113836][ T9593] bridge0: port 3(syz_tun) entered disabled state [ 246.118894][ T9593] syz_tun: entered allmulticast mode [ 246.127734][ T9593] syz_tun: entered promiscuous mode [ 246.664672][ T9656] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 246.882574][ T42] audit: type=1400 audit(1785492793.763:817): avc: denied { ioctl } for pid=9679 comm="syz.0.1189" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 247.041109][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 247.178331][ T9707] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.195841][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.201598][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.285750][ T9714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1204'. [ 247.386453][ T42] audit: type=1400 audit(1785492794.263:818): avc: denied { ioctl } for pid=9720 comm="syz.2.1207" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.511395][ T5828] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 247.671438][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 247.675604][ T5828] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 247.678942][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 247.683899][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.688059][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.692517][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.697671][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.701363][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.727830][ T42] audit: type=1400 audit(1785492794.603:819): avc: denied { read } for pid=9730 comm="syz.4.1211" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.801163][ T9735] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 247.806400][ T9735] binder: 9734:9735 ioctl 4018620d 200000000100 returned -1 [ 247.915467][ T5828] usb 5-1: GET_CAPABILITIES returned 0 [ 247.917133][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 248.075539][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 248.127675][ T9712] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 248.132790][ T9] usb 5-1: USB disconnect, device number 17 [ 248.392129][ T9765] block nbd2: shutting down sockets [ 248.825036][ T42] audit: type=1800 audit(1785492795.703:820): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1237" name="scan_secs" dev="configfs" ino=32112 res=0 errno=0 [ 248.865631][ T42] audit: type=1400 audit(1785492795.743:821): avc: denied { append } for pid=9792 comm="syz.0.1239" name="pmem0" dev="devtmpfs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.088356][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.414990][ T9824] »»»»»»: renamed from vlan0 (while UP) [ 249.631635][ T9846] fuse: Bad value for 'fd' [ 249.681657][ T9850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.150211][ T9885] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 250.193462][ T42] audit: type=1400 audit(1785492797.073:822): avc: denied { read } for pid=9888 comm="syz.4.1284" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.418121][ T42] audit: type=1400 audit(1785492797.293:823): avc: denied { read } for pid=9906 comm="syz.2.1293" lport=27118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.641323][ T5892] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 250.813015][ T5892] usb 9-1: unable to get BOS descriptor or descriptor too short [ 250.820137][ T5892] usb 9-1: not running at top speed; connect to a high speed hub [ 250.825299][ T5892] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 250.830608][ T5892] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.834587][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.837444][ T5892] usb 9-1: Product: syz [ 250.838859][ T5892] usb 9-1: Manufacturer: syz [ 250.840563][ T5892] usb 9-1: SerialNumber: syz [ 250.873328][ T9941] Set syz1 is full, maxelem 256 reached [ 250.950090][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 250.962771][ T9945] gretap0: entered promiscuous mode [ 250.970642][ T9945] macvlan3: entered allmulticast mode [ 250.973928][ T9945] gretap0: entered allmulticast mode [ 251.056567][ T5892] cdc_ncm 9-1:1.0: bind() failure [ 251.060943][ T5892] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 251.064824][ T5892] cdc_ncm 9-1:1.1: bind() failure [ 251.071540][ T5892] usb 9-1: USB disconnect, device number 6 [ 251.170204][ T9955] sch_fq: defrate 0 ignored. [ 251.267634][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'. [ 251.364973][ T42] audit: type=1400 audit(1785492798.243:824): avc: denied { read } for pid=9968 comm="syz.2.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.474516][ T42] audit: type=1400 audit(1785492798.353:825): avc: denied { bind } for pid=9977 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.482284][ T42] audit: type=1400 audit(1785492798.363:826): avc: denied { listen } for pid=9977 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.488310][ T42] audit: type=1400 audit(1785492798.363:827): avc: denied { connect } for pid=9977 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.658740][ T9988] Bluetooth: MGMT ver 1.23 [ 251.660480][ T9988] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 251.710440][ T9990] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 252.544180][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 252.596495][T10033] tipc: Enabling of bearer rejected, failed to enable media [ 252.971391][ T5828] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 253.118591][ T42] audit: type=1400 audit(1785492799.993:828): avc: denied { map } for pid=10058 comm="syz.4.1354" path="/dev/sda1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.144175][ T5828] usb 5-1: config 0 has no interfaces? [ 253.147062][ T5828] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 253.152082][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.163721][ T5828] usb 5-1: config 0 descriptor?? [ 253.390326][ T1045] usb 5-1: USB disconnect, device number 18 [ 253.602017][T10086] netlink: 'syz.4.1368': attribute type 8 has an invalid length. [ 253.698508][T10095] vcan0 speed is unknown, defaulting to 1000 [ 253.703886][T10095] vcan0 speed is unknown, defaulting to 1000 [ 253.708556][T10095] vcan0 speed is unknown, defaulting to 1000 [ 253.873604][ T5892] vcan0 speed is unknown, defaulting to 1000 [ 253.880203][T10095] infiniband syz1: set down [ 253.885091][T10095] infiniband syz1: added vcan0 [ 253.908603][T10095] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 253.917306][T10095] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 253.925165][T10095] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 253.999763][T10095] RDS/IB: syz1: added [ 254.001934][T10095] smc: adding ib device syz1 with port count 1 [ 254.004849][T10095] smc: ib device syz1 port 1 has no pnetid [ 254.032250][ T1045] vcan0 speed is unknown, defaulting to 1000 [ 254.057341][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.066363][T10109] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 254.069111][T10109] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 254.129657][ T5744] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 254.129712][ T5744] Bluetooth: hci1: Malformed LE Event: 0x02 [ 254.146256][ T5744] Bluetooth: hci0: Dropping invalid advertising data [ 254.148943][ T5744] Bluetooth: hci0: Malformed LE Event: 0x02 [ 254.265223][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.361401][ T5892] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 254.393629][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.483604][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.523706][ T5744] Bluetooth: hci3: command 0x0406 tx timeout [ 254.528663][ T5892] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 254.531171][ T5892] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 254.534196][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.537822][ T5892] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.540743][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 254.543374][ T5892] usb 7-1: Product: syz [ 254.544639][ T5892] usb 7-1: Manufacturer: syz [ 254.546109][ T5892] usb 7-1: SerialNumber: syz [ 254.549436][ T5892] usb 7-1: config 0 descriptor?? [ 254.554115][ T5892] hub 7-1:0.0: bad descriptor, ignoring hub [ 254.556034][ T5892] hub 7-1:0.0: probe with driver hub failed with error -5 [ 254.559694][ T5892] usb 7-1: selecting invalid altsetting 0 [ 254.649497][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.684581][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 254.752118][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1387'. [ 254.756802][T10131] syz_tun: entered allmulticast mode [ 254.760087][T10130] syz_tun: left allmulticast mode [ 254.780898][T10095] vcan0 speed is unknown, defaulting to 1000 [ 254.861462][ T34] usb 7-1: USB disconnect, device number 12 [ 254.890915][T10141] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 254.898588][T10141] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 