last executing test programs: 1m28.848552965s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m28.714748764s ago: executing program 2 (id=9): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 1m27.517403338s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='/pro\x0e/bus/inpu\f\x00\x00\x00\x00\x00\x00\x00rs\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m27.351970851s ago: executing program 2 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x18228}, [@IFLA_EVENT={0x8, 0x2c, 0x59}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m26.213185417s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m26.133328782s ago: executing program 2 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m11.035535959s ago: executing program 32 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 33.766187365s ago: executing program 1 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x1}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) 32.547372726s ago: executing program 1 (id=567): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040850}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 30.562958411s ago: executing program 1 (id=581): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593", 0x6d}, {&(0x7f0000000540)="b4e007", 0x3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fd", 0x2e}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 30.271564428s ago: executing program 1 (id=587): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 29.732733574s ago: executing program 1 (id=599): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000a80)={0x8000000c}) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x11a, 0x0, &(0x7f0000000280)="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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136) write$P9_RLERRORu(r3, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct}}) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000a40)={{}, {@val={r6}, @actul_num={@val=0x3b, 0xffffffffffffffff, 0x45}}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000580)=[{}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) 29.656698784s ago: executing program 1 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) 14.628655288s ago: executing program 33 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) 2.412816398s ago: executing program 5 (id=1093): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.16604115s ago: executing program 5 (id=1096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) 2.165424836s ago: executing program 5 (id=1098): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2.016637304s ago: executing program 5 (id=1102): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000008500000050"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.945810149s ago: executing program 5 (id=1105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 1.675935087s ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x331, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048084) 1.675535867s ago: executing program 3 (id=1114): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000200)="1b", 0x1) 1.675460861s ago: executing program 0 (id=1115): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8f69b66f", 0x20, 0x0, 0x0, 0x0) 1.607488534s ago: executing program 0 (id=1116): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000001040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00%7', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/13, 0xd}, {0x0}, {0x0}], 0x3) 1.184578224s ago: executing program 4 (id=1120): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x30}}, 0x200000d0) bind$bt_hci(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0402030c1f9a8afff2921e65e38b56e4c40b76b1ed2e729555088095811aba786d84a36372284bbc7e38e58e6af2d6fbbab8"], 0x7) 1.1834269s ago: executing program 4 (id=1121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x40014) 1.107516944s ago: executing program 4 (id=1122): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r1, 0x0, &(0x7f0000947000/0x3000)=nil, 0x3000, 0x1}) 1.107126724s ago: executing program 4 (id=1123): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) 729.118628ms ago: executing program 0 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2165b8c25819a1bd}, 0x20000040) 728.974097ms ago: executing program 0 (id=1125): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x33}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18f6b256e8be0000", 0x24}, {&(0x7f0000000540)="f861eab0bb1a8d0d1154d54ecea0f66b736c95f688", 0x15}, {&(0x7f0000000240)="66ff67f980", 0x5}], 0x4}, 0x40011) 667.353597ms ago: executing program 0 (id=1126): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) connect$unix(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000280), &(0x7f0000000340)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1886, &(0x7f0000003580)=ANY=[], 0x0) 617.457439ms ago: executing program 0 (id=1127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 343.201251ms ago: executing program 3 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) 342.825219ms ago: executing program 5 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 255.730787ms ago: executing program 3 (id=1130): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000", 0x3) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a6759372832cb", 0xc2}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c", 0xa8}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d2900d1d916b3c", 0x56}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a392ba272cc19f9bd340fe510698d64490ee9abdb8a5be8344574ab87681bc20dc2a2e182248f17c60920", 0xaa}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d", 0x7c}, {&(0x7f0000000e00)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35b149534c9cda294cb32127994d0d1cfab82e10bc4c", 0xea}], 0xa, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 197.113594ms ago: executing program 4 (id=1131): ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9300a00040000001a050200897d8423347b0ece23dc164b99c744f7642f4553f401a5d6866c4c67e8cdd54d8fc57696a27fda0608"], 0xf) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.343093ms ago: executing program 3 (id=1132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 459.668µs ago: executing program 4 (id=1133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 3 (id=1134): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.096416][ T6117] Zero length message leads to an empty skb [ 68.103480][ T40] audit: type=1400 audit(1772918668.262:183): avc: denied { ioctl } for pid=6116 comm="syz.3.40" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.114668][ T40] audit: type=1400 audit(1772918668.282:184): avc: denied { ioctl } for pid=6116 comm="syz.3.40" path="socket:[10330]" dev="sockfs" ino=10330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.507582][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 68.511886][ T40] audit: type=1400 audit(1772918668.692:185): avc: denied { bind } for pid=6120 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.551681][ T6124] binder: 6123:6124 ioctl c0306201 2000000003c0 returned -14 [ 68.621854][ T40] audit: type=1400 audit(1772918668.802:186): avc: denied { mount } for pid=6125 comm="syz.0.44" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.671834][ T40] audit: type=1400 audit(1772918668.852:187): avc: denied { create } for pid=6130 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.682482][ T40] audit: type=1400 audit(1772918668.862:188): avc: denied { getopt } for pid=6130 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.688781][ T40] audit: type=1400 audit(1772918668.872:189): avc: denied { listen } for pid=6130 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.733967][ T40] audit: type=1400 audit(1772918668.922:190): avc: denied { write } for pid=6128 comm="syz.3.45" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.810202][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 68.833257][ T63] Bluetooth: hci1: command tx timeout [ 68.842715][ T63] Bluetooth: hci3: command tx timeout [ 68.844584][ T63] Bluetooth: hci2: command tx timeout [ 68.846325][ T63] Bluetooth: hci0: command tx timeout [ 68.873567][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 68.878157][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 68.922285][ T6147] capability: warning: `syz.1.54' uses deprecated v2 capabilities in a way that may be insecure [ 69.358935][ T6162] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 69.371167][ T6162] vlan2: entered allmulticast mode [ 69.374453][ T6162] vlan0: entered allmulticast mode [ 69.376748][ T6162] veth0_vlan: entered allmulticast mode [ 69.539152][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 69.543784][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 69.818824][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.821906][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.932143][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.957935][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.082387][ T1151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.112766][ T1151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.128188][ T1151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.132044][ T1151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.923051][ T5932] Bluetooth: hci0: command tx timeout [ 70.923253][ T63] Bluetooth: hci2: command tx timeout [ 70.923299][ T5944] Bluetooth: hci3: command tx timeout [ 70.923319][ T5938] Bluetooth: hci1: command tx timeout [ 71.054085][ T6199] orangefs_devreq_write_iter: failed to copy head. [ 71.189061][ T6205] uprobe: syz.0.76:6205 failed to unregister, leaking uprobe [ 71.506304][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 72.498983][ T6235] syzkaller0: entered promiscuous mode [ 72.501638][ T6235] syzkaller0: entered allmulticast mode [ 72.815886][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 73.354690][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 73.354706][ T40] audit: type=1400 audit(1772918673.542:229): avc: denied { setopt } for pid=6245 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.363697][ T6246] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.283016][ T40] audit: type=1400 audit(1772918674.472:230): avc: denied { ioctl } for pid=6260 comm="syz.0.98" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9131 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.150687][ T6269] overlayfs: upper fs does not support tmpfile. [ 75.152697][ T40] audit: type=1400 audit(1772918675.332:231): avc: denied { mounton } for pid=6268 comm="syz.0.101" path="/bus" dev="bpf" ino=12453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 75.632347][ T6280] syzkaller1: entered promiscuous mode [ 75.634974][ T6280] syzkaller1: entered allmulticast mode [ 75.641906][ T6280] syz.3.104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.654204][ T40] audit: type=1400 audit(1772918675.842:232): avc: denied { ioctl } for pid=6281 comm="syz.1.105" path="socket:[10487]" dev="sockfs" ino=10487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.774649][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'. [ 75.778730][ T40] audit: type=1400 audit(1772918675.962:233): avc: denied { read write } for pid=6286 comm="syz.1.107" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.800779][ T40] audit: type=1400 audit(1772918675.962:234): avc: denied { open } for pid=6286 comm="syz.1.107" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.839727][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 75.842829][ T6289] netlink: 2 bytes leftover after parsing attributes in process `syz.0.108'. [ 76.506852][ T40] audit: type=1400 audit(1772918676.692:235): avc: denied { rename } for pid=6310 comm="syz.3.116" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 76.597271][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.600181][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.719004][ T40] audit: type=1400 audit(1772918676.902:236): avc: denied { create } for pid=6325 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.721069][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 76.726985][ T40] audit: type=1400 audit(1772918676.902:237): avc: denied { ioctl } for pid=6325 comm="syz.3.120" path="socket:[10666]" dev="sockfs" ino=10666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.742006][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.758148][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.866767][ T40] audit: type=1400 audit(1772918677.052:238): avc: denied { rename } for pid=6328 comm="syz.3.121" name="file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.964614][ T6331] orangefs: client-core tried to read wrong size [ 77.131991][ T12] bond0: (slave bond_slave_0): interface is now down [ 77.134204][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.135793][ T12] bond0: (slave bond_slave_1): interface is now down [ 77.143502][ T12] bond0: now running without any active interface! [ 77.416420][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.418976][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.530744][ T101] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.534673][ T101] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.538619][ T101] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.543280][ T101] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.931796][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 78.129774][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 78.215927][ T6363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.365898][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.371480][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.380929][ T6370] netlink: 76 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.384948][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.387411][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.391475][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.395678][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.684912][ T6388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.709276][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 78.709288][ T40] audit: type=1400 audit(1772918678.892:242): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.748614][ T40] audit: type=1400 audit(1772918678.932:243): avc: denied { read } for pid=6389 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.787904][ T40] audit: type=1400 audit(1772918678.972:244): avc: denied { mounton } for pid=6391 comm="syz.0.146" path="/file0" dev="ramfs" ino=10811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 78.791982][ T6392] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.800020][ T6392] overlayfs: failed to set xattr on upper [ 78.802642][ T6392] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.805744][ T6392] overlayfs: ...falling back to index=off. [ 78.808979][ T6392] overlayfs: ...falling back to uuid=null. [ 78.824322][ T6392] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 78.941283][ T6396] binder: 6395:6396 ioctl c0306201 2000000003c0 returned -14 [ 79.054525][ T6401] netlink: 52 bytes leftover after parsing attributes in process `syz.1.150'. [ 79.121486][ T40] audit: type=1400 audit(1772918679.302:245): avc: denied { name_bind } for pid=6404 comm="syz.0.152" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.267749][ T40] audit: type=1400 audit(1772918679.452:246): avc: denied { append } for pid=6406 comm="syz.0.153" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.277434][ T40] audit: type=1400 audit(1772918679.462:247): avc: denied { shutdown } for pid=6406 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.286239][ T40] audit: type=1400 audit(1772918679.462:248): avc: denied { name_connect } for pid=6406 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.557284][ T40] audit: type=1400 audit(1772918679.742:249): avc: denied { map } for pid=6410 comm="syz.3.155" path="socket:[11930]" dev="sockfs" ino=11930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.882666][ T5930] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 80.033574][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 80.041099][ T5930] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 80.045668][ T5930] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 80.050660][ T5930] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.054384][ T5930] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 80.060057][ T5930] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 80.063404][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.066848][ T5930] usb 8-1: Product: syz [ 80.068695][ T5930] usb 8-1: Manufacturer: syz [ 80.070745][ T5930] usb 8-1: SerialNumber: syz [ 80.085423][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 80.092669][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input5 [ 80.302937][ T5930] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 80.306234][ T5930] (id 0x00) [ 80.353246][ T5930] rc_core: IR keymap rc-imon-pad not found [ 80.355732][ T5930] Registered IR keymap rc-empty [ 80.357844][ T5930] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 80.361717][ T5930] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 80.379598][ T6429] netlink: 52 bytes leftover after parsing attributes in process `syz.0.161'. [ 80.385800][ T6429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.161'. [ 80.390552][ T6429] netlink: 52 bytes leftover after parsing attributes in process `syz.0.161'. [ 80.449924][ T40] audit: type=1400 audit(1772918680.632:250): avc: denied { create } for pid=6432 comm="syz.0.163" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.458168][ T40] audit: type=1400 audit(1772918680.632:251): avc: denied { read } for pid=6432 comm="syz.0.163" name="file0" dev="9p" ino=72614315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.516210][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 80.521426][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input6 [ 80.529920][ T5930] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 80.652650][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 80.741139][ T6419] imon:send_packet: packet tx failed (-71) [ 80.745506][ T34] usb 8-1: USB disconnect, device number 2 [ 80.782825][ T6419] imon:vfd_write: send packet #0 failed [ 80.803090][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 80.808336][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.812498][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.819362][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.824944][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.830402][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.836154][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.045198][ T6446] binder: 6445:6446 ioctl c0306201 0 returned -14 [ 81.045370][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 81.049945][ T54] usbtmc 6-1:16.0: can't read capabilities [ 81.051198][ T6446] binder: 6445:6446 ioctl c0306201 0 returned -14 [ 81.146682][ T6448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6448 comm=syz.0.169 [ 81.200669][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.210321][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.220309][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.230255][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.240340][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.247822][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.250708][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.254425][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.257274][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.260068][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.262731][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.263310][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.263342][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.270315][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.271909][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.271932][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.273041][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.280244][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.280571][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.280593][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.290235][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.170 [ 81.294149][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.294188][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.294615][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.313469][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.319938][ T831] usb 6-1: USB disconnect, device number 2 [ 82.294305][ T6466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.722728][ T6175] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.882665][ T6175] usb 5-1: Using ep0 maxpacket: 8 [ 82.900441][ T6175] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.905154][ T6175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.909526][ T6175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.916363][ T6175] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.922133][ T6175] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.926427][ T6175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.141024][ T6175] usb 5-1: GET_CAPABILITIES returned 0 [ 83.144077][ T6175] usbtmc 5-1:16.0: can't read capabilities [ 83.342885][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.346768][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.350846][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.354776][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.358653][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.363281][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.367199][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.371125][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.375112][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.378965][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.383164][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.387074][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.390913][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.394909][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.398794][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.403719][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.411161][ T54] usb 5-1: USB disconnect, device number 2 [ 83.682753][ T831] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.852643][ T831] usb 8-1: Using ep0 maxpacket: 16 [ 83.856135][ T831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.860112][ T831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.864043][ T831] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.872619][ T831] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.875615][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.882133][ T831] usb 8-1: config 0 descriptor?? [ 83.897445][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 83.897454][ T40] audit: type=1400 audit(1772918684.082:266): avc: denied { execute } for pid=6497 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.906959][ T40] audit: type=1400 audit(1772918684.092:267): avc: denied { execute_no_trans } for pid=6497 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.983316][ T5932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.987592][ T5932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.991347][ T5932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.997686][ T5932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.001409][ T5932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.177347][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 84.195639][ T6504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.235121][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.238548][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.241053][ T6498] bridge_slave_0: entered allmulticast mode [ 84.243954][ T6498] bridge_slave_0: entered promiscuous mode [ 84.247341][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.249780][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.252232][ T6498] bridge_slave_1: entered allmulticast mode [ 84.256093][ T6498] bridge_slave_1: entered promiscuous mode [ 84.275195][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.282347][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.296953][ T831] HID 045e:07da: Invalid code 65791 type 1 [ 84.306086][ T831] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input7 [ 84.319562][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.337645][ T831] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 84.346706][ T6498] team0: Port device team_slave_0 added [ 84.364016][ T6498] team0: Port device team_slave_1 added [ 84.385495][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.388547][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.400406][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.418589][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.427830][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.430853][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.441032][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.468442][ T6498] hsr_slave_0: entered promiscuous mode [ 84.470975][ T6498] hsr_slave_1: entered promiscuous mode [ 84.474244][ T6498] debugfs: 'hsr0' already exists in 'hsr' [ 84.476340][ T6498] Cannot create hsr debugfs directory [ 84.491452][ T40] audit: type=1400 audit(1772918684.672:268): avc: denied { read } for pid=6495 comm="syz.3.189" name="event4" dev="devtmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.501418][ T40] audit: type=1400 audit(1772918684.682:269): avc: denied { ioctl } for pid=6495 comm="syz.3.189" path="/dev/input/event4" dev="devtmpfs" ino=2870 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.502147][ T50] usb 8-1: USB disconnect, device number 3 [ 84.523142][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.621032][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.665178][ T6498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.669634][ T6498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.675649][ T6498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.684221][ T6498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.734120][ T101] bridge_slave_1: left allmulticast mode [ 84.736705][ T101] bridge_slave_1: left promiscuous mode [ 84.740728][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.748846][ T101] bridge_slave_0: left allmulticast mode [ 84.751240][ T101] bridge_slave_0: left promiscuous mode [ 84.754516][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.956896][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.962902][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.968014][ T101] bond0 (unregistering): Released all slaves [ 84.991114][ T40] audit: type=1400 audit(1772918685.172:270): avc: denied { search } for pid=5640 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.998289][ T40] audit: type=1400 audit(1772918685.172:271): avc: denied { search } for pid=5640 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.001350][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.005776][ T40] audit: type=1400 audit(1772918685.172:272): avc: denied { search } for pid=5640 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.014546][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.022005][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.024582][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.039013][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.041374][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.042036][ T40] audit: type=1400 audit(1772918685.222:273): avc: denied { read open } for pid=6525 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.062623][ T40] audit: type=1400 audit(1772918685.222:274): avc: denied { getattr } for pid=6525 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.082606][ T40] audit: type=1400 audit(1772918685.232:275): avc: