last executing test programs: 46.849656236s ago: executing program 1 (id=606): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000300)=@nl, 0x80, 0x0}, 0x8}], 0x1, 0x2100, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00'}) write$tun(r4, &(0x7f0000000840)=ANY=[], 0xfce) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4000000020101020000000000000000070000091c00198008000200200800000800020000010000080001000408000018001700000000020000000800000000f2daabbf569bdc3f15c703bcebc4000000ea000000ad140005800f00010073616e652d32303030300000140005800e0001007369702d32303030300000006c00028006000340000100000c000280050001008800000006000340000300003700000000000000000000000014000400ffe55043f60d350200000000000000000000000000010c0002800500010011000000140001800c000100"/228], 0xe4}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000010) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x439c) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000100)={0x8}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 45.780192164s ago: executing program 1 (id=612): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0x101, 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10141, 0x0) (async) sendmsg(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x10) 45.641089227s ago: executing program 1 (id=614): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c000004004580000201"], 0x218}}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000180029020000000000000001020000000c00088008001000ffffffff"], 0x20}}, 0x0) 45.586363259s ago: executing program 1 (id=617): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="090000000100", 0x6) 45.585107824s ago: executing program 1 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000600)={0x30, r5, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x800) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r5, 0xdac7a804b810ebdf, 0x70bd2b, 0x80000000, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 45.470432066s ago: executing program 1 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x9b, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 29.029589858s ago: executing program 32 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x9b, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.180451685s ago: executing program 0 (id=1063): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cdd", 0x16}], 0x1}, 0x5) 1.969138457s ago: executing program 2 (id=1071): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2d, 0x200, {0xa, 0x14, 0x0, 0x0, 0xfd}, [@RTA_EXPIRES={0x8, 0x17, 0x7fff}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$netlink(0x10, 0x3, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x45, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1.91594384s ago: executing program 0 (id=1073): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000002030300000000f0d940f3475d4818fae04ea604274ee22f388abef2fd67e10809000200fffffffc03000000090002000000000900000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x0, r5}) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="000000020000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000000000000001000004d63300000002000000200100000000000000000000000000000235000003031000090000000000000003000100"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x1, 0x1, 0x451, 0x4, 0x80000000, 0xffffffff, 0xe]}) 1.839967456s ago: executing program 0 (id=1075): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001480)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r6, @ANYBLOB="06000600fe00000006000400fdff0000"], 0x50}, 0x4, 0x700000000000000}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1.756014186s ago: executing program 3 (id=1076): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) 1.755299185s ago: executing program 0 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000006000000000000000000000000000000ad5ead3100000000000000001c000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5450628f308dfd5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x3aa6, 0x8, 0x2, 0x7, 0x6}, 0x0, &(0x7f0000000080)={0xd, 0x3cae, 0xfefffffffffffffa, 0x7, 0x9, 0x9, 0x400, 0x1}, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x88}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x161}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x104}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x90}, 0x1, 0x0, 0x0, 0x200000c8}, 0x20000800) process_vm_readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000000340)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f00000000c0)={0x2f0, 0x7b, 0x6, 0x8, 0xc, 0x67e0}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x181800, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r9, 0x0, 0x0) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000580)=0xe, 0x80800) sendmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="a7466c56ed34c6c782a5e7f6e9c0d77f1eb7990653d41282e2037f9747684ea7bcd86d674e5bf675cbe485884ea2fd906ee402c5f63f9611c2a6f62b12dc6730d9dcea510f9e4f5b0f4d039d90a15460f84c79a641be276fce23d75dc228a28e9be6320bac98a5ce7f7ed60fa39582448205ff11134a45de84bf1cb56fd559d26eaf52db18b278627fc43c467c578e174e3d661085dba6e917fc6b04dbcddeb901676924d9f8f62e95d1ec1b74b7ac2d6ad894881937d43ba37efb44130d4ee1941f68d6293d278934", 0xc9}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000880)="3bc7ecf54143362ab5717d8cb72c1016b62412e327e748057687ecd712de51fa2b249a3f8ecc443636fce43cbd5bd9d5dec2c37c2c2909cddf43c2cd12facf6d87a83a83116051c1124963204b93963c905601b449f4eed02d9a7b6b19163a40c05300b3ee630cec079983a0ef84c612eeea90f18ebeefeb7bbd8c4decd0a007d791ba088a3031a320019ae2d229994abd40983d148be77eab82c13d4e7fea3bc8f1e3b8", 0xa4}], 0x4, &(0x7f0000003240)=[{0x1010, 0x10d, 0x7fff, "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"}, {0xb8, 0x1, 0x8, "b4d1b9930c0c12b9409420baba0ac50907f1deca1647b3110101269ec0ff1e6dc87435ac8625e82f38eb862ca6cb498d29c3097b4091dab4e9373d7d9202ab9198650e29388a3113436e131abdbde510144c759cab5ab8141304c60d89ec88557ca6d1d553607be6d155dc888342857eee488c6e92785f91a3a6b7c1ebdffa8fd90f684f817fb7041de3ebb83eccca555ee06a6d28558f8179445f92e8cff04965c4fb37b4"}, {0x38, 0x114, 0x4, "e1604aa0fa21d04f0ec1c80a9b39fa4aa3b612defc4c53dd92204663fda4d7311b30"}, {0xf0, 0x1a, 0x10000, "dd7544261328bf989f94a7d53455603399f7d242e8578176c64c86714d67c2920dd4265fabedd5bb48c699bc3b938e821b5a4d51ff6f47ac6c35283003a6d1851980660e7db7ba8e79f951bb6d07da56a054fe8e9a5aaec5f5e51e3b55e72a5097bd8db6713b956914c7c19f2ce5c2b21957f1c4fe08691c8a71fe5c0549b372cac846d257731fd1f45600bdc5d187be7dc1f63f57f321f1a6b65a1be9a84a63d1edc313051d823978b0711ee32cae1b476fc129ac0752cdf66c09dfdc93b12108255677357a7f3f6dbcfd59615d496fdbd6ad3ea866be39add9f014"}, {0x48, 0x6, 0x1ff, "6ab0c4fd2fe9130e66ba6c5f2382080e5cdebc38019474893038d662844e7a8f01ebcbfc8e7aa05f50007b88a74004231520a513"}, {0x18, 0x11, 0x670, "c7b93bd1c678"}, {0x38, 0x10a, 0xee, "48bb49692635164a09750a3eff92c6db3044b15d757df46b18660fb187d17895fa3c75873811"}], 0x1288}}], 0x1, 0x4004000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f00000005c0)={0x0, 'dvmrp1\x00', {0x2}, 0x2}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x1ff}}]}) 1.754986239s ago: executing program 4 (id=1078): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) read(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="29000000010001", 0x7) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000003b80)={{@hyper, 0x4800004}, {@host, 0x7}, 0xfffffeb5, "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"}, 0x418, 0xfff}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=prefer=re']) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x80, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x91b, 0x0, 0x3e7}, {0x0, 0x200000000000000, 0xd}, 0x0, 0x6e6bb8, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x48800}, 0x200000c0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x7, 0x80000000, 0x0, 0x5, 0x5200}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x1, 0xb, 0x7}}]}}}]}, 0x60}}, 0x0) 1.742416456s ago: executing program 2 (id=1079): msgget$private(0x0, 0xb27766e99bf42011) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000700)={0x60, 0x2000, 0x400, 0x478b27d189243d75, 0x6, 0x7, 0xf, 0x1, {0x40, 0x2}, {0x0, 0xc, 0x1}, {0x0, 0x10, 0x8000001}, {0x8, 0x400}, 0x2, 0x100, 0xcf, 0x1ff, 0x0, 0x4, 0x8b7, 0x200, 0xa740000, 0x10000, 0x1, 0xfffffff4, 0x21, 0x2, 0x3, 0xa}) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2}}, 0x2e) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 1.739532604s ago: executing program 3 (id=1080): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x17ba, 0x100, 0x1, 0x256}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}}, 0x20004800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="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", 0x5c9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200040d0}, 0x4014) sendmsg$tipc(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}, 0x240040c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@ll={0x11, 0x19, r10, 0x1, 0x8, 0x6, @broadcast}, 0x80, 0x0}, 0xe07e872420dfefca) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/dev\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80800}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) 1.645342559s ago: executing program 2 (id=1081): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cdd", 0x16}], 0x1}, 0x5) 1.645022849s ago: executing program 4 (id=1082): syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x3dec, &(0x7f0000000340)={0x0, 0x3019, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1.563877397s ago: executing program 3 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x50000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c941) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.435614383s ago: executing program 4 (id=1084): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) pipe(&(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 1.434811257s ago: executing program 2 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x6, 0x1, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x87, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.380607954s ago: executing program 4 (id=1086): socket$inet(0x2, 0x2, 0x6) r0 = syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r2], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000240), 0x0, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000700)={0xc7, 0x0, 0x1}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="ca3cb94dcca944f2b80354b07264622649f4d088544ebf9265ee54b6e7b74e86e3dfd1eed6d298f179c110b19c42515d43a754a8343b08a1138b5070a61d5e290a605cb4a469ddd459", @ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/91, 0x5b}], 0x2}, 0x40010021) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0385720, &(0x7f00000002c0)) r9 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000300)) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) lseek(0xffffffffffffffff, 0x10001, 0x0) 1.198355462s ago: executing program 3 (id=1087): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x74bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xb, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x91, 0x9, 0xfffffffe, 0x18, 0xb, 0x5, 0x2, 0x2000009, {0x4, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000100)=@generic={0x82}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x7f}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c00000000001010400000000000007000a0000003c0001802c00018014000300000000000100000000000000000000001400040000000000000000000000000005000100000000003c0002802c00018014010000008000000000000000000000000000aa14000400fe8000000000000000000040000000aa0c000280050001000000000008000740000004002c000680140004002001000000000000000000000000000114000500200100"/192], 0xc0}}, 0x0) 558.908734ms ago: executing program 4 (id=1088): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xa, [@empty, @rand_addr=0x64010101, @broadcast, @remote, @remote]}]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40440c5}, 0x0) (async) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') open_by_handle_at(r4, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xffffff7a, 0x4}}, 0x4202) 130.958955ms ago: executing program 4 (id=1089): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x18) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) 130.679316ms ago: executing program 3 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100003050000000000000000fa000000", @ANYRES32=0x0, @ANYBLOB="9b15010000000000240012800e00010069703665727370616e00000010000280040012000800140000020000"], 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100003050000000000000000fa000000", @ANYRES32=0x0, @ANYBLOB="9b15010000000000240012800e00010069703665727370616e00000010000280040012000800140000020000"], 0x44}}, 0x0) 130.159923ms ago: executing program 2 (id=1091): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f80)=@newlink={0x40, 0x10, 0x439, 0x1000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001000}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 67.110725ms ago: executing program 3 (id=1092): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f36, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x4c00000000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7d}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c88d5fe9aae88428cc510f831fd34f94"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bfefadc1a4e766e1ee782de26d3cb472"}, @IFLA_PORT_VF={0x8, 0x1, 0x44a}]}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 66.73369ms ago: executing program 0 (id=1093): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x100000000000000) 360.6µs ago: executing program 0 (id=1094): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) pipe(&(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 2 (id=1095): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x40c01, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x4, 0x105, 0x2, 0x10000401, 0x2000001, 0x5, 0x7ffffffe, 0x5c952398, 0x2, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x80000000, 0x8, 0x48f3, 0xff, 0x80000089, 0x2, 0x13ffffe, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {0x0, 0x4000}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x5, 0x4) kernel console output (not intermixed with test programs): T829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.393473][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.396717][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.517999][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 77.522290][ T9] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 77.527862][ T829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.531717][ T829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.535784][ T829] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.538816][ T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.541668][ T829] usb 5-1: SerialNumber: syz [ 77.543411][ T9] usb 6-1: string descriptor 0 read error: -22 [ 77.545440][ T9] usb 6-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice= 2.35 [ 77.549376][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.569546][ T59] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.740522][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 77.743873][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.748432][ T59] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 