255.176824][ T42] audit: type=1400 audit(1785492802.053:829): avc: denied { name_bind } for pid=10158 comm="syz.0.1401" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 255.221524][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 255.394987][ T24] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 255.398310][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 255.402629][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 255.410016][ T24] usb 7-1: string descriptor 0 read error: -22 [ 255.415453][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 255.420692][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 255.426652][ T24] usb 7-1: config 0 descriptor?? [ 255.430781][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 255.433585][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 255.439627][ T24] usb 7-1: selecting invalid altsetting 0 [ 255.751636][ T1045] usb 7-1: USB disconnect, device number 13 [ 255.807547][ T42] audit: type=1400 audit(1785492802.683:830): avc: denied { listen } for pid=10188 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.892911][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895077][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.942118][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 256.113294][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.117253][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.121037][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.126967][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.130368][ T9] usb 5-1: Product: syz [ 256.132135][ T9] usb 5-1: Manufacturer: syz [ 256.134548][ T9] usb 5-1: SerialNumber: syz [ 256.138916][ T9] usb 5-1: config 0 descriptor?? [ 256.146860][ T9] usb 5-1: selecting invalid altsetting 0 [ 256.346010][ T9] usb 5-1: USB disconnect, device number 19 [ 256.581392][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 256.731407][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 256.734781][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.737446][ T24] usb 9-1: config 0 has no interface number 0 [ 256.739328][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.742771][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.745386][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.749615][ T24] usb 9-1: config 0 descriptor?? [ 256.759888][ T24] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 256.791752][ T42] audit: type=1400 audit(1785492803.663:831): avc: denied { write } for pid=10250 comm="syz.2.1443" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.800302][ T42] audit: type=1400 audit(1785492803.673:832): avc: denied { ioctl } for pid=10250 comm="syz.2.1443" path="/320/config/usb_gadget/g1/functions/rndis.usb0/ifname" dev="configfs" ino=30713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 256.809937][ T42] audit: type=1800 audit(1785492803.673:833): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1443" name="ifname" dev="configfs" ino=30713 res=0 errno=0 [ 256.830977][T10253] syz_tun: entered allmulticast mode [ 256.837273][T10252] syz_tun: left allmulticast mode [ 257.268944][ T42] audit: type=1400 audit(1785492804.143:834): avc: denied { write } for pid=10288 comm="syz.2.1460" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 257.711357][ T34] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 257.862997][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 257.867569][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 257.872107][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 257.876836][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.880140][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.883043][ T34] usb 7-1: Product: syz [ 257.884962][ T34] usb 7-1: Manufacturer: syz [ 257.886780][ T34] usb 7-1: SerialNumber: syz [ 257.889775][ T34] usb 7-1: config 0 descriptor?? [ 257.894355][ T34] usb 7-1: selecting invalid altsetting 0 [ 257.965456][ T29] usb 9-1: USB disconnect, device number 7 [ 258.097748][ T24] usb 7-1: USB disconnect, device number 14 [ 258.520652][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 258.739554][ T42] audit: type=1400 audit(1785492805.613:835): avc: denied { write } for pid=10331 comm="syz.4.1476" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.740011][T10327] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 258.751753][T10332] Mass Storage Function, version: 2009/09/11 [ 258.751808][T10332] LUN: removable file: (no medium) [ 258.760971][ T42] audit: type=1400 audit(1785492805.633:836): avc: denied { write } for pid=10331 comm="syz.4.1476" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.769857][T10332] Config c1/1 of g1 needs at least one function. [ 258.770800][ T42] audit: type=1800 audit(1785492805.633:837): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1476" name="cdrom" dev="configfs" ino=33892 res=0 errno=0 [ 258.779096][T10332] udc dummy_udc.0: failed to start g1: -22 [ 258.781132][T10332] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 258.784810][ T42] audit: type=1800 audit(1785492805.633:838): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1476" name="file" dev="configfs" ino=33893 res=0 errno=0 [ 258.785214][T10332] UDC core: g1: couldn't find an available UDC or it's busy [ 258.795444][ T42] audit: type=1800 audit(1785492805.653:839): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1476" name="UDC" dev="configfs" ino=33894 res=0 errno=0 [ 258.824523][T10338] 0: reclassify loop, rule prio 0, protocol 700 [ 258.893339][T10342] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 258.895681][T10342] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 258.933936][T10345] syzkaller0: entered promiscuous mode [ 258.935907][T10345] syzkaller0: entered allmulticast mode [ 259.032080][T10350] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 259.425358][T10377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1502'. [ 259.482200][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 259.486913][T10380] hsr_slave_0: left promiscuous mode [ 259.489320][T10380] hsr_slave_1: left promiscuous mode [ 259.663815][T10389] tipc: Enabled bearer , priority 0 [ 259.905352][T10416] netlink: 'syz.5.1508': attribute type 11 has an invalid length. [ 259.934096][T10416] bridge0: port 3(syz_tun) entered blocking state [ 259.936607][T10416] bridge0: port 3(syz_tun) entered forwarding state [ 259.943459][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.947482][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.972948][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.977813][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.983589][T10416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.987503][T10416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.993108][T10416] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 260.001610][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.004369][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.012188][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.014927][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.069652][ T848] vcan0 speed is unknown, defaulting to 1000 [ 260.074603][ T848] syz1: Port: 1 Link ACTIVE [ 260.076513][ T9] libceph: connect (1)[c::]:6789 error -101 [ 260.086765][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 260.090722][ T848] vcan0 speed is unknown, defaulting to 1000 [ 260.097457][ T9] libceph: connect (1)[c::]:6789 error -101 [ 260.100985][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 260.101621][T10419] ceph: No mds server is up or the cluster is laggy [ 260.161649][T10424] fuse: Bad value for 'fd' [ 260.286249][T10426] netlink: 'syz.5.1511': attribute type 4 has an invalid length. [ 260.336439][ T5742] ffs_data_put(): freeing [ 260.665083][ T9] tipc: Node number set to 1 [ 260.943100][ T848] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 260.946838][ T848] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 260.958230][ T848] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 260.991307][ T8202] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 261.002512][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 261.002542][ T42] audit: type=1400 audit(1785492807.873:843): avc: denied { read } for pid=10475 comm="syz.0.1532" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.023141][ T42] audit: type=1400 audit(1785492807.873:844): avc: denied { open } for pid=10475 comm="syz.0.1532" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.141303][ T8202] usb 9-1: Using ep0 maxpacket: 8 [ 261.145822][ T8202] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 261.149325][ T8202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.154267][ T8202] usb 9-1: Product: syz [ 261.155912][ T8202] usb 9-1: Manufacturer: syz [ 261.157362][ T8202] usb 9-1: SerialNumber: syz [ 261.164387][ T8202] usb 9-1: config 0 descriptor?? [ 261.181335][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 