last executing test programs: 10m10.492879264s ago: executing program 32 (id=1678): lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x65, 0x1, 0x20}, 0x20, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x20000001f000000) 9m51.116495728s ago: executing program 33 (id=1944): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x11, r0) 9m51.064838699s ago: executing program 34 (id=1946): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8108551b, &(0x7f0000000140)) 5m58.722702605s ago: executing program 35 (id=5036): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0xd4, 0x0, @multicast}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m12.002979065s ago: executing program 2 (id=6994): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0x10003) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 3m11.792863828s ago: executing program 2 (id=6997): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl(0xffffffffffffffff, 0x8901, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0xa, 0x800, {0x55, 0x1, 0x1, {0x80d5, 0xd3}, {0x4, 0xc}, @rumble={0xff03, 0x836d}}, {0x2dc48509172bdd82, 0x6, 0x5, {0x6, 0x1}, {0x5, 0x949a}, @period={0xd071a18f2fc40afa, 0x1, 0x6, 0x0, 0x0, {0xfffc, 0x4, 0xc7, 0x7f}, 0x0, 0x0}}}) 3m11.762078351s ago: executing program 2 (id=6998): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000040)="001a09000000000000006fde0f0c3d14c6d81ecb", 0x14, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 3m11.471297175s ago: executing program 2 (id=7002): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 3m11.309147162s ago: executing program 2 (id=7006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 3m10.737304026s ago: executing program 2 (id=7015): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 3m10.538860004s ago: executing program 36 (id=7015): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 2m0.434655217s ago: executing program 5 (id=7777): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) 2m0.285274984s ago: executing program 5 (id=7780): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/235, 0xeb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 2m0.065210613s ago: executing program 5 (id=7782): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2cf43", 0x3}], 0x1) 1m57.53853757s ago: executing program 9 (id=7797): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1m56.909083554s ago: executing program 5 (id=7808): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000140)='log\x00') 1m56.705836761s ago: executing program 5 (id=7811): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x2) 1m55.052326224s ago: executing program 8 (id=7829): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m54.629124461s ago: executing program 8 (id=7832): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x3a3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11) 1m54.607119517s ago: executing program 9 (id=7833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='chipidea-usb2', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='pcspkr\x00', 0x6) 1m54.543982334s ago: executing program 1 (id=7834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="0f01b10e000000b8010000000f01d92e260f01c90f7890005000000f01c566baf80cb8f4bd1e8eef66bafc0cb816270000ef0f20c035000000200f22c03e0fc76c4d69c744240011240000c7442402ca3c0000c7442406000000000f01142466bad0042faff5", 0x66}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.345190724s ago: executing program 8 (id=7835): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) 1m54.293058555s ago: executing program 9 (id=7836): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x20f000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x7000}) 1m54.268838815s ago: executing program 5 (id=7837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000280)=@in6={0xa, 0x4e23, 0x401, @private1, 0x2}, 0x80) 1m54.250013954s ago: executing program 1 (id=7838): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sysfs$3(0x3) 1m54.204438379s ago: executing program 8 (id=7839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.099779092s ago: executing program 1 (id=7840): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x6}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1m53.933551279s ago: executing program 9 (id=7841): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x500c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m53.932260959s ago: executing program 8 (id=7842): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x80}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m53.884770403s ago: executing program 1 (id=7843): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x4) 1m53.778738551s ago: executing program 9 (id=7844): r0 = fanotify_init(0xef0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x142, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x4004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1m53.672860348s ago: executing program 1 (id=7845): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.466618939s ago: executing program 1 (id=7846): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='9000\x00', 0x5) 1m53.448793s ago: executing program 9 (id=7847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x1020}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m53.448348364s ago: executing program 8 (id=7848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x0, 0x3, 0x1, 0x6, 0x7fffffff}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m36.455379872s ago: executing program 37 (id=7837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000280)=@in6={0xa, 0x4e23, 0x401, @private1, 0x2}, 0x80) 1m36.349119921s ago: executing program 38 (id=7846): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='9000\x00', 0x5) 1m36.250938728s ago: executing program 39 (id=7847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x1020}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m36.138158548s ago: executing program 40 (id=7848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x0, 0x3, 0x1, 0x6, 0x7fffffff}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.803833391s ago: executing program 4 (id=8517): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 4.886122347s ago: executing program 4 (id=8524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000000180)='1', 0x1) 4.275676292s ago: executing program 0 (id=8530): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f00000001c0)="07d2", 0x2, 0x4000, 0x0, 0x0) 4.24492064s ago: executing program 4 (id=8531): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x3, 0x4, 0x0, 0x1, 0x0, 0x89, 0x0, @private, @local, {[@ssrr={0x89, 0x1f, 0x5d, [@rand_addr=0x64010102, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0x2400]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0x77, [@broadcast, @rand_addr=0x64010100]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.105247637s ago: executing program 0 (id=8532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.757991133s ago: executing program 7 (id=8536): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.646622507s ago: executing program 0 (id=8537): syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) lstat(&(0x7f00000048c0)='./bus\x00', &(0x7f0000004900)) 3.589150677s ago: executing program 4 (id=8538): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.444623623s ago: executing program 0 (id=8539): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 3.431369465s ago: executing program 7 (id=8540): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257", 0xc5) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 2.893158247s ago: executing program 3 (id=8541): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x42800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x80, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 2.69056768s ago: executing program 7 (id=8542): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.2492912s ago: executing program 3 (id=8544): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x55}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000001c0)='!', 0x1}], 0x1}}], 0x1, 0x10004040) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0xfffe}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r1, 0x4) 2.199486087s ago: executing program 6 (id=8545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xc, 0x4) shutdown(r0, 0x2) 2.14669123s ago: executing program 4 (id=8546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd756, 0x3000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x3fff, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc650, 0x40, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4014, {0x3c9, 0x0, 0xfffffffc, 0x80000000, 0x3, 0xfff}}) 2.070069964s ago: executing program 7 (id=8547): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x40001}}], 0x47f, 0x0) accept(r1, 0x0, 0x0) 1.88064098s ago: executing program 7 (id=8548): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x1, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='i8042', 0x5) 1.820624978s ago: executing program 3 (id=8549): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.739878873s ago: executing program 6 (id=8550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000) 1.529376678s ago: executing program 6 (id=8551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.403276824s ago: executing program 3 (id=8552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x839}]}) 1.116536006s ago: executing program 3 (id=8553): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34}) 1.022469321s ago: executing program 4 (id=8554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000ac0)=""/170, 0xaa}], 0x1}}], 0x2, 0x8060, 0x0) 859.669506ms ago: executing program 3 (id=8555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) (async) write(r1, &(0x7f0000000600)="00000080fe534d424000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000008000000000000000", 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs\x00') 857.61476ms ago: executing program 6 (id=8556): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x40}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 516.168217ms ago: executing program 0 (id=8557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 293.7339ms ago: executing program 0 (id=8558): syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 111.533551ms ago: executing program 6 (id=8559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x9, 0xd, 0x0, 0xfffffffc, 0x83, "db8fd2e79000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000002c0)={0x696, 0xf3, 0xffefffff, 0x4000005, 0x14, "09000000379100000001ac45b57d00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x8, 0x19, 0x3d50, 0x8, "00ef001600000472c4cefe00000000000067fd"}) r1 = syz_open_pts(r0, 0x101000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 108.996032ms ago: executing program 7 (id=8560): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}], 0x2}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 0s ago: executing program 6 (id=8561): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input104 [ 676.148906][ T5787] usb 10-1: USB disconnect, device number 8 [ 676.148939][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 676.163168][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 676.238657][ T5732] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 676.433134][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1048, setting to 64 [ 676.482142][ T5732] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 676.556827][ T5732] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 676.597982][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.638143][ T5732] usb 6-1: config 0 descriptor?? [ 676.665289][T25614] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 677.095238][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x1 [ 677.117261][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.124849][ T5787] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 677.134379][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.150817][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.175279][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.194174][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.212355][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.219626][ T5732] elecom 0003:056E:00FE.0069: unknown main item tag 0x0 [ 677.237760][ T5732] elecom 0003:056E:00FE.0069: hidraw0: USB HID v0.0d Device [HID 056e:00fe] on usb-dummy_hcd.5-1/input0 [ 677.288653][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 677.301668][ T5787] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 677.323045][ T5787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.340605][ T5732] usb 6-1: USB disconnect, device number 80 [ 677.349229][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.368551][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.381515][ T5787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.397173][ T5787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 677.407390][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.625973][ T5787] usb 2-1: usb_control_msg returned -32 [ 677.639141][ T5787] usbtmc 2-1:16.0: can't read capabilities [ 678.206500][T25678] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 678.312277][ T30] audit: type=1400 audit(1785436870.115:1445): avc: denied { write } for pid=25681 comm="syz.5.7754" name="functions" dev="configfs" ino=38969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.365925][T25683] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 678.419359][ T5787] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 678.449234][ T30] audit: type=1800 audit(1785436870.145:1446): pid=25682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7754" name="bulk_qlen" dev="configfs" ino=112416 res=0 errno=0 [ 678.540510][T25689] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 678.567552][ T5732] usb 2-1: USB disconnect, device number 92 [ 678.643568][ T5787] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.683837][ T5787] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 678.736711][ T5787] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.804770][ T5787] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 678.854214][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 678.890936][ T5787] usb 9-1: Product: syz [ 678.915642][ T5787] usb 9-1: Manufacturer: syz [ 678.957698][T25674] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 678.992032][ T5787] usb_debug 9-1:1.0: debug converter detected [ 679.022947][ T5787] usb 9-1: debug converter now attached to ttyUSB0 [ 679.255316][ T5787] usb 9-1: USB disconnect, device number 37 [ 679.302169][ T5787] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 679.346180][ T5787] usb_debug 9-1:1.0: device disconnected [ 