denied { add_name } for pid=6524 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.128475][ T6529] __nla_validate_parse: 1 callbacks suppressed [ 85.128500][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 85.244753][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.348365][ T6000] IPVS: starting estimator thread 0... [ 85.422088][ T101] hsr_slave_0: left promiscuous mode [ 85.428062][ T101] hsr_slave_1: left promiscuous mode [ 85.431206][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.435356][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.439306][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.443379][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.452861][ T6551] IPVS: using max 43 ests per chain, 103200 per kthread [ 85.457745][ T101] veth1_macvtap: left promiscuous mode [ 85.460394][ T101] veth0_macvtap: left promiscuous mode [ 85.463270][ T101] veth1_vlan: left promiscuous mode [ 85.466320][ T101] veth0_vlan: left promiscuous mode [ 85.680728][ T101] team0 (unregistering): Port device team_slave_1 removed [ 85.688173][ T101] team0 (unregistering): Port device team_slave_0 removed [ 85.820258][ T6498] veth0_vlan: entered promiscuous mode [ 85.833866][ T6498] veth1_vlan: entered promiscuous mode [ 85.853185][ T6498] veth0_macvtap: entered promiscuous mode [ 85.859527][ T6498] veth1_macvtap: entered promiscuous mode [ 85.869817][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.877774][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.893291][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.896855][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.908245][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911837][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.995042][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.998507][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.035203][ T5932] Bluetooth: hci4: command tx timeout [ 86.036154][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.040683][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.125301][ T6587] kvm: pic: non byte write [ 86.473755][ T6614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.543419][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.567426][ T6621] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 86.608498][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.711445][ T6628] kvm: pic: level sensitive irq not supported [ 86.835313][ T1918] cfg80211: failed to load regulatory.db [ 87.264414][ T6655] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 87.267216][ T6655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.270802][ T6655] vhci_hcd vhci_hcd.0: Device attached [ 87.333763][ T6656] vhci_hcd: connection closed [ 87.335468][ T79] vhci_hcd vhci_hcd.3: stop threads [ 87.339189][ T79] vhci_hcd vhci_hcd.3: release socket [ 87.341683][ T79] vhci_hcd vhci_hcd.3: disconnect device [ 87.716158][ T6663] xt_hashlimit: max too large, truncated to 1048576 [ 87.782140][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.784980][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.800372][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.999313][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 88.123202][ T5932] Bluetooth: hci4: command tx timeout [ 88.127582][ T6676] Bluetooth: MGMT ver 1.23 [ 88.264709][ T6685] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 88.301469][ T6685] bond1: entered promiscuous mode [ 88.304374][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.331644][ T6685] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.337177][ T6685] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 88.340610][ T6685] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 88.484221][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 88.531886][ T6690] selinux_netlink_send: 75 callbacks suppressed [ 88.531899][ T6690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6690 comm=syz.3.233 [ 88.552797][ T5930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 88.713238][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 88.716569][ T5930] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 88.720943][ T5930] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 88.728775][ T5930] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.732835][ T5930] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 88.740766][ T5930] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 88.744744][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.748069][ T5930] usb 6-1: Product: syz [ 88.749957][ T5930] usb 6-1: Manufacturer: syz [ 88.752765][ T5930] usb 6-1: SerialNumber: syz [ 88.761339][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 88.765067][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input8 [ 88.919059][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 88.919071][ T40] audit: type=1400 audit(1772918689.102:324): avc: denied { accept } for pid=6647 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.927558][ T40] audit: type=1400 audit(1772918689.102:325): avc: denied { write } for pid=6647 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.982610][ T5930] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 88.986064][ T5930] (id 0x00) [ 89.042699][ T5930] rc_core: IR keymap rc-imon-pad not found [ 89.044714][ T5930] Registered IR keymap rc-empty [ 89.046527][ T5930] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 89.049997][ T5930] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.183480][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 89.190718][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input9 [ 89.201390][ T5930] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 89.286537][ T6708] syzkaller0: entered promiscuous mode [ 89.288422][ T6708] syzkaller0: entered allmulticast mode [ 89.305492][ T40] audit: type=1400 audit(1772918689.492:326): avc: denied { prog_run } for pid=6707 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.513933][ T6688] imon:send_packet: packet tx failed (-71) [ 89.514791][ T5930] usb 6-1: USB disconnect, device number 3 [ 89.552624][ T6688] imon:vfd_write: send packet #0 failed [ 90.192930][ T5932] Bluetooth: hci4: command tx timeout [ 90.325422][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 90.330947][ T6721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6721 comm=syz.4.243 [ 90.399818][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 90.432029][ T6725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6725 comm=syz.1.245 [ 90.534341][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 90.594370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.623644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.641337][ T40] audit: type=1400 audit(1772918690.822:327): avc: denied { accept } for pid=6730 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.713204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.717145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.721103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.725483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.729346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.733262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.737547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.741929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.499527][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 91.513120][ T40] audit: type=1400 audit(1772918691.702:328): avc: denied { write } for pid=6741 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.558364][ T6746] netlink: 'syz.1.253': attribute type 6 has an invalid length. [ 91.576878][ T6746] netlink: 'syz.1.253': attribute type 4 has an invalid length. [ 91.579549][ T6746] netlink: 17 bytes leftover after parsing attributes in process `syz.1.253'. [ 91.786692][ T40] audit: type=1400 audit(1772918691.972:329): avc: denied { ioctl } for pid=6753 comm="syz.4.256" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.867361][ T6760] syzkaller0: entered promiscuous mode [ 91.869927][ T6760] syzkaller0: entered allmulticast mode [ 92.060187][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 92.103828][ T40] audit: type=1400 audit(1772918692.282:330): avc: denied { setopt } for pid=6771 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.151337][ T40] audit: type=1400 audit(1772918692.282:331): avc: denied { read } for pid=6771 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.160962][ T40] audit: type=1400 audit(1772918692.332:332): avc: denied { read } for pid=6771 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.287480][ T5932] Bluetooth: hci4: command tx timeout [ 92.540018][ T40] audit: type=1400 audit(1772918692.722:333): avc: denied { read } for pid=6783 comm="syz.1.268" path="socket:[17097]" dev="sockfs" ino=17097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.700654][ T6794] syzkaller0: entered promiscuous mode [ 92.710380][ T6794] syzkaller0: entered allmulticast mode [ 92.715712][ T6794] tipc: Started in network mode [ 92.717752][ T6794] tipc: Node identity 2ac279d2f10e, cluster identity 4711 [ 92.720631][ T6794] tipc: Enabled bearer , priority 0 [ 92.724124][ T6793] tipc: Resetting bearer [ 92.735872][ T6793] tipc: Disabling bearer [ 92.819910][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 93.288986][ T6827] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 93.352782][ T6825] kvm: pic: non byte write [ 93.355771][ T6825] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 93.527882][ T6839] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 94.272282][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.291641][ T6845] bond1: (slave gretap1): making interface the new active one [ 94.296482][ T6845] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 94.304693][ T6853] syzkaller0: entered promiscuous mode [ 94.307047][ T6853] syzkaller0: entered allmulticast mode [ 94.353833][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 94.353849][ T40] audit: type=1400 audit(1772918694.542:339): avc: denied { create } for pid=6861 comm="syz.0.293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.412656][ T24] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 95.438356][ T40] audit: type=1400 audit(1772918695.622:340): avc: denied { ioctl } for pid=6913 comm="syz.1.312" path="socket:[14987]" dev="sockfs" ino=14987 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.594303][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.598913][ T24] usb 9-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 95.603030][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.610039][ T24] usb 9-1: config 0 descriptor?? [ 95.618298][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 95.729633][ T40] audit: type=1400 audit(1772918695.912:341): avc: denied { wake_alarm } for pid=6924 comm="syz.3.316" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.939988][ T831] usb 9-1: USB disconnect, device number 2 [ 96.551238][ T6939] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 96.707114][ T6945] Set syz0 is full, maxelem 0 reached [ 96.918639][ T6950] syzkaller0: entered promiscuous mode [ 96.923850][ T6950] syzkaller0: entered allmulticast mode [ 96.957188][ T6950] tipc: Started in network mode [ 96.959511][ T6950] tipc: Node identity ce29c74d1d4e, cluster identity 4711 [ 96.971248][ T6950] tipc: Enabled bearer , priority 0 [ 96.986274][ T6948] tipc: Resetting bearer [ 96.996177][ T6952] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 97.026930][ T6948] tipc: Disabling bearer [ 97.056190][ T6952] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 97.319878][ T40] audit: type=1400 audit(1772918697.502:342): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.413479][ T40] audit: type=1400 audit(1772918697.602:343): avc: denied { bind } for pid=6965 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.582804][ T5932] Bluetooth: hci4: ISO packet too small [ 97.588250][ T40] audit: type=1400 audit(1772918697.772:344): avc: denied { ioctl } for pid=6963 comm="syz.4.327" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.013162][ T40] audit: type=1400 audit(1772918698.202:345): avc: denied { read write } for pid=6991 comm="syz.1.332" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.046001][ T40] audit: type=1400 audit(1772918698.202:346): avc: denied { open } for pid=6991 comm="syz.1.332" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.283026][ T40] audit: type=1400 audit(1772918698.462:347): avc: denied { append } for pid=7003 comm="syz.1.336" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.313453][ T40] audit: type=1400 audit(1772918698.502:348): avc: denied { create } for pid=7005 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.402321][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.424317][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.438334][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 98.440573][ T7008] bond1: (slave ip6gretap1): making interface the new active one [ 98.441145][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 98.446223][ T7008] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.471235][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.478758][ T7012] bond2: (slave bond0): making interface the new active one [ 98.484258][ T7012] bond2: (slave bond0): Enslaving as an active interface with an up link [ 99.292259][ T7041] capability: warning: `syz.0.345' uses 32-bit capabilities (legacy support in use) [ 99.328694][ T7043] syzkaller0: entered promiscuous mode [ 99.331018][ T7043] syzkaller0: entered allmulticast mode [ 99.528723][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 99.528739][ T40] audit: type=1400 audit(1772918699.712:355): avc: denied { read } for pid=7051 comm="syz.4.350" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.529043][ T40] audit: type=1400 audit(1772918699.712:356): avc: denied { open } for pid=7051 comm="syz.4.350" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.538070][ T40] audit: type=1400 audit(1772918699.722:357): avc: denied { ioctl } for pid=7051 comm="syz.4.350" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.542228][ T40] audit: type=1400 audit(1772918699.722:358): avc: denied { write } for pid=7050 comm="syz.3.349" lport=51430 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.544448][ T40] audit: type=1400 audit(1772918699.732:359): avc: denied { setopt } for pid=7050 comm="syz.3.349" lport=51430 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.578494][ T7054] sit1: entered allmulticast mode [ 99.630773][ T7056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.971587][ T40] audit: type=1400 audit(1772918700.152:360): avc: denied { bind } for pid=7067 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.975262][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 99.981768][ T40] audit: type=1400 audit(1772918700.152:361): avc: denied { setopt } for pid=7067 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.026865][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 100.032952][ T831] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 100.042608][ T7074] bond1: option mode: unable to set because the bond device has slaves [ 100.048254][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 100.052208][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 100.062140][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.068142][ T7074] bond1: (slave bond0): Enslaving as an active interface with an up link [ 100.092713][ T7074] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 100.095502][ T7074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.357'. [ 100.100357][ T7074] .