261.341550][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 261.344605][ T24] usb 7-1: config 0 has no interfaces? [ 261.346274][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.349055][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.354082][ T24] usb 7-1: config 0 descriptor?? [ 261.377310][ T8202] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.384258][ T8202] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 261.398768][ T8202] usb 9-1: USB disconnect, device number 8 [ 261.560785][ T24] usb 7-1: USB disconnect, device number 15 [ 261.651427][ T5892] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.801344][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 261.804658][ T5892] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 261.808323][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.812284][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.815749][ T5892] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.820041][ T5892] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.823126][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.032470][ T5892] usb 5-1: GET_CAPABILITIES returned 0 [ 262.034676][ T5892] usbtmc 5-1:16.0: can't read capabilities [ 262.161402][ T8202] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 262.233931][ T1045] usb 5-1: USB disconnect, device number 20 [ 262.311285][ T8202] usb 9-1: Using ep0 maxpacket: 8 [ 262.318458][ T8202] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.322212][ T8202] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 262.325832][ T8202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.330730][ T8202] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 262.334053][ T8202] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 262.336711][ T8202] usb 9-1: Product: syz [ 262.338069][ T8202] usb 9-1: Manufacturer: syz [ 262.339883][ T8202] usb 9-1: SerialNumber: syz [ 262.343947][ T8202] usb 9-1: config 0 descriptor?? [ 262.401464][ T8202] rc_core: IR keymap rc-imon-rsc not found [ 262.403318][ T8202] Registered IR keymap rc-empty [ 262.405916][ T8202] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 262.409916][ T8202] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input13 [ 262.563102][ T8202] usb 9-1: USB disconnect, device number 9 [ 262.611381][ T5892] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 262.773395][ T5892] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.777726][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 262.782160][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.786530][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 262.790699][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 262.795136][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 262.799270][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 262.803604][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 262.807571][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 262.810612][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 262.814662][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 262.818519][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 262.823486][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.827305][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.831162][ T5892] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 262.839103][ T5892] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 262.843055][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.846253][ T5892] usb 7-1: Product: syz [ 262.847931][ T5892] usb 7-1: Manufacturer: syz [ 262.850323][ T5892] usb 7-1: SerialNumber: syz [ 262.855443][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.858076][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.861819][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.864798][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.867745][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.870677][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.874379][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.877386][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.880248][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.883408][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.886003][T10517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.890753][ T5892] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 262.895022][ T5892] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 262.902030][ T5892] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 262.906574][ T5892] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 262.910276][ T5892] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 263.239956][ T5892] usb 7-1: USB disconnect, device number 16 [ 263.254971][ T5892] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 263.261177][ T5892] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 263.265151][ T5892] keyspan 7-1:1.0: device disconnected [ 263.380793][ T42] audit: type=1400 audit(1785492810.253:845): avc: denied { name_bind } for pid=10559 comm="syz.0.1569" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 263.496927][T10566] sctp: [Deprecated]: syz.4.1572 (pid 10566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.496927][T10566] Use struct sctp_sack_info instead [ 263.782746][ T1045] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 263.941761][ T1045] usb 9-1: Using ep0 maxpacket: 32 [ 263.945697][ T1045] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 263.949239][ T1045] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 263.953908][ T1045] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.958212][ T1045] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 263.965492][ T1045] usb 9-1: config 0 interface 0 has no altsetting 0 [ 263.970422][ T1045] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 263.975324][ T1045] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 263.978800][ T1045] usb 9-1: Product: syz [ 263.980486][ T1045] usb 9-1: Manufacturer: syz [ 263.982627][ T1045] usb 9-1: SerialNumber: syz [ 263.993162][ T1045] usb 9-1: config 0 descriptor?? [ 263.999103][ T1045] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 264.008368][ T1045] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 264.017708][T10591] i2c i2c-0: new_device: Missing parameters [ 264.260228][ T848] usb 9-1: USB disconnect, device number 10 [ 264.260277][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 264.261855][T10568] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 264.266863][ T848] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 264.355967][T10609] i2c i2c-0: delete_device: Can't parse I2C address [ 265.082068][ T5892] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 265.101152][ T42] audit: type=1400 audit(1785492811.973:846): avc: denied { read } for pid=10655 comm="syz.5.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.231471][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 265.239228][ T5892] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 265.244377][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.259633][ T5892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 265.262649][ T5892] pvrusb2: ********** [ 265.264319][ T5892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 265.268383][ T5892] pvrusb2: Important functionality might not be entirely working. [ 265.272066][ T5892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 265.277158][ T5892] pvrusb2: ********** [ 265.359699][T10667] pi3usb30532 0-0059: Error reading config register -6 [ 265.362229][T10667] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 265.460155][ T2523] pvrusb2: Invalid write control endpoint [ 265.508755][ T2523] pvrusb2: Invalid write control endpoint [ 265.515919][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 265.519939][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 265.526264][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 265.530299][ T2523] pvrusb2: Device being rendered inoperable [ 265.535474][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 265.541103][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 265.551704][ T2523] pvrusb2: Attached sub-driver cx25840 [ 265.554146][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 265.557518][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 265.657676][T10635] pvrusb2: Attempted to execute control transfer when device not ok [ 265.664433][ T29] usb 7-1: USB disconnect, device number 17 [ 265.861366][ T5892] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 266.023207][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.027417][ T5892] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 266.031111][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.034665][ T5892] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.038519][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 266.045688][ T5892] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 