680.049585][ T5787] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 680.228958][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 680.251082][ T5787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.271669][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.280092][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.306454][ T5787] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 680.318353][T25762] xt_hashlimit: size too large, truncated to 1048576 [ 680.326995][ T5787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 680.342430][ T5787] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 680.360429][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.386659][ T5787] usb 2-1: Product: syz [ 680.404316][ T5787] usb 2-1: Manufacturer: syz [ 680.422749][ T5787] usb 2-1: SerialNumber: syz [ 680.452039][ T5787] usb 2-1: config 0 descriptor?? [ 680.575268][T25768] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.608120][T25768] bond7: (slave lo): Enslaving as an active interface with an up link [ 680.624163][T25768] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 680.877546][ T5787] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 681.038340][T24401] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 681.188499][T24401] usb 9-1: Using ep0 maxpacket: 8 [ 681.196506][T24401] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 681.205847][T24401] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.214385][T24401] usb 9-1: Product: syz [ 681.219102][T24401] usb 9-1: Manufacturer: syz [ 681.223724][T24401] usb 9-1: SerialNumber: syz [ 681.231896][T24401] usb 9-1: config 0 descriptor?? [ 681.440510][T24401] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 681.506056][ T5787] usb 2-1: USB disconnect, device number 93 [ 681.652657][T24401] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 681.670922][T24401] usb 9-1: USB disconnect, device number 38 [ 681.948557][ T5614] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 681.957114][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 682.482468][ T30] audit: type=1400 audit(1785436874.285:1447): avc: denied { watch } for pid=25785 comm="syz.1.7794" path="/237/bus" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 682.828996][T16463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 682.851945][ T5787] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 683.018673][ T5787] usb 10-1: Using ep0 maxpacket: 16 [ 683.047142][ T5787] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.069183][T25752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.092117][ T5787] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.197356][ T5787] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 683.287811][ T5787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.346880][ T5787] usb 10-1: config 0 descriptor?? [ 683.739527][ T5732] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 683.825698][ T5787] HID 045e:07da: Invalid code 65791 type 1 [ 683.882210][ T5787] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.006A/input/input105 [ 683.954919][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.981436][ T30] audit: type=1400 audit(1785436875.775:1448): avc: denied { write } for pid=25816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.024073][ T5787] microsoft 0003:045E:07DA.006A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 684.061179][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.135923][ T5732] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.232140][ T5732] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.300285][ T30] audit: type=1400 audit(1785436876.105:1449): avc: denied { write } for pid=25853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.331244][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.403877][ T5732] usb 6-1: config 0 descriptor?? [ 684.491542][ T30] audit: type=1400 audit(1785436876.195:1450): avc: denied { name_bind } for pid=25858 comm="syz.8.7819" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 684.557905][T25862] zero sized request [ 684.621610][T25867] netlink: 8752 bytes leftover after parsing attributes in process `syz.8.7822'. [ 684.724602][ T30] audit: type=1800 audit(1785436876.525:1451): pid=25872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.7824" name="host_addr" dev="configfs" ino=113317 res=0 errno=0 [ 684.864514][ T5732] plantronics 0003:047F:FFFF.006B: reserved main item tag 0xd [ 684.898091][ T5787] usb 10-1: USB disconnect, device number 9 [ 684.947334][ T5732] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 685.095681][T25886] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7828'. [ 685.217124][ T5787] usb 6-1: USB disconnect, device number 81 [ 685.413885][ T30] audit: type=1400 audit(1785436877.215:1452): avc: denied { write } for pid=25865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.442874][T25897] usbip-vudc usbip-vudc.0: gadget not bound [ 685.578488][T24401] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 685.623479][T25902] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 685.650853][ T30] audit: type=1400 audit(1785436877.445:1453): avc: denied { write } for pid=25901 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.676241][T25902] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 685.762370][T24401] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 685.815807][T24401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.881186][T24401] usb 7-1: Product: syz [ 685.915447][T24401] usb 7-1: Manufacturer: syz [ 685.943963][T24401] usb 7-1: SerialNumber: syz [ 686.299747][ T5787] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 686.417629][T25930] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7844'. [ 687.522066][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 687.898980][ T5787] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 687.905968][ T5787] ath9k_htc: Failed to initialize the device [ 696.421534][ C0] sched: DL replenish lagged too much [ 703.049807][T24401] usb 7-1: USB disconnect, device number 83 [ 703.212124][T24401] usb 7-1: ath9k_htc: USB layer deinitialized [ 704.281457][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 704.302275][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 704.310421][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 704.321689][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 704.329353][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 704.543596][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 704.557312][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 704.566338][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 704.590195][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 704.603383][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 704.815583][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 704.855014][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 704.863624][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 704.871329][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 704.882198][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 704.961177][ T30] audit: type=1400 audit(1785436896.765:1454): avc: denied { write } for pid=25954 comm="syz.6.7854" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 705.031163][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 705.057665][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 705.068020][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 705.077974][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 705.087298][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 705.368952][T25964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 705.541311][T25964] md: could not open device unknown-block(7,0). [ 706.010534][T25981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7857'. [ 706.062351][T15553] bond0: (slave syz_tun): Releasing backup interface [ 706.424576][T25996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.432832][ T5625] Bluetooth: hci4: command tx timeout [ 706.670002][ T5625] Bluetooth: hci6: command tx timeout [ 706.917133][T26005] bridge0: entered promiscuous mode [ 706.923920][T26005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.937626][T26005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 706.951732][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.988850][ T5625] Bluetooth: hci7: command tx timeout [ 707.149484][ T5625] Bluetooth: hci8: command tx timeout [ 707.272759][T26014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 707.640957][T17622] bridge_slave_1: left allmulticast mode [ 707.656941][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.680084][T17622] bridge_slave_0: left allmulticast mode [ 707.687081][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.872422][T24401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.899670][ T30] audit: type=1400 audit(1785436899.705:1455): avc: denied { write } for pid=26025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.982721][T17622] bond1 (unregistering): (slave geneve2): Releasing active interface [ 708.005103][ T30] audit: type=1400 audit(1785436899.805:1456): avc: denied { write } for pid=26039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.047786][T17622] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 708.074140][T17622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.095007][T17622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.106109][T17622] bond0 (unregistering): Released all slaves [ 708.117957][T17622] bond1 (unregistering): Released all slaves [ 708.135256][T17622] bond2 (unregistering): (slave veth3): Releasing backup interface [ 708.143777][T17622] bond2 (unregistering): Released all slaves [ 708.156673][T17622] bond3 (unregistering): Released all slaves [ 708.290093][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 708.411637][T25945] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.450662][T25945] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.471842][T25945] bridge_slave_0: entered allmulticast mode [ 708.495567][T25945] bridge_slave_0: entered promiscuous mode [ 708.512019][ T5625] Bluetooth: hci4: command tx timeout [ 708.521190][T25945] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.528796][T25945] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.548955][T25945] bridge_slave_1: entered allmulticast mode [ 708.557799][T25945] bridge_slave_1: entered promiscuous mode [ 708.732081][ T30] audit: type=1400 audit(1785436900.535:1457): avc: denied { listen } for pid=26054 comm="syz.6.7867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 708.754744][ T5625] Bluetooth: hci6: command tx timeout [ 708.770091][T25945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.790568][T17622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.797940][ T30] audit: type=1400 audit(1785436900.565:1458): avc: denied { accept } for pid=26054 comm="syz.6.7867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 708.949055][T17622] team0 (unregistering): Port device team_slave_1 removed [ 708.962998][T17622] team0 (unregistering): Port device team_slave_0 removed [ 709.069160][ T5625] Bluetooth: hci7: command tx timeout [ 709.115145][T25945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.174894][T25948] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.186993][T25948] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.206829][T25948] bridge_slave_0: entered allmulticast mode [ 709.221528][T25948] bridge_slave_0: entered promiscuous mode [ 709.229405][ T5625] Bluetooth: hci8: command tx timeout [ 709.319100][T25950] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.334252][T25950] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.362184][T25950] bridge_slave_0: entered allmulticast mode [ 709.381744][T25950] bridge_slave_0: entered promiscuous mode [ 709.413650][T25948] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.425375][T25948] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.440836][T25948] bridge_slave_1: entered allmulticast mode [ 709.455505][T25948] bridge_slave_1: entered promiscuous mode [ 709.466290][ T30] audit: type=1400 audit(1785436901.275:1459): avc: denied { write } for pid=26060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.564276][T25945] team0: Port device team_slave_0 added [ 709.600158][T25945] team0: Port device team_slave_1 added [ 709.622576][T25950] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.653101][ T30] audit: type=1400 audit(1785436901.455:1460): avc: denied { write } for pid=26073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.675688][T25950] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.695530][T25950] bridge_slave_1: entered allmulticast mode [ 709.726944][T25950] bridge_slave_1: entered promiscuous mode [ 709.905516][ T5274] 8021q: adding VLAN 0 to HW filter on device eth22 [ 709.947169][T25952] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.963576][T25952] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.980704][T25952] bridge_slave_0: entered allmulticast mode [ 709.996707][T25952] bridge_slave_0: entered promiscuous mode [ 710.016600][T25952] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.028076][T25952] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.045824][T25952] bridge_slave_1: entered allmulticast mode [ 710.060884][T25952] bridge_slave_1: entered promiscuous mode [ 710.081548][T25948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.109938][T25948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.129691][T25945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.137064][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.195062][T25945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.219867][T25950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.278024][T25945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.301205][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.365489][T25945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.412178][T25950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.491219][T25952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.526179][T25952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.546253][T25948] team0: Port device team_slave_0 added [ 710.588837][ T5625] Bluetooth: hci4: command tx timeout [ 710.615661][T25948] team0: Port device team_slave_1 added [ 710.674364][T25945] hsr_slave_0: entered promiscuous mode [ 710.693939][T25945] hsr_slave_1: entered promiscuous mode [ 710.715922][T25945] debugfs: 'hsr0' already exists in 'hsr' [ 710.737752][T25945] Cannot create hsr debugfs directory [ 710.757026][T25950] team0: Port device team_slave_0 added [ 710.831246][ T5625] Bluetooth: hci6: command tx timeout [ 