`: renamed from bond0 (while UP) [ 100.136195][ T7059] bond0: (slave netdevsim0): Releasing backup interface [ 100.195485][ T831] usb 6-1: config 0 has no interfaces? [ 100.226385][ T831] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.229695][ T831] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.240468][ T831] usb 6-1: Product: syz [ 100.242062][ T831] usb 6-1: Manufacturer: syz [ 100.263748][ T831] usb 6-1: SerialNumber: syz [ 100.290503][ T831] usb 6-1: config 0 descriptor?? [ 100.292135][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 100.369352][ T40] audit: type=1400 audit(1772918700.552:362): avc: denied { create } for pid=7090 comm="syz.4.362" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.387980][ T40] audit: type=1400 audit(1772918700.572:363): avc: denied { mounton } for pid=7090 comm="syz.4.362" path="/42/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.502794][ T40] audit: type=1326 audit(1772918700.682:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.0.363" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff6b9c799 code=0x0 [ 100.599347][ T6175] usb 6-1: USB disconnect, device number 4 [ 100.895774][ T7102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.282643][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 101.352157][ T7119] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 101.357659][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 101.433800][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.437015][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.440273][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.443362][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.446966][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 101.451756][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.455727][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.458269][ T34] usb 8-1: Product: syz [ 101.459636][ T34] usb 8-1: Manufacturer: syz [ 101.464834][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 101.466671][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 101.469538][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 101.471575][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 101.686471][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 101.689498][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 101.692769][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 101.693661][ T6175] usb 8-1: USB disconnect, device number 4 [ 101.695585][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 101.700645][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 101.715500][ T7121] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 101.743848][ T7121] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 101.755203][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 101.760289][ T1179] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 101.766998][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.883338][ T1151] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 102.615500][ T7152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7152 comm=syz.1.382 [ 102.616243][ T7147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7147 comm=syz.3.380 [ 102.682184][ T7155] syzkaller0: entered promiscuous mode [ 102.684761][ T7155] syzkaller0: entered allmulticast mode [ 102.689062][ T7155] tipc: Started in network mode [ 102.691439][ T7155] tipc: Node identity 3a78eadee237, cluster identity 4711 [ 102.695485][ T7155] tipc: Enabled bearer , priority 0 [ 102.698853][ T7154] tipc: Resetting bearer [ 102.707400][ T7154] tipc: Disabling bearer [ 102.730402][ T7157] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.743384][ T7157] kvm: pic: single mode not supported [ 102.744212][ T7157] kvm: pic: non byte read [ 102.751144][ T7157] kvm: pic: non byte read [ 102.758902][ T7157] kvm: pic: non byte read [ 102.762217][ T7157] kvm: pic: non byte read [ 102.767838][ T7157] kvm: pic: non byte read [ 102.772016][ T7157] kvm: pic: non byte read [ 102.801107][ T7164] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 102.823083][ T7164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.839748][ T7164] bond2: (slave gretap1): making interface the new active one [ 102.847039][ T7164] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 102.855507][ T7164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7164 comm=syz.4.386 [ 103.029059][ T7175] syzkaller0: entered promiscuous mode [ 103.030894][ T7175] syzkaller0: entered allmulticast mode [ 103.333563][ T7190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7190 comm=syz.1.397 [ 103.564606][ T7198] syzkaller0: entered promiscuous mode [ 103.567023][ T7198] syzkaller0: entered allmulticast mode [ 104.147010][ T7223] fuse: Unknown parameter 'nd' [ 104.242729][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.316113][ T7221] __nla_validate_parse: 5 callbacks suppressed [ 104.316129][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.332209][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.332848][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.336120][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.344015][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.348346][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.360017][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.367688][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.395123][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.401497][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 104.404885][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 104.407929][ T39] usb 5-1: Product: syz [ 104.409464][ T39] usb 5-1: Manufacturer: syz [ 104.411152][ T39] usb 5-1: SerialNumber: syz [ 104.557777][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 104.557793][ T40] audit: type=1400 audit(1772918704.742:378): avc: denied { append } for pid=7225 comm="syz.4.412" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 104.629234][ T39] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.687509][ T7232] syzkaller0: entered promiscuous mode [ 104.690062][ T7232] syzkaller0: entered allmulticast mode [ 104.706093][ T7232] tipc: Enabled bearer , priority 0 [ 104.712679][ T7231] tipc: Resetting bearer [ 104.733402][ T7231] tipc: Disabling bearer [ 104.757266][ T7239] syzkaller0: entered promiscuous mode [ 104.759714][ T7239] syzkaller0: entered allmulticast mode [ 104.766131][ T7239] tipc: Enabled bearer , priority 0 [ 104.770212][ T7238] tipc: Resetting bearer [ 104.781551][ T7238] tipc: Disabling bearer [ 104.821157][ T40] audit: type=1400 audit(1772918705.002:379): avc: denied { read write } for pid=7210 comm="syz.0.406" name="lp0" dev="devtmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 104.861691][ T40] audit: type=1400 audit(1772918705.002:380): avc: denied { open } for pid=7210 comm="syz.0.406" path="/dev/usb/lp0" dev="devtmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 104.960312][ T7247] syzkaller0: entered promiscuous mode [ 104.962125][ T7247] syzkaller0: entered allmulticast mode [ 105.064183][ T39] usb 5-1: USB disconnect, device number 3 [ 105.068340][ T39] usblp0: removed [ 105.165740][ T7251] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 105.186782][ T7251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.196810][ T7251] vlan2: entered promiscuous mode [ 105.198500][ T7251] bond3: entered promiscuous mode [ 105.200260][ T7251] vlan2: entered allmulticast mode [ 105.202330][ T7251] bond3: entered allmulticast mode [ 105.228916][ T7251] bond3: (slave bridge2): making interface the new active one [ 105.231820][ T7251] bridge2: entered promiscuous mode [ 105.236434][ T7251] bridge2: entered allmulticast mode [ 105.239302][ T7251] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 105.396403][ T40] audit: type=1400 audit(1772918705.582:381): avc: denied { ioctl } for pid=7260 comm="syz.4.427" path="/61/file0/file0" dev="fuse" ino=0 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 105.510424][ T40] audit: type=1400 audit(1772918705.692:382): avc: denied { create } for pid=7267 comm="syz.1.429" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.530890][ T40] audit: type=1400 audit(1772918705.712:383): avc: denied { unlink } for pid=5934 comm="syz-executor" name="file2" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.553014][ T40] audit: type=1400 audit(1772918705.742:384): avc: denied { create } for pid=7269 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.705876][ T40] audit: type=1400 audit(1772918705.892:385): avc: denied { setopt } for pid=7273 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.093114][ T40] audit: type=1400 audit(1772918706.282:386): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.227188][ T7285] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 106.286999][ T7285] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.292050][ T7285] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 106.306974][ T7290] binder_alloc: 7289: pid 7289 spamming oneway? 1 buffers allocated for a total size of 4096 [ 106.311714][ T7290] binder_alloc: 7289: pid 7289 spamming oneway? 2 buffers allocated for a total size of 5120 [ 106.365953][ T7291] gretap2: entered promiscuous mode [ 106.370074][ T7291] bond2: (slave gretap2): making interface the new active one [ 106.374277][ T7291] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 106.381337][ T7291] macvlan2: entered promiscuous mode [ 106.383298][ T7291] macvlan2: entered allmulticast mode [ 106.385512][ T7291] bond2: entered promiscuous mode [ 106.388351][ T7291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.393235][ T7291] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 106.398216][ T7291] bond2: left promiscuous mode [ 106.602888][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.764957][ T34] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 106.767714][ T34] usb 5-1: config 0 has no interface number 0 [ 106.769872][ T34] usb 5-1: too many endpoints for config 0 interface 115 altsetting 153: 77, using maximum allowed: 30 [ 106.773940][ T34] usb 5-1: config 0 interface 115 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 106.778361][ T34] usb 5-1: config 0 interface 115 has no altsetting 0 [ 106.784414][ T34] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 106.787526][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.790913][ T34] usb 5-1: Product: syz [ 106.800859][ T34] usb 5-1: Manufacturer: syz [ 106.804715][ T34] usb 5-1: SerialNumber: syz [ 106.809076][ T34] usb 5-1: config 0 descriptor?? [ 106.919807][ T40] audit: type=1400 audit(1772918707.102:387): avc: denied { getopt } for pid=7242 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.178562][ T34] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 107.192874][ T34] gspca_sunplus: reg_r err -71 [ 107.196035][ T34] usb 5-1: USB disconnect, device number 4 [ 107.684595][ T7313] syzkaller0: entered promiscuous mode [ 107.686420][ T7313] syzkaller0: entered allmulticast mode [ 107.957696][ T7331] xt_hashlimit: size too large, truncated to 1048576 [ 108.914165][ T7315] syzkaller0: entered promiscuous mode [ 108.916504][ T7315] syzkaller0: entered allmulticast mode [ 109.144465][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.147724][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.250548][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.261428][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.684420][ T7359] evm: overlay not supported [ 109.801175][ T675] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.824097][ T675] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.869591][ T79] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.873611][ T79] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.887041][ T79] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.893002][ T79] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.896938][ T60] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.898007][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 109.898020][ T40] audit: type=1400 audit(1772918710.082:393): avc: denied { unmount } for pid=6498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.901945][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.273596][ T7368] syzkaller0: entered promiscuous mode [ 110.276022][ T7368] syzkaller0: entered allmulticast mode [ 110.420792][ T7374] netlink: 11 bytes leftover after parsing attributes in process `syz.3.463'. [ 110.425582][ T7374] syzkaller0: entered promiscuous mode [ 110.427438][ T7374] syzkaller0: entered allmulticast mode [ 110.454306][ T40] audit: type=1400 audit(1772918710.642:394): avc: denied { read } for pid=7375 comm="syz.0.459" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.465547][ T40] audit: type=1400 audit(1772918710.642:395): avc: denied { open } for pid=7375 comm="syz.0.459" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.917243][ T7384] syzkaller0: entered promiscuous mode [ 110.919762][ T7384] syzkaller0: entered allmulticast mode [ 111.068858][ T7388] tipc: Started in network mode [ 111.071161][ T7388] tipc: Node identity 4, cluster identity 4711 [ 111.076523][ T7388] tipc: Node number set to 4 [ 111.328390][ T7394] syzkaller0: entered promiscuous mode [ 111.330867][ T7394] syzkaller0: entered allmulticast mode [ 111.445427][ T7396] syzkaller0: entered promiscuous mode [ 111.448103][ T7396] syzkaller0: entered allmulticast mode [ 111.501684][ T7398] tipc: Enabled bearer , priority 0 [ 111.506179][ T7398] syzkaller0: entered promiscuous mode [ 111.508920][ T7398] syzkaller0: entered allmulticast mode [ 111.526337][ T7398] tipc: Resetting bearer [ 111.531460][ T7397] tipc: Resetting bearer [ 111.544333][ T7397] tipc: Disabling bearer [ 111.736047][ T7405] syzkaller0: entered promiscuous mode [ 111.738613][ T7405] syzkaller0: entered allmulticast mode [ 111.989392][ T7410] syzkaller0: entered promiscuous mode [ 111.991973][ T7410] syzkaller0: entered allmulticast mode [ 112.200834][ T40] audit: type=1400 audit(1772918712.382:396): avc: denied { read write } for pid=7411 comm="syz.3.476" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.210241][ T40] audit: type=1400 audit(1772918712.382:397): avc: denied { open } for pid=7411 comm="syz.3.476" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.219937][ T40] audit: type=1400 audit(1772918712.382:398): avc: denied { map } for pid=7411 comm="syz.3.476" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.366702][ T7413] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 112.375201][ T7413] File: /dev/nullb0 PID: 7413 Comm: syz.3.476 [ 112.481075][ T7420] bridge_slave_0: left allmulticast mode [ 112.484940][ T7420] bridge_slave_0: left promiscuous mode [ 112.487067][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.498950][ T7420] bridge_slave_1: left allmulticast mode [ 112.500954][ T7420] bridge_slave_1: left promiscuous mode [ 112.504885][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.517897][ T7420] bond0: (slave bond_slave_0): Releasing backup interface [ 112.526133][ T7420] bond0: (slave bond_slave_1): Releasing backup interface [ 112.571048][ T7420] team0: Port device team_slave_0 removed [ 112.575442][ T7420] team0: Port device team_slave_1 removed [ 112.579944][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.585454][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.601614][ T7420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.620124][ T7421] team0: Mode changed to "loadbalance" [ 112.663997][ T40] audit: type=1400 audit(1772918712.852:399): avc: denied { bind } for pid=7419 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.894240][ T7427] syzkaller0: entered promiscuous mode [ 112.896821][ T7427] syzkaller0: entered allmulticast mode [ 113.142119][ T7434] syzkaller0: entered promiscuous mode [ 113.144482][ T7434] syzkaller0: entered allmulticast mode [ 113.671331][ T40] audit: type=1400 audit(1772918713.852:400): avc: denied { read } for pid=7439 comm="syz.4.485" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.713850][ T40] audit: type=1400 audit(1772918713.852:401): avc: denied { open } for pid=7439 comm="syz.4.485" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.723577][ T7441] Invalid option length (1048180) for dns_resolver key [ 114.414652][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 114.445672][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.487732][ T7446] vlan2: entered promiscuous mode [ 114.489557][ T7446] bond1: entered promiscuous mode [ 114.535578][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.488'. [ 114.594686][ T63] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 114.598815][ T63] Bluetooth: hci1: Injecting HCI hardware error event [ 114.603233][ T5938] Bluetooth: hci1: hardware error 0x00 [ 114.913274][ T63] Bluetooth: hci2: command 0x2016 tx timeout [ 115.095175][ T7471] syzkaller0: entered promiscuous mode [ 115.097707][ T7471] syzkaller0: entered allmulticast mode [ 115.126341][ T7469] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 115.129247][ T7469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.134040][ T7469] vhci_hcd vhci_hcd.0: Device attached [ 115.224334][ T7478] batadv_slave_0: entered promiscuous mode [ 115.279665][ T7482] syzkaller0: entered promiscuous mode [ 115.281531][ T7482] syzkaller0: entered allmulticast mode [ 115.344275][ T7483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.422695][ T6000] usb 44-1: SetAddress Request (2) to port 0 [ 115.431025][ T6000] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 115.448450][ T7492] binder: BINDER_SET_CONTEXT_MGR already set [ 115.450650][ T7492] binder: 7490:7492 ioctl 4018620d 200000004a80 returned -16 [ 115.652578][ T7472] vhci_hcd: connection reset by peer [ 115.655449][ T12] vhci_hcd vhci_hcd.3: stop threads [ 115.657812][ T12] vhci_hcd vhci_hcd.3: release socket [ 115.661601][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 116.207232][ T40] audit: type=1400 audit(1772918716.392:402): avc: denied { listen } for pid=7497 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.373130][ T7504] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 116.378751][ T7504] syzkaller0: entered promiscuous mode [ 116.381213][ T7504] syzkaller0: entered allmulticast mode [ 116.512649][ T7508] binder_alloc: 7507: binder_alloc_buf, no vma [ 116.575235][ T7512] syzkaller0: entered promiscuous mode [ 116.577087][ T7512] syzkaller0: entered allmulticast mode [ 116.581007][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 116.584053][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 116.672989][ T5938] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 116.812665][ T7518] 8021q: adding VLAN 0 to HW filter on device .` [ 116.829659][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.852272][ T7518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.898351][ T7521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.993083][ T5938] Bluetooth: hci2: command 0x2016 tx timeout [ 117.374592][ T7538] syzkaller0: entered promiscuous mode [ 117.376526][ T7538] syzkaller0: entered allmulticast mode [ 117.379573][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 117.382782][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 117.386373][ T7538] 0: reclassify loop, rule prio 0, protocol 800 [ 117.630011][ T7548] syzkaller0: entered promiscuous mode [ 117.632345][ T7548] syzkaller0: entered allmulticast mode [ 118.017656][ T7564] syzkaller0: entered promiscuous mode [ 118.020135][ T7564] syzkaller0: entered allmulticast mode [ 118.079689][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 118.215446][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100 [ 118.219819][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 118.266025][ T40] audit: type=1400 audit(1772918718.452:403): avc: denied { create } for pid=7571 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.283443][ T40] audit: type=1400 audit(1772918718.472:404): avc: denied { read } for pid=7571 comm="syz.1.530" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.291144][ T40] audit: type=1400 audit(1772918718.472:405): avc: denied { open } for pid=7571 comm="syz.1.530" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.321446][ T40] audit: type=1400 audit(1772918718.492:406): avc: denied { ioctl } for pid=7571 comm="syz.1.530" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.560847][ T7579] TC_ACT_REPEAT abuse ? [ 118.690788][ T7581] syzkaller0: entered promiscuous mode [ 118.704558][ T7581] syzkaller0: entered allmulticast mode [ 118.709505][ T7581] 0: reclassify loop, rule prio 0, protocol 800 [ 118.865288][ T40] audit: type=1400 audit(1772918719.052:407): avc: denied { watch } for pid=7582 comm="syz.1.535" path="/160/bus/file1" dev="overlay" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.883701][ T40] audit: type=1400 audit(1772918719.052:408): avc: denied { watch_sb } for pid=7582 comm="syz.1.535" path="/160/bus/file1" dev="overlay" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.073356][ T5932] Bluetooth: hci2: command 0x2016 tx timeout [ 119.194377][ T7590] syzkaller0: entered promiscuous mode [ 119.196756][ T7590] syzkaller0: entered allmulticast mode [ 119.365034][ T7595] syzkaller0: entered promiscuous mode [ 119.366975][ T7595] syzkaller0: entered allmulticast mode [ 119.371629][ T40] audit: type=1400 audit(1772918719.552:409): avc: denied { bind } for pid=7596 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.380021][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.552569][ T40] audit: type=1400 audit(1772918719.732:410): avc: denied { append } for pid=7603 comm="syz.1.543" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.565856][ T7605] syzkaller0: entered promiscuous mode [ 119.568047][ T7605] syzkaller0: entered allmulticast mode [ 119.840515][ T7614] syzkaller0: entered promiscuous mode [ 119.842807][ T7614] syzkaller0: entered allmulticast mode [ 119.848347][ T7614] 0: reclassify loop, rule prio 0, protocol 800 [ 120.372741][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.512800][ T6000] usb 44-1: device descriptor read/8, error -110 [ 120.534492][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.538091][ T9] usb 8-1: config 0 has no interfaces? [ 120.541144][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.547845][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.557255][ T9] usb 8-1: config 0 descriptor?? [ 120.592321][ T40] audit: type=1400 audit(1772918720.772:411): avc: denied { create } for pid=7630 comm="syz.4.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 120.622879][ T7631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.634252][ T7639] syzkaller0: entered promiscuous mode [ 120.636693][ T7639] syzkaller0: entered allmulticast mode [ 120.765400][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.769775][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.778626][ T9] usb 8-1: USB disconnect, device number 5 [ 120.798194][ T7641] syzkaller0: entered promiscuous mode [ 120.800082][ T7641] syzkaller0: entered allmulticast mode [ 120.903389][ T6000] usb usb44-port1: attempt power cycle [ 120.947994][ T7644] syzkaller0: entered promiscuous mode [ 120.949923][ T7644] syzkaller0: entered allmulticast mode [ 121.452735][ T831] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 121.478522][ T6000] usb usb44-port1: unable to enumerate USB device [ 121.614886][ T831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.618142][ T831] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 121.621090][ T831] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.624262][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.633508][ T831] usb 9-1: config 0 descriptor?? [ 121.915502][ T40] audit: type=1400 audit(1772918722.102:412): avc: denied { setopt } for pid=7651 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.928361][ T40] audit: type=1400 audit(1772918722.112:413): avc: denied { create } for pid=7651 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.346203][ T39] usb 9-1: USB disconnect, device number 3 [ 122.408436][ T7677] netlink: 'syz.1.567': attribute type 3 has an invalid length. [ 122.411745][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 122.415360][ T7677] netlink: 2 bytes leftover after parsing attributes in process `syz.1.567'. [ 123.153014][ T7681] syzkaller0: entered promiscuous mode [ 123.155477][ T7681] syzkaller0: entered allmulticast mode [ 123.593776][ T40] audit: type=1400 audit(1772918723.782:414): avc: denied { create } for pid=7690 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.600782][ T40] audit: type=1400 audit(1772918723.782:415): avc: denied { ioctl } for pid=7690 comm="syz.4.573" path="socket:[25900]" dev="sockfs" ino=25900 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.782706][ T40] audit: type=1400 audit(1772918723.962:416): avc: denied { getopt } for pid=7695 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.904022][ T7698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 124.306819][ T7658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.437665][ T5932] Bluetooth: hci2: command 0x2016 tx timeout [ 124.458417][ T40] audit: type=1400 audit(1772918724.642:417): avc: denied { mount } for pid=7717 comm="syz.4.583" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 124.500760][ T7721] syzkaller0: entered promiscuous mode [ 124.502603][ T7721] syzkaller0: entered allmulticast mode [ 124.618164][ T7726] tipc: Enabled bearer , priority 0 [ 124.622073][ T7726] syzkaller0: entered promiscuous mode [ 124.624205][ T7726] syzkaller0: entered allmulticast mode [ 124.629547][ T40] audit: type=1400 audit(1772918724.812:418): avc: denied { getopt } for pid=7732 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.643441][ T40] audit: type=1400 audit(1772918724.832:419): avc: denied { create } for pid=7732 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.651235][ T40] audit: type=1400 audit(1772918724.832:420): avc: denied { bind } for pid=7732 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.659833][ T40] audit: type=1400 audit(1772918724.832:421): avc: denied { create } for pid=7732 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.677926][ T7726] tipc: Resetting bearer [ 124.686074][ T7725] tipc: Resetting bearer [ 124.722805][ T7725] tipc: Disabling bearer [ 124.938628][ T7764] syzkaller0: entered promiscuous mode [ 124.940950][ T7764] syzkaller0: entered allmulticast mode [ 125.105697][ T7728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.208885][ T7783] 9p: Bad value for 'rfdno' [ 125.210100][ T7783] rdma_op ffff8880309b79f0 conn xmit_rdma 0000000000000000 [ 125.211043][ T7783] netlink: 172 bytes leftover after parsing attributes in process `syz.1.599'. [ 125.236825][ T7783] netfs: Couldn't get user pages (rc=-14) [ 125.437397][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 125.455362][ T7789] kvm_intel: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 125.463117][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd956 [ 125.468427][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 125.485365][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe1ea [ 125.494476][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 125.497502][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 125.502254][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xca56 [ 125.512633][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.516583][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 125.544445][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa262 [ 125.547668][ T7789] kvm: kvm [7788]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 125.574680][ T7789] kvm_intel: kvm [7788]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 125.684459][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.687995][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.691101][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.696220][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.699117][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.704058][ T34] usb 5-1: config 0 descriptor?? [ 125.913718][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 125.917499][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 125.924759][ T34] usb 5-1: USB disconnect, device number 5 [ 126.263823][ T7796] syzkaller0: entered promiscuous mode [ 126.265972][ T7796] syzkaller0: entered allmulticast mode [ 126.350334][ T7798] syzkaller0: entered promiscuous mode [ 126.353008][ T7798] syzkaller0: entered allmulticast mode [ 126.359563][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.605'. [ 126.363640][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.605'. [ 126.369026][ T7798] 0: reclassify loop, rule prio 0, protocol 800 [ 126.570843][ T7806] tipc: Enabled bearer , priority 0 [ 126.571357][ T7806] syzkaller0: entered promiscuous mode [ 126.571369][ T7806] syzkaller0: entered allmulticast mode [ 126.573860][ T7805] tipc: Resetting bearer [ 126.582900][ T7805] tipc: Disabling bearer [ 127.429511][ T5938] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 127.660484][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 127.660499][ T40] audit: type=1400 audit(1772918727.842:430): avc: denied { create } for pid=7829 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.701630][ T40] audit: type=1400 audit(1772918727.842:431): avc: denied { write } for pid=7829 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.736688][ T40] audit: type=1400 audit(1772918727.922:432): avc: denied { setopt } for pid=7835 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.754853][ T7836] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 202 [ 127.800417][ T40] audit: type=1400 audit(1772918727.982:433): avc: denied { kexec_image_load } for pid=7837 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 127.840285][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.4.619'. [ 127.966071][ T40] audit: type=1400 audit(1772918728.152:434): avc: denied { setopt } for pid=7846 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.308727][ T40] audit: type=1400 audit(1772918728.492:435): avc: denied { create } for pid=7867 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.317657][ T40] audit: type=1400 audit(1772918728.492:436): avc: denied { ioctl } for pid=7867 comm="syz.0.632" path="socket:[26908]" dev="sockfs" ino=26908 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.399909][ T7878] 9p: Bad value for 'rfdno' [ 128.400769][ T7878] rdma_op ffff8880306889f0 conn xmit_rdma 0000000000000000 [ 128.416523][ T7878] netlink: 172 bytes leftover after parsing attributes in process `syz.3.637'. [ 128.421264][ T7878] 9pnet_virtio: no channels available for device syz [ 128.480284][ T40] audit: type=1400 audit(1772918728.662:437): avc: denied { sqpoll } for pid=7886 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.558784][ T7894] vlan0: entered promiscuous mode [ 128.664388][ T7904] 9p: Bad value for 'rfdno' [ 128.667777][ T7904] rdma_op ffff8880398c11f0 conn xmit_rdma 0000000000000000 [ 128.671888][ T7904] netlink: 172 bytes leftover after parsing attributes in process `syz.4.648'. [ 128.677257][ T7904] 9pnet_virtio: no channels available for device syz [ 128.716550][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.649'. [ 128.754963][ T40] audit: type=1400 audit(1772918728.932:438): avc: denied { getopt } for pid=7910 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.792575][ T40] audit: type=1400 audit(1772918728.972:439): avc: denied { append } for pid=7910 comm="syz.4.651" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.894182][ T7911] 9pnet_virtio: no channels available for device syz [ 129.335752][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.339005][ T7933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.356009][ T7933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.654367][ T7961] syzkaller0: entered promiscuous mode [ 129.656844][ T7961] syzkaller0: entered allmulticast mode [ 129.757677][ T7919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.804873][ T7974] syzkaller0: entered promiscuous mode [ 129.806797][ T7974] syzkaller0: entered allmulticast mode [ 130.209927][ T8006] syzkaller0: entered promiscuous mode [ 130.212219][ T8006] syzkaller0: entered allmulticast mode [ 130.992671][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.113675][ T8025] 9p: Bad value for 'rfdno' [ 131.115916][ T8025] rdma_op ffff88805a2d99f0 conn xmit_rdma 0000000000000000 [ 131.118842][ T8025] netlink: 172 bytes leftover after parsing attributes in process `syz.3.705'. [ 131.122438][ T8025] 9pnet_virtio: no channels available for device syz [ 131.188654][ T8034] syzkaller0: entered promiscuous mode [ 131.190491][ T8034] syzkaller0: entered allmulticast mode [ 131.244273][ T8039] 9pnet_virtio: no channels available for device syz [ 131.426114][ T8051] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 131.491392][ T8056] syzkaller0: entered promiscuous mode [ 131.493402][ T8056] syzkaller0: entered allmulticast mode [ 131.591226][ T5938] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 132.647466][ T8085] 9p: Bad value for 'rfdno' [ 132.649455][ T8085] rdma_op ffff8880369c81f0 conn xmit_rdma 0000000000000000 [ 132.652151][ T8085] netlink: 172 bytes leftover after parsing attributes in process `syz.4.732'. [ 132.656646][ T8085] 9pnet_virtio: no channels available for device syz [ 132.682010][ T8087] syzkaller0: entered promiscuous mode [ 132.684600][ T8087] syzkaller0: entered allmulticast mode [ 133.195129][ T8125] syzkaller0: entered promiscuous mode [ 133.197611][ T8125] syzkaller0: entered allmulticast mode [ 133.348834][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.351263][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.604542][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.672424][ T8166] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 133.680794][ T8099] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 133.681228][ T8166] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 133.791321][ T8174] 9p: Bad value for 'rfdno' [ 133.795851][ T8174] rdma_op ffff8880260e41f0 conn xmit_rdma 0000000000000000 [ 133.799825][ T8174] netlink: 172 bytes leftover after parsing attributes in process `syz.0.773'. [ 133.804900][ T8174] 9pnet_virtio: no channels available for device syz [ 133.876921][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 133.876932][ T40] audit: type=1400 audit(1772918734.062:447): avc: denied { write } for pid=8181 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.059019][ T40] audit: type=1400 audit(1772918734.242:448): avc: denied { bind } for pid=8194 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 134.068298][ T40] audit: type=1400 audit(1772918734.242:449): avc: denied { connect } for pid=8194 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 134.511247][ T40] audit: type=1400 audit(1772918734.692:450): avc: denied { write } for pid=8208 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.552697][ T8211] syzkaller0: entered promiscuous mode [ 134.554939][ T8211] syzkaller0: entered allmulticast mode [ 134.642586][ T8164] comedi comedi3: reset error (fatal) [ 134.650835][ T8213] 9p: Bad value for 'rfdno' [ 134.653214][ T8213] rdma_op ffff8880260e51f0 conn xmit_rdma 0000000000000000 [ 134.656182][ T8213] netlink: 172 bytes leftover after parsing attributes in process `syz.0.791'. [ 134.660065][ T8213] 9pnet_virtio: no channels available for device syz [ 134.666588][ T5938] Bluetooth: unknown link type 128 [ 134.791225][ T8225] program syz.0.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.923093][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.299033][ T8255] xt_hashlimit: size too large, truncated to 1048576 [ 135.537440][ T40] audit: type=1400 audit(1772918735.722:451): avc: denied { read } for pid=8266 comm="syz.3.815" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.548637][ T40] audit: type=1400 audit(1772918735.722:452): avc: denied { open } for pid=8266 comm="syz.3.815" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.592771][ T40] audit: type=1400 audit(1772918735.772:453): avc: denied { ioctl } for pid=8266 comm="syz.3.815" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.672728][ T5932] Bluetooth: hci4: command 0x0405 tx timeout [ 137.205779][ T8351] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 137.208435][ T8351] bridge_slave_1: left allmulticast mode [ 137.210278][ T8351] bridge_slave_1: left promiscuous mode [ 137.212444][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.222115][ T8351] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.331058][ T8356] syzkaller0: entered promiscuous mode [ 137.333634][ T8356] syzkaller0: entered allmulticast mode [ 137.422242][ T8368] xt_hashlimit: size too large, truncated to 1048576 [ 137.642606][ T5932] Bluetooth: hci2: command 0x2016 tx timeout [ 138.044729][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.046841][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.262969][ T8378] mac80211_hwsim hwsim11 : renamed from wlan1 [ 138.482648][ T8396] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.485727][ T8396] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.545540][ T8403] syzkaller0: entered promiscuous mode [ 138.547991][ T8403] syzkaller0: entered allmulticast mode [ 140.125521][ T8404] Set syz1 is full, maxelem 65536 reached [ 140.250917][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 140.254892][ T8412] netem: invalid attributes len -22 [ 140.257191][ T8412] netem: change failed [ 140.382954][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.387858][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.392071][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.392296][ T40] audit: type=1400 audit(1772918740.572:454): avc: denied { write } for pid=8424 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.400656][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.409904][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.491578][ T8433] syzkaller0: entered promiscuous mode [ 140.493457][ T8433] syzkaller0: entered allmulticast mode [ 141.543401][ T8455] syzkaller0: entered promiscuous mode [ 141.545929][ T8455] syzkaller0: entered allmulticast mode [ 142.432693][ T63] Bluetooth: hci3: command tx timeout [ 142.432718][ T5932] Bluetooth: hci2: command 0x2016 tx timeout [ 142.501020][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 142.640004][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.643550][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.646057][ T8420] bridge_slave_0: entered allmulticast mode [ 142.648975][ T8420] bridge_slave_0: entered promiscuous mode [ 142.652314][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.654797][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.657321][ T8420] bridge_slave_1: entered allmulticast mode [ 142.660152][ T8420] bridge_slave_1: entered promiscuous mode [ 142.675385][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.680529][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.695565][ T8420] team0: Port device team_slave_0 added [ 142.698828][ T8420] team0: Port device team_slave_1 added [ 142.741348][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.744590][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.755239][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.761160][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.764207][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.776550][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.807199][ T8420] hsr_slave_0: entered promiscuous mode [ 142.810484][ T8420] hsr_slave_1: entered promiscuous mode [ 142.821634][ T8513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.915'. [ 142.942868][ T8420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.949030][ T8420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.955870][ T8420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.960383][ T8420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.979351][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.981789][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.015195][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.021227][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.031607][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.038635][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.041168][ T675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.047354][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.050353][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.102636][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 