266.048753][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.052288][ T5892] usb 5-1: Product: syz [ 266.054124][ T5892] usb 5-1: Manufacturer: syz [ 266.056121][ T5892] usb 5-1: SerialNumber: syz [ 266.060881][T10684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 266.070371][ T5892] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 266.074293][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 266.077540][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 266.081355][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 266.084350][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 266.087240][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 266.090310][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 266.095584][ T5892] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 266.099544][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 266.102310][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 266.105375][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 266.108281][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 266.111062][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 266.114334][ T5892] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 266.119395][ T5892] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 266.230639][ T42] audit: type=1800 audit(1785492813.103:847): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1637" name="local" dev="configfs" ino=38017 res=0 errno=0 [ 266.402128][ T34] usb 5-1: USB disconnect, device number 21 [ 266.416174][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 266.423945][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 266.428054][ T34] keyspan 5-1:1.0: device disconnected [ 267.357787][T10766] gsmld_receive_buf: 00000000: f9 . [ 267.361681][T10766] gsmld_receive_buf: 00000000: 03 . [ 267.364925][T10766] gsmld_receive_buf: 00000000: 3f ? [ 267.368933][T10766] gsmld_receive_buf: 00000000: 01 . [ 267.373412][T10766] gsmld_receive_buf: 00000000: 1c . [ 267.376917][T10766] gsmld_receive_buf: 00000000: f9 . [ 267.712532][ T42] audit: type=1400 audit(1785492814.593:848): avc: denied { transfer } for pid=10782 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 267.749838][T10788] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 267.755750][T10788] sock: sock_set_timeout: `syz.5.1663' (pid 10788) tries to set negative timeout [ 267.803451][T10791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10791 comm=syz.5.1672 [ 267.813280][T10791] netlink: 'syz.5.1672': attribute type 1 has an invalid length. [ 267.859464][T10791] macvtap1: entered allmulticast mode [ 267.865564][T10796] binder: 10795:10796 ioctl c0306201 200000002580 returned -14 [ 267.876099][T10791] macvtap2: entered allmulticast mode [ 267.919592][T10791] bond4: (slave bridge2): making interface the new active one [ 267.923014][T10791] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 268.050501][T10802] netlink: 'syz.5.1669': attribute type 1 has an invalid length. [ 268.065912][ T42] audit: type=1400 audit(1785492814.943:849): avc: denied { create } for pid=10804 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.077607][ T42] audit: type=1400 audit(1785492814.953:850): avc: denied { setopt } for pid=10804 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.111276][ T42] audit: type=1400 audit(1785492814.983:851): avc: denied { bind } for pid=10804 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.112065][T10802] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 268.140797][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1669'. [ 268.148064][ T5792] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 268.148289][T10802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.161154][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 268.262784][ T5792] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 269.405814][ T42] audit: type=1800 audit(1785492816.283:852): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1702" name="toss_secs" dev="configfs" ino=35824 res=0 errno=0 [ 269.821340][ T5892] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 269.978924][ T42] audit: type=1400 audit(1785492816.853:853): avc: denied { listen } for pid=10944 comm="syz.4.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.987063][ T5892] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 269.998686][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.004274][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.010557][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.020005][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.024775][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.034634][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.037721][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.042427][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.045759][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.050405][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.053358][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.056631][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.059779][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.062675][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.065964][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.068786][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.071592][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.074892][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.077783][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.080606][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.083982][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.086767][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.089667][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.093128][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.096768][ T5892] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 270.099597][ T5892] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 270.102249][ T5892] usb 7-1: Product: syz [ 270.103929][ T5892] usb 7-1: Manufacturer: syz [ 270.105408][ T5892] usb 7-1: SerialNumber: syz [ 270.110159][ T5892] usb 7-1: config 0 descriptor?? [ 270.117675][ T5892] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 270.321485][ T848] usb 7-1: USB disconnect, device number 18 [ 270.333343][ T848] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 271.173268][ T42] audit: type=1400 audit(1785492818.053:854): avc: denied { read write } for pid=11002 comm="syz.2.1758" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.180727][ T42] audit: type=1400 audit(1785492818.053:855): avc: denied { open } for pid=11002 comm="syz.2.1758" path="/385/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.191638][ T42] audit: type=1400 audit(1785492818.073:856): avc: denied { ioctl } for pid=11002 comm="syz.2.1758" path="/385/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.239579][T11006] vcan0 speed is unknown, defaulting to 1000 [ 271.663714][T11015] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 271.702393][T11017] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 271.714742][T11017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.746473][T11017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.749627][T11017] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 271.754351][T11017] bond6: (slave gre1): Error -95 calling set_mac_address [ 271.790187][T11019] gretap1: entered promiscuous mode [ 271.796900][T11019] bond6: (slave gretap1): making interface the new active one [ 271.800523][T11019] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 271.821323][T11019] macvlan2: entered promiscuous mode [ 271.823413][T11019] macvlan2: entered allmulticast mode [ 271.825716][T11019] bond6: entered promiscuous mode [ 271.830983][T11019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.835120][T11019] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 271.839866][T11019] bond6: left promiscuous mode [ 272.074465][T11027] tipc: Resetting bearer [ 272.140143][T11027] tipc: Resetting bearer [ 272.168962][T11035] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 272.227751][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'. [ 272.369480][T11035] bond6: entered promiscuous mode [ 272.371706][T11035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.374783][T11041] bond6: entered allmulticast mode [ 272.400522][T11051] bond6: (slave bridge3): making interface the new active one [ 272.403638][T11051] bridge3: entered promiscuous mode [ 272.405490][T11051] bridge3: entered allmulticast mode [ 272.408103][T11051] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 272.436008][ T5792] netdevsim netdevsim10 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.440072][ T5792] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.462248][ T5792] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.470270][ T5792] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.476009][ T5792] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.478773][ T5792] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.659951][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1775'. [ 272.691941][T11079] bond7: entered promiscuous mode [ 272.693597][T11079] bond7: entered allmulticast mode [ 272.804256][ T42] audit: type=1400 audit(1785492819.683:857): avc: denied { write } for pid=11087 comm="syz.4.1778" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.821547][ T42] audit: type=1400 audit(1785492819.683:858): avc: denied { write } for pid=11087 comm="syz.4.1778" name="naa.1234567890abcdef" dev="configfs" ino=14791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.832086][ T42] audit: type=1400 audit(1785492819.683:859): avc: denied { write } for pid=11087 comm="syz.4.1778" name="core" dev="configfs" ino=4962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.838982][ T42] audit: type=1400 audit(1785492819.683:860): avc: denied { write } for pid=11087 comm="syz.4.1778" name="lun" dev="configfs" ino=38682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.899261][T11096] netlink: 'syz.5.1782': attribute type 1 has an invalid length. [ 272.914960][T11096] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.936065][T11096] bond8: (slave geneve2): making interface the new active one [ 272.941947][T11096] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 272.951403][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.954597][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.957059][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.959562][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.960788][T11101] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 273.028926][T11101] bridge2: entered promiscuous mode [ 273.037440][T11101] bond2: (slave bridge2): making interface the new active one [ 273.064108][T11101] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 273.099322][T11101] bridge3: entered promiscuous mode [ 273.106962][T11101] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 273.172164][T11111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.206243][T11114] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 273.208617][T11114] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 273.294759][T11111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.360316][T11111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.443264][T11123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.477778][T11111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.591879][ T5820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.598617][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.603116][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.606966][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.745111][T11133] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 273.748191][T11133] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 273.830063][T11138] vcan0 speed is unknown, defaulting to 1000 [ 273.908285][T11146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 273.964782][T11144] memory length for this resource is wrong [ 273.971490][T11146] md: array md0 already has disks! [ 273.973956][T11148] md: could not open device unknown-block(7,0). [ 273.977377][T11148] md: error, md_import_device() returned -16 [ 273.988796][T11144] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 274.192512][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 274.197473][T11154] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 274.199829][T11154] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 274.265257][T11161] bridge_slave_0: left allmulticast mode [ 274.267114][T11161] bridge_slave_0: left promiscuous mode [ 274.268983][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.275750][T11161] bridge_slave_1: left allmulticast mode [ 274.278244][T11161] bridge_slave_1: left promiscuous mode [ 274.280818][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.286929][T11161] bond0: (slave bond_slave_0): Releasing backup interface [ 274.292171][T11161] bond0: (slave bond_slave_1): Releasing backup interface [ 274.296970][T11161] team_slave_0: left allmulticast mode [ 274.300351][T11161] team0: Port device team_slave_0 removed [ 274.303562][T11161] team_slave_1: left allmulticast mode [ 274.306876][T11161] team0: Port device team_slave_1 removed [ 274.309567][T11161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.313388][T11161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.319286][T11161] bond1: (slave geneve2): Releasing active interface [ 274.325324][T11161] bond3: (slave gretap1): Releasing active interface [ 274.331579][T11164] xfrm0: entered allmulticast mode [ 274.333956][T11164] team0: Port device xfrm0 added [ 277.144021][T11151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.190267][ T42] audit: type=1400 audit(1785492824.063:861): avc: denied { cmd } for pid=11165 comm="iou-wrk-11166" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 277.210819][ T42] audit: type=1400 audit(1785492824.083:862): avc: denied { map } for pid=11165 comm="syz.4.1804" path="/dev/ublkc0" dev="devtmpfs" ino=3707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.278335][ T5744] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 277.357874][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 277.429649][ T5744] Bluetooth: hci0: unexpected event for opcode 0x041b [ 277.431580][ T5754] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 277.459167][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 277.486645][ T5754] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 277.491748][ T5754] Bluetooth: hci1: unexpected event for opcode 0x200c [ 277.507300][ T5754] Bluetooth: hci0: unexpected event for opcode 0x202d [ 277.558762][ T5754] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 277.630247][ T5754] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 277.920012][T11245] IPVS: ip_vs_add_dest(): server weight less than zero [ 277.948272][T11248] befs: (nullb0): No write support. Marking filesystem read-only [ 277.958211][T11248] befs: (nullb0): invalid magic header [ 277.988226][ T5754] Bluetooth: hci2: Malformed Event: 0x02 [ 278.035274][ T5754] Bluetooth: hci3: unexpected cc 0x0c2d length: 5 > 4 [ 278.037609][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 278.213374][T11264] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 278.216582][T11264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.247242][ T5754] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 278.339855][T11270] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1858'. [ 279.008491][ T5754] Bluetooth: Unexpected continuation frame (len 16) [ 279.152545][ T5754] Bluetooth: hci2: Malformed LE Event: 0x0b [ 279.238221][ T5754] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 279.716688][ T5754] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 280.267505][T11434] vlan3: entered promiscuous mode [ 280.269251][T11434] bridge0: entered promiscuous mode [ 280.484800][T11450] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 280.503332][T11450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.545006][T11450] bond7: (slave gretap3): making interface the new active one [ 280.553038][T11450] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 280.567483][T11450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11450 comm=syz.0.1921 [ 280.885376][ T5754] Bluetooth: unknown link type 174 [ 280.887678][ T5754] Bluetooth: hci3: connection err: -111 [ 281.507246][ T42] audit: type=1800 audit(1785492828.383:863): pid=11521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1949" name="bDeviceClass" dev="configfs" ino=43324 res=0 errno=0 [ 281.608564][T11531] No source specified [ 281.667821][T11538] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 281.882745][T11564] ip_tables: iptables: counters copy to user failed while replacing table [ 284.067247][T11754] pim6reg: entered allmulticast mode [ 284.074773][T11754] pim6reg: left allmulticast mode [ 284.291838][T11780] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 285.301027][T11826] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 285.303322][T11826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.306073][T11826] vhci_hcd vhci_hcd.0: Device attached [ 285.382445][T11827] vhci_hcd: connection closed [ 285.394486][ T13] vhci_hcd vhci_hcd.2: stop threads [ 285.403790][ T13] vhci_hcd vhci_hcd.2: release socket [ 285.407696][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 285.571106][T11860] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 285.580036][T11860] bridge0: port 3(syz_tun) entered disabled state [ 285.582259][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.584729][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.783508][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.804005][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2160'. [ 288.807791][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2160'. [ 