710.852216][T17622] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.907086][T17622] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.988746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.014303][T25950] team0: Port device team_slave_1 added [ 711.040612][T25952] team0: Port device team_slave_0 added [ 711.053747][ T30] audit: type=1400 audit(1785436902.855:1461): avc: denied { write } for pid=26089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.081161][T25952] team0: Port device team_slave_1 added [ 711.106015][T25948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.120606][T25948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.149952][ T5703] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 711.160608][ T5625] Bluetooth: hci7: command tx timeout [ 711.185653][ T30] audit: type=1400 audit(1785436902.985:1462): avc: denied { write } for pid=26103 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.215017][T25948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.241238][T25948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.262942][T25948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.292127][T25948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.308609][ T5625] Bluetooth: hci8: command tx timeout [ 711.329653][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.341580][ T5274] 8021q: adding VLAN 0 to HW filter on device eth23 [ 711.351052][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.365442][T17622] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.375733][ T5703] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 711.384970][T17622] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.396885][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.420054][ T5703] usb 7-1: config 0 descriptor?? [ 711.445849][T25950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.457714][T25950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.492112][T25950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.503700][T25952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.512595][T25952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.542464][T25952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.564997][T17622] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.575343][T17622] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.601597][T25950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.611585][T25950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.646017][T25950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.661526][T25952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.669378][T25952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.695833][T25952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.724046][T17622] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.735570][T17622] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.806629][T25948] hsr_slave_0: entered promiscuous mode [ 711.824201][T25948] hsr_slave_1: entered promiscuous mode [ 711.839146][T25948] debugfs: 'hsr0' already exists in 'hsr' [ 711.855021][T25948] Cannot create hsr debugfs directory [ 711.956983][T25950] hsr_slave_0: entered promiscuous mode [ 711.973347][T25950] hsr_slave_1: entered promiscuous mode [ 711.991244][T25950] debugfs: 'hsr0' already exists in 'hsr' [ 712.000313][T25950] Cannot create hsr debugfs directory [ 712.048227][ T5703] usb 7-1: string descriptor 0 read error: -22 [ 712.071904][T25952] hsr_slave_0: entered promiscuous mode [ 712.088198][T25952] hsr_slave_1: entered promiscuous mode [ 712.103078][T25952] debugfs: 'hsr0' already exists in 'hsr' [ 712.113796][T25952] Cannot create hsr debugfs directory [ 712.134385][ T30] audit: type=1400 audit(1785436903.935:1463): avc: denied { write } for pid=26106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.251662][ T5703] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.006C/input/input107 [ 712.319509][ T30] audit: type=1400 audit(1785436904.115:1464): avc: denied { write } for pid=26117 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.433267][ T5274] 8021q: adding VLAN 0 to HW filter on device eth24 [ 712.501220][ T5703] uclogic 0003:256C:006D.006C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 712.574031][ T5703] usb 7-1: USB disconnect, device number 84 [ 712.671168][ T5625] Bluetooth: hci4: command tx timeout [ 712.908841][ T5625] Bluetooth: hci6: command tx timeout [ 713.232236][ T5625] Bluetooth: hci7: command tx timeout [ 713.347415][T17622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.385215][T17622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 713.397753][ T5625] Bluetooth: hci8: command tx timeout [ 713.494013][ T30] audit: type=1400 audit(1785436905.295:1465): avc: denied { write } for pid=26123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.595707][T17622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.619974][T17622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 713.648041][ T30] audit: type=1400 audit(1785436905.445:1466): avc: denied { write } for pid=26139 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.855650][ T5274] 8021q: adding VLAN 0 to HW filter on device eth25 [ 713.897742][T17622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.923564][T17622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 714.047931][T17622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.058841][T17622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 714.543219][T17622] bridge_slave_1: left allmulticast mode [ 714.553677][ T30] audit: type=1400 audit(1785436906.355:1467): avc: denied { write } for pid=26146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.578947][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.600944][T17622] bridge_slave_0: left allmulticast mode [ 714.615484][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.651090][T17622] bridge_slave_1: left allmulticast mode [ 714.662402][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.674086][ T30] audit: type=1400 audit(1785436906.475:1468): avc: denied { write } for pid=26158 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.705606][T17622] bridge_slave_0: left allmulticast mode [ 714.720063][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.829418][T17627] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 715.117959][ T30] audit: type=1400 audit(1785436906.915:1469): avc: denied { write } for pid=26160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.237163][ T30] audit: type=1400 audit(1785436907.035:1470): avc: denied { write } for pid=26177 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.275862][T17622] bond2 (unregistering): (slave geneve3): Releasing active interface [ 715.362879][T17622] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 715.385003][T17622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.407016][T17622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.427320][T17622] bond0 (unregistering): (slave bond1): Releasing backup interface [ 715.443240][T17622] bond0 (unregistering): Released all slaves [ 715.463271][T17622] bond1 (unregistering): Released all slaves [ 715.492011][T17622] bond2 (unregistering): Released all slaves [ 715.523389][T17622] bond3 (unregistering): (slave veth3): Releasing backup interface [ 715.542492][T17622] veth3: left promiscuous mode [ 715.555390][T17622] bond3 (unregistering): Released all slaves [ 715.581682][T17622] bond4 (unregistering): Released all slaves [ 715.609758][T17622] bond5 (unregistering): Released all slaves [ 715.821783][T17622] bond3 (unregistering): (slave geneve3): Releasing active interface [ 715.835115][T17622] bond2 (unregistering): (slave geneve2): Releasing active interface [ 715.874963][T17622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.887078][T17622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.898667][T17622] bond0 (unregistering): Released all slaves [ 715.907531][T17622] bond1 (unregistering): Released all slaves [ 715.921530][T17622] bond2 (unregistering): Released all slaves [ 715.934901][T17622] bond3 (unregistering): Released all slaves [ 715.946932][T17622] bond4 (unregistering): (slave veth3): Releasing backup interface [ 715.962501][T17622] bond4 (unregistering): Released all slaves [ 716.117618][T17622] tipc: Disabling bearer [ 716.142258][T17622] tipc: Left network mode [ 716.203339][T17622] tipc: Left network mode [ 716.361628][T25945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 716.415145][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.458772][T25945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 716.502430][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.550227][T25945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 716.612905][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.970684][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 716.970701][ T30] audit: type=1400 audit(1785436908.775:1473): avc: denied { write } for pid=26195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.196750][ T30] audit: type=1400 audit(1785436909.005:1474): avc: denied { write } for pid=26206 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.305033][T25945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 717.365407][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.451317][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 718.417539][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.438089][T17622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.481033][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.496160][T17622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.540999][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.562608][T17622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.574081][ T30] audit: type=1400 audit(1785436910.375:1475): avc: denied { write } for pid=26224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.613833][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.646217][T17622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.722678][ T30] audit: type=1400 audit(1785436910.515:1476): avc: denied { write } for pid=26235 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.891743][T24401] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 719.074605][T26245] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.7888'. [ 719.124057][T17622] team0 (unregistering): Port device team_slave_1 removed [ 719.150964][T17622] team0 (unregistering): Port device team_slave_0 removed [ 719.374146][T17622] team0 (unregistering): Port device team_slave_1 removed [ 719.393567][T17622] team0 (unregistering): Port device team_slave_0 removed [ 719.473266][ T5274] 8021q: adding VLAN 0 to HW filter on device eth26 [ 719.550130][T25945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.603384][T25945] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.677258][T17625] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.684384][T17625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.745393][T17625] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.752526][T17625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.867809][T25945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.957285][T25945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.178408][T24401] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 720.311248][ T30] audit: type=1400 audit(1785436912.105:1477): avc: denied { write } for pid=26253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.361983][T24401] usb 7-1: Using ep0 maxpacket: 8 [ 720.400385][T24401] usb 7-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 720.441103][T24401] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.494142][T24401] usb 7-1: config 1 has no interface number 0 [ 720.526824][ T30] audit: type=1400 audit(1785436912.325:1478): avc: denied { write } for pid=26270 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.550336][T17622] IPVS: stop unused estimator thread 0... [ 720.561770][T24401] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 720.642574][T24401] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 720.701257][T25948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 720.724983][T24401] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 720.773145][T25948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.801428][T24401] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 720.819537][T25948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 720.847513][T24401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.889353][T24401] usb 7-1: Product: syz [ 720.895523][T25948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.902984][T24401] usb 7-1: Manufacturer: syz [ 720.907760][T24401] usb 7-1: SerialNumber: syz [ 720.929637][ T5274] 8021q: adding VLAN 0 to HW filter on device eth27 [ 720.954948][T25948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 720.992441][T25948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.286169][T25948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 721.333828][T25948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.679613][ T5739] usb 7-1: USB disconnect, device number 85 [ 721.782835][T25945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.887352][ T30] audit: type=1400 audit(1785436913.685:1479): avc: denied { write } for pid=26276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.011730][T25945] veth0_vlan: entered promiscuous mode [ 722.041591][ T30] audit: type=1400 audit(1785436913.845:1480): avc: denied { write } for pid=26295 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.147100][T25945] veth1_vlan: entered promiscuous mode [ 722.210550][T25948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.273118][T25948] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.317956][T25945] veth0_macvtap: entered promiscuous mode [ 722.349879][T16474] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.356965][T16474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.424327][T25945] veth1_macvtap: entered promiscuous mode [ 722.471655][T16474] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.478788][T16474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.656192][ T30] audit: type=1400 audit(1785436914.455:1481): avc: denied { write } for pid=26297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.796454][ T30] audit: type=1400 audit(1785436914.595:1482): avc: denied { write } for pid=26314 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.073032][T25945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.121900][T26322] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 723.146174][T26322] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 723.176161][T26322] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 723.215257][T26322] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 723.246673][T25945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.365848][ T30] audit: type=1400 