77.752182][ T59] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 77.755578][ T59] usb 7-1: Manufacturer: syz [ 77.757562][ T59] usb 7-1: SerialNumber: syz [ 77.773675][ T829] usb 5-1: 0:2 : does not exist [ 77.775594][ T829] usb 5-1: unit 5: unexpected type 0x09 [ 77.787155][ T5997] usb 6-1: USB disconnect, device number 3 [ 77.801861][ T829] usb 5-1: USB disconnect, device number 2 [ 77.827351][ T6451] udevd[6451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.985908][ T59] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 77.992268][ T59] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 77.997141][ T59] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 78.000551][ T59] usb 7-1: media controller created [ 78.012364][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.027970][ T59] zl10353_read_register: readreg error (reg=127, ret==0) [ 78.053105][ T59] usb 7-1: USB disconnect, device number 6 [ 78.474366][ T6453] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.623721][ T6462] wireguard: wg2: Could not create IPv4 socket [ 79.374636][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 79.374647][ T40] audit: type=1400 audit(1772374442.084:263): avc: denied { connect } for pid=6472 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.383422][ T40] audit: type=1400 audit(1772374442.093:264): avc: denied { bind } for pid=6472 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.390544][ T40] audit: type=1400 audit(1772374442.093:265): avc: denied { read } for pid=6472 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.433912][ T40] audit: type=1400 audit(1772374442.149:266): avc: denied { write } for pid=6472 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.494559][ T40] audit: type=1400 audit(1772374442.206:267): avc: denied { read } for pid=6476 comm="syz.1.156" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.508506][ T40] audit: type=1400 audit(1772374442.206:268): avc: denied { open } for pid=6476 comm="syz.1.156" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.584209][ T40] audit: type=1400 audit(1772374442.290:269): avc: denied { setopt } for pid=6478 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.590812][ T40] audit: type=1400 audit(1772374442.290:270): avc: denied { write } for pid=6478 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.984180][ T40] audit: type=1400 audit(1772374443.599:271): avc: denied { write } for pid=6495 comm="syz.0.163" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.631969][ T39] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 81.668964][ T40] audit: type=1400 audit(1772374444.235:272): avc: denied { sys_module } for pid=6499 comm="syz.3.164" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.223081][ T39] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 82.240337][ T39] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 82.247602][ T39] usb 5-1: string descriptor 0 read error: -22 [ 82.250439][ T39] usb 5-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice= 2.35 [ 82.254839][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.166404][ T59] usb 5-1: USB disconnect, device number 3 [ 84.812223][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 84.812234][ T40] audit: type=1400 audit(1772374447.182:278): avc: denied { name_bind } for pid=6542 comm="syz.3.178" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.822508][ T40] audit: type=1400 audit(1772374447.182:279): avc: denied { node_bind } for pid=6542 comm="syz.3.178" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.063587][ T6551] tipc: Started in network mode [ 85.065887][ T6551] tipc: Node identity 7657e867ff0e, cluster identity 4711 [ 85.069196][ T6551] tipc: Enabled bearer , priority 0 [ 85.074430][ T6551] syzkaller0: entered promiscuous mode [ 85.076323][ T6551] syzkaller0: entered allmulticast mode [ 85.087435][ T6551] tipc: Resetting bearer [ 85.090964][ T6550] tipc: Resetting bearer [ 85.098046][ T6550] tipc: Disabling bearer [ 85.480540][ T5997] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.548930][ T40] audit: type=1400 audit(1772374447.865:280): avc: denied { write } for pid=6555 comm="syz.2.184" name="wireless" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.550764][ T6558] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.640886][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 85.647510][ T5997] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 85.651415][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.654826][ T5997] usb 5-1: Product: syz [ 85.656814][ T5997] usb 5-1: Manufacturer: syz [ 85.658956][ T5997] usb 5-1: SerialNumber: syz [ 85.664013][ T5997] usb 5-1: config 0 descriptor?? [ 85.670431][ T5997] gspca_main: se401-2.14.0 probing 047d:5003 [ 85.875858][ T6560] kernel profiling enabled (shift: 1) [ 86.112842][ T5997] gspca_se401: ExtraFeatures: 10 [ 86.115208][ T5997] gspca_se401: Too many frame sizes [ 86.497154][ T59] usb 5-1: USB disconnect, device number 4 [ 87.252148][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 87.258557][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 87.618656][ T34] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 87.629828][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 87.665431][ T40] audit: type=1400 audit(1772374449.848:281): avc: denied { create } for pid=6593 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.675351][ T40] audit: type=1400 audit(1772374449.857:282): avc: denied { ioctl } for pid=6593 comm="syz.1.197" path="socket:[10218]" dev="sockfs" ino=10218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.687627][ T40] audit: type=1400 audit(1772374449.857:283): avc: denied { setopt } for pid=6593 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.801165][ T34] usb 8-1: not running at top speed; connect to a high speed hub [ 87.804699][ T34] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 87.808227][ T34] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 87.813911][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 87.818101][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.821789][ T34] usb 8-1: Product: syz [ 87.823816][ T34] usb 8-1: Manufacturer: syz [ 87.826057][ T34] usb 8-1: SerialNumber: syz [ 88.080304][ T34] usb 8-1: USB disconnect, device number 4 [ 88.111139][ T40] audit: type=1400 audit(1772374450.269:284): avc: denied { create } for pid=6607 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.402861][ T2322] cfg80211: failed to load regulatory.db [ 89.628530][ T40] audit: type=1400 audit(1772374451.681:285): avc: denied { create } for pid=6626 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.637178][ T40] audit: type=1400 audit(1772374451.691:286): avc: denied { write } for pid=6626 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.963520][ T40] audit: type=1400 audit(1772374451.971:287): avc: denied { ioctl } for pid=6636 comm="syz.0.211" path="socket:[13590]" dev="sockfs" ino=13590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.993701][ T6640] tipc: Enabled bearer , priority 0 [ 89.996829][ T6640] syzkaller0: entered promiscuous mode [ 89.998893][ T6640] syzkaller0: entered allmulticast mode [ 90.015039][ T6640] tipc: Resetting bearer [ 90.024475][ T6639] tipc: Resetting bearer [ 90.032303][ T6639] tipc: Disabling bearer [ 90.764596][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 90.764612][ T40] audit: type=1400 audit(1772374452.748:289): avc: denied { write } for pid=6657 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.803332][ T6660] syzkaller0: entered promiscuous mode [ 90.805503][ T6660] syzkaller0: entered allmulticast mode [ 90.816473][ T6660] 0: reclassify loop, rule prio 0, protocol 800 [ 90.830354][ T40] audit: type=1400 audit(1772374452.794:290): avc: denied { write } for pid=6658 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.253428][ T40] audit: type=1400 audit(1772374453.094:291): avc: denied { ioctl } for pid=6671 comm="syz.3.226" path="socket:[13718]" dev="sockfs" ino=13718 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.075157][ T6683] Set syz1 is full, maxelem 6117 reached [ 92.096822][ T6686] kvm: kvm [6684]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x81 [ 92.117718][ T40] audit: type=1400 audit(1772374454.010:292): avc: denied { listen } for pid=6690 comm="syz.2.232" lport=52630 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.127991][ T40] audit: type=1400 audit(1772374454.010:293): avc: denied { accept } for pid=6690 comm="syz.2.232" lport=52630 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.176186][ T6695] syzkaller0: entered promiscuous mode [ 92.178433][ T6695] syzkaller0: entered allmulticast mode [ 93.635882][ T40] audit: type=1400 audit(1772374455.432:294): avc: denied { getopt } for pid=6711 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.962943][ T6731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.003426][ T40] audit: type=1400 audit(1772374455.778:295): avc: denied { read } for pid=6735 comm="syz.1.248" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.022354][ T40] audit: type=1400 audit(1772374455.778:296): avc: denied { open } for pid=6735 comm="syz.1.248" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.029817][ T40] audit: type=1400 audit(1772374455.778:297): avc: denied { ioctl } for pid=6735 comm="syz.1.248" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.045636][ T40] audit: type=1400 audit(1772374455.797:298): avc: denied { create } for pid=6737 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.073577][ T6740] syzkaller0: entered promiscuous mode [ 94.075480][ T6740] syzkaller0: entered allmulticast mode [ 95.142220][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.203192][ T34] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 95.241893][ T6768] fido_id[6768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.957556][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 96.147839][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.151367][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 96.154135][ T39] usb 6-1: SerialNumber: syz [ 96.380215][ T39] usb 6-1: bad CDC descriptors [ 96.389463][ T39] usb 6-1: USB disconnect, device number 4 [ 96.818792][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 96.818803][ T40] audit: type=1400 audit(1772374458.407:307): avc: denied { create } for pid=6808 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.872235][ T40] audit: type=1400 audit(1772374458.453:308): avc: denied { read } for pid=6808 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.151671][ T6817] syzkaller0: entered promiscuous mode [ 97.154150][ T6817] syzkaller0: entered allmulticast mode [ 97.810636][ T40] audit: type=1400 audit(1772374459.342:309): avc: denied { read write } for pid=5929 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.822811][ T40] audit: type=1400 audit(1772374459.342:310): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.834696][ T40] audit: type=1400 audit(1772374459.342:311): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.876531][ T6849] syzkaller0: entered promiscuous mode [ 98.879021][ T6849] syzkaller0: entered allmulticast mode [ 99.753994][ T2322] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.929123][ T2322] usb 5-1: Using ep0 maxpacket: 8 [ 99.945008][ T2322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.952058][ T2322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.962944][ T2322] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 99.970136][ T2322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.973704][ T2322] usb 5-1: Product: syz [ 99.975647][ T2322] usb 5-1: Manufacturer: syz [ 99.977846][ T2322] usb 5-1: SerialNumber: syz [ 100.032329][ T6814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.207717][ T40] audit: type=1400 audit(1772374461.578:312): avc: denied { allowed } for pid=6869 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.222668][ T2322] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.226317][ T2322] usb 5-1: MIDIStreaming interface descriptor not found [ 100.296287][ T2322] usb 5-1: USB disconnect, device number 5 [ 100.347594][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.661362][ T5997] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 101.548618][ T1340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.712127][ T1340] usb 5-1: config 143 has an invalid interface number: 126 but max is 0 [ 101.715606][ T1340] usb 5-1: config 143 has no interface number 0 [ 101.718269][ T1340] usb 5-1: config 143 interface 126 has no altsetting 0 [ 101.723534][ T1340] usb 5-1: New USB device found, idVendor=187f, idProduct=0500, bcdDevice=10.b8 [ 101.726583][ T1340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.729207][ T1340] usb 5-1: Product: syz [ 101.730732][ T1340] usb 5-1: Manufacturer: syz [ 101.732297][ T1340] usb 5-1: SerialNumber: syz [ 101.777312][ T5997] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 101.780758][ T5997] usb 7-1: config 0 has no interface number 0 [ 101.783479][ T5997] usb 7-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 101.788467][ T5997] usb 7-1: config 0 interface 87 altsetting 28 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.792686][ T5997] usb 7-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 101.798255][ T5997] usb 7-1: config 0 interface 87 has no altsetting 0 [ 101.808855][ T5997] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 101.812334][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.814962][ T5997] usb 7-1: Product: syz [ 101.912798][ T6895] tipc: Started in network mode [ 101.914844][ T6895] tipc: Node identity 12211f2192aa, cluster identity 4711 [ 101.917261][ T6895] tipc: Enabled bearer , priority 0 [ 101.920035][ T6895] syzkaller0: entered promiscuous mode [ 101.921830][ T6895] syzkaller0: entered allmulticast mode [ 101.932124][ T6895] tipc: Resetting bearer [ 101.936081][ T6894] tipc: Resetting bearer [ 101.942356][ T6894] tipc: Disabling bearer [ 101.960163][ T1340] smsusb:smsusb_probe: board id=17, interface number 126 [ 101.965177][ T1340] usb 5-1: USB disconnect, device number 6 [ 102.540959][ T6901] binder: BC_ACQUIRE_RESULT not supported [ 102.544263][ T6901] binder: 6900:6901 ioctl c0306201 200000000900 returned -22 [ 102.683634][ T6905] Set syz0 is full, maxelem 0 reached [ 102.832689][ T5997] usb 7-1: Manufacturer: syz [ 102.834281][ T5997] usb 7-1: SerialNumber: syz [ 102.839472][ T5997] usb 7-1: config 0 descriptor?? [ 102.853545][ T5997] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.064991][ T6800] usb 7-1: USB disconnect, device number 7 [ 103.067572][ T6838] usb 7-1: Failed to submit usb control message: -71 [ 103.071302][ T6838] usb 7-1: unable to send the bmi data to the device: -71 [ 103.077288][ T6838] usb 7-1: unable to get target info from device [ 103.080687][ T6838] usb 7-1: could not get target info (-71) [ 103.082900][ T6838] usb 7-1: could not probe fw (-71) [ 103.663430][ T6922] tipc: Started in network mode [ 103.665337][ T6922] tipc: Node identity 569208e33af3, cluster identity 4711 [ 103.668827][ T6922] tipc: Enabled bearer , priority 0 [ 103.675066][ T6922] syzkaller0: entered promiscuous mode [ 103.679152][ T6922] syzkaller0: entered allmulticast mode [ 103.692071][ T6922] tipc: Resetting bearer [ 103.701650][ T6921] tipc: Resetting bearer [ 103.713162][ T6921] tipc: Disabling bearer [ 103.770156][ T40] audit: type=1400 audit(1772374464.908:313): avc: denied { read } for pid=6923 comm="syz.3.310" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.790225][ T40] audit: type=1400 audit(1772374464.908:314): avc: denied { open } for pid=6923 comm="syz.3.310" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.798267][ T40] audit: type=1400 audit(1772374464.917:315): avc: denied { ioctl } for pid=6923 comm="syz.3.310" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.809073][ T40] audit: type=1400 audit(1772374464.926:316): avc: denied { read write } for pid=6925 comm="syz.0.308" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.818476][ T40] audit: type=1400 audit(1772374464.926:317): avc: denied { open } for pid=6925 comm="syz.0.308" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.830282][ T40] audit: type=1400 audit(1772374464.926:318): avc: denied { ioctl } for pid=6925 comm="syz.0.308" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.839635][ T40] audit: type=1400 audit(1772374464.954:319): avc: denied { block_suspend } for pid=6923 comm="syz.3.310" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.346579][ T40] audit: type=1400 audit(1772374465.450:320): avc: denied { sqpoll } for pid=6931 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.589790][ T40] audit: type=1400 audit(1772374465.675:321): avc: denied { setopt } for pid=6934 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.007816][ T40] audit: type=1400 audit(1772374466.068:322): avc: denied { bind } for pid=6947 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.251126][ T6954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.125718][ T6960] tipc: Enabled bearer , priority 0 [ 106.129340][ T6960] syzkaller0: entered promiscuous mode [ 106.131842][ T6960] syzkaller0: entered allmulticast mode [ 106.140016][ T6960] tipc: Resetting bearer [ 106.144370][ T6959] tipc: Resetting bearer [ 106.154899][ T6959] tipc: Disabling bearer [ 106.298248][ T6962] netlink: 496 bytes leftover after parsing attributes in process `syz.2.320'. [ 106.413866][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 106.417886][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 106.584051][ T6966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.590595][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.470315][ T6991] tipc: Started in network mode [ 107.476252][ T6991] tipc: Node identity 5244810b505d, cluster identity 4711 [ 107.483251][ T6991] tipc: Enabled bearer , priority 0 [ 107.490516][ T6991] syzkaller0: entered promiscuous mode [ 107.500164][ T6991] syzkaller0: entered allmulticast mode [ 107.511105][ T6991] tipc: Resetting bearer [ 107.517254][ T6989] tipc: Resetting bearer [ 107.526395][ T6989] tipc: Disabling bearer [ 107.857152][ T7001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7001 comm=syz.3.333 [ 108.205421][ T7008] netlink: 136 bytes leftover after parsing attributes in process `syz.0.337'. [ 108.288503][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 108.385738][ T7013] tipc: Enabled bearer , priority 0 [ 108.388477][ T7013] syzkaller0: entered promiscuous mode [ 108.390338][ T7013] syzkaller0: entered allmulticast mode [ 108.395124][ T7013] tipc: Resetting bearer [ 108.418222][ T7012] tipc: Resetting bearer [ 108.435114][ T7012] tipc: Disabling bearer [ 108.850349][ T5997] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 109.039270][ T5997] usb 8-1: unable to get BOS descriptor or descriptor too short [ 109.048391][ T5997] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 109.051754][ T5997] usb 8-1: can't read configurations, error -71 [ 109.686011][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 109.706115][ T7045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.764405][ T7049] syzkaller0: entered promiscuous mode [ 109.766915][ T7049] syzkaller0: entered allmulticast mode [ 110.769807][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 110.769824][ T40] audit: type=1400 audit(1772374471.456:339): avc: denied { read } for pid=7056 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.817256][ T5983] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.860039][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 110.922833][ T40] audit: type=1400 audit(1772374471.596:340): avc: denied { read } for pid=7069 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.999319][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 111.002779][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.006095][ T5983] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 111.009118][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.018298][ T5983] usb 5-1: config 0 descriptor?? [ 111.025929][ T5983] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 111.032590][ T34] usb 6-1: config 2 has an invalid interface number: 147 but max is 2 [ 111.035482][ T34] usb 6-1: config 2 has an invalid interface number: 184 but max is 2 [ 111.038305][ T34] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 111.041769][ T34] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 111.044861][ T34] usb 6-1: config 2 has no interface number 0 [ 111.046894][ T34] usb 6-1: config 2 has no interface number 1 [ 111.049016][ T34] usb 6-1: config 2 interface 184 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 111.052646][ T34] usb 6-1: config 2 interface 147 has no altsetting 0 [ 111.054976][ T34] usb 6-1: config 2 interface 184 has no altsetting 0 [ 111.059181][ T34] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 111.062145][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.065442][ T34] usb 6-1: Product: syz [ 111.066895][ T34] usb 6-1: Manufacturer: syz [ 111.068470][ T34] usb 6-1: SerialNumber: syz [ 111.095386][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 111.287704][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 111.295353][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.329528][ T50] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.355278][ T50] usb 7-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 111.359309][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.362128][ T50] usb 7-1: Product: syz [ 111.366202][ T50] usb 7-1: Manufacturer: syz [ 111.368414][ T50] usb 7-1: SerialNumber: syz [ 111.373554][ T34] usb 6-1: USB disconnect, device number 5 [ 111.388720][ T50] usb 7-1: config 0 descriptor?? [ 111.463833][ T5983] gspca_vc032x: reg_w err -71 [ 111.465628][ T5983] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 111.470415][ T5983] usb 5-1: USB disconnect, device number 7 [ 112.187027][ T7089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7089 comm=syz.0.364 [ 112.829132][ T7107] tipc: Enabled bearer , priority 0 [ 112.832951][ T7107] syzkaller0: entered promiscuous mode [ 112.835536][ T7107] syzkaller0: entered allmulticast mode [ 112.844238][ T7107] tipc: Resetting bearer [ 112.847685][ T7106] tipc: Resetting bearer [ 112.865448][ T7106] tipc: Disabling bearer [ 113.812316][ T9] usb 7-1: USB disconnect, device number 8 [ 114.057575][ T40] audit: type=1400 audit(1772374474.524:341): avc: denied { accept } for pid=7120 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.006241][ T40] audit: type=1400 audit(1772374475.422:342): avc: denied { write } for pid=7127 comm="syz.2.378" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.023214][ T40] audit: type=1400 audit(1772374475.440:343): avc: denied { append } for pid=7127 comm="syz.2.378" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.031874][ T7135] netlink: 92 bytes leftover after parsing attributes in process `syz.2.378'. [ 115.036054][ T7135] netlink: 92 bytes leftover after parsing attributes in process `syz.2.378'. [ 115.043170][ T7135] No such timeout policy "syz1" [ 115.873827][ T7151] syzkaller0: entered promiscuous mode [ 115.876749][ T7151] syzkaller0: entered allmulticast mode [ 116.077447][ T5997] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.258857][ T5997] usb 6-1: Using ep0 maxpacket: 16 [ 116.263120][ T5997] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.267763][ T5997] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.277326][ T5997] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10 [ 116.284424][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.288311][ T5997] usb 6-1: Product: syz [ 116.290296][ T5997] usb 6-1: Manufacturer: syz [ 116.295753][ T5997] usb 6-1: SerialNumber: syz [ 116.308383][ T5997] usb 6-1: config 0 descriptor?? [ 116.527748][ T5997] usb 6-1: USB disconnect, device number 6 [ 116.856286][ T7175] binder: 7168:7175 ioctl c0306201 2000000003c0 returned -14 [ 117.138341][ T7182] tipc: Enabled bearer , priority 0 [ 117.142022][ T7182] syzkaller0: entered promiscuous mode [ 117.144477][ T7182] syzkaller0: entered allmulticast mode [ 117.153768][ T7182] tipc: Resetting bearer [ 117.157481][ T7181] tipc: Resetting bearer [ 117.166081][ T7181] tipc: Disabling bearer [ 117.317195][ T5997] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 117.462875][ T40] audit: type=1400 audit(1772374477.713:344): avc: denied { mount } for pid=7185 comm="syz.1.398" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 117.500520][ T5997] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.505074][ T5997] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.511124][ T5997] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.515191][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.749816][ T5997] usb 5-1: usb_control_msg returned -32 [ 117.751754][ T5997] usbtmc 5-1:16.0: can't read capabilities [ 118.030158][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.401'. [ 118.283933][ T40] audit: type=1400 audit(1772374478.490:345): avc: denied { audit_write } for pid=7198 comm="syz.1.402" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.291980][ T40] audit: type=1400 audit(1772374478.490:346): avc: denied { watch watch_reads } for pid=7198 comm="syz.1.402" path="/proc/284/net" dev="proc" ino=16792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.509501][ T7203] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 118.512473][ T7203] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 118.515786][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 118.555664][ T40] audit: type=1400 audit(1772374478.733:347): avc: denied { read } for pid=7204 comm="syz.2.405" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.568037][ T40] audit: type=1400 audit(1772374478.733:348): avc: denied { open } for pid=7204 comm="syz.2.405" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.589381][ T1340] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 118.749692][ T1340] usb 6-1: Using ep0 maxpacket: 8 [ 118.752635][ T1340] usb 6-1: config 0 has an invalid interface number: 28 but max is 1 [ 118.755160][ T1340] usb 6-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 118.758182][ T1340] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.761152][ T1340] usb 6-1: config 0 has no interface number 0 [ 118.762952][ T1340] usb 6-1: config 0 interface 28 has no altsetting 0 [ 118.767255][ T1340] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 118.770419][ T1340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.773057][ T1340] usb 6-1: Product: syz [ 118.774368][ T1340] usb 6-1: Manufacturer: syz [ 118.776009][ T1340] usb 6-1: SerialNumber: syz [ 118.778939][ T1340] usb 6-1: config 0 descriptor?? [ 118.835363][ T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 119.000010][ T1340] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 119.002532][ T1340] usb 6-1: selecting invalid altsetting 0 [ 119.006254][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 119.009470][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.012423][ T2491] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 119.012796][ T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.016283][ T1340] usb 6-1: USB disconnect, device number 7 [ 119.020842][ T50] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.021006][ T2491] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 119.021039][ T40] audit: type=1400 audit(1772374479.182:349): avc: denied { firmware_load } for pid=2491 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.023980][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.037551][ T50] usb 7-1: Product: syz [ 119.039292][ T50] usb 7-1: Manufacturer: syz [ 119.040830][ T50] usb 7-1: SerialNumber: syz [ 119.260594][ T50] usb 7-1: 0:2 : does not exist [ 119.265785][ T50] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 119.288920][ T50] usb 7-1: USB disconnect, device number 9 [ 119.305393][ T6451] udevd[6451]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.661101][ T7214] 0: reclassify loop, rule prio 0, protocol 700 [ 119.755828][ T40] audit: type=1400 audit(1772374479.865:350): avc: denied { bind } for pid=7211 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.768402][ T40] audit: type=1400 audit(1772374479.865:351): avc: denied { setopt } for pid=7211 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.927322][ T40] audit: type=1400 audit(1772374480.024:352): avc: denied { map_create } for pid=7217 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.933829][ T40] audit: type=1400 audit(1772374480.024:353): avc: denied { map_read map_write } for pid=7217 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.938642][ T7220] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 119.965696][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.991615][ T7220] vlan2: entered allmulticast mode [ 119.993274][ T7220] veth0_to_bond: entered allmulticast mode [ 119.998432][ T7220] bond2: (slave vlan2): making interface the new active one [ 120.002497][ T7220] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 120.234614][ T39] usb 5-1: USB disconnect, device number 8 [ 120.308727][ T7229] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 121.064864][ T5931] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.071157][ T7246] xt_policy: neither incoming nor outgoing policy selected [ 121.230221][ T5931] usb 8-1: Using ep0 maxpacket: 32 [ 121.234468][ T5931] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 121.237696][ T5931] usb 8-1: config 0 has no interface number 0 [ 121.240115][ T5931] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 121.244947][ T5931] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 121.251444][ T5931] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 121.254434][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.257791][ T5931] usb 8-1: Product: syz [ 121.259185][ T5931] usb 8-1: Manufacturer: syz [ 121.260775][ T5931] usb 8-1: SerialNumber: syz [ 121.264097][ T5931] usb 8-1: config 0 descriptor?? [ 121.696911][ T5931] radio-si470x 8-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 121.699299][ T5931] radio-si470x 8-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 121.912106][ T5931] radio-si470x 8-1:0.35: software version 146, hardware version 66 [ 121.914977][ T5931] radio-si470x 8-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 122.128075][ T5931] radio-si470x 8-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 122.131997][ T5931] radio-si470x 8-1:0.35: submitting int urb failed (-90) [ 122.135595][ T5931] radio-si470x 8-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 122.139525][ T5931] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -22 [ 122.171048][ T5931] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 122.178726][ T5931] usb 8-1: USB disconnect, device number 7 [ 122.256282][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 122.418310][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.422182][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.425292][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 122.438848][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.446856][ T9] usb 7-1: config 0 descriptor?? [ 122.848319][ T7276] team_slave_0: entered promiscuous mode [ 122.850639][ T7276] team_slave_1: entered promiscuous mode [ 122.853979][ T7276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.866185][ T7276] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 122.870914][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 122.871087][ T40] audit: type=1400 audit(1772374482.774:360): avc: denied { accept } for pid=7274 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.149731][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 123.152528][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 123.169694][ T9] usb 7-1: USB disconnect, device number 10 [ 123.408485][ T7292] syz.3.432 (7292): /proc/7290/oom_adj is deprecated, please use /proc/7290/oom_score_adj instead. [ 124.248904][ T40] audit: type=1400 audit(1772374484.065:361): avc: denied { read } for pid=7297 comm="syz.2.436" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.259462][ T40] audit: type=1400 audit(1772374484.065:362): avc: denied { open } for pid=7297 comm="syz.2.436" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.268769][ T40] audit: type=1400 audit(1772374484.074:363): avc: denied { ioctl } for pid=7297 comm="syz.2.436" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.493780][ T7312] netlink: 'syz.3.439': attribute type 29 has an invalid length. [ 124.498082][ T7307] netlink: 'syz.3.439': attribute type 29 has an invalid length. [ 124.507059][ T7307] netlink: 'syz.3.439': attribute type 29 has an invalid length. [ 124.518028][ T7307] netlink: 'syz.3.439': attribute type 29 has an invalid length. [ 124.553221][ T40] audit: type=1400 audit(1772374484.345:364): avc: denied { write } for pid=7313 comm="syz.2.442" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.819008][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 127.189687][ T7366] tipc: Enabled bearer , priority 0 [ 127.198677][ T7366] syzkaller0: entered promiscuous mode [ 127.200532][ T7366] syzkaller0: entered allmulticast mode [ 127.209994][ T7365] tipc: Resetting bearer [ 127.216729][ T7365] tipc: Disabling bearer [ 127.491418][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 127.674366][ T7376] syzkaller0: entered promiscuous mode [ 127.677196][ T7376] syzkaller0: entered allmulticast mode [ 128.313035][ T7389] tipc: Enabled bearer , priority 0 [ 128.316686][ T7389] syzkaller0: entered promiscuous mode [ 128.320116][ T7389] syzkaller0: entered allmulticast mode [ 128.334467][ T7388] tipc: Resetting bearer [ 128.344986][ T7388] tipc: Disabling bearer [ 128.908450][ T7397] syzkaller0: entered promiscuous mode [ 128.910939][ T7397] syzkaller0: entered allmulticast mode [ 129.177877][ T7401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.469435][ T7411] netlink: 136 bytes leftover after parsing attributes in process `syz.2.477'. [ 129.512224][ T40] audit: type=1400 audit(1772374488.985:365): avc: denied { name_bind } for pid=7412 comm="syz.2.478" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 129.555523][ T7416] syzkaller0: entered promiscuous mode [ 129.557431][ T7416] syzkaller0: entered allmulticast mode [ 129.800346][ T7419] syzkaller0: entered promiscuous mode [ 129.802889][ T7419] syzkaller0: entered allmulticast mode [ 130.032039][ T40] audit: type=1400 audit(1772374489.481:366): avc: denied { setopt } for pid=7420 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.370578][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 130.498689][ T5934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.498849][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.530778][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 130.535240][ T59] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 130.538782][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.544579][ T59] usb 7-1: config 0 has no interface number 0 [ 130.547446][ T59] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.555686][ T59] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 130.559136][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.561931][ T59] usb 7-1: Product: syz [ 130.564062][ T59] usb 7-1: Manufacturer: syz [ 130.566312][ T59] usb 7-1: SerialNumber: syz [ 130.575135][ T59] usb 7-1: config 0 descriptor?? [ 130.583486][ T59] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 130.587178][ T59] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 130.804114][ T7436] syzkaller0: entered promiscuous mode [ 130.806505][ T59] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 130.808797][ T7436] syzkaller0: entered allmulticast mode [ 130.809454][ T59] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 130.814996][ T59] usb 7-1: USB disconnect, device number 11 [ 132.020652][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 132.668902][ T59] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 132.709831][ T7478] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.713771][ T7478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.716777][ T7478] IPv6: NLM_F_CREATE should be set when creating new route [ 132.722522][ T7478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.781843][ T40] audit: type=1400 audit(1772374492.034:367): avc: denied { append } for pid=7479 comm="syz.0.501" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.829234][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 132.833884][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.840452][ T59] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 132.843773][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.853271][ T59] usb 7-1: config 0 descriptor?? [ 132.864420][ T59] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 132.963846][ T40] audit: type=1400 audit(1772374492.221:368): avc: denied { create } for pid=7484 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.076305][ T829] usb 7-1: USB disconnect, device number 12 [ 133.716192][ T40] audit: type=1400 audit(1772374492.914:369): avc: denied { listen } for pid=7494 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.219025][ T6800] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 134.381352][ T6800] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.384649][ T6800] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.388558][ T6800] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 134.392670][ T6800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.395845][ T6800] usb 7-1: Product: syz [ 134.397588][ T6800] usb 7-1: Manufacturer: syz [ 134.399505][ T6800] usb 7-1: SerialNumber: syz [ 134.417336][ T6800] usb 7-1: config 0 descriptor?? [ 134.422237][ T6800] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 134.432563][ T6800] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.436264][ T6800] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 134.439335][ T6800] usb 7-1: media controller created [ 134.446624][ T6800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.490969][ T6800] DVB: Unable to find symbol tda10046_attach() [ 134.493723][ T6800] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 134.498216][ T6800] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 135.282114][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.287896][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.724911][ T6800] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 135.747145][ T6800] usb 7-1: USB disconnect, device number 13 [ 135.852483][ T40] audit: type=1400 audit(1772374494.915:370): avc: denied { setopt } for pid=7541 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.395691][ T7563] syzkaller0: entered promiscuous mode [ 137.399206][ T7563] syzkaller0: entered allmulticast mode [ 137.581685][ T40] audit: type=1326 audit(1772374496.534:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.530" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f254a79c799 code=0x0 [ 137.805955][ T40] audit: type=1400 audit(1772374496.711:372): avc: denied { bind } for pid=7576 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.821766][ T40] audit: type=1400 audit(1772374496.711:373): avc: denied { setopt } for pid=7576 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.827903][ T40] audit: type=1400 audit(1772374496.711:374): avc: denied { write } for pid=7576 comm="syz.1.533" path="socket:[16308]" dev="sockfs" ino=16308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.288577][ T7591] syzkaller0: entered promiscuous mode [ 138.291036][ T7591] syzkaller0: entered allmulticast mode [ 138.399435][ T7593] loop3: detected capacity change from 0 to 7 [ 138.405583][ T6451] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 138.408963][ T6451] loop3: p1 size 65536 extends beyond EOD, truncated [ 138.423460][ T6451] loop3: p2 start 536870912 is beyond EOD, truncated [ 138.425772][ T6451] loop3: p3 start 2381774848 is beyond EOD, truncated [ 138.428154][ T6451] loop3: p4 start 1819928992 is beyond EOD, truncated [ 138.430482][ T6451] loop3: p5 start 3786024473 is beyond EOD, truncated [ 138.433542][ T6451] loop3: p6 start 397769806 is beyond EOD, truncated [ 138.444194][ T7593] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 138.447021][ T7593] loop3: p1 size 65536 extends beyond EOD, truncated [ 138.451602][ T7593] loop3: p2 start 536870912 is beyond EOD, truncated [ 138.455303][ T7593] loop3: p3 start 2381774848 is beyond EOD, truncated [ 138.458389][ T7593] loop3: p4 start 1819928992 is beyond EOD, truncated [ 138.461318][ T7593] loop3: p5 start 3786024473 is beyond EOD, truncated [ 138.464994][ T7593] loop3: p6 start 397769806 is beyond EOD, truncated [ 138.505730][ T6451] udevd[6451]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 138.521898][ T6451] udevd[6451]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 138.636838][ T40] audit: type=1400 audit(1772374497.525:375): avc: denied { create } for pid=7607 comm="syz.3.547" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.652551][ T40] audit: type=1400 audit(1772374497.534:376): avc: denied { mounton } for pid=7607 comm="syz.3.547" path="/147/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.671145][ T40] audit: type=1400 audit(1772374497.534:377): avc: denied { watch } for pid=7607 comm="syz.3.547" path="/147/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 138.729462][ T40] audit: type=1400 audit(1772374497.609:378): avc: denied { write } for pid=7596 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.745273][ T40] audit: type=1400 audit(1772374497.628:379): avc: denied { unlink } for pid=5928 comm="syz-executor" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.814689][ T7612] syzkaller0: entered promiscuous mode [ 138.818820][ T7612] syzkaller0: entered allmulticast mode [ 138.856204][ T7614] syzkaller0: entered promiscuous mode [ 138.858766][ T7614] syzkaller0: entered allmulticast mode [ 139.006016][ T7618] bridge1: entered promiscuous mode [ 139.012322][ T7618] bridge1: entered allmulticast mode [ 139.020416][ T7618] team0: Port device bridge1 added [ 139.307778][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.334295][ T7625] binder: 7622:7625 ioctl c0306201 2000000003c0 returned -14 [ 139.489409][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 139.500090][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 139.506422][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 139.515084][ T34] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 139.519387][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.540223][ T34] usb 7-1: Product: syz [ 139.541788][ T34] usb 7-1: Manufacturer: syz [ 139.541798][ T34] usb 7-1: SerialNumber: syz [ 139.543378][ T34] usb 7-1: config 0 descriptor?? [ 139.548297][ T7621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.551945][ T7621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.556652][ T34] usb 7-1: ucan: probing device on interface #0 [ 139.569449][ T7629] binder: 7628:7629 ioctl c018620c 200000000080 returned -1 [ 139.790635][ T34] usb 7-1: ucan: could not read protocol version, ret=-71 [ 139.793853][ T34] usb 7-1: ucan: probe failed; try to update the device firmware [ 139.818911][ T34] usb 7-1: USB disconnect, device number 14 [ 140.087660][ T7637] syzkaller0: entered promiscuous mode [ 140.090064][ T7637] syzkaller0: entered allmulticast mode [ 140.374672][ T7646] syzkaller0: entered promiscuous mode [ 140.376594][ T7646] syzkaller0: entered allmulticast mode [ 140.381824][ T7646] TC_ACT_REPEAT abuse ? [ 140.804823][ T7651] fuse: root generation should be zero [ 141.470757][ T7675] syzkaller0: entered promiscuous mode [ 141.473232][ T7675] syzkaller0: entered allmulticast mode [ 141.478111][ T7675] 0: reclassify loop, rule prio 0, protocol 800 [ 141.927354][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 141.973744][ T7693] netlink: 83 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.025058][ T7695] syzkaller0: entered promiscuous mode [ 142.027515][ T7695] syzkaller0: entered allmulticast mode [ 142.101714][ T34] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 142.104694][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.107513][ T34] usb 8-1: Product: syz [ 142.109176][ T34] usb 8-1: Manufacturer: syz [ 142.110810][ T34] usb 8-1: SerialNumber: syz [ 142.114645][ T34] usb 8-1: config 0 descriptor?? [ 142.155186][ T7697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7697 comm=syz.1.579 [ 142.341102][ T6258] usb 8-1: USB disconnect, device number 8 [ 143.074017][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.076926][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.071259][ T7665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.114351][ T40] audit: type=1400 audit(1772374502.651:380): avc: denied { append } for pid=7698 comm="syz.3.581" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.126581][ T7701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.131895][ T7706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7706 comm=syz.0.582 [ 144.180925][ T7711] program syz.0.