288.811736][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2160'. [ 288.978411][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 290.330917][T12087] netlink: 'syz.2.2176': attribute type 11 has an invalid length. [ 290.426591][T12087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.447689][T12087] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.474990][ T34] libceph: connect (1)[c::]:6789 error -101 [ 290.490026][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 290.490486][T12087] tipc: Resetting bearer [ 290.498295][T12089] ceph: No mds server is up or the cluster is laggy [ 290.501731][T12087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.750389][T12087] tipc: Resetting bearer [ 290.802552][T12087] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.976994][T12148] netlink: 'syz.4.2191': attribute type 11 has an invalid length. [ 292.100281][T12148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.122499][T12148] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.158980][T12148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.226025][T12148] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 292.568201][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2193'. [ 292.587686][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2193'. [ 292.595339][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2193'. [ 293.721154][T12179] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 293.741977][T12179] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 294.865482][T12193] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 295.141882][T12205] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 295.145972][T12205] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 295.324580][T12215] tipc: Enabled bearer , priority 0 [ 295.434974][T12218] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 295.485182][T12218] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 295.620894][T12224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.624960][T12224] IPv6: NLM_F_CREATE should be set when creating new route [ 295.676616][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2212'. [ 295.823261][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 296.094884][T12224] tipc: Resetting bearer [ 296.236817][T12224] tipc: Resetting bearer [ 296.408280][T12228] hsr_slave_0: left promiscuous mode [ 296.431635][T12228] hsr_slave_1: left promiscuous mode [ 298.443009][ T42] audit: type=1400 audit(1785492845.323:864): avc: denied { write } for pid=12297 comm="syz.0.2240" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.469154][T12298] Config c1/1 of g1 needs at least one function. [ 298.473263][T12298] udc dummy_udc.0: failed to start g1: -22 [ 298.478971][T12298] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 298.495111][T12298] UDC core: g1: couldn't find an available UDC or it's busy [ 299.016389][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x10b [ 300.270493][T12335] fuse: Bad value for 'fd' [ 301.444498][T12363] vcan0 speed is unknown, defaulting to 1000 [ 301.864886][T12308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.248054][T12406] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 303.259053][T12406] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 304.423683][T12434] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 304.436400][T12434] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 305.857624][T12489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.863256][T12489] IPv6: NLM_F_CREATE should be set when creating new route [ 306.373741][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.425924][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.888886][T12489] gretap0: left allmulticast mode [ 306.973182][ T5891] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.977082][ T5891] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.982332][T12516] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 306.984774][T12516] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 306.992361][ T5891] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.995991][ T5891] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.740956][ T42] audit: type=1400 audit(1785492855.613:865): avc: denied { write } for pid=12600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.962165][ T42] audit: type=1400 audit(1785492855.833:866): avc: denied { write } for pid=12614 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.799075][ T5829] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 310.016598][ T5829] usb 5-1: not running at top speed; connect to a high speed hub [ 310.022163][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 310.043380][ T5829] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 310.047182][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.084156][ T5829] usb 5-1: Product: syz [ 310.086814][ T5829] usb 5-1: Manufacturer: syz [ 310.088836][ T5829] usb 5-1: SerialNumber: syz [ 310.105014][ T5829] oti6858 5-1:1.0: oti6858 converter detected [ 310.160114][ T5829] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 310.247283][T12649] UDC core: g1: couldn't find an available UDC or it's busy [ 310.249876][ T42] audit: type=1400 audit(1785492857.093:867): avc: denied { write } for pid=12648 comm="syz.2.2365" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.293764][ T42] audit: type=1400 audit(1785492857.093:868): avc: denied { write } for pid=12648 comm="syz.2.2365" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.589570][ T10] usb 5-1: USB disconnect, device number 22 [ 310.602914][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 310.615350][ T10] oti6858 5-1:1.0: device disconnected [ 313.171125][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.226141][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.452443][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.463147][ T41] vcan0 speed is unknown, defaulting to 1000 [ 313.477426][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.484995][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.500836][ T41] syz1: Port: 1 Link DOWN [ 313.541727][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.560888][T12743] vcan0 speed is unknown, defaulting to 1000 [ 313.786902][ T42] audit: type=1800 audit(1785492860.653:869): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2398" name="scan_secs" dev="configfs" ino=48813 res=0 errno=0 [ 314.085762][ T42] audit: type=1400 audit(1785492860.963:870): avc: denied { write } for pid=12758 comm="syz.4.2400" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 314.088395][T12759] Config c1/1 of g1 needs at least one function. [ 314.133113][ T42] audit: type=1400 audit(1785492860.963:871): avc: denied { write } for pid=12758 comm="syz.4.2400" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 314.165656][T12759] udc dummy_udc.0: failed to start g1: -22 [ 314.193226][T12759] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 314.222310][T12759] UDC core: g1: couldn't find an available UDC or it's busy [ 314.981107][T12788] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.081643][T12788] md: could not open device unknown-block(7,0). [ 315.086511][T12788] md: error, md_import_device() returned -16 [ 315.103007][ T42] audit: type=1800 audit(1785492861.963:872): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2416" name="scan_secs" dev="configfs" ino=50754 res=0 errno=0 [ 315.759943][T12817] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.907784][T12817] md: could not open device unknown-block(7,0). [ 315.935957][T12817] md: error, md_import_device() returned -16 [ 316.409950][ T42] audit: type=1400 audit(1785492863.283:873): avc: denied { write } for pid=12843 comm="syz.2.2436" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.356420][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.358741][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369443][ T42] audit: type=1400 audit(1785492864.233:874): avc: denied { write } for pid=12874 comm="syz.0.2446" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.422075][T12934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.797486][T12974] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.891381][ T5829] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 320.132151][ T5829] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 320.136961][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.141473][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.147484][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.169099][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.174280][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.179440][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.184775][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.190423][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.261529][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.308270][ T42] audit: type=1400 audit(1785492867.153:875): avc: denied { write } for pid=12984 comm="syz.0.2482" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.345734][ T42] audit: type=1400 audit(1785492867.193:876): avc: denied { write } for pid=12984 comm="syz.0.2482" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.358426][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.384728][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.471357][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.507932][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.515202][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.549468][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.579570][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.583698][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.588430][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.615902][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.622512][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.647188][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.687653][ T5829] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.699588][ T5829] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.705830][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 320.714886][ T5829] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.723784][ T5829] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.736180][ T5829] usb 9-1: Product: syz [ 320.742329][ T5829] usb 9-1: Manufacturer: syz [ 320.766970][ T5829] usb 9-1: SerialNumber: syz [ 320.808027][ T5829] usb 9-1: config 0 descriptor?? [ 320.914910][ T5829] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.013646][T13002] md: array md0 already has disks! [ 321.050340][T13006] md: could not open device unknown-block(7,0). [ 321.068311][T13006] md: error, md_import_device() returned -16 [ 321.200747][ C2] usb 9-1: yurex_control_callback - control failed: -71 [ 321.201169][ T1483] usb 9-1: USB disconnect, device number 11 [ 321.294759][ T42] audit: type=1400 audit(1785492868.163:877): avc: denied { write } for pid=13013 comm="syz.2.2494" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.313347][ T1483] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 321.364621][ T42] audit: type=1400 audit(1785492868.163:878): avc: denied { write } for pid=13013 comm="syz.2.2494" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.998029][T13044] rdma_rxe: rxe_newlink: failed to add vcan0 [ 322.044326][T13041] md: array md0 already has disks! [ 322.048593][T13046] md: could not open device unknown-block(7,0). [ 322.081499][T13046] md: error, md_import_device() returned -16 [ 322.853931][ T42] audit: type=1400 audit(1785492869.663:879): avc: denied { write } for pid=13071 comm="syz.4.2518" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.946232][ T42] audit: type=1400 audit(1785492869.663:880): avc: denied { write } for pid=13071 comm="syz.4.2518" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 323.017934][T13079] rdma_rxe: rxe_newlink: failed to add vcan0 [ 323.251395][T13087] md: array md0 already has disks! [ 323.394797][T13087] md: could not open device unknown-block(7,0). [ 323.414262][T13087] md: error, md_import_device() returned -16 [ 324.011728][T13107] md: array md0 already has disks! [ 324.014772][T13111] md: could not open device unknown-block(7,0). [ 324.020640][T13111] md: error, md_import_device() returned -16 [ 324.189416][T13120] netlink: 'syz.5.2537': attribute type 10 has an invalid length. [ 324.282212][ T8194] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.431453][ T8194] usb 5-1: Using ep0 maxpacket: 8 [ 324.435997][ T8194] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 324.440657][ T8194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.508135][ T8194] pvrusb2: Hardware description: Terratec Grabster AV400 [ 324.524424][ T8194] pvrusb2: ********** [ 324.526165][ T8194] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 324.530150][ T8194] pvrusb2: Important functionality might not be entirely working. [ 324.563469][ T8194] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 324.568270][ T8194] pvrusb2: ********** [ 324.722645][ T2523] pvrusb2: Invalid write control endpoint [ 324.925307][ T2523] pvrusb2: Invalid write control endpoint [ 324.925745][T12743] usb 5-1: USB disconnect, device number 23 [ 324.928604][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 324.969442][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 325.000044][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 325.004736][ T2523] pvrusb2: Device being rendered inoperable [ 325.025662][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 325.050134][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 325.067288][ T2523] pvrusb2: Attached sub-driver cx25840 [ 325.073448][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 325.096231][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 325.723226][ T42] audit: type=1400 audit(1785492872.603:881): avc: denied { write } for pid=13164 comm="syz.0.2555" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 325.757276][ T42] audit: type=1400 audit(1785492872.623:882): avc: denied { write } for pid=13164 comm="syz.0.2555" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.253507][ T8194] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.459688][ T8194] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 326.479873][ T8194] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.483898][ T8194] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.509251][ T8194] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.531874][ T8194] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 326.558137][ T8194] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.580803][ T8194] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.616919][ T8194] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.625345][ T42] audit: type=1400 audit(1785492873.503:883): avc: denied { write } for pid=13192 comm="syz.4.2564" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.637721][ T8194] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 326.637756][ T8194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.637774][ T8194] usb 5-1: Product: syz [ 326.637786][ T8194] usb 5-1: Manufacturer: syz [ 326.637797][ T8194] usb 5-1: SerialNumber: syz [ 326.659525][T13193] UDC core: g1: couldn't find an available UDC or it's busy [ 326.707239][ T42] audit: type=1400 audit(1785492873.583:884): avc: denied { write } for pid=13190 comm="syz.2.2565" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.712285][ T8194] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 326.734524][ T42] audit: type=1400 audit(1785492873.593:885): avc: denied { write } for pid=13190 comm="syz.2.2565" name="os_desc" dev="configfs" ino=17063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.744029][ T8194] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 326.851873][ T8194] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 326.990486][T13171] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 327.023858][ T1045] usb 5-1: USB disconnect, device number 24 [ 327.135579][ T1045] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 327.161858][ T1045] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 327.174773][ T1045] ti_usb_3410_5052 5-1:2.0: device disconnected [ 328.207693][ T42] audit: type=1400 audit(1785492875.083:886): avc: denied { write } for pid=13240 comm="syz.0.2585" name="configs" dev="configfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.643184][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 328.712260][T13261] »»»»»»: renamed from vlan0 [ 329.499148][T13299] vcan0 speed is unknown, defaulting to 1000 [ 329.783391][T12503] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 330.008771][T12503] usb 9-1: config 0 has no interfaces? [ 330.010904][T12503] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 330.014289][T12503] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.036781][T12503] usb 9-1: config 0 descriptor?? [ 330.398108][ T5829] usb 9-1: USB disconnect, device number 12 [ 331.795676][ T42] audit: type=1400 audit(1785492878.613:887): avc: denied { write } for pid=13360 comm="syz.2.2636" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.936399][T13366] [ 331.937838][T13366] ====================================================== [ 331.950354][T13366] WARNING: possible circular locking dependency detected [ 331.951287][ T42] audit: type=1400 audit(1785492878.813:888): avc: denied { write } for pid=13360 comm="syz.2.2636" name="functions" dev="configfs" ino=17060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.970069][T13366] syzkaller #0 Tainted: G L [ 331.970089][T13366] ------------------------------------------------------ [ 331.970096][T13366] syz.2.2636/13366 is trying to acquire lock: [ 331.970108][T13366] ffffffff901d0be8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 331.970260][T13366] [ 331.970260][T13366] but task is already holding lock: [ 331.970266][T13366] ffff88803a342280 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 331.970330][T13366] [ 331.970330][T13366] which lock already depends on the new lock. [ 331.970330][T13366] [ 331.970335][T13366] [ 331.970335][T13366] the existing dependency chain (in reverse order) is: [ 331.970342][T13366] [ 331.970342][T13366] -> #2 (&sb->s_type->i_mutex_key#35){++++}-{4:4}: [ 331.970383][T13366] lock_acquire+0x1b9/0x370 [ 331.970419][T13366] down_write+0x8b/0x1f0 [ 331.970489][T13366] configfs_depend_item_unlocked+0xf3/0x6a0 [ 331.970515][T13366] usbg_make_tpg+0x261/0x620 [ 331.970568][T13366] target_fabric_make_tpg+0xab/0x8c0 [ 331.970609][T13366] configfs_mkdir+0x51e/0xb70 [ 331.970634][T13366] vfs_mkdir+0x361/0x850 [ 331.970655][T13366] filename_mkdirat+0x48b/0x5e0 [ 331.970673][T13366] __x64_sys_mkdir+0x6b/0x90 [ 331.970690][T13366] do_syscall_64+0x115/0x870 [ 331.970710][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.970745][T13366] [ 331.970745][T13366] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 331.970776][T13366] lock_acquire+0x1b9/0x370 [ 331.970798][T13366] __mutex_lock+0x1a4/0x1bd0 [ 331.970818][T13366] tcm_set_name+0x29/0xb0 [ 331.970833][T13366] function_make+0x21c/0x3f0 [ 331.970854][T13366] configfs_mkdir+0x51e/0xb70 [ 331.970912][T13366] vfs_mkdir+0x361/0x850 [ 331.970936][T13366] filename_mkdirat+0x48b/0x5e0 [ 331.970955][T13366] __x64_sys_mkdir+0x6b/0x90 [ 331.970971][T13366] do_syscall_64+0x115/0x870 [ 331.970989][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.971002][T13366] [ 331.971002][T13366] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 331.971026][T13366] check_prev_add+0xeb/0xe60 [ 331.971046][T13366] __lock_acquire+0x136c/0x1a40 [ 331.971068][T13366] lock_acquire+0x1b9/0x370 [ 331.971085][T13366] __mutex_lock+0x1a4/0x1bd0 [ 331.971101][T13366] configfs_rmdir+0x5ae/0x950 [ 331.971121][T13366] vfs_rmdir+0x328/0x8a0 [ 331.971142][T13366] filename_rmdir+0x31a/0x5c0 [ 331.971168][T13366] __x64_sys_rmdir+0x46/0x70 [ 331.971187][T13366] do_syscall_64+0x115/0x870 [ 331.971208][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.971226][T13366] [ 331.971226][T13366] other info that might help us debug this: [ 331.971226][T13366] [ 331.971233][T13366] Chain exists of: [ 331.971233][T13366] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#35 [ 331.971233][T13366] [ 331.971265][T13366] Possible unsafe locking scenario: [ 331.971265][T13366] [ 331.971269][T13366] CPU0 CPU1 [ 331.971273][T13366] ---- ---- [ 331.971277][T13366] lock(&sb->s_type->i_mutex_key#35); [ 331.971291][T13366] lock(&opts->dep_lock); [ 331.971303][T13366] lock(&sb->s_type->i_mutex_key#35); [ 331.971321][T13366] lock(gadget_subsys.su_mutex); [ 331.971334][T13366] [ 331.971334][T13366] *** DEADLOCK *** [ 331.971334][T13366] [ 331.971340][T13366] 3 locks held by syz.2.2636/13366: [ 331.971351][T13366] #0: ffff8880244e6450 (sb_writers#22){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 331.971399][T13366] #1: ffff88803a342740 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 331.971452][T13366] #2: ffff88803a342280 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 331.971504][T13366] [ 331.971504][T13366] stack backtrace: [ 331.971534][T13366] CPU: 3 UID: 0 PID: 13366 Comm: syz.2.2636 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.971564][T13366] Tainted: [L]=SOFTLOCKUP [ 331.971572][T13366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.971598][T13366] Call Trace: [ 331.971630][T13366] [ 331.971641][T13366] dump_stack_lvl+0x100/0x190 [ 331.971677][T13366] print_circular_bug.cold+0x178/0x1c7 [ 331.971710][T13366] check_noncircular+0x146/0x160 [ 331.971736][T13366] check_prev_add+0xeb/0xe60 [ 331.971757][T13366] ? __bfs+0x150/0x2a0 [ 331.971775][T13366] __lock_acquire+0x136c/0x1a40 [ 331.971801][T13366] lock_acquire+0x1b9/0x370 [ 331.971822][T13366] ? configfs_rmdir+0x5ae/0x950 [ 331.971845][T13366] ? __pfx___might_resched+0x10/0x10 [ 331.971868][T13366] ? __lock_acquire+0x49f/0x1a40 [ 331.971891][T13366] __mutex_lock+0x1a4/0x1bd0 [ 331.971914][T13366] ? configfs_rmdir+0x5ae/0x950 [ 331.971940][T13366] ? configfs_rmdir+0x5ae/0x950 [ 331.971963][T13366] ? reacquire_held_locks+0xce/0x1e0 [ 331.971985][T13366] ? __pfx___mutex_lock+0x10/0x10 [ 331.972006][T13366] ? do_raw_spin_lock+0x128/0x260 [ 331.972032][T13366] ? find_held_lock+0x2b/0x80 [ 331.972048][T13366] ? fast_dput+0x2fe/0x6d0 [ 331.972075][T13366] ? _raw_spin_unlock+0x28/0x50 [ 331.972093][T13366] ? fast_dput+0x168/0x6d0 [ 331.972119][T13366] ? configfs_rmdir+0x5ae/0x950 [ 331.972141][T13366] configfs_rmdir+0x5ae/0x950 [ 331.972177][T13366] ? __pfx_configfs_rmdir+0x10/0x10 [ 331.972202][T13366] ? __pfx_down_write+0x10/0x10 [ 331.972231][T13366] vfs_rmdir+0x328/0x8a0 [ 331.972258][T13366] filename_rmdir+0x31a/0x5c0 [ 331.972279][T13366] ? __pfx_filename_rmdir+0x10/0x10 [ 331.972301][T13366] ? do_getname+0x191/0x390 [ 331.972324][T13366] __x64_sys_rmdir+0x46/0x70 [ 331.972343][T13366] do_syscall_64+0x115/0x870 [ 331.972363][T13366] ? clear_bhb_loop+0x40/0x90 [ 331.972384][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.972405][T13366] RIP: 0033:0x7faf6e99e019 [ 331.972424][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.972446][T13366] RSP: 002b:00007faf6f825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 331.972466][T13366] RAX: ffffffffffffffda RBX: 00007faf6ec26090 RCX: 00007faf6e99e019 [ 331.972479][T13366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 331.972491][T13366] RBP: 00007faf6ea3500c R08: 0000000000000000 R09: 0000000000000000 [ 331.972503][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.972514][T13366] R13: 00007faf6ec26128 R14: 00007faf6ec26090 R15: 00007ffe66ea8d88 [ 331.972531][T13366] [ 332.629543][ T42] audit: type=1400 audit(1785492878.813:889): avc: denied { remove_name } for pid=13360 comm="syz.2.2636" name="obex.usb1" dev="configfs" ino=54310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 332.691799][ T42] audit: type=1400 audit(1785492878.813:890): avc: denied { rmdir } for pid=13360 comm="syz.2.2636" name="obex.usb1" dev="configfs" ino=54310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 337.354566][ T5891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.438739][ T5891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.514083][ T5891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.566110][ T5891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.880210][ T42] audit: type=1400 audit(1785492884.753:891): avc: denied { write } for pid=13377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.968794][ T42] audit: type=1400 audit(1785492884.843:892): avc: denied { write } for pid=13380 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.149361][ T5891] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 338.154971][ T5891] bond2 (unregistering): (slave gretap1): the permanent HWaddr of slave - de:d1:00:bf:7b:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 338.165225][ T5891] bond2 (unregistering): (slave bond3): making interface the new active one [ 338.206224][ T5891] bond0 (unregistering): Released all slaves [ 338.225644][ T5891] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 338.239894][ T5891] bond1 (unregistering): Released all slaves [ 338.287163][ T5891] bond2 (unregistering): (slave bond3): Releasing backup interface [ 338.293535][ T5891] bond2 (unregistering): Released all slaves [ 338.304916][ T5891] bond3 (unregistering): Released all slaves [ 338.319286][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 338.570746][ T42] audit: type=1400 audit(1785492885.443:893): avc: denied { write } for pid=13383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.650955][ T42] audit: type=1400 audit(1785492885.513:894): avc: denied { write } for pid=13386 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.722879][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 338.861393][ T42] audit: type=1400 audit(1785492885.733:895): avc: denied { write } for pid=13389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.989654][ T42] audit: type=1400 audit(1785492885.863:896): avc: denied { write } for pid=13392 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.026107][ T5891] hsr_slave_0: left promiscuous mode [ 339.036383][ T5891] hsr_slave_1: left promiscuous mode [ 339.062039][ T5891] veth1_macvtap: left promiscuous mode [ 339.064613][ T5891] veth0_macvtap: left promiscuous mode [ 339.067230][ T5891] veth1_vlan: left promiscuous mode [ 339.100096][ T5891] veth0_vlan: left promiscuous mode [ 339.566690][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 339.759080][ T42] audit: type=1400 audit(1785492886.623:897): avc: denied { write } for pid=13395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.827850][ T42] audit: type=1400 audit(1785492886.703:898): avc: denied { write } for pid=13398 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.917224][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9