audit(1785436915.165:1483): avc: denied { write } for pid=26318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.424011][T26333] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 723.468167][T17625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.519389][T17625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.554119][ T30] audit: type=1400 audit(1785436915.355:1484): avc: denied { write } for pid=26335 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.582767][T17625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.717747][T17625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.936189][T21446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.975663][T21446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.032206][T17625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.072636][T17625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.129079][ T5703] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 724.316381][ T5703] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 724.347498][ T5703] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 724.374136][T25948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.391283][ T5703] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.427001][ T5703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 724.468768][ T5703] usb 7-1: config 1 has no interface number 0 [ 724.486641][ T5703] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 724.555712][ T5703] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 724.597490][T25952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 724.605299][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.642672][ T5703] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 724.652094][T25952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.696518][T25952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.724111][T25952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.768696][T25952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 724.790342][T25952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.803250][T25948] veth0_vlan: entered promiscuous mode [ 724.830011][T25952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 724.856280][T25952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.944253][ T5703] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 724.965949][ T5703] snd_usb_pod 7-1:1.1: invalid control EP [ 724.978948][ T5703] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 724.993402][ T5703] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 725.022669][ T5703] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 725.057627][T25948] veth1_vlan: entered promiscuous mode [ 725.202609][ T5739] usb 7-1: USB disconnect, device number 86 [ 725.301671][T25950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 725.339454][T25950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 725.377551][T25950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 725.413940][T25950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.446936][T25952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.480248][T25948] veth0_macvtap: entered promiscuous mode [ 725.496800][T25950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 725.524089][T25950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.553677][T25948] veth1_macvtap: entered promiscuous mode [ 725.585427][T25950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.605189][T25950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.642398][T25952] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.683428][T16474] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.690562][T16474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.751893][T17625] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.759013][T17625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.822954][T25948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.907458][T25948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.006945][T21446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.047870][T21446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.142400][T21446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.202776][T21446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.214462][ T30] audit: type=1400 audit(1785436918.025:1485): avc: denied { write } for pid=26368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.576474][ T30] audit: type=1400 audit(1785436918.375:1486): avc: denied { write } for pid=26397 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.646587][T21446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.696181][T21446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.755861][T25950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.826137][T26407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.856123][T17625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.872512][T25950] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.916500][T17625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.963403][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.970518][T17622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.061944][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.069048][T17622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.584078][ T30] audit: type=1400 audit(1785436919.385:1487): avc: denied { write } for pid=26404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.891111][ T30] audit: type=1400 audit(1785436919.685:1488): avc: denied { write } for pid=26439 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.056667][T25952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.231590][T26449] SELinux: invalid class [ 728.254426][T26454] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7914'. [ 728.304027][T26449] SELinux: failed to load policy [ 728.321068][T26454] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7914'. [ 728.674529][T25950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.848651][ T5703] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 728.883691][ T30] audit: type=1400 audit(1785436920.685:1489): avc: denied { write } for pid=26450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.966528][T25952] veth0_vlan: entered promiscuous mode [ 729.019727][T25952] veth1_vlan: entered promiscuous mode [ 729.089626][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.133746][ T30] audit: type=1400 audit(1785436920.935:1490): avc: denied { write } for pid=26490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.159943][T25952] veth0_macvtap: entered promiscuous mode [ 729.167660][T25952] veth1_macvtap: entered promiscuous mode [ 729.186620][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.225655][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.304003][ T5703] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.362082][ T30] audit: type=1400 audit(1785436921.165:1491): avc: denied { write } for pid=26496 comm="syz.6.7921" name="dlm" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 729.389060][T25952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.412432][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.458182][T25952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.475973][ T5703] usb 1-1: config 0 descriptor?? [ 729.523818][ T30] audit: type=1400 audit(1785436921.195:1492): avc: denied { write } for pid=26496 comm="syz.6.7921" name="comms" dev="configfs" ino=119102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 729.568809][T21446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.600860][T21446] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.900115][T21446] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.931500][ T5703] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 729.964681][T21446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.007375][ T30] audit: type=1400 audit(1785436921.805:1493): avc: denied { write } for pid=26498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.192063][T25950] veth0_vlan: entered promiscuous mode [ 730.314977][T24401] usb 1-1: USB disconnect, device number 28 [ 730.333831][T25950] veth1_vlan: entered promiscuous mode [ 730.381450][ T30] audit: type=1400 audit(1785436922.185:1494): avc: denied { write } for pid=26515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.520829][T21452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.575057][T21452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.771702][T25950] veth0_macvtap: entered promiscuous mode [ 730.829839][T16474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.839960][T25950] veth1_macvtap: entered promiscuous mode [ 730.888675][T16474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.961734][T25950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.039827][T25950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.095809][T17622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.163253][T17622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.206469][T26535] input: syz0 as /devices/virtual/input/input108 [ 731.216992][T23955] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 731.253474][T17622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.303159][T17622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.406407][ T30] audit: type=1400 audit(1785436923.205:1495): avc: denied { write } for pid=26520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.463438][T23955] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 731.616429][T23955] usb 4-1: config 0 has no interface number 0 [ 731.698847][T23955] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 731.774886][T21452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.785685][ T30] audit: type=1400 audit(1785436923.565:1496): avc: denied { write } for pid=26550 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.814884][T23955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.856148][T21452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.893885][T23955] usb 4-1: config 0 descriptor?? [ 731.981899][T23955] cp210x 4-1:0.32: cp210x converter detected [ 732.017718][T21446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.083436][T21446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.092411][T26560] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 732.160456][T26560] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 732.381708][T23955] cp210x 4-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 732.645781][T23955] cp210x 4-1:0.32: GPIO initialisation failed: -19 [ 732.697592][T23955] usb 4-1: cp210x converter now attached to ttyUSB0 [ 732.902037][T23955] usb 4-1: USB disconnect, device number 30 [ 732.913990][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 732.914002][ T30] audit: type=1400 audit(1785436924.715:1501): avc: denied { write } for pid=26561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.986939][T23955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 733.056430][T23955] cp210x 4-1:0.32: device disconnected [ 733.201331][ T30] audit: type=1400 audit(1785436925.005:1502): avc: denied { write } for pid=26607 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.581973][T26617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26617 comm=syz.6.7951 [ 733.655360][T26622] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: 0 [ 733.703822][T26622] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 733.787392][T26622] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 734.073588][T26635] bridge0: port 3(erspan0) entered blocking state [ 734.116663][T26635] bridge0: port 3(erspan0) entered disabled state [ 734.162714][T26635] erspan0: entered allmulticast mode [ 734.209009][T26635] erspan0: entered promiscuous mode [ 734.238220][ T30] audit: type=1400 audit(1785436926.035:1503): avc: denied { write } for pid=26614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.271926][T26635] bridge0: port 3(erspan0) entered blocking state [ 734.278470][T26635] bridge0: port 3(erspan0) entered forwarding state [ 734.370992][T26638] erspan0: left allmulticast mode [ 734.404608][T26638] erspan0: left promiscuous mode [ 734.439323][T26638] bridge0: port 3(erspan0) entered disabled state [ 734.503157][ T30] audit: type=1400 audit(1785436926.305:1504): avc: denied { write } for pid=26645 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.594754][ T5787] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 734.617038][T26644] veth0_to_team: entered promiscuous mode [ 734.636748][T26644] veth0_to_team: left promiscuous mode [ 734.869644][T23955] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 735.124426][ T30] audit: type=1400 audit(1785436926.925:1505): avc: denied { write } for pid=26655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.250723][ T5787] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 735.287477][T26684] syz.6.7968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 735.334957][ T30] audit: type=1400 audit(1785436927.125:1506): avc: denied { write } for pid=26682 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.400816][ T5717] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 735.438415][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 735.447931][ T5787] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 735.487717][ T5787] usb 5-1: config 2 has no interface number 0 [ 735.517572][ T5787] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 735.567785][ T5787] usb 5-1: config 2 interface 88 has no altsetting 0 [ 735.594879][ T5787] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 735.621506][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 735.630963][T26648] ceph: No mds server is up or the cluster is laggy [ 735.674857][ T5787] usb 5-1: Product: syz [ 735.717591][ T5787] usb 5-1: Manufacturer: syz [ 735.734716][ T5787] usb 5-1: SerialNumber: syz [ 735.775949][T26670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 735.972282][ T30] audit: type=1400 audit(1785436927.775:1507): avc: denied { write } for pid=26690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.014234][T26670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 736.065086][ T30] audit: type=1400 audit(1785436927.865:1508): avc: denied { write } for pid=26712 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.186705][T26717] netlink: 'syz.7.7975': attribute type 19 has an invalid length. [ 736.229575][T16474] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.239776][T26717] netlink: 'syz.7.7975': attribute type 19 has an invalid length. [ 736.256490][T16474] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.275415][T16474] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.323608][T16474] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.477429][ T30] audit: type=1400 audit(1785436928.275:1509): avc: denied { listen } for pid=26725 