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.246379][ T7713] syzkaller0: entered promiscuous mode [ 144.249001][ T7713] syzkaller0: entered allmulticast mode [ 145.082662][ T40] audit: type=1400 audit(1772374503.558:381): avc: denied { remove_name } for pid=7728 comm="syz.2.589" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.099563][ T40] audit: type=1400 audit(1772374503.558:382): avc: denied { unlink } for pid=7728 comm="syz.2.589" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.174336][ T40] audit: type=1400 audit(1772374503.633:383): avc: denied { getopt } for pid=7733 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.267065][ T7740] gfs2: error -5 reading superblock [ 145.448921][ T40] audit: type=1400 audit(1772374503.895:384): avc: denied { create } for pid=7743 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.463298][ T40] audit: type=1400 audit(1772374503.905:385): avc: denied { write } for pid=7743 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.512752][ T7747] block nbd0: not configured, cannot reconfigure [ 145.551045][ T7729] sp0: Synchronizing with TNC [ 145.572428][ T40] audit: type=1400 audit(1772374504.007:386): avc: denied { search } for pid=5641 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.586553][ T40] audit: type=1400 audit(1772374504.007:387): avc: denied { search } for pid=5641 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.595227][ T40] audit: type=1400 audit(1772374504.007:388): avc: denied { search } for pid=5641 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.716864][ T7761] syzkaller0: entered promiscuous mode [ 145.719346][ T7761] syzkaller0: entered allmulticast mode [ 145.802337][ T7764] syzkaller0: entered promiscuous mode [ 145.804816][ T7764] syzkaller0: entered allmulticast mode [ 145.905262][ T40] audit: type=1400 audit(1772374504.325:389): avc: denied { setopt } for pid=7767 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.983486][ T7774] capability: warning: `syz.1.601' uses 32-bit capabilities (legacy support in use) [ 146.076518][ T7778] syzkaller0: entered promiscuous mode [ 146.078936][ T7778] syzkaller0: entered allmulticast mode [ 146.109673][ T7785] 9pnet_fd: Insufficient options for proto=fd [ 146.656381][ T7802] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.608'. [ 146.930200][ T6800] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.022608][ T7795] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 147.053751][ T7805] capability: warning: `syz.2.609' uses deprecated v2 capabilities in a way that may be insecure [ 147.063362][ T13] bond2: (slave vlan2): link status definitely down, disabling slave [ 147.080422][ T13] bond2: now running without any active interface! [ 147.112453][ T6800] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 147.115942][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.119041][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.123234][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.126237][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.129264][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.133576][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.136695][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.139644][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.143218][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.148355][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.151310][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.157565][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.162677][ T7814] sp0: Synchronizing with TNC [ 147.165098][ T7810] syzkaller0: entered promiscuous mode [ 147.167062][ T7813] [U] [ 147.169973][ T7810] syzkaller0: entered allmulticast mode [ 147.172830][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.175816][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.184653][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.188535][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.191475][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.195105][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.198419][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.201329][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.205847][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.209076][ T6800] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.212078][ T6800] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17542, setting to 1024 [ 147.215695][ T6800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.221143][ T6800] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.224256][ T6800] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.226935][ T6800] usb 5-1: Product: syz [ 147.228273][ T6800] usb 5-1: Manufacturer: syz [ 147.230739][ T6800] usb 5-1: SerialNumber: syz [ 147.234676][ T6800] usb 5-1: config 0 descriptor?? [ 147.236879][ T7802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.243606][ T6800] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 147.263789][ T7818] netlink: 328 bytes leftover after parsing attributes in process `syz.3.613'. [ 147.293658][ T7824] netlink: get zone limit has 4 unknown bytes [ 147.298204][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 147.416607][ T7837] syzkaller0: entered promiscuous mode [ 147.419004][ T7837] syzkaller0: entered allmulticast mode [ 147.459527][ T39] usb 5-1: USB disconnect, device number 9 [ 147.474497][ T39] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 148.834290][ T7861] syzkaller0: entered promiscuous mode [ 148.836793][ T7861] syzkaller0: entered allmulticast mode [ 148.936279][ T7863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.631'. [ 148.953437][ T7863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.631'. [ 148.976827][ T7865] syzkaller0: entered promiscuous mode [ 148.978662][ T7865] syzkaller0: entered allmulticast mode [ 149.234407][ T7874] sp0: Synchronizing with TNC [ 149.240253][ T7874] sp0: Found TNC [ 149.242437][ T7873] [U] ` [ 149.445102][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 149.494141][ T7881] syzkaller0: entered promiscuous mode [ 149.497048][ T7881] syzkaller0: entered allmulticast mode [ 149.657892][ T7888] syzkaller0: entered promiscuous mode [ 149.660585][ T7888] syzkaller0: entered allmulticast mode [ 150.025876][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 150.097884][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 150.097900][ T40] audit: type=1400 audit(1772374508.245:404): avc: denied { add_name } for pid=7905 comm="syz.3.649" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.114684][ T40] audit: type=1400 audit(1772374508.245:405): avc: denied { create } for pid=7905 comm="syz.3.649" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.122329][ T40] audit: type=1400 audit(1772374508.245:406): avc: denied { associate } for pid=7905 comm="syz.3.649" name="cgroup.kill" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 150.135787][ T40] audit: type=1400 audit(1772374508.245:407): avc: denied { read append open } for pid=7905 comm="syz.3.649" path="/179/file0/cgroup.kill" dev="9p" ino=72614211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.211154][ T7910] syzkaller0: entered promiscuous mode [ 150.213766][ T7910] syzkaller0: entered allmulticast mode [ 150.497642][ T7912] syzkaller0: entered promiscuous mode [ 150.500076][ T7912] syzkaller0: entered allmulticast mode [ 150.563161][ T7914] syzkaller0: entered promiscuous mode [ 150.565249][ T7914] syzkaller0: entered allmulticast mode [ 150.885455][ T40] audit: type=1400 audit(1772374508.974:408): avc: denied { mount } for pid=7915 comm="syz.0.654" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 151.206534][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 151.585188][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 151.588461][ T10] usb 5-1: can't read configurations, error -71 [ 151.623037][ T40] audit: type=1400 audit(1772374509.667:409): avc: denied { connect } for pid=7926 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.645899][ T7927] Mount JFS Failure: -5 [ 151.647551][ T7927] jfs_mount failed w/return code = -5 [ 151.855790][ T7940] syzkaller0: entered promiscuous mode [ 151.858354][ T7940] syzkaller0: entered allmulticast mode [ 152.022018][ T7951] syzkaller0: entered promiscuous mode [ 152.024335][ T7951] syzkaller0: entered allmulticast mode [ 152.703706][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.866505][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 152.881170][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 152.885941][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 152.891128][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.896334][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 152.903775][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 152.911543][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.915112][ T10] usb 5-1: Product: syz [ 152.917152][ T10] usb 5-1: Manufacturer: syz [ 152.919226][ T10] usb 5-1: SerialNumber: syz [ 152.938997][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 152.980030][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input6 [ 153.008731][ T40] audit: type=1400 audit(1772374510.967:410): avc: denied { read } for pid=5324 comm="acpid" name="mouse2" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.016757][ T40] audit: type=1400 audit(1772374510.967:411): avc: denied { open } for pid=5324 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.024116][ T40] audit: type=1400 audit(1772374510.967:412): avc: denied { ioctl } for pid=5324 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2976 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.128317][ T7975] syzkaller0: entered promiscuous mode [ 153.131893][ T7975] syzkaller0: entered allmulticast mode [ 153.162786][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 153.166512][ T10] (id 0x00) [ 153.168914][ T40] audit: type=1400 audit(1772374511.116:413): avc: denied { getopt } for pid=7976 comm="syz.3.674" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.217560][ T10] rc_core: IR keymap rc-imon-pad not found [ 153.220210][ T10] Registered IR keymap rc-empty [ 153.222443][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 153.227630][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 153.301289][ T7991] ip6gre1: entered allmulticast mode [ 153.304286][ T7991] team0: Device ip6gre1 is of different type [ 153.378404][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 153.386386][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input7 [ 153.397382][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:11> initialized [ 153.644705][ T8004] syzkaller0: entered promiscuous mode [ 153.648015][ T8004] syzkaller0: entered allmulticast mode [ 154.010703][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.025380][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.031098][ T829] usb 5-1: USB disconnect, device number 11 [ 154.038438][ T8005] imon:send_packet: packet tx failed (-71) [ 154.040930][ T8005] imon:vfd_write: send packet #0 failed [ 154.771850][ T8023] syzkaller0: entered promiscuous mode [ 154.774035][ T8023] syzkaller0: entered allmulticast mode [ 155.687180][ T8037] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 155.725958][ T8043] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.782485][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 155.782496][ T40] audit: type=1400 audit(1772374513.567:417): avc: denied { create } for pid=8049 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.791554][ T40] audit: type=1400 audit(1772374513.567:418): avc: denied { ioctl } for pid=8049 comm="syz.0.693" path="socket:[21548]" dev="sockfs" ino=21548 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.795879][ T8050] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.820287][ T40] audit: type=1400 audit(1772374513.595:419): avc: denied { write } for pid=8049 comm="syz.0.693" name="memory.events" dev="9p" ino=72614225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.875661][ T40] audit: type=1400 audit(1772374513.651:420): avc: denied { map } for pid=8049 comm="syz.0.693" path="/166/file0/memory.events" dev="9p" ino=72614225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.885934][ T40] audit: type=1400 audit(1772374513.661:421): avc: denied { bind } for pid=8049 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.049071][ T8076] kvm: kvm [8075]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 157.052549][ T8076] kvm: kvm [8075]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 157.058404][ T40] audit: type=1400 audit(1772374514.755:422): avc: denied { map } for pid=8078 comm="syz.2.699" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.127043][ T8084] syzkaller0: entered promiscuous mode [ 157.128839][ T8084] syzkaller0: entered allmulticast mode [ 157.287606][ T8097] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 157.297245][ T8099] overlay: filesystem on ./file0 not supported as upperdir [ 157.511887][ T8116] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 157.527754][ T40] audit: type=1400 audit(1772374515.195:423): avc: denied { setopt } for pid=8113 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.550773][ T8119] program syz.3.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.558297][ T8122] libceph: resolve '4' (ret=-3): failed [ 157.641858][ T8124] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.717'. [ 157.691390][ T40] audit: type=1400 audit(1772374515.344:424): avc: denied { map } for pid=8131 comm="syz.3.719" path="/proc/570/net/pfkey" dev="proc" ino=4026533398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.712501][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 157.715522][ T8134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.720'. [ 157.733718][ T40] audit: type=1400 audit(1772374515.391:425): avc: denied { ioctl } for pid=8135 comm="syz.3.721" path="socket:[20291]" dev="sockfs" ino=20291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.771468][ T8143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=8143 comm=syz.3.723 [ 157.807387][ T8145] rtc_cmos 00:05: Alarms can be up to one day in the future [ 157.904515][ T8148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.725'. [ 158.037715][ T5996] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.054990][ T8150] syzkaller0: entered promiscuous mode [ 158.057315][ T8150] syzkaller0: entered allmulticast mode [ 158.214605][ T5996] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.219889][ T5996] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.224386][ T5996] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.228734][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.237022][ T8141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.246829][ T5996] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.414178][ T40] audit: type=1400 audit(1772374516.027:426): avc: denied { getopt } for pid=8151 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.471376][ T5996] usb 5-1: USB disconnect, device number 12 [ 158.718347][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 159.163165][ T8154] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 159.167097][ T8154] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 159.957194][ T8171] (syz.0.731,8171,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 160.222325][ T8176] binder: 8173:8176 ioctl c0306201 2000000003c0 returned -14 [ 160.511234][ T8196] syzkaller0: entered promiscuous mode [ 160.513783][ T8196] syzkaller0: entered allmulticast mode [ 161.193605][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 161.420952][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.743'. [ 161.639026][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 161.639076][ T40] audit: type=1400 audit(1772374519.039:430): avc: denied { mounton } for pid=8222 comm="syz.2.749" path="/proc/543/task" dev="proc" ino=23558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.661261][ T40] audit: type=1400 audit(1772374519.058:431): avc: denied { associate } for pid=8222 comm="syz.2.749" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 161.662816][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 161.728239][ T8236] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 161.734891][ T40] audit: type=1400 audit(1772374519.123:432): avc: denied { mount } for pid=8237 comm="syz.2.753" name="/" dev="ramfs" ino=21248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.738084][ T8238] mmap: syz.2.753 (8238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.757046][ T8236] block device autoloading is deprecated and will be removed. [ 161.861090][ T8247] syzkaller0: entered promiscuous mode [ 161.863638][ T8247] syzkaller0: entered allmulticast mode [ 162.979322][ T40] audit: type=1400 audit(1772374520.302:433): avc: denied { ioctl } for pid=8270 comm="syz.0.761" path="socket:[21329]" dev="sockfs" ino=21329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.112277][ T8286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8286 comm=syz.3.766 [ 163.319064][ T6258] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.393827][ T6800] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 163.489930][ T6258] usb 5-1: Using ep0 maxpacket: 32 [ 163.494368][ T6258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 163.499231][ T6258] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 163.504326][ T6258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.511114][ T6258] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 163.515194][ T6258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.518708][ T6258] usb 5-1: Product: syz [ 163.520579][ T6258] usb 5-1: Manufacturer: syz [ 163.522734][ T6258] usb 5-1: SerialNumber: syz [ 163.528104][ T6258] usb 5-1: config 0 descriptor?? [ 163.535809][ T6258] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8 [ 163.547600][ C3] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 163.554207][ T6800] usb 8-1: Using ep0 maxpacket: 8 [ 163.558319][ T6800] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.562828][ T6800] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.567397][ T6800] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.571900][ T6800] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.577727][ T6800] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.581830][ T6800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.746264][ T40] audit: type=1400 audit(1772374521.004:434): avc: denied { read write } for pid=8280 comm="syz.0.765" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.755745][ T40] audit: type=1400 audit(1772374521.004:435): avc: denied { open } for pid=8280 comm="syz.0.765" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.767589][ T5996] usb 5-1: USB disconnect, device number 13 [ 163.767733][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.816527][ T6800] usb 8-1: GET_CAPABILITIES returned 0 [ 163.818444][ T6800] usbtmc 8-1:16.0: can't read capabilities [ 163.927736][ T40] audit: type=1400 audit(1772374521.181:436): avc: denied { execute } for pid=8291 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 163.937054][ T40] audit: type=1400 audit(1772374521.181:437): avc: denied { execute_no_trans } for pid=8291 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 163.974287][ T8293] syzkaller0: entered promiscuous mode [ 163.976543][ T8293] syzkaller0: entered allmulticast mode [ 164.001321][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.016814][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.020632][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.032276][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.034665][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 164.042051][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.109040][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 164.120516][ T40] audit: type=1326 audit(1772374521.359:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8289 comm="syz.3.767" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3b79c799 code=0x0 [ 164.234508][ T5996] usb 8-1: USB disconnect, device number 9 [ 164.345713][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 164.980982][ T8290] hsr_slave_1 (unregistering): left promiscuous mode [ 165.122000][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 165.182519][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.184947][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.187414][ T8294] bridge_slave_0: entered allmulticast mode [ 165.190188][ T8294] bridge_slave_0: entered promiscuous mode [ 165.205933][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.214167][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.217467][ T8294] bridge_slave_1: entered allmulticast mode [ 165.221014][ T8294] bridge_slave_1: entered promiscuous mode [ 165.231286][ T8325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.773'. [ 165.236599][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 165.239910][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 165.250728][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.284908][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.290450][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.327517][ T8294] team0: Port device team_slave_0 added [ 165.331301][ T8294] team0: Port device team_slave_1 added [ 165.357080][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.363221][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.365807][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.375553][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.380579][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.383271][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.392625][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.432221][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.445842][ T8294] hsr_slave_0: entered promiscuous mode [ 165.449275][ T8294] hsr_slave_1: entered promiscuous mode [ 165.452301][ T8294] debugfs: 'hsr0' already exists in 'hsr' [ 165.454824][ T8294] Cannot create hsr debugfs directory [ 165.503005][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.638441][ T8294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.643428][ T8294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.654423][ T1151] bridge_slave_1: left allmulticast mode [ 165.656759][ T1151] bridge_slave_1: left promiscuous mode [ 165.660145][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.667138][ T1151] bridge_slave_0: left allmulticast mode [ 165.669115][ T1151] bridge_slave_0: left promiscuous mode [ 165.671470][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.904570][ T1151] team0: Port device bridge1 removed [ 166.001772][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.012675][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.018990][ T1151] bond0 (unregistering): Released all slaves [ 166.056447][ T8294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.071503][ T8294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.128593][ T1151] tipc: Left network mode [ 166.145779][ T40] audit: type=1400 audit(1772374523.249:439): avc: denied { bind } for pid=8342 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.161598][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.177362][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.204360][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.207662][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.221499][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.224461][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.251851][ T5934] Bluetooth: hci4: command tx timeout [ 166.253027][ T8294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.257975][ T8294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.381402][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.432284][ T8372] syzkaller0: entered promiscuous mode [ 166.434704][ T8372] syzkaller0: entered allmulticast mode [ 166.515468][ T59] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.654359][ T59] usb 5-1: device descriptor read/64, error -71 [ 166.913098][ T59] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 167.052067][ T59] usb 5-1: device descriptor read/64, error -71 [ 167.167683][ T59] usb usb5-port1: attempt power cycle [ 167.430184][ T1151] hsr_slave_0: left promiscuous mode [ 167.433121][ T1151] hsr_slave_1: left promiscuous mode [ 167.436143][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.439585][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.443836][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.447509][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.460731][ T1151] team_slave_0: left promiscuous mode [ 167.463476][ T1151] team_slave_1: left promiscuous mode [ 167.466020][ T1151] veth1_macvtap: left promiscuous mode [ 167.469348][ T1151] veth0_macvtap: left promiscuous mode [ 167.471883][ T1151] veth1_vlan: left promiscuous mode [ 167.474567][ T1151] veth0_vlan: left promiscuous mode [ 167.542638][ T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.563717][ T59] usb 5-1: device descriptor read/8, error -71 [ 167.681680][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 167.691575][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 167.841132][ T59] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.865489][ T59] usb 5-1: device descriptor read/8, error -71 [ 167.883939][ T8294] veth0_vlan: entered promiscuous mode [ 167.897416][ T8294] veth1_vlan: entered promiscuous mode [ 167.925371][ T8294] veth0_macvtap: entered promiscuous mode [ 167.931539][ T8294] veth1_macvtap: entered promiscuous mode [ 167.952647][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.958677][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.965106][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.969118][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.977230][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 167.977240][ T40] audit: type=1400 audit(1772374524.970:449): avc: denied { write } for pid=8395 comm="syz.2.782" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.989740][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.992934][ T59] usb usb5-port1: unable to enumerate USB device [ 167.995141][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.000309][ T40] audit: type=1400 audit(1772374524.970:450): avc: denied { map } for pid=8395 comm="syz.2.782" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.008434][ T8404] overlayfs: missing 'workdir' [ 168.061941][ T40] audit: type=1400 audit(1772374525.035:451): avc: denied { ioctl } for pid=8395 comm="syz.2.782" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.080504][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.083143][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.115650][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.118324][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.144837][ T40] audit: type=1400 audit(1772374525.129:452): avc: denied { mounton } for pid=8294 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 168.155081][ T40] audit: type=1400 audit(1772374525.129:453): avc: denied { mounton } for pid=8294 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.337840][ T40] audit: type=1400 audit(1772374525.306:454): avc: denied { create } for pid=8424 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 168.482456][ T5934] Bluetooth: hci4: command tx timeout [ 168.644702][ T8435] binder: 8430:8435 ioctl c0306201 2000000003c0 returned -14 [ 169.156944][ T40] audit: type=1400 audit(1772374526.074:455): avc: denied { create } for pid=8441 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 169.183272][ T40] audit: type=1400 audit(1772374526.102:456): avc: denied { create } for pid=8441 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 169.499373][ T59] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.536958][ T8452] netlink: 'syz.4.793': attribute type 11 has an invalid length. [ 169.545102][ T40] audit: type=1400 audit(1772374526.438:457): avc: denied { setopt } for pid=8449 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.585471][ T5934] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 169.589203][ T5934] Bluetooth: hci3: Injecting HCI hardware error event [ 169.592617][ T5934] Bluetooth: hci3: hardware error 0x00 [ 169.600086][ T8456] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 169.621730][ T8456] bond1: entered promiscuous mode [ 169.624428][ T8456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.636929][ T8456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8456 comm=syz.0.795 [ 169.636996][ T40] audit: type=1400 audit(1772374526.513:458): avc: denied { read write } for pid=8455 comm="syz.0.795" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.654213][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 169.670400][ T8456] bond1: (slave bridge2): making interface the new active one [ 169.673859][ T8456] bridge2: entered promiscuous mode [ 169.677993][ T8456] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 169.737917][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.742702][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.746841][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.752208][ T59] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.760846][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.771758][ T59] usb 7-1: config 0 descriptor?? [ 169.841426][ T8465] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50360 sclass=netlink_xfrm_socket pid=8465 comm=syz.0.798 [ 170.244403][ T59] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.279850][ T5996] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 170.343753][ T8492] binder: 8474:8492 ioctl c0306201 2000000003c0 returned -14 [ 170.482119][ T5996] usb 9-1: Using ep0 maxpacket: 32 [ 170.485550][ T5996] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 170.492282][ T5996] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.495689][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.498407][ T5996] usb 9-1: Product: syz [ 170.499906][ T5996] usb 9-1: Manufacturer: syz [ 170.501513][ T5996] usb 9-1: SerialNumber: syz [ 170.507928][ T5996] usb 9-1: config 0 descriptor?? [ 170.511201][ T8477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.516717][ T5996] hub 9-1:0.0: bad descriptor, ignoring hub [ 170.518810][ T5996] hub 9-1:0.0: probe with driver hub failed with error -5 [ 170.590710][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 170.706253][ T63] Bluetooth: hci4: command tx timeout [ 170.764539][ T8506] IPv6: sit1: Disabled Multicast RS [ 170.768374][ T8506] sit1: entered allmulticast mode [ 171.037968][ T59] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 171.042548][ T59] usb 9-1: device reset changed ep0 maxpacket size! [ 171.046966][ T59] usb 9-1: USB disconnect, device number 2 [ 171.251499][ T829] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 171.359782][ T59] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 171.413054][ T829] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.417009][ T829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.424231][ T829] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 171.428515][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.432044][ T829] usb 8-1: Product: syz [ 171.433844][ T829] usb 8-1: Manufacturer: syz [ 171.435717][ T829] usb 8-1: SerialNumber: syz [ 171.440026][ T829] usb 8-1: config 0 descriptor?? [ 171.445801][ T829] hub 8-1:0.0: bad descriptor, ignoring hub [ 171.448433][ T829] hub 8-1:0.0: probe with driver hub failed with error -5 [ 171.454724][ T829] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 