143.164323][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.245296][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.254349][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.257616][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.260554][ T24] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 143.265133][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.269262][ T24] usb 9-1: config 0 descriptor?? [ 143.272779][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 143.275141][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 143.280464][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.284609][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.287541][ T24] usb 9-1: media controller created [ 143.290811][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.303786][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 143.305847][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.309407][ T8420] veth0_vlan: entered promiscuous mode [ 143.310758][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input10 [ 143.316835][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 143.317299][ T40] audit: type=1400 audit(1772918743.502:455): avc: denied { read } for pid=5323 comm="acpid" name="event4" dev="devtmpfs" ino=2942 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.317550][ T8420] veth1_vlan: entered promiscuous mode [ 143.319024][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.327051][ T40] audit: type=1400 audit(1772918743.502:456): avc: denied { open } for pid=5323 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2942 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.340538][ T40] audit: type=1400 audit(1772918743.502:457): avc: denied { ioctl } for pid=5323 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2942 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.342205][ T8420] veth0_macvtap: entered promiscuous mode [ 143.355277][ T8420] veth1_macvtap: entered promiscuous mode [ 143.367749][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.376685][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.383484][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.387394][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.391711][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.394004][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.395992][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.399321][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.407560][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.422425][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.427777][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.431202][ T34] usb 5-1: Product: syz [ 143.433418][ T34] usb 5-1: Manufacturer: syz [ 143.435216][ T34] usb 5-1: SerialNumber: syz [ 143.443306][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 143.445674][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 143.465064][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.470057][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.477048][ T40] audit: type=1400 audit(1772918743.662:458): avc: denied { ioctl } for pid=8516 comm="syz.4.918" path="/dev/input/event4" dev="devtmpfs" ino=2942 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.485759][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 143.488867][ T4222] usb 9-1: USB disconnect, device number 4 [ 143.489827][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.489845][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.490451][ T24] dvb-usb: error while querying for an remote control event. [ 143.506428][ T40] audit: type=1400 audit(1772918743.692:459): avc: denied { mounton } for pid=8420 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 143.545938][ T4222] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 143.652963][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 144.108780][ T40] audit: type=1400 audit(1772918744.292:460): avc: denied { open } for pid=8568 comm="syz.5.933" path="/dev/ptyqf" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 144.130636][ T40] audit: type=1400 audit(1772918744.312:461): avc: denied { ioctl } for pid=8568 comm="syz.5.933" path="/dev/ptyqf" dev="devtmpfs" ino=142 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 144.173193][ T8574] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 144.200241][ T8576] 9p: Bad value for 'rfdno' [ 144.202820][ T8576] 9pnet_virtio: no channels available for device syz [ 144.400722][ T40] audit: type=1400 audit(1772918744.582:462): avc: denied { getopt } for pid=8600 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.477718][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 144.513315][ T63] Bluetooth: hci3: command tx timeout [ 144.514686][ T8609] 9p: Bad value for 'rfdno' [ 144.518557][ T8609] rdma_op ffff8880399e21f0 conn xmit_rdma 0000000000000000 [ 144.522142][ T8609] 9pnet_virtio: no channels available for device syz [ 144.709965][ T4222] usb 5-1: USB disconnect, device number 6 [ 144.711286][ T8624] syzkaller0: entered promiscuous mode [ 144.715069][ T8624] syzkaller0: entered allmulticast mode [ 144.719715][ T4222] usblp0: removed [ 145.041970][ T8639] 9p: Bad value for 'rfdno' [ 145.046955][ T8639] rdma_op ffff88802dbcf9f0 conn xmit_rdma 0000000000000000 [ 145.051324][ T8639] 9pnet_virtio: no channels available for device syz [ 145.073046][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.245895][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 145.250221][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 145.253474][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.256880][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.260638][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.265922][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.271723][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.275994][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.328429][ T8655] syzkaller0: entered promiscuous mode [ 145.330858][ T8655] syzkaller0: entered allmulticast mode [ 145.355735][ T8661] 9p: Bad value for 'rfdno' [ 145.364248][ T8661] rdma_op ffff88805d1229f0 conn xmit_rdma 0000000000000000 [ 145.368613][ T8661] 9pnet_virtio: no channels available for device syz [ 145.489466][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 145.494201][ T34] usbtmc 8-1:16.0: can't read capabilities [ 145.562650][ T4222] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 145.691163][ T8626] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 145.696290][ T50] usb 8-1: USB disconnect, device number 6 [ 145.734577][ T4222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.739343][ T4222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.744093][ T4222] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.749757][ T4222] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.756050][ T4222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.773042][ T4222] usb 9-1: config 0 descriptor?? [ 146.180743][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.184403][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.187116][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.189509][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.191951][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.194662][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.197856][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.200272][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.203730][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.206148][ T4222] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 146.265251][ T4222] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 146.265657][ T8671] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.454774][ T9] usb 9-1: USB disconnect, device number 5 [ 146.504608][ T8681] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.592718][ T63] Bluetooth: hci3: command tx timeout [ 146.835821][ T40] audit: type=1400 audit(1772918747.022:463): avc: denied { bind } for pid=8715 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.843996][ T40] audit: type=1400 audit(1772918747.022:464): avc: denied { node_bind } for pid=8715 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 146.850290][ T40] audit: type=1400 audit(1772918747.022:465): avc: denied { read } for pid=8715 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.993972][ T8726] 9p: Bad value for 'rfdno' [ 146.996757][ T8726] rdma_op ffff88805b4081f0 conn xmit_rdma 0000000000000000 [ 147.000875][ T8726] 9pnet_virtio: no channels available for device syz [ 147.037209][ T40] audit: type=1326 audit(1772918747.222:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8731 comm="syz.5.997" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91af39c799 code=0x0 [ 147.219011][ T40] audit: type=1400 audit(1772918747.402:467): avc: denied { ioctl } for pid=8746 comm="syz.4.1004" path="socket:[31989]" dev="sockfs" ino=31989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.672801][ T831] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 147.771105][ T40] audit: type=1400 audit(1772918747.952:468): avc: denied { connect } for pid=8766 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.823932][ T831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.832639][ T831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.840825][ T831] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.845380][ T831] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.848426][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.853035][ T831] usb 9-1: config 0 descriptor?? [ 148.072129][ T8775] overlayfs: missing 'workdir' [ 148.279680][ T831] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 148.439582][ T40] audit: type=1400 audit(1772918748.622:469): avc: denied { ioctl } for pid=8787 comm="syz.0.1020" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.525697][ T831] usb 9-1: USB disconnect, device number 6 [ 148.624211][ T8797] 9pnet_virtio: no channels available for device syz [ 148.654113][ T8799] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.682994][ T63] Bluetooth: hci3: command tx timeout [ 149.008599][ T8809] syzkaller0: entered promiscuous mode [ 149.010477][ T8809] syzkaller0: entered allmulticast mode [ 149.248917][ T40] audit: type=1400 audit(1772918749.432:470): avc: denied { write } for pid=8823 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.254344][ T8769] Set syz1 is full, maxelem 65536 reached [ 149.344378][ T40] audit: type=1400 audit(1772918749.522:471): avc: denied { bind } for pid=8831 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.452680][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 150.492641][ T39] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 150.614010][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.617606][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.620712][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.625420][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.628432][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.632276][ T24] usb 9-1: config 0 descriptor?? [ 150.661856][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.666183][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.669432][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.673959][ T39] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.676914][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.683143][ T39] usb 8-1: config 0 descriptor?? [ 150.964160][ T40] audit: type=1400 audit(1772918751.152:472): avc: denied { load_policy } for pid=8910 comm="syz.5.1065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.964748][ T8911] SELinux: ebitmap start bit (4278255616) is beyond the end of the bitmap (320) [ 150.975623][ T8911] SELinux: failed to load policy [ 151.014050][ T8913] batadv_slave_1: entered promiscuous mode [ 151.016723][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 151.027369][ T8913] team0 (unregistering): Port device team_slave_0 removed [ 151.032597][ T8913] team0 (unregistering): Port device team_slave_1 removed [ 151.063879][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.100445][ T8912] batadv_slave_1: left promiscuous mode [ 151.110773][ T39] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 151.676362][ T8941] netlink: 'syz.5.1078': attribute type 29 has an invalid length. [ 151.681820][ T8941] netlink: 'syz.5.1078': attribute type 29 has an invalid length. [ 151.687048][ T8941] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1078'. [ 151.690878][ T8941] unsupported nla_type 58 [ 152.255058][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 152.263880][ T831] usb 8-1: USB disconnect, device number 7 [ 152.660810][ T8980] ======================================================= [ 152.660810][ T8980] WARNING: The mand mount option has been deprecated and [ 152.660810][ T8980] and is ignored by this kernel. Remove the mand [ 152.660810][ T8980] option from the mount to silence this warning. [ 152.660810][ T8980] ======================================================= [ 152.675794][ T40] audit: type=1400 audit(1772918752.872:473): avc: denied { mount } for pid=8979 comm="syz.0.1095" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.684619][ T8980] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.686535][ T40] audit: type=1400 audit(1772918752.872:474): avc: denied { mounton } for pid=8979 comm="syz.0.1095" path="/303/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.721042][ T40] audit: type=1400 audit(1772918752.902:475): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.742810][ T8984] input: syz0 as /devices/virtual/input/input11 [ 153.035397][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 153.043916][ T6000] usb 9-1: USB disconnect, device number 7 [ 153.185792][ T9031] ubi0: attaching mtd0 [ 153.188572][ T9031] ubi0: scanning is finished [ 153.190112][ T9031] ubi0: empty MTD device detected [ 153.232631][ T39] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 153.395087][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.399266][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.403233][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.408388][ T39] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.412413][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.419693][ T39] usb 10-1: config 0 descriptor?? [ 153.443939][ T9031] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 153.446404][ T9031] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 153.448667][ T9031] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 153.450843][ T9031] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 153.453387][ T9031] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 153.455579][ T9031] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 153.458142][ T9031] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4119175027 [ 153.461364][ T9031] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 153.469030][ T9053] ubi0: background thread "ubi_bgt0d" started, PID 9053 [ 153.492628][ T1335] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 153.636788][ T40] audit: type=1400 audit(1772918753.822:476): avc: denied { bpf } for pid=9063 comm="syz.4.1119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.645194][ T9064] loop2: detected capacity change from 0 to 7 [ 153.653208][ T9064] Dev loop2: unable to read RDB block 7 [ 153.655717][ T9064] loop2: AHDI p1 p2 [ 153.657605][ T9064] loop2: partition table partially beyond EOD, truncated [ 153.663250][ T1335] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 153.668148][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.672063][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.676803][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.681594][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.685881][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.690519][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.695350][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.699044][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.704225][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.708786][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.712981][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.715318][ T63] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 153.717665][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.725202][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.729050][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.733909][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.738324][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.742243][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.748166][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.753392][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.757359][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.761953][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.766260][ T1335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.769319][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.773625][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 153.778276][ T1335] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.781263][ T1335] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.784375][ T1335] usb 8-1: Product: syz [ 153.785870][ T1335] usb 8-1: Manufacturer: syz [ 153.787474][ T1335] usb 8-1: SerialNumber: syz [ 153.790643][ T1335] usb 8-1: config 0 descriptor?? [ 153.800298][ T9070] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.804276][ T1335] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 153.841738][ T39] hid_parser_main: 43 callbacks suppressed [ 153.841758][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.847888][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.851134][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.854630][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.857809][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.860974][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.865201][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.868336][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.871459][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.875629][ T39] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 153.886368][ T39] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 153.891468][ T40] audit: type=1400 audit(1772918754.082:477): avc: denied { remount } for pid=9071 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 154.003846][ T39] usb 8-1: USB disconnect, device number 8 [ 154.010136][ T39] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 154.040067][ T34] usb 10-1: USB disconnect, device number 2 [ 154.243973][ T40] audit: type=1400 audit(1772918754.432:478): avc: denied { perfmon } for pid=9079 comm="syz.0.1126" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.522601][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.524169][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.528467][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 154.531642][ T63] Bluetooth: hci3: hardware error 0x00 [ 154.608363][ T9086] syzkaller0: entered promiscuous mode [ 154.610166][ T9086] syzkaller0: entered allmulticast mode [ 154.679001][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.685845][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.689332][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.693740][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.697085][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.705377][ T39] usb 5-1: config 0 descriptor?? [ 154.798860][ T5932] Bluetooth: Frame is too long (len 10, expected len 8) [ 154.914064][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 154.916280][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 154.922644][ C3] ------------[ cut here ]------------ [ 154.925407][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 154.928509][ C3] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#3: swapper/3/0 [ 154.932211][ C3] Modules linked in: [ 154.933911][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.938227][ C3] Tainted: [L]=SOFTLOCKUP [ 154.940019][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.944044][ C3] RIP: 0010:__queue_work+0xd0c/0x1150 [ 154.944105][ T40] audit: type=1400 audit(1772918755.132:479): avc: denied { name_bind } for pid=9098 comm="syz.3.1134" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 154.945932][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 af 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 a5 e2 38 00 90 0f 0b 90 e9 b2 f5 [ 154.960827][ C3] RSP: 0018:ffffc900006f8be8 EFLAGS: 00010046 [ 154.963311][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006f06951 [ 154.966509][ C3] RDX: ffff888035dee978 RSI: ffffffff8a833ba0 RDI: ffffffff90dc80e0 [ 154.969355][ C3] RBP: ffff888037834a70 R08: 0000000000000005 R09: 0000000000000000 [ 154.971934][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035dee800 [ 154.974511][ C3] R13: 1ffff920000df18f R14: ffffffff81cfe220 R15: 0000000000000001 [ 154.977083][ C3] FS: 0000000000000000(0000) GS:ffff8880d6648000(0000) knlGS:0000000000000000 [ 154.979974][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.982128][ C3] CR2: 00005565407c0fa8 CR3: 000000003508e000 CR4: 0000000000352ef0 [ 154.984719][ C3] Call Trace: [ 154.985828][ C3] [ 154.986791][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 154.988701][ C3] call_timer_fn+0x19a/0x670 [ 154.990217][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 154.991927][ C3] ? __run_timers+0x560/0xb30 [ 154.993459][ C3] ? __run_timers+0x560/0xb30 [ 154.995021][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 154.996937][ C3] __run_timers+0x570/0xb30 [ 154.998430][ C3] ? __pfx___run_timers+0x10/0x10 [ 155.000087][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 155.001757][ C3] run_timer_base+0x114/0x190 [ 155.003294][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 155.004998][ C3] run_timer_softirq+0x1a/0x50 [ 155.006569][ C3] handle_softirqs+0x1eb/0x9e0 [ 155.008161][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 155.009881][ C3] __irq_exit_rcu+0xef/0x150 [ 155.011405][ C3] irq_exit_rcu+0x9/0x30 [ 155.012843][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 155.014715][ C3] [ 155.015868][ C3] [ 155.016884][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.018925][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 155.020837][ C3] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 ef 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 155.027394][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000202 [ 155.029478][ C3] RAX: 00000000001310d9 RBX: ffff88801eafa4c0 RCX: ffffffff8b8f9c75 [ 155.032111][ C3] RDX: 0000000000000000 RSI: ffffffff8de74c82 RDI: ffffffff8c1afaa0 [ 155.032663][ T40] audit: type=1400 audit(1772918755.212:480): avc: denied { module_request } for pid=9103 comm="syz.3.1136" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 155.034888][ C3] RBP: 0000000000000003 R08: 0000000000000001 R09: ffffed100d4e6795 [ 155.034897][ C3] R10: ffff88806a733cab R11: 0000000000000000 R12: ffffed1003d5f498 [ 155.034905][ C3] R13: 0000000000000003 R14: ffffffff90d98010 R15: 0000000000000000 [ 155.034921][ C3] ? ct_kernel_exit+0x125/0x180 [ 155.034951][ C3] default_idle+0x9/0x10 [ 155.053570][ C3] default_idle_call+0x6c/0xb0 [ 155.055244][ C3] do_idle+0x35b/0x4b0 [ 155.056698][ C3] ? __pfx_do_idle+0x10/0x10 [ 155.058216][ C3] cpu_startup_entry+0x4f/0x60 [ 155.059888][ C3] start_secondary+0x21d/0x2d0 [ 155.061488][ C3] ? __pfx_start_secondary+0x10/0x10 [ 155.063266][ C3] common_startup_64+0x13e/0x148 [ 155.064912][ C3] [ 155.065984][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.068903][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.073159][ C3] Tainted: [L]=SOFTLOCKUP [ 155.074958][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.079134][ C3] Call Trace: [ 155.080593][ C3] [ 155.081869][ C3] dump_stack_lvl+0x100/0x190 [ 155.083936][ C3] vpanic+0x552/0x970 [ 155.085738][ C3] ? __pfx_vpanic+0x10/0x10 [ 155.087763][ C3] panic+0xd1/0xe0 [ 155.089426][ C3] ? __pfx_panic+0x10/0x10 [ 155.091394][ C3] ? check_panic_on_warn+0x1f/0x90 [ 155.093532][ C3] check_panic_on_warn.cold+0x19/0x34 [ 155.095666][ C3] ? __queue_work+0xd08/0x1150 [ 155.097260][ C3] __warn.cold+0x191/0x348 [ 155.099047][ C3] __report_bug+0x296/0x3d0 [ 155.101044][ C3] ? __queue_work+0xd08/0x1150 [ 155.103086][ C3] ? __pfx___report_bug+0x10/0x10 [ 155.105098][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 155.107396][ C3] ? mark_held_locks+0x40/0x70 [ 155.109502][ C3] ? look_up_lock_class+0x55/0x120 [ 155.111210][ C3] report_bug_entry+0xe1/0x290 [ 155.112782][ C3] ? __queue_work+0xd0c/0x1150 [ 155.114320][ C3] handle_bug+0x1cd/0x2a0 [ 155.115834][ C3] exc_invalid_op+0x17/0x50 [ 155.117483][ C3] asm_exc_invalid_op+0x1a/0x20 [ 155.119093][ C3] RIP: 0010:__queue_work+0xd0c/0x1150 [ 155.120900][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 af 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 a5 e2 38 00 90 0f 0b 90 e9 b2 f5 [ 155.127773][ C3] RSP: 0018:ffffc900006f8be8 EFLAGS: 00010046 [ 155.129860][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006f06951 [ 155.132947][ C3] RDX: ffff888035dee978 RSI: ffffffff8a833ba0 RDI: ffffffff90dc80e0 [ 155.135832][ C3] RBP: ffff888037834a70 R08: 0000000000000005 R09: 0000000000000000 [ 155.138726][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035dee800 [ 155.141359][ C3] R13: 1ffff920000df18f R14: ffffffff81cfe220 R15: 0000000000000001 [ 155.144101][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 155.146395][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 155.148506][ C3] ? __queue_work+0xcda/0x1150 [ 155.150537][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 155.152754][ C3] call_timer_fn+0x19a/0x670 [ 155.154611][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 155.156555][ C3] ? __run_timers+0x560/0xb30 [ 155.158473][ C3] ? __run_timers+0x560/0xb30 [ 155.160336][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 155.162493][ C3] __run_timers+0x570/0xb30 [ 155.164180][ C3] ? __pfx___run_timers+0x10/0x10 [ 155.165833][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 155.167776][ C3] run_timer_base+0x114/0x190 [ 155.169805][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 155.172018][ C3] run_timer_softirq+0x1a/0x50 [ 155.174049][ C3] handle_softirqs+0x1eb/0x9e0 [ 155.176085][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 155.178389][ C3] __irq_exit_rcu+0xef/0x150 [ 155.179923][ C3] irq_exit_rcu+0x9/0x30 [ 155.181299][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 155.183064][ C3] [ 155.184055][ C3] [ 155.184975][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.187085][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 155.189424][ C3] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 ef 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 155.196071][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000202 [ 155.198225][ C3] RAX: 00000000001310d9 RBX: ffff88801eafa4c0 RCX: ffffffff8b8f9c75 [ 155.200738][ C3] RDX: 0000000000000000 RSI: ffffffff8de74c82 RDI: ffffffff8c1afaa0 [ 155.203270][ C3] RBP: 0000000000000003 R08: 0000000000000001 R09: ffffed100d4e6795 [ 155.205746][ C3] R10: ffff88806a733cab R11: 0000000000000000 R12: ffffed1003d5f498 [ 155.208522][ C3] R13: 0000000000000003 R14: ffffffff90d98010 R15: 0000000000000000 [ 155.211036][ C3] ? ct_kernel_exit+0x125/0x180 [ 155.212636][ C3] default_idle+0x9/0x10 [ 155.214013][ C3] default_idle_call+0x6c/0xb0 [ 155.215622][ C3] do_idle+0x35b/0x4b0 [ 155.217195][ C3] ? __pfx_do_idle+0x10/0x10 [ 155.219204][ C3] cpu_startup_entry+0x4f/0x60 [ 155.220869][ C3] start_secondary+0x21d/0x2d0 [ 155.222381][ C3] ? __pfx_start_secondary+0x10/0x10 [ 155.224154][ C3] common_startup_64+0x13e/0x148 [ 155.225724][ C3] [ 155.227560][ C3] Kernel Offset: disabled [ 155.228988][ C3] Rebooting in 86400 seconds..