comm="syz.7.7977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 736.817585][ T30] audit: type=1400 audit(1785436928.615:1510): avc: denied { write } for pid=26716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.050489][ T5787] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 737.123183][ T5787] asix 5-1:2.88: probe with driver asix failed with error -71 [ 737.200121][ T5787] usb 5-1: USB disconnect, device number 26 [ 737.499473][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 737.521400][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 737.594901][T26767] ceph: No mds server is up or the cluster is laggy [ 738.004199][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 738.004212][ T30] audit: type=1400 audit(1785436929.805:1512): avc: denied { write } for pid=26760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.312315][ T30] audit: type=1400 audit(1785436930.115:1513): avc: denied { write } for pid=26791 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.318078][ T30] audit: type=1400 audit(1785436931.115:1514): avc: denied { write } for pid=26805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.397665][T26842] overlay: filesystem on ./file0 not supported [ 739.513521][T26846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8012'. [ 739.527216][ T30] audit: type=1400 audit(1785436931.195:1515): avc: denied { mounton } for pid=26840 comm="syz.6.8010" path="/1254/file1/file0" dev="autofs" ino=120997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 739.697972][ T30] audit: type=1400 audit(1785436931.415:1516): avc: denied { write } for pid=26848 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.769333][T26857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8016'. [ 740.731982][ T30] audit: type=1400 audit(1785436932.525:1517): avc: denied { write } for pid=26860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.037270][ T30] audit: type=1400 audit(1785436932.835:1518): avc: denied { write } for pid=26904 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.268352][T23955] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 741.371339][ T30] audit: type=1400 audit(1785436933.165:1519): avc: denied { cmd } for pid=26914 comm="syz.0.8033" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 741.492145][T23955] usb 8-1: Using ep0 maxpacket: 16 [ 741.515914][T23955] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 741.553136][ T30] audit: type=1326 audit(1785436933.275:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26882 comm="syz.4.8025" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe440b9e019 code=0x0 [ 741.604915][T23955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.662430][T23955] usb 8-1: Product: syz [ 741.702411][T23955] usb 8-1: Manufacturer: syz [ 741.720709][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.732039][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.756159][T23955] usb 8-1: SerialNumber: syz [ 741.819464][T23955] usb 8-1: config 0 descriptor?? [ 741.873030][T23955] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 742.164158][ T30] audit: type=1400 audit(1785436933.965:1521): avc: denied { write } for pid=26913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.642329][T26954] loop2: detected capacity change from 0 to 7 [ 742.714844][T26954] Dev loop2: unable to read RDB block 7 [ 742.743656][T26954] loop2: unable to read partition table [ 742.779391][T26954] loop2: partition table beyond EOD, truncated [ 742.820672][T26954] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 743.072604][T23955] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 743.123861][T23955] usb 8-1: USB disconnect, device number 11 [ 743.377535][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 743.377547][ T30] audit: type=1400 audit(1785436935.175:1523): avc: denied { write } for pid=26956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.436285][T26993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.605085][ T30] audit: type=1400 audit(1785436935.405:1524): avc: denied { write } for pid=26997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.736902][T27003] evm: overlay not supported [ 744.624025][ T30] audit: type=1400 audit(1785436936.425:1525): avc: denied { write } for pid=27014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.917691][ T30] audit: type=1400 audit(1785436936.715:1526): avc: denied { write } for pid=27058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.100581][T27028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.563917][ T30] audit: type=1400 audit(1785436937.365:1527): avc: denied { create } for pid=27072 comm="syz.4.8078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 745.643746][T27081] binder: 27079:27081 ioctl c0306201 200000000080 returned -14 [ 745.696010][ T30] audit: type=1400 audit(1785436937.405:1528): avc: denied { write } for pid=27072 comm="syz.4.8078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 746.053236][ T30] audit: type=1400 audit(1785436937.845:1529): avc: denied { write } for pid=27066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.287622][T27095] kvm: emulating exchange as write [ 746.474595][ T30] audit: type=1400 audit(1785436938.275:1530): avc: denied { write } for pid=27110 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.830278][T16474] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.140250][ T30] audit: type=1400 audit(1785436938.945:1531): avc: denied { create } for pid=27132 comm="syz.0.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 747.264646][ T30] audit: type=1400 audit(1785436938.965:1532): avc: denied { connect } for pid=27132 comm="syz.0.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 747.350810][T23955] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 747.540561][T23955] usb 7-1: Using ep0 maxpacket: 8 [ 747.568178][T23955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.999094][T23955] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 748.066830][T23955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.140479][T23955] usb 7-1: config 0 descriptor?? [ 748.395071][T23955] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 748.720810][T27178] netlink: 'syz.3.8105': attribute type 10 has an invalid length. [ 748.755485][T27179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8106'. [ 748.804463][T27154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 748.859046][T27154] block device autoloading is deprecated and will be removed. [ 748.933278][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 748.933289][ T30] audit: type=1400 audit(1785436940.735:1538): avc: denied { write } for pid=27186 comm="syz.7.8107" name="c.1" dev="configfs" ino=90495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.975179][T23955] usb 7-1: USB disconnect, device number 87 [ 749.175335][ T30] audit: type=1400 audit(1785436940.775:1539): avc: denied { write } for pid=27186 comm="syz.7.8107" name="c.1" dev="configfs" ino=90495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 749.321283][ T30] audit: type=1400 audit(1785436940.965:1540): avc: denied { write } for pid=27170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.443586][ T30] audit: type=1400 audit(1785436941.185:1541): avc: denied { write } for pid=27201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.048731][T24401] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 750.189144][ T30] audit: type=1400 audit(1785436941.985:1542): avc: denied { write } for pid=27207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.252751][T24401] usb 7-1: Using ep0 maxpacket: 32 [ 750.308050][T24401] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 750.355715][T24401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.406724][T24401] usb 7-1: Product: syz [ 750.436663][T24401] usb 7-1: Manufacturer: syz [ 750.466369][ T30] audit: type=1400 audit(1785436942.265:1543): avc: denied { write } for pid=27235 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.497119][T24401] usb 7-1: SerialNumber: syz [ 750.548672][T24401] usb 7-1: config 0 descriptor?? [ 750.790483][T24401] snd-usb-6fire 7-1:0.0: unable to receive device firmware state. [ 750.836727][T24401] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 750.884009][T24401] usb 7-1: USB disconnect, device number 88 [ 751.324962][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8126'. [ 751.419351][ T30] audit: type=1400 audit(1785436943.215:1544): avc: denied { write } for pid=27244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.691640][T27270] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 751.746836][ T30] audit: type=1400 audit(1785436943.545:1545): avc: denied { write } for pid=27271 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.198389][T24401] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 752.239467][T27297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8140'. [ 752.313921][T17734] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.322827][T27297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8140'. [ 752.365511][T17734] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.408605][T24401] usb 5-1: Using ep0 maxpacket: 8 [ 752.432603][T17734] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.443864][T24401] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.507669][T17734] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.529220][T24401] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.611852][T24401] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.711621][T24401] usb 5-1: config 0 interface 0 has no altsetting 0 [ 752.762443][ T30] audit: type=1400 audit(1785436944.565:1546): avc: denied { write } for pid=27286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.794471][T24401] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 752.852665][T24401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.909983][T24401] usb 5-1: config 0 descriptor?? [ 752.972531][T27324] netlink: 'syz.6.8146': attribute type 1 has an invalid length. [ 753.023179][ T30] audit: type=1400 audit(1785436944.825:1547): avc: denied { write } for pid=27320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.110110][T27324] bond8: entered promiscuous mode [ 753.160779][T27324] 8021q: adding VLAN 0 to HW filter on device bond8 [ 753.179278][T24401] usbhid 5-1:0.0: can't add hid device: -71 [ 753.207233][T24401] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 753.290470][T24401] usb 5-1: USB disconnect, device number 27 [ 753.316505][T27329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 753.406142][T27329] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 753.457959][T27329] bond8: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 753.537856][T27329] bond8: (slave gre2): making interface the new active one [ 753.574287][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 753.588818][T27329] gre2: entered promiscuous mode [ 753.610972][T27329] bond8: (slave gre2): Enslaving as an active interface with an up link [ 753.625466][T27341] netlink: 'syz.3.8149': attribute type 29 has an invalid length. [ 753.674746][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 753.863984][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 753.953769][T27347] netlink: 'syz.3.8149': attribute type 29 has an invalid length. [ 754.028825][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 754.043852][T27357] netlink: 820 bytes leftover after parsing attributes in process `syz.0.8153'. [ 754.065890][ T30] audit: type=1400 audit(1785436945.865:1548): avc: denied { write } for pid=27332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.122018][T27357] netlink: 820 bytes leftover after parsing attributes in process `syz.0.8153'. [ 754.354846][ T30] audit: type=1400 audit(1785436946.155:1549): avc: denied { accept } for pid=27364 comm="syz.3.8155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 754.497406][ T30] audit: type=1400 audit(1785436946.195:1550): avc: denied { write } for pid=27363 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.634552][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8160'. [ 754.874343][T27383] fuse: Bad value for 'fd' [ 754.886198][T27388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8163'. [ 754.947102][T27388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8163'. [ 754.997958][T27388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8163'. [ 755.046791][T27388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8163'. [ 755.139107][T23955] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 755.328581][T23955] usb 8-1: Using ep0 maxpacket: 16 [ 755.347545][ T30] audit: type=1400 audit(1785436947.145:1551): avc: denied { write } for pid=27377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.397334][T23955] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 755.467436][T27406] CIFS: Attempting to mount //127.0.0.1/share [ 755.485502][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 755.513003][T23955] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 755.580888][T27406] CIFS: VFS: Error connecting to socket. Aborting operation. [ 755.610534][T23955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.642174][T27406] CIFS: VFS: cifs_mount failed w/return code = -111 [ 755.676797][T23955] usb 8-1: Product: syz [ 755.705042][T23955] usb 8-1: Manufacturer: syz [ 755.721921][ T30] audit: type=1400 audit(1785436947.525:1552): avc: denied { write } for pid=27409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.765431][T23955] usb 8-1: SerialNumber: syz [ 755.800860][T23955] usb 8-1: config 0 descriptor?? [ 755.839392][T27387] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 755.915283][T23955] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 756.128459][ T5787] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 756.214322][ C0] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 756.220444][ C0] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 756.226965][T23955] usb 8-1: USB disconnect, device number 12 [ 756.276872][T23955] mcba_usb 8-1:0.0 can0: device disconnected [ 756.344551][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.401547][T27426] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 756.413384][T24401] IPVS: starting estimator thread 0... [ 756.441376][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.522447][ T5787] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 756.548653][T27428] IPVS: using max 77 ests per chain, 184800 per kthread [ 756.622818][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.657311][T27435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8179'. [ 756.731455][T27435] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.738638][T27435] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.819917][ T5787] usb 1-1: config 0 descriptor?? [ 756.990931][ T30] audit: type=1400 audit(1785436948.785:1553): avc: denied { write } for pid=27415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.250960][T27452] kvm: Disabled LAPIC found during irq injection [ 757.290438][ T30] audit: type=1400 audit(1785436949.085:1554): avc: denied { write } for pid=27454 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.526536][ T5787] usb 1-1: string descriptor 0 read error: -22 [ 757.555666][ T30] audit: type=1400 audit(1785436949.355:1555): avc: denied { getopt } for pid=27460 comm="syz.3.8187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 757.739164][ T5787] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.006E/input/input111 [ 757.782125][T24401] kernel read not supported for file /vcsa (pid: 24401 comm: kworker/0:8) [ 757.963926][ T5787] uclogic 0003:256C:006D.006E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 758.089245][ T5787] usb 1-1: USB disconnect, device number 29 [ 758.226108][T27482] fido_id[27482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 758.285307][T27483] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 758.323124][T27483] overlayfs: failed to set xattr on upper [ 758.361301][T27483] overlayfs: ...falling back to redirect_dir=nofollow. [ 758.438349][T27483] overlayfs: ...falling back to index=off. [ 758.503106][ T30] audit: type=1400 audit(1785436950.305:1556): avc: denied { write } for pid=27461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.881791][ T30] audit: type=1400 audit(1785436950.675:1557): avc: denied { write } for pid=27501 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.115712][ T30] audit: type=1400 audit(1785436951.915:1558): avc: denied { write } for pid=27512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.373409][ T30] audit: type=1400 audit(1785436952.015:1559): avc: denied { bind } for pid=27538 comm="syz.4.8211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 760.539580][T18741] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 760.568487][T27548] xt_hashlimit: size too large, truncated to 1048576 [ 760.578586][ T30] audit: type=1400 audit(1785436952.115:1560): avc: denied { map } for pid=27542 comm="syz.6.8213" path="socket:[124281]" dev="sockfs" ino=124281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 760.709412][T27553] __nla_validate_parse: 1 callbacks suppressed [ 760.709425][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8216'. [ 760.757898][ T30] audit: type=1400 audit(1785436952.375:1561): avc: denied { write } for pid=27544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.801473][T18741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.819542][T27553] bridge: RTM_NEWNEIGH with invalid ether address [ 760.846088][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 760.872786][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8216'. [ 760.905988][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 760.923295][T27553] bridge: RTM_NEWNEIGH with invalid ether address [ 760.949901][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 760.978327][T24401] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 761.024669][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 761.085729][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 761.138403][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 761.178730][T24401] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.222751][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 761.254898][T24401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.290123][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 761.324036][T24401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.352736][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 761.391926][T24401] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.427721][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 761.474717][T24401] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.491944][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 761.538193][T24401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.559689][T18741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 761.612247][T24401] usb 5-1: config 0 descriptor?? [ 761.635317][T18741] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 761.721916][T18741] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 761.750329][ T30] audit: type=1400 audit(1785436953.545:1562): avc: denied { write } for pid=27557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.796032][T18741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.846379][T18741] usb 4-1: Product: syz [ 761.878874][T18741] usb 4-1: Manufacturer: syz [ 761.910101][T18741] usb 4-1: SerialNumber: syz [ 761.922123][ T30] audit: type=1400 audit(1785436953.705:1563): avc: denied { write } for pid=27580 comm="syz.0.8224" lport=52574 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 761.975552][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.023649][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.077149][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.094901][T24401] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 762.126156][ T5787] Process accounting resumed [ 762.142395][ T30] audit: type=1400 audit(1785436953.855:1564): avc: denied { write } for pid=27583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.178131][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.241912][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.325354][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.393080][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.437755][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.478002][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.517123][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.550750][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.576628][T27541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.603117][T18741] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 762.618522][T24401] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 762.642134][T18741] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 762.684680][T18741] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 762.709665][T18741] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 762.740678][T18741] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 762.812685][T24401] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 762.871674][T24401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.933232][T24401] usb 8-1: Product: syz [ 762.947126][ T30] audit: type=1400 audit(1785436954.745:1565): avc: denied { write } for pid=27592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.986684][T24401] usb 8-1: Manufacturer: syz [ 763.007492][T24401] usb 8-1: SerialNumber: syz [ 763.015494][T18741] usb 5-1: USB disconnect, device number 28 [ 763.066821][T24401] usb 8-1: config 0 descriptor?? [ 763.105510][T24401] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 013 [ 763.124742][ T30] audit: type=1326 audit(1785436954.845:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27595 comm="syz.0.8229" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf8b59e019 code=0x0 [ 763.224213][ T30] audit: type=1400 audit(1785436954.995:1567): avc: denied { write } for pid=27614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.305955][T27594] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 763.369952][T27618] misc userio: Invalid payload size [ 763.432335][ T5717] usb 4-1: USB disconnect, device number 31 [ 763.466791][ T5717] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 763.502752][ T5717] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 763.531080][ T5717] keyspan 4-1:1.0: device disconnected [ 763.753974][T24401] i2c i2c-1: failure reading functionality [ 763.764700][T24401] i2c i2c-1: connected i2c-tiny-usb device [ 763.794466][T24401] usb 8-1: USB disconnect, device number 13 [ 763.958978][T18741] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 764.141919][T18741] usb 5-1: Using ep0 maxpacket: 16 [ 764.180759][T18741] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 764.244762][T18741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.323663][T18741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.406214][T18741] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 764.483452][T18741] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 764.536264][T18741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.622099][T18741] usb 5-1: config 0 descriptor?? [ 765.100746][T18741] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0070/input/input113 [ 765.276713][T27630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.336127][T18741] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0070/input/input114 [ 765.370592][T27630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.597641][T18741] kye 0003:0458:5013.0070: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 765.625083][T27692] netlink: 'syz.0.8248': attribute type 2 has an invalid length. [ 765.696839][T27692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8248'. [ 765.733874][T18741] usb 5-1: USB disconnect, device number 29 [ 765.764972][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8250'. [ 765.846778][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8250'. [ 765.953723][T27698] fido_id[27698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 766.045580][T27692] : entered promiscuous mode [ 766.073014][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 766.073026][ T30] audit: type=1400 audit(1785436957.865:1574): avc: denied { write } for pid=27678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.189472][T27704] udc dummy_udc.0: failed to start g1: -19 [ 766.238388][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8250'. [ 766.247303][T17732] netdevsim netdevsim2 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.319259][T17732] netdevsim netdevsim2 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.348367][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8250'. [ 766.366410][T27704] UDC core: g1: couldn't find an available UDC or it's busy [ 766.424548][T17732] netdevsim netdevsim2 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.434609][ T30] audit: type=1400 audit(1785436957.955:1575): avc: denied { write } for pid=27703 comm="syz.7.8251" name="c.1" dev="configfs" ino=90495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 766.524349][T17732] netdevsim netdevsim2 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.650948][T17732] netdevsim netdevsim1 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.683864][ T30] audit: type=1400 audit(1785436957.955:1576): avc: denied { write } for pid=27703 comm="syz.7.8251" name="c.1" dev="configfs" ino=90495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 766.755839][T17732] netdevsim netdevsim1 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.861787][T17732] netdevsim netdevsim1 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.903996][ T30] audit: type=1400 audit(1785436958.315:1577): avc: denied { write } for pid=27707 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.947519][T17741] netdevsim netdevsim1 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.005613][T17741] netdevsim netdevsim5 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.019470][T23955] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 767.083996][T17741] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.137356][T17741] netdevsim netdevsim5 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.211047][T23955] usb 8-1: unable to get BOS descriptor or descriptor too short [ 767.232008][T17741] netdevsim netdevsim5 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.259766][T23955] usb 8-1: not running at top speed; connect to a high speed hub [ 767.297866][T17741] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.329941][T23955] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 767.374243][T17741] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.391982][T23955] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 767.437318][T17741] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.458147][T23955] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 767.505663][T17741] netdevsim netdevsim8 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.534720][T23955] usb 8-1: config 14 has no interface number 0 [ 767.574677][T23955] usb 8-1: config 14 has no interface number 1 [ 767.613903][T23955] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 767.666927][ T30] audit: type=1400 audit(1785436959.465:1578): avc: denied { write } for pid=27720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.703200][T23955] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 767.772194][T23955] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 767.847417][T23955] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.897966][T27752] xt_hashlimit: size too large, truncated to 1048576 [ 767.915840][T23955] usb 8-1: config 14 interface 57 has no altsetting 0 [ 767.933581][ T30] audit: type=1400 audit(1785436959.735:1579): avc: denied { write } for pid=27750 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.983159][T23955] usb 8-1: config 14 interface 228 has no altsetting 0 [ 768.035006][T23955] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 768.082381][T23955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.151895][T23955] usb 8-1: Product: syz [ 768.186502][T23955] usb 8-1: Manufacturer: syz [ 768.225615][T23955] usb 8-1: SerialNumber: syz [ 768.577789][T27771] SELinux: failed to load policy [ 768.632924][T27777] ref_ctr_offset mismatch. inode: 0x1ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 768.681791][T23955] legousbtower 8-1:14.57: interrupt endpoints not found [ 768.910593][ T30] audit: type=1400 audit(1785436960.715:1580): avc: denied { write } for pid=27758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.068506][ T5717] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 769.078957][T23955] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 769.146519][T23955] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 769.185705][ T30] audit: type=1400 audit(1785436960.985:1581): avc: denied { write } for pid=27793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.298322][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 769.320050][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 769.346717][ T5717] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 769.377433][ T5717] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 769.417107][ T5717] usb 4-1: config 14 has no interface number 0 [ 769.451654][ T5717] usb 4-1: config 14 has no interface number 1 [ 769.475610][T27719] usb 8-1: Couldn't submit interrupt_in_urb -90 [ 769.486074][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 