171.518574][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 171.539217][ T59] usb 9-1: unable to get BOS descriptor or descriptor too short [ 171.550714][ T59] usb 9-1: no configurations [ 171.552820][ T59] usb 9-1: can't read configurations, error -22 [ 171.695464][ T8446] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 171.716754][ T8446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.746085][ T8446] bond3: (slave geneve2): making interface the new active one [ 171.750359][ T8446] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 171.765727][ T5997] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 171.807869][ T5934] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 171.908070][ T8520] xt_hashlimit: size too large, truncated to 1048576 [ 172.051676][ T8528] x_tables: duplicate underflow at hook 1 [ 172.171097][ T1467] usb 8-1: USB disconnect, device number 10 [ 172.247686][ T8540] netlink: 'syz.2.821': attribute type 10 has an invalid length. [ 172.250386][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.821'. [ 172.253559][ T8540] team0: entered promiscuous mode [ 172.255327][ T8540] team_slave_0: entered promiscuous mode [ 172.257527][ T8540] team_slave_1: entered promiscuous mode [ 172.259621][ T8540] team0: entered allmulticast mode [ 172.261403][ T8540] team_slave_0: entered allmulticast mode [ 172.263343][ T8540] team_slave_1: entered allmulticast mode [ 172.265908][ T8540] bridge0: port 3(team0) entered blocking state [ 172.270801][ T8540] bridge0: port 3(team0) entered disabled state [ 172.283093][ T8540] bridge0: port 3(team0) entered blocking state [ 172.286850][ T8540] bridge0: port 3(team0) entered forwarding state [ 172.335434][ T8544] netlink: 120 bytes leftover after parsing attributes in process `syz.2.822'. [ 172.432905][ T8551] Cannot find del_set index 3 as target [ 172.505830][ T8556] overlayfs: cannot append lower layer [ 172.510726][ T8556] netlink: 'syz.2.826': attribute type 39 has an invalid length. [ 172.614389][ T5931] usb 7-1: USB disconnect, device number 15 [ 172.783408][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 172.788709][ T8583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=8583 comm=syz.3.830 [ 172.794933][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 172.920786][ T5934] Bluetooth: hci4: command tx timeout [ 173.809234][ T8597] rdma_op ffff88803ba089f0 conn xmit_rdma 0000000000000000 [ 173.900088][ T8603] vcan0: tx address claim with different name [ 174.142701][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 174.142713][ T40] audit: type=1400 audit(1772374530.741:468): avc: denied { ioctl } for pid=8631 comm="syz.4.846" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 174.327648][ T8649] loop6: detected capacity change from 0 to 7 [ 174.335973][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.340351][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.347746][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.351946][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.361195][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.365663][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.369853][ T8653] syzkaller0: entered promiscuous mode [ 174.371694][ T8653] syzkaller0: entered allmulticast mode [ 174.378858][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.381886][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 174.382082][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.389301][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.393299][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.455524][ T8649] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.461616][ T8649] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.464378][ T8649] ldm_validate_partition_table(): Disk read failed. [ 174.467349][ T8649] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.471699][ T8649] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.475077][ T8649] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.478709][ T8649] Dev loop6: unable to read RDB block 0 [ 174.481377][ T8649] loop6: unable to read partition table [ 174.484109][ T8649] loop6: partition table beyond EOD, truncated [ 174.495123][ T8649] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 175.051681][ T40] audit: type=1400 audit(1772374531.592:469): avc: denied { ioctl } for pid=8667 comm="syz.2.857" path="socket:[25782]" dev="sockfs" ino=25782 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.650030][ T40] audit: type=1800 audit(1772374532.144:470): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.854" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 175.652888][ T8661] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 175.657767][ T40] audit: type=1400 audit(1772374532.144:471): avc: denied { firmware_load } for pid=8659 comm="syz.3.854" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 175.660403][ T8661] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 175.675276][ T8661] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 175.675311][ T40] audit: type=1400 audit(1772374532.163:472): avc: denied { firmware_load } for pid=8659 comm="syz.3.854" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 175.677810][ T8690] syzkaller0: entered promiscuous mode [ 175.677831][ T8690] syzkaller0: entered allmulticast mode [ 175.907613][ T8703] binder: 8697:8703 ioctl c0306201 2000000003c0 returned -14 [ 176.779180][ T8716] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=144 sclass=netlink_xfrm_socket pid=8716 comm=syz.3.867 [ 176.794452][ T40] audit: type=1400 audit(1772374533.220:473): avc: denied { connect } for pid=8710 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.803766][ T40] audit: type=1400 audit(1772374533.220:474): avc: denied { read } for pid=8710 comm="syz.3.867" laddr=127.0.0.1 lport=52084 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.803985][ T8718] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 177.026373][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.073218][ T40] audit: type=1400 audit(1772374533.482:475): avc: denied { bind } for pid=8735 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 177.097323][ T40] audit: type=1400 audit(1772374533.491:476): avc: denied { accept } for pid=8736 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.255340][ T8737] binder: 8734:8737 ioctl c0306201 2000000003c0 returned -14 [ 177.413052][ T8762] syzkaller0: entered promiscuous mode [ 177.415108][ T8762] syzkaller0: entered allmulticast mode [ 177.804111][ T40] audit: type=1400 audit(1772374534.155:477): avc: denied { ioctl } for pid=8763 comm="syz.3.886" path="socket:[25894]" dev="sockfs" ino=25894 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.117029][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.896'. [ 178.132704][ T5931] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 178.139739][ T8789] bond2: option downdelay: invalid value (18446744073709551615) [ 178.142257][ T8789] bond2: option downdelay: allowed values 0 - 2147483647 [ 178.146460][ T8789] bond2 (unregistering): Released all slaves [ 178.148427][ T829] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 178.159902][ T8793] ref_ctr_offset mismatch. inode: 0x4e2 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 178.221320][ T8795] syzkaller0: entered promiscuous mode [ 178.223656][ T8795] syzkaller0: entered allmulticast mode [ 178.298523][ T5931] usb 8-1: not running at top speed; connect to a high speed hub [ 178.303906][ T5931] usb 8-1: config 1 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 178.309123][ T5931] usb 8-1: config 1 interface 0 has no altsetting 0 [ 178.313690][ T5931] usb 8-1: string descriptor 0 read error: -22 [ 178.316120][ T5931] usb 8-1: New USB device found, idVendor=086a, idProduct=0022, bcdDevice= 0.40 [ 178.320196][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.328524][ T829] usb 9-1: Using ep0 maxpacket: 32 [ 178.332020][ T5931] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.335096][ T5931] usb 8-1: MIDIStreaming interface descriptor not found [ 178.338117][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 178.347839][ T829] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 178.359134][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 178.366124][ T829] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 178.369080][ T829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.375264][ T829] usb 9-1: Product: syz [ 178.377048][ T829] usb 9-1: Manufacturer: syz [ 178.379045][ T829] usb 9-1: SerialNumber: syz [ 178.394172][ T829] usb 9-1: config 0 descriptor?? [ 178.406795][ T829] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10 [ 178.424154][ C1] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 178.497428][ T8805] veth0_to_team: entered promiscuous mode [ 178.501836][ T8805] erspan0: entered promiscuous mode [ 178.608815][ T8817] netlink: 'syz.3.886': attribute type 7 has an invalid length. [ 178.684062][ T8825] sctp: [Deprecated]: syz.4.890 (pid 8825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.684062][ T8825] Use struct sctp_sack_info instead [ 178.855378][ T829] usb 8-1: USB disconnect, device number 11 [ 178.932484][ T8835] syzkaller0: entered promiscuous mode [ 178.934644][ T8835] syzkaller0: entered allmulticast mode [ 178.971843][ T8837] syzkaller0: entered promiscuous mode [ 178.974201][ T8837] syzkaller0: entered allmulticast mode [ 179.073651][ T8839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.909'. [ 179.124395][ T8843] netlink: 56 bytes leftover after parsing attributes in process `syz.2.911'. [ 179.228105][ T8851] xt_hashlimit: size too large, truncated to 1048576 [ 179.345395][ T8857] could not allocate digest TFM handle tgr160-generic [ 179.425972][ T8866] syzkaller0: entered promiscuous mode [ 179.427836][ T8866] syzkaller0: entered allmulticast mode [ 179.654135][ T829] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.838198][ T829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.841745][ T829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.844894][ T829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.849251][ T829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.852209][ T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.856364][ T829] usb 5-1: config 0 descriptor?? [ 180.308751][ T829] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 180.505739][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.510095][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.644019][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 180.644030][ T40] audit: type=1400 audit(1772374536.821:484): avc: denied { module_load } for pid=8899 comm="syz.2.925" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=71021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 180.668674][ T40] audit: type=1326 audit(1772374536.840:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3b79c799 code=0x0 [ 180.704346][ T8904] syzkaller0: entered promiscuous mode [ 180.706327][ T8904] syzkaller0: entered allmulticast mode [ 180.838326][ T8907] No such timeout policy "syz1" [ 180.841674][ T8907] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 180.848176][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 180.852299][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 180.955469][ T829] usb 5-1: USB disconnect, device number 18 [ 181.115041][ T6800] usb 9-1: USB disconnect, device number 5 [ 181.115181][ C1] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 181.176248][ T40] audit: type=1400 audit(1772374537.317:486): avc: denied { read } for pid=8915 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.240686][ T8917] netlink: 48 bytes leftover after parsing attributes in process `syz.4.929'. [ 181.615846][ T8926] binder: 8925:8926 ioctl c0306201 2000000003c0 returned -14 [ 181.623925][ C0] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 181.627460][ C0] sr 2:0:0:0: [sr0] tag#14 CDB: Service action out(16), sa=0x18 9f 98 00 00 00 00 00 00 00 04 00 00 [ 181.653836][ T8930] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 181.683380][ T8930] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 181.697499][ T8930] CIFS mount error: No usable UNC path provided in device string! [ 181.697499][ T8930] [ 181.701549][ T8930] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 181.805148][ T40] audit: type=1400 audit(1772374537.897:487): avc: denied { bind } for pid=8937 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.113001][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 182.285415][ T34] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 182.288285][ T34] usb 7-1: config 1 has no interface number 0 [ 182.290398][ T34] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 182.298071][ T34] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 182.301560][ T34] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 182.304813][ T34] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.311668][ T34] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 182.315570][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.319548][ T34] usb 7-1: Product: syz [ 182.319998][ T40] audit: type=1400 audit(1772374538.383:488): avc: denied { ioctl } for pid=8992 comm="syz.4.947" path="socket:[26832]" dev="sockfs" ino=26832 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.321365][ T34] usb 7-1: Manufacturer: syz [ 182.321384][ T34] usb 7-1: SerialNumber: syz [ 182.324589][ T8947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.338201][ T8947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.435218][ T9000] binder: 8999:9000 ioctl c0306201 2000000003c0 returned -14 [ 182.588864][ T9015] PKCS8: Unsupported PKCS#8 version [ 182.628595][ T34] usb 7-1: Error in usbnet_get_endpoints (-71) [ 182.634494][ T34] usb 7-1: USB disconnect, device number 16 [ 182.865922][ T9031] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.895710][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 183.001504][ T9036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 183.007519][ T9036] ip6gre1: entered promiscuous mode [ 183.009295][ T9036] ip6gre1: entered allmulticast mode [ 183.076120][ T9040] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.174465][ T9047] syzkaller0: entered promiscuous mode [ 183.176914][ T9047] syzkaller0: entered allmulticast mode [ 183.278308][ T9056] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 183.281841][ T9056] netlink: 'syz.2.966': attribute type 7 has an invalid length. [ 183.285337][ T9056] netlink: 'syz.2.966': attribute type 8 has an invalid length. [ 183.289122][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.966'. [ 183.372526][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.969'. [ 183.613606][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 184.333893][ T9077] bridge_slave_1: default FDB implementation only supports local addresses [ 184.380605][ T40] audit: type=1400 audit(1772374540.310:489): avc: denied { bind } for pid=9086 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.430354][ T9094] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 184.443530][ T40] audit: type=1400 audit(1772374540.366:490): avc: denied { unmount } for pid=9093 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 184.462831][ T40] audit: type=1400 audit(1772374540.385:491): avc: denied { module_request } for