769.529502][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 769.587366][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 769.634926][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 769.653948][T24401] usb 8-1: USB disconnect, device number 14 [ 769.703361][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 769.728082][T24401] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 769.767454][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.822389][ T5717] usb 4-1: config 14 interface 57 has no altsetting 0 [ 769.847256][ T5717] usb 4-1: config 14 interface 228 has no altsetting 0 [ 769.881398][ T5717] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 769.924461][ T30] audit: type=1400 audit(1785436961.715:1582): avc: denied { write } for pid=27799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.966151][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.005850][ T5717] usb 4-1: Product: syz [ 770.044286][ T5717] usb 4-1: Manufacturer: syz [ 770.072829][ T5717] usb 4-1: SerialNumber: syz [ 770.187333][ T30] audit: type=1400 audit(1785436961.985:1583): avc: denied { write } for pid=27815 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.527038][ T5717] legousbtower 4-1:14.57: interrupt endpoints not found [ 770.726391][T27834] netlink: 'syz.0.8285': attribute type 5 has an invalid length. [ 770.816209][T27842] 9p: Bad value for 'wfdno' [ 770.936112][ T5717] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 771.003248][ T5717] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 771.032066][T27850] netlink: 'syz.0.8289': attribute type 4 has an invalid length. [ 771.114896][T27850] netlink: 'syz.0.8289': attribute type 4 has an invalid length. [ 771.155194][ T30] audit: type=1400 audit(1785436962.955:1584): avc: denied { write } for pid=27828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.357898][ T30] audit: type=1400 audit(1785436963.155:1585): avc: denied { write } for pid=27855 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.501152][T27863] usb 4-1: LEGO USB Tower reset control request failed [ 771.611318][T27867] netlink: 'syz.4.8295': attribute type 1 has an invalid length. [ 771.702592][ T5717] usb 4-1: USB disconnect, device number 32 [ 771.743552][T27867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.759499][ T5717] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 771.906429][T27876] bond1: (slave bridge1): making interface the new active one [ 771.955631][T27876] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 772.077367][T27881] kvm: kvm [27880]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 772.154744][T27881] kvm: kvm [27880]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 772.393526][ T30] audit: type=1326 audit(1785436964.195:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.3.8303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa686f9e019 code=0x0 [ 772.582398][ T30] audit: type=1400 audit(1785436964.235:1587): avc: denied { write } for pid=27868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.732245][T27913] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 772.773016][ T30] audit: type=1400 audit(1785436964.505:1588): avc: denied { write } for pid=27906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.443179][ T30] audit: type=1400 audit(1785436965.245:1589): avc: denied { remount } for pid=27933 comm="syz.0.8313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 773.586576][T27944] xt_hashlimit: size too large, truncated to 1048576 [ 773.750062][ T30] audit: type=1400 audit(1785436965.545:1590): avc: denied { setattr } for pid=27946 comm="syz.0.8316" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 773.936872][ T30] audit: type=1400 audit(1785436965.685:1591): avc: denied { write } for pid=27921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.181399][ T30] audit: type=1400 audit(1785436965.985:1592): avc: denied { write } for pid=27961 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.357557][ T30] audit: type=1326 audit(1785436966.035:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27966 comm="syz.3.8322" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa686f9e019 code=0x0 [ 774.998413][ T5787] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 775.201680][ T5787] usb 5-1: Using ep0 maxpacket: 16 [ 775.241441][ T5787] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 775.320168][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.420182][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.493609][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.568958][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.643716][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.706322][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.775967][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.796835][T28024] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8336'. [ 775.848931][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.915326][ T5787] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 775.935312][T28027] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8336'. [ 775.993392][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 776.057061][T28024] netlink: 'syz.6.8336': attribute type 32 has an invalid length. [ 776.075220][ T5787] usb 5-1: SerialNumber: syz [ 776.129187][ T5787] usb 5-1: config 0 descriptor?? [ 776.192648][ T5787] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input115 [ 776.393152][T27988] input: syz1 as /devices/virtual/input/input116 [ 776.478856][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 776.478867][ T30] audit: type=1400 audit(1785436968.285:1599): avc: denied { write } for pid=28018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.795291][ T30] audit: type=1400 audit(1785436968.595:1600): avc: denied { write } for pid=28049 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.176250][ T4964] bcm5974 5-1:0.0: could not read from device [ 777.250532][ T4964] bcm5974 5-1:0.0: could not read from device [ 777.259910][ T5787] usb 5-1: USB disconnect, device number 30 [ 777.888743][ T30] audit: type=1400 audit(1785436969.675:1601): avc: denied { write } for pid=28062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.197459][ T30] audit: type=1400 audit(1785436969.995:1602): avc: denied { write } for pid=28105 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.576228][T28115] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.583567][T28115] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.664397][ T30] audit: type=1326 audit(1785436970.455:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28117 comm="syz.4.8364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe440b9e019 code=0x7fc00000 [ 778.804807][T28127] netlink: 14640 bytes leftover after parsing attributes in process `syz.3.8365'. [ 778.832898][T17732] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.873869][T28115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.911877][T28115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.069258][T17741] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.104188][T17741] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.165035][T17741] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.224164][T17741] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.295457][ T30] audit: type=1326 audit(1785436971.095:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28117 comm="syz.4.8364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe440b3f399 code=0x7fc00000 [ 779.344567][T17732] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.374236][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8370'. [ 779.402524][T17732] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.441579][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8370'. [ 779.484774][T17732] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.536793][T17732] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.603594][T17732] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.613269][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8370'. [ 779.667234][T17732] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.681377][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8370'. [ 779.731297][T17732] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.782662][T17732] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.764091][ T30] audit: type=1400 audit(1785436972.565:1605): avc: denied { write } for pid=28173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.013915][ T30] audit: type=1400 audit(1785436972.815:1606): avc: denied { write } for pid=28211 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.670004][T24401] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 781.696001][T28239] loop5: detected capacity change from 0 to 7 [ 781.727335][T28239] Dev loop5: unable to read RDB block 7 [ 781.743895][T28239] loop5: AHDI p2 [ 781.755684][T28239] loop5: partition table partially beyond EOD, truncated [ 781.843211][ T30] audit: type=1400 audit(1785436973.645:1607): avc: denied { write } for pid=28220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.885508][T24401] usb 8-1: not running at top speed; connect to a high speed hub [ 781.972779][T24401] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 782.041769][T24401] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 782.091207][T24401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.130635][ T30] audit: type=1400 audit(1785436973.935:1608): avc: denied { write } for pid=28256 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.180879][T24401] usb 8-1: Product: syz [ 782.225147][T24401] usb 8-1: Manufacturer: syz [ 782.262111][T24401] usb 8-1: SerialNumber: syz [ 782.332114][T24401] oti6858 8-1:1.0: oti6858 converter detected [ 782.394113][T24401] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 782.546810][T28272] xt_hashlimit: size too large, truncated to 1048576 [ 782.900542][T23955] usb 8-1: USB disconnect, device number 15 [ 782.936780][T23955] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 782.979114][T23955] oti6858 8-1:1.0: device disconnected [ 783.106236][ T30] audit: type=1400 audit(1785436974.905:1609): avc: denied { write } for pid=28268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.344423][ T30] audit: type=1400 audit(1785436975.145:1610): avc: denied { write } for pid=28291 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.560290][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 784.495499][ T30] audit: type=1400 audit(1785436976.295:1611): avc: denied { write } for pid=28313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.743513][ T30] audit: type=1400 audit(1785436976.545:1612): avc: denied { write } for pid=28343 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.950365][ T5274] 8021q: adding VLAN 0 to HW filter on device eth28 [ 785.771368][ T30] audit: type=1400 audit(1785436977.575:1613): avc: denied { write } for pid=28357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.134700][ T30] audit: type=1400 audit(1785436977.935:1614): avc: denied { write } for pid=28377 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.507483][ T30] audit: type=1400 audit(1785436978.305:1615): avc: denied { unmount } for pid=28390 comm="syz.6.8442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 787.041148][ T30] audit: type=1400 audit(1785436978.845:1616): avc: denied { write } for pid=28388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.218536][T23955] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 787.246778][T28415] netlink: 'syz.7.8448': attribute type 1 has an invalid length. [ 787.267170][ T30] audit: type=1400 audit(1785436979.065:1617): avc: denied { write } for pid=28412 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.371587][T28415] bond1: entered promiscuous mode [ 787.409548][T28415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 787.417527][T23955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.467477][T23955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.522303][T23955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.576169][T28425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 787.617276][T23955] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.642717][T28425] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 787.680116][T23955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.703789][T28425] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 787.732773][T23955] usb 4-1: config 0 descriptor?? [ 787.763471][T28425] bond1: (slave ipip0): making interface the new active one [ 787.790400][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 787.816997][T28425] ipip0: entered promiscuous mode [ 787.863951][T28425] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 788.162505][ T30] audit: type=1400 audit(1785436979.965:1618): avc: denied { write } for pid=28426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.214313][T23955] plantronics 0003:047F:FFFF.0071: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 788.384906][ T30] audit: type=1400 audit(1785436980.185:1619): avc: denied { write } for pid=28450 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.610778][ T30] audit: type=1400 audit(1785436981.415:1620): avc: denied { write } for pid=28465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.831202][ T30] audit: type=1400 audit(1785436981.465:1621): avc: denied { getopt } for pid=28486 comm="syz.4.8462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 789.997442][ T30] audit: type=1400 audit(1785436981.735:1622): avc: denied { write } for pid=28501 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.030698][T28503] xt_hashlimit: size too large, truncated to 1048576 [ 790.181877][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 790.759520][ T5732] usb 4-1: USB disconnect, device number 33 [ 791.301684][ T30] audit: type=1400 audit(1785436983.105:1623): avc: denied { write } for pid=28519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.463232][ T30] audit: type=1400 audit(1785436983.145:1624): avc: denied { setopt } for pid=28552 comm="syz.0.8483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.623300][ T30] audit: type=1400 audit(1785436983.145:1625): avc: denied { read } for pid=28552 comm="syz.0.8483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 792.198862][T28582] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 792.403204][T28582] overlayfs: failed lookup in lower (newroot/111, name='file2', err=-40): overlapping layers [ 792.488748][T28582] overlayfs: failed to look up (file2) for ino (-40) [ 792.559255][T28589] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 792.615065][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 792.615077][ T30] audit: type=1400 audit(1785436984.405:1627): avc: denied { write } for pid=28575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.706078][T28589] overlayfs: failed to look up (file0) for ino (-40) [ 792.848761][ T30] audit: type=1400 audit(1785436984.655:1628): avc: denied { write } for pid=28602 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.243322][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 793.833475][T28638] overlayfs: failed to clone upperpath [ 794.174997][ T30] audit: type=1400 audit(1785436985.975:1629): avc: denied { write } for pid=28620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.378563][ T30] audit: type=1400 audit(1785436986.025:1630): avc: denied { write } for pid=28652 comm="syz.0.8514" name="functions" dev="configfs" ino=38969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 794.554754][ T30] audit: type=1400 audit(1785436986.295:1631): avc: denied { write } for pid=28656 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.944511][T28670] syzkaller1: entered promiscuous mode [ 794.990090][T28670] syzkaller1: entered allmulticast mode [ 795.736677][ T30] audit: type=1400 audit(1785436987.535:1632): avc: denied { write } for pid=28677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.969337][ T30] audit: type=1400 audit(1785436987.765:1633): avc: denied { write } for pid=28705 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.883594][ T30] audit: type=1400 audit(1785436988.685:1634): avc: denied { write } for pid=28716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.134107][ T30] audit: type=1400 audit(1785436988.935:1635): avc: denied { write } for pid=28738 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.278493][T28742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28742 comm=syz.3.8541 [ 797.312699][T28742] netlink: 'syz.3.8541': attribute type 1 has an invalid length. [ 797.452518][T28742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.536071][T28747] bond1: (slave ip6erspan0): making interface the new active one [ 797.623724][T28747] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 797.709000][ T5717] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 797.810964][ T30] audit: type=1400 audit(1785436989.615:1636): avc: denied { write } for pid=28741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.899936][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 797.932368][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.011130][ T5717] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 798.074300][T28764] sctp: [Deprecated]: syz.3.8544 (pid 28764) Use of int in maxseg socket option. [ 798.074300][T28764] Use struct sctp_assoc_value instead [ 798.103552][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.114011][ T30] audit: type=1400 audit(1785436989.905:1637): avc: denied { write } for pid=28765 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.182975][ T5717] usb 1-1: config 0 descriptor?? [ 798.443544][ T5717] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 798.539199][T28782] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 798.612471][T28788] netlink: 'syz.6.8551': attribute type 1 has an invalid length. [ 798.813094][T28788] 8021q: adding VLAN 0 to HW filter on device bond9 [ 798.924136][T28792] bond9: (slave geneve4): making interface the new active one [ 798.998146][T23955] usb 1-1: USB disconnect, device number 30 [ 799.032407][T28792] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 799.309806][T28810] CIFS: Attempting to mount //127.0.0.1/share [ 799.371691][ T30] audit: type=1400 audit(1785436991.175:1638): avc: denied { write } for pid=28787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.591486][ T30] audit: type=1400 audit(1785436991.395:1639): avc: denied { write } for pid=28819 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.709704][T28822] binder: 28821:28822 ioctl c0306201 2000000003c0 returned -14 [ 800.076003][T28832] team0 (unregistering): Port device team_slave_0 removed [ 800.135256][T28834] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 800.143917][T23955] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 800.161747][T28810] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 800.191177][T28832] team0 (unregistering): Port device team_slave_1 removed [ 800.230196][T28810] ------------[ cut here ]------------ [ 800.237049][T28810] server->in_flight == 0 [ 800.237060][T28810] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#0: syz.3.8555/28810 [ 800.252074][T28810] Modules linked in: [ 800.258201][T28810] CPU: 0 UID: 0 PID: 28810 Comm: syz.3.8555 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.269485][T28810] Tainted: [L]=SOFTLOCKUP [ 800.273788][T28810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.283857][T28810] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 800.289848][T28810] Code: c6 e8 f1 e8 b5 fe 84 db 0f 85 0a fb ff ff e8 d4 ee b5 fe 48 8d 3d 7d a4 d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 be ee b5 fe 90 <0f> 0b 90 0f b6 05 18 db b5 0d 31 ff 89 c6 88 44 24 28 e8 b6 e8 b5 [ 800.310231][T28810] RSP: 0018:ffffc90004977208 EFLAGS: 00010283 [ 800.316934][T28810] RAX: 000000000000c78c RBX: ffff888077cf8300 RCX: ffffc90010ed1000 [ 800.324945][T28810] RDX: 0000000000080000 RSI: ffffffff83547182 RDI: ffff888039d7ca80 [ 800.333118][T28810] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 800.341111][T28810] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004977448 [ 800.349121][T28810] R13: 0000000000000200 R14: 0000000000000002 R15: ffff888077cf8000 [ 800.357080][T28810] FS: 00007fa687e396c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 800.366282][T28810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.372914][T28810] CR2: 0000001b33d15ff8 CR3: 000000008481b000 CR4: 00000000003526f0 [ 800.380904][T28810] Call Trace: [ 800.384160][T28810] [ 800.387069][T28810] ? compound_send_recv+0xea0/0x2a10 [ 800.392377][T28810] compound_send_recv+0x1030/0x2a10 [ 800.398031][T28810] ? __pfx_compound_send_recv+0x10/0x10 [ 800.403840][T28810] ? crng_fast_key_erasure+0x1d6/0x260 [ 800.409317][T28810] ? lock_acquire+0x1b9/0x370 [ 800.413976][T28810] ? rcu_is_watching+0x12/0xc0 [ 800.418793][T28810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 800.424701][T28810] ? __mutex_unlock_slowpath+0x35d/0x930 [ 800.430505][T28810] ? cifs_strtoUTF16+0x283/0x3e0 [ 800.435444][T28810] ? find_held_lock+0x2b/0x80 [ 800.440151][T28810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 800.446123][T28810] cifs_send_recv+0x43/0x60 [ 800.450645][T28810] SMB2_negotiate+0x15c4/0x5380 [ 800.455496][T28810] ? __pfx_SMB2_negotiate+0x10/0x10 [ 800.460698][T28810] ? smb2_negotiate+0x57/0x80 [ 800.465353][T28810] ? smb2_negotiate+0x57/0x80 [ 800.470046][T28810] ? do_raw_spin_unlock+0x145/0x1e0 [ 800.475224][T28810] ? cifs_negotiate_protocol+0x268/0x4c0 [ 800.480857][T28810] cifs_negotiate_protocol+0x268/0x4c0 [ 800.486294][T28810] cifs_get_smb_ses+0xfc9/0x2170 [ 800.491232][T28810] cifs_mount_get_session+0xf8/0x460 [ 800.496498][T28810] dfs_mount_share+0x200/0x1e20 [ 800.501842][T28810] ? check_prev_add+0xfe/0xe60 [ 800.506587][T28810] ? __pfx_dfs_mount_share+0x10/0x10 [ 800.512296][T28810] ? lockdep_unlock+0x5a/0xc0 [ 800.516952][T28810] ? __lock_acquire+0xd5b/0x1a40 [ 800.521980][T28810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 800.527773][T28810] cifs_mount+0xc4/0xdb0 [ 800.532016][T28810] ? find_held_lock+0x2b/0x80 [ 800.536686][T28810] ? find_nls+0x125/0x170 [ 800.541016][T28810] ? find_nls+0x125/0x170 [ 800.545323][T28810] ? __pfx_cifs_mount+0x10/0x10 [ 800.550170][T28810] ? do_raw_spin_unlock+0x145/0x1e0 [ 800.555349][T28810] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 800.560542][T28810] cifs_smb3_do_mount+0x2c0/0x1b20 [ 800.565627][T28810] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 800.571882][T28810] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 800.577409][T28810] smb3_get_tree+0x1fd/0x440 [ 800.582003][T28810] vfs_get_tree+0x92/0x320 [ 800.586399][T28810] path_mount+0x7d0/0x23d0 [ 800.590993][T28810] ? __pfx_path_mount+0x10/0x10 [ 800.595821][T28810] ? lockdep_hardirqs_on+0x78/0x100 [ 800.601069][T28810] ? putname+0xb1/0x110 [ 800.605633][T28810] ? kmem_cache_free+0x127/0x6b0 [ 800.610801][T28810] ? __x64_sys_mount+0x293/0x310 [ 800.615717][T28810] __x64_sys_mount+0x293/0x310 [ 800.620506][T28810] ? __pfx___x64_sys_mount+0x10/0x10 [ 800.625772][T28810] do_syscall_64+0x115/0x870 [ 800.630391][T28810] ? clear_bhb_loop+0x40/0x90 [ 800.635046][T28810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.640937][T28810] RIP: 0033:0x7fa686f9e019 [ 800.645325][T28810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.664930][T28810] RSP: 002b:00007fa687e39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 800.673364][T28810] RAX: ffffffffffffffda RBX: 00007fa687226090 RCX: 00007fa686f9e019 [ 800.681325][T28810] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 800.689286][T28810] RBP: 00007fa68703500c R08: 0000200000000500 R09: 0000000000000000 [ 800.697230][T28810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.705668][T28810] R13: 00007fa687226128 R14: 00007fa687226090 R15: 00007ffdbae9d438 [ 800.713855][T28810] [ 800.716853][T28810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 800.724106][T28810] CPU: 0 UID: 0 PID: 28810 Comm: syz.3.8555 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.735021][T28810] Tainted: [L]=SOFTLOCKUP [ 800.739314][T28810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.749339][T28810] Call Trace: [ 800.752591][T28810] [ 800.755494][T28810] dump_stack_lvl+0x100/0x190 [ 800.760149][T28810] vpanic+0x552/0x970 [ 800.764105][T28810] ? __pfx_vpanic+0x10/0x10 [ 800.768582][T28810] panic+0xd1/0xe0 [ 800.772284][T28810] ? __pfx_panic+0x10/0x10 [ 800.776680][T28810] check_panic_on_warn.cold+0x19/0x34 [ 800.782027][T28810] ? smb2_add_credits+0x1213/0x1790 [ 800.787202][T28810] __warn.cold+0x191/0x318 [ 800.791592][T28810] __report_bug+0x30f/0x440 [ 800.796067][T28810] ? smb2_add_credits+0x1213/0x1790 [ 800.801244][T28810] ? __pfx___report_bug+0x10/0x10 [ 800.806243][T28810] ? lockdep_hardirqs_on+0x78/0x100 [ 800.811415][T28810] ? try_to_wake_up+0x158/0x1c90 [ 800.816331][T28810] ? smb2_add_credits+0x1213/0x1790 [ 800.821504][T28810] report_bug+0xb2/0x220 [ 800.825719][T28810] ? smb2_add_credits+0x1213/0x1790 [ 800.830895][T28810] handle_bug+0x16a/0x2a0 [ 800.835199][T28810] exc_invalid_op+0x17/0x50 [ 800.839680][T28810] asm_exc_invalid_op+0x1a/0x20 [ 800.844501][T28810] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 800.850294][T28810] Code: c6 e8 f1 e8 b5 fe 84 db 0f 85 0a fb ff ff e8 d4 ee b5 fe 48 8d 3d 7d a4 d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 be ee b5 fe 90 <0f> 0b 90 0f b6 05 18 db b5 0d 31 ff 89 c6 88 44 24 28 e8 b6 e8 b5 [ 800.869871][T28810] RSP: 0018:ffffc90004977208 EFLAGS: 00010283 [ 800.875909][T28810] RAX: 000000000000c78c RBX: ffff888077cf8300 RCX: ffffc90010ed1000 [ 800.883850][T28810] RDX: 0000000000080000 RSI: ffffffff83547182 RDI: ffff888039d7ca80 [ 800.891792][T28810] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 800.899733][T28810] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004977448 [ 800.907676][T28810] R13: 0000000000000200 R14: 0000000000000002 R15: ffff888077cf8000 [ 800.915621][T28810] ? smb2_add_credits+0x1212/0x1790 [ 800.920798][T28810] ? smb2_add_credits+0x1212/0x1790 [ 800.925973][T28810] ? compound_send_recv+0xea0/0x2a10 [ 800.931240][T28810] compound_send_recv+0x1030/0x2a10 [ 800.936422][T28810] ? __pfx_compound_send_recv+0x10/0x10 [ 800.941945][T28810] ? crng_fast_key_erasure+0x1d6/0x260 [ 800.947381][T28810] ? lock_acquire+0x1b9/0x370 [ 800.952035][T28810] ? rcu_is_watching+0x12/0xc0 [ 800.956775][T28810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 800.962648][T28810] ? __mutex_unlock_slowpath+0x35d/0x930 [ 800.968254][T28810] ? cifs_strtoUTF16+0x283/0x3e0 [ 800.973167][T28810] ? find_held_lock+0x2b/0x80 [ 800.977828][T28810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 800.983793][T28810] cifs_send_recv+0x43/0x60 [ 800.988277][T28810] SMB2_negotiate+0x15c4/0x5380 [ 800.993109][T28810] ? __pfx_SMB2_negotiate+0x10/0x10 [ 800.998289][T28810] ? smb2_negotiate+0x57/0x80 [ 801.002939][T28810] ? smb2_negotiate+0x57/0x80 [ 801.007593][T28810] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.012770][T28810] ? cifs_negotiate_protocol+0x268/0x4c0 [ 801.018384][T28810] cifs_negotiate_protocol+0x268/0x4c0 [ 801.023816][T28810] cifs_get_smb_ses+0xfc9/0x2170 [ 801.028729][T28810] cifs_mount_get_session+0xf8/0x460 [ 801.033985][T28810] dfs_mount_share+0x200/0x1e20 [ 801.038813][T28810] ? check_prev_add+0xfe/0xe60 [ 801.043549][T28810] ? __pfx_dfs_mount_share+0x10/0x10 [ 801.048808][T28810] ? lockdep_unlock+0x5a/0xc0 [ 801.053454][T28810] ? __lock_acquire+0xd5b/0x1a40 [ 801.058367][T28810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 801.064148][T28810] cifs_mount+0xc4/0xdb0 [ 801.068361][T28810] ? find_held_lock+0x2b/0x80 [ 801.073014][T28810] ? find_nls+0x125/0x170 [ 801.077319][T28810] ? find_nls+0x125/0x170 [ 801.081623][T28810] ? __pfx_cifs_mount+0x10/0x10 [ 801.086444][T28810] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.091622][T28810] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 801.096791][T28810] cifs_smb3_do_mount+0x2c0/0x1b20 [ 801.101875][T28810] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 801.108095][T28810] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 801.113616][T28810] smb3_get_tree+0x1fd/0x440 [ 801.118182][T28810] vfs_get_tree+0x92/0x320 [ 801.122584][T28810] path_mount+0x7d0/0x23d0 [ 801.126977][T28810] ? __pfx_path_mount+0x10/0x10 [ 801.131801][T28810] ? lockdep_hardirqs_on+0x78/0x100 [ 801.136972][T28810] ? putname+0xb1/0x110 [ 801.141100][T28810] ? kmem_cache_free+0x127/0x6b0 [ 801.146014][T28810] ? __x64_sys_mount+0x293/0x310 [ 801.150926][T28810] __x64_sys_mount+0x293/0x310 [ 801.155668][T28810] ? __pfx___x64_sys_mount+0x10/0x10 [ 801.160930][T28810] do_syscall_64+0x115/0x870 [ 801.165492][T28810] ? clear_bhb_loop+0x40/0x90 [ 801.170142][T28810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.176005][T28810] RIP: 0033:0x7fa686f9e019 [ 801.180393][T28810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.199971][T28810] RSP: 002b:00007fa687e39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 801.208355][T28810] RAX: ffffffffffffffda RBX: 00007fa687226090 RCX: 00007fa686f9e019 [ 801.216296][T28810] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 801.224239][T28810] RBP: 00007fa68703500c R08: 0000200000000500 R09: 0000000000000000 [ 801.232181][T28810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.240131][T28810] R13: 00007fa687226128 R14: 00007fa687226090 R15: 00007ffdbae9d438 [ 801.248080][T28810] [ 801.251111][T28810] Kernel Offset: disabled [ 801.255407][T28810] Rebooting in 86400 seconds..