pid=9088 comm="syz.3.975" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.468777][ T9096] __nla_validate_parse: 2 callbacks suppressed [ 184.468793][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 184.479515][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.483659][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.508234][ T9107] syzkaller0: entered promiscuous mode [ 184.510079][ T9107] syzkaller0: entered allmulticast mode [ 184.607711][ T5934] Bluetooth: hci0: unexpected event for opcode 0x041b [ 184.613091][ T40] audit: type=1400 audit(1772374540.525:492): avc: denied { write } for pid=9120 comm="syz.3.984" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 184.804484][ T40] audit: type=1400 audit(1772374540.713:493): avc: denied { bpf } for pid=9131 comm="syz.4.987" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.388870][ T9144] netlink: 'syz.3.991': attribute type 2 has an invalid length. [ 185.388876][ T9143] netlink: 'syz.3.991': attribute type 2 has an invalid length. [ 185.922808][ T9151] delete_channel: no stack [ 186.157313][ T9181] kvm: MWAIT instruction emulated as NOP! [ 186.264938][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'. [ 186.336031][ T9205] CIFS mount error: No usable UNC path provided in device string! [ 186.336031][ T9205] [ 186.339899][ T9205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.444016][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 186.444032][ T40] audit: type=1400 audit(1772374542.247:496): avc: denied { write } for pid=9214 comm="syz.0.1007" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 186.579494][ T9215] netlink: 'syz.0.1007': attribute type 28 has an invalid length. [ 186.695407][ T9231] overlay: Unknown parameter 'audit' [ 186.788351][ T40] audit: type=1400 audit(1772374542.565:497): avc: denied { wake_alarm } for pid=9230 comm="syz.3.1012" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.852828][ T9237] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 186.857490][ T9237] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 186.863796][ T9237] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1014'. [ 186.866426][ T2491] pvrusb2: request_firmware fatal error with code=-110 [ 186.874299][ T2491] pvrusb2: Failure uploading firmware1 [ 186.876871][ T2491] pvrusb2: Device initialization was not successful. [ 186.879730][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 186.884240][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 186.885392][ T9231] syz.3.1012 (9231): drop_caches: 2 [ 186.888594][ T1340] pvrusb2: Device being rendered inoperable [ 186.919208][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.2.1015 [ 186.994642][ T9247] veth0: entered promiscuous mode [ 186.996666][ T9247] veth0: entered allmulticast mode [ 187.005053][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 187.015460][ T9253] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 187.114801][ T9258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1020'. [ 187.362963][ T9288] i2c i2c-1: dtv_property_process_set: SET cmd 0xbbbbbb02 undefined [ 187.394413][ T40] audit: type=1400 audit(1772374543.135:498): avc: denied { read } for pid=9290 comm="syz.2.1027" path="socket:[27928]" dev="sockfs" ino=27928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.416153][ T40] audit: type=1400 audit(1772374543.154:499): avc: denied { write } for pid=9281 comm="syz.4.1025" path="socket:[25535]" dev="sockfs" ino=25535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.436636][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'. [ 187.494288][ T40] audit: type=1400 audit(1772374543.229:500): avc: denied { append } for pid=9301 comm="syz.2.1030" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.506432][ T9300] syzkaller0: entered promiscuous mode [ 187.508524][ T9300] syzkaller0: entered allmulticast mode [ 187.517825][ T40] audit: type=1400 audit(1772374543.229:501): avc: denied { getopt } for pid=9301 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.575294][ T40] audit: type=1400 audit(1772374543.294:502): avc: denied { set_context_mgr } for pid=9310 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.592495][ T9311] binder: 9310:9311 ioctl c0306201 2000000003c0 returned -14 [ 187.595394][ T40] audit: type=1400 audit(1772374543.313:503): avc: denied { call } for pid=9310 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.835611][ T9317] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.857068][ T9317] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1034'. [ 188.596579][ T9324] macvlan0: entered allmulticast mode [ 188.598431][ T9324] veth1_vlan: entered allmulticast mode [ 188.601943][ T9324] veth1_vlan: left allmulticast mode [ 188.607134][ T9324] macvlan0 (unregistering): left allmulticast mode [ 188.711843][ T9332] input: syz0 as /devices/virtual/input/input11 [ 188.840979][ T40] audit: type=1400 audit(1772374544.492:504): avc: denied { getopt } for pid=9338 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.086357][ T9370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.203324][ T40] audit: type=1400 audit(1772374544.828:505): avc: denied { mount } for pid=9362 comm="syz.2.1044" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 189.301063][ T5934] block nbd0: Receive control failed (result -32) [ 189.545636][ T9408] syzkaller0: entered promiscuous mode [ 189.547576][ T9408] syzkaller0: entered allmulticast mode [ 190.185935][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1059'. [ 190.245364][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1059'. [ 190.835668][ T9445] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 190.838382][ T9445] netlink: 'syz.3.1066': attribute type 4 has an invalid length. [ 190.840910][ T9445] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1066'. [ 190.904779][ T9457] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.915045][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.918731][ T9457] tipc: Enabled bearer , priority 10 [ 190.921059][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 190.978773][ T9467] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.010120][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.012692][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.018856][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.021390][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.024366][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 191.118933][ T9475] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 191.163493][ T9495] support for the xor transformation has been removed. [ 191.175605][ T9497] pim6reg1: entered promiscuous mode [ 191.177414][ T9497] pim6reg1: entered allmulticast mode [ 191.224039][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 191.578765][ T9530] syzkaller0: entered promiscuous mode [ 191.581147][ T9530] syzkaller0: entered allmulticast mode [ 191.858076][ T9539] misc userio: The device must be registered before sending interrupts [ 191.865769][ T9539] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1087'. [ 191.869652][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 192.751817][ T1340] tipc: Node number set to 35225867 [ 192.811458][ T9547] ip6erspan0: entered promiscuous mode [ 192.846598][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 192.846613][ T40] audit: type=1400 audit(1772374548.233:513): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 192.951023][ T9569] comedi comedi1: s526: I/O port conflict (0x4,64) [ 192.991367][ T46] ------------[ cut here ]------------ [ 192.993808][ T46] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 192.998399][ T46] WARNING: net/mac80211/tx.c:753 at ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20, CPU#0: kworker/u32:2/46 [ 193.001977][ T46] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.003800][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.008379][ T46] Tainted: [L]=SOFTLOCKUP [ 193.009893][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.013351][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 193.015474][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 193.017583][ T46] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 cc dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 b1 20 fb f6 e8 cc [ 193.023705][ T46] RSP: 0018:ffffc900007ef5d8 EFLAGS: 00010282 [ 193.025839][ T46] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 193.028743][ T46] RDX: ffff88805bef5084 RSI: ffff88803bb31808 RDI: ffffffff90ea4ac0 [ 193.031873][ T46] RBP: ffffc900007ef850 R08: 0000000000000005 R09: 0000000000000000 [ 193.034689][ T46] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805bef5084 [ 193.037900][ T46] R13: ffffc900007ef8c0 R14: 0000000000000000 R15: 0000000000000001 [ 193.040575][ T46] FS: 0000000000000000(0000) GS:ffff8880d6344000(0000) knlGS:0000000000000000 [ 193.043658][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.045913][ T46] CR2: 00007f254b54da08 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 193.048499][ T46] Call Trace: [ 193.049900][ T46] [ 193.051352][ T46] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 193.054050][ T46] ? kmalloc_reserve+0x148/0x350 [ 193.056240][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 193.058998][ T46] ? sta_info_hash_lookup+0x259/0x660 [ 193.061562][ T46] invoke_tx_handlers_late+0xfb4/0x2750 [ 193.064037][ T46] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 193.066082][ T46] ? ieee80211_txq_may_transmit+0x730/0xfd0 [ 193.068149][ T46] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 193.070300][ T46] ieee80211_tx+0x304/0x460 [ 193.072176][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 193.074465][ T46] ? ieee80211_skb_resize+0x119/0x670 [ 193.076894][ T46] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 193.079352][ T46] ieee80211_xmit+0x30f/0x3e0 [ 193.081579][ T46] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 193.084164][ T46] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 193.086758][ T46] ieee80211_scan_work+0x750/0x1ff0 [ 193.089006][ T46] ? __queue_work+0x445/0x1150 [ 193.091046][ T46] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 193.093552][ T46] ? rcu_is_watching+0x12/0xc0 [ 193.095679][ T46] cfg80211_wiphy_work+0x446/0x5c0 [ 193.097875][ T46] process_one_work+0x9d7/0x1920 [ 193.100201][ T46] ? __pfx_process_one_work+0x10/0x10 [ 193.102627][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 193.104992][ T46] worker_thread+0x5da/0xe40 [ 193.106868][ T46] ? __pfx_worker_thread+0x10/0x10 [ 193.108914][ T46] ? kthread+0x13a/0x450 [ 193.110616][ T46] ? __pfx_worker_thread+0x10/0x10 [ 193.112628][ T46] kthread+0x370/0x450 [ 193.114341][ T46] ? __pfx_kthread+0x10/0x10 [ 193.116312][ T46] ret_from_fork+0x754/0xd80 [ 193.118168][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 193.120257][ T46] ? __switch_to+0x7b4/0x1120 [ 193.122219][ T46] ? __pfx_kthread+0x10/0x10 [ 193.124136][ T46] ret_from_fork_asm+0x1a/0x30 [ 193.126165][ T46] [ 193.127373][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.129669][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.133067][ T46] Tainted: [L]=SOFTLOCKUP [ 193.134454][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.137673][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 193.139688][ T46] Call Trace: [ 193.140771][ T46] [ 193.141725][ T46] dump_stack_lvl+0x100/0x190 [ 193.143226][ T46] vpanic+0x552/0x970 [ 193.144479][ T46] ? __pfx_vpanic+0x10/0x10 [ 193.145980][ T46] panic+0xd1/0xe0 [ 193.147222][ T46] ? __pfx_panic+0x10/0x10 [ 193.148656][ T46] ? check_panic_on_warn+0x1f/0x90 [ 193.150311][ T46] check_panic_on_warn.cold+0x19/0x34 [ 193.151990][ T46] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 193.153867][ T46] __warn.cold+0x191/0x348 [ 193.155294][ T46] __report_bug+0x296/0x3d0 [ 193.156802][ T46] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 193.158596][ T46] ? __pfx___report_bug+0x10/0x10 [ 193.160151][ T46] ? kasan_save_stack+0x3f/0x50 [ 193.161692][ T46] ? kasan_save_stack+0x30/0x50 [ 193.163270][ T46] ? ieee80211_scan_work+0x750/0x1ff0 [ 193.164969][ T46] ? cfg80211_wiphy_work+0x446/0x5c0 [ 193.166666][ T46] ? process_one_work+0x9d7/0x1920 [ 193.168345][ T46] ? worker_thread+0x5da/0xe40 [ 193.169869][ T46] ? kthread+0x370/0x450 [ 193.171234][ T46] ? ret_from_fork+0x754/0xd80 [ 193.172773][ T46] ? ret_from_fork_asm+0x1a/0x30 [ 193.174356][ T46] report_bug_entry+0xe1/0x290 [ 193.175928][ T46] ? ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 193.177800][ T46] handle_bug+0x1c9/0x2a0 [ 193.179213][ T46] exc_invalid_op+0x17/0x50 [ 193.180672][ T46] asm_exc_invalid_op+0x1a/0x20 [ 193.182219][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 193.184272][ T46] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 cc dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 b1 20 fb f6 e8 cc [ 193.190305][ T46] RSP: 0018:ffffc900007ef5d8 EFLAGS: 00010282 [ 193.192199][ T46] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 193.194775][ T46] RDX: ffff88805bef5084 RSI: ffff88803bb31808 RDI: ffffffff90ea4ac0 [ 193.197938][ T46] RBP: ffffc900007ef850 R08: 0000000000000005 R09: 0000000000000000 [ 193.201099][ T46] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805bef5084 [ 193.204222][ T46] R13: ffffc900007ef8c0 R14: 0000000000000000 R15: 0000000000000001 [ 193.207504][ T46] ? ieee80211_tx_h_rate_ctrl+0x1297/0x1a20 [ 193.209894][ T46] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 193.212382][ T46] ? kmalloc_reserve+0x148/0x350 [ 193.214384][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 193.216943][ T46] ? sta_info_hash_lookup+0x259/0x660 [ 193.219182][ T46] invoke_tx_handlers_late+0xfb4/0x2750 [ 193.221384][ T46] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 193.223528][ T46] ? ieee80211_txq_may_transmit+0x730/0xfd0 [ 193.225919][ T46] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 193.228337][ T46] ieee80211_tx+0x304/0x460 [ 193.230245][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 193.232354][ T46] ? ieee80211_skb_resize+0x119/0x670 [ 193.234553][ T46] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 193.236959][ T46] ieee80211_xmit+0x30f/0x3e0 [ 193.238874][ T46] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 193.241305][ T46] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 193.243945][ T46] ieee80211_scan_work+0x750/0x1ff0 [ 193.246174][ T46] ? __queue_work+0x445/0x1150 [ 193.248255][ T46] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 193.250274][ T46] ? rcu_is_watching+0x12/0xc0 [ 193.251808][ T46] cfg80211_wiphy_work+0x446/0x5c0 [ 193.253416][ T46] process_one_work+0x9d7/0x1920 [ 193.255222][ T46] ? __pfx_process_one_work+0x10/0x10 [ 193.257504][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 193.259869][ T46] worker_thread+0x5da/0xe40 [ 193.261814][ T46] ? __pfx_worker_thread+0x10/0x10 [ 193.263946][ T46] ? kthread+0x13a/0x450 [ 193.265667][ T46] ? __pfx_worker_thread+0x10/0x10 [ 193.267224][ T46] kthread+0x370/0x450 [ 193.268544][ T46] ? __pfx_kthread+0x10/0x10 [ 193.270498][ T46] ret_from_fork+0x754/0xd80 [ 193.272411][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 193.274105][ T46] ? __switch_to+0x7b4/0x1120 [ 193.275988][ T46] ? __pfx_kthread+0x10/0x10 [ 193.277765][ T46] ret_from_fork_asm+0x1a/0x30 [ 193.279632][ T46] [ 193.281713][ T46] Kernel Offset: disabled [ 193.283527][ T46] Rebooting in 86400 seconds..