last executing test programs: 15m26.853368056s ago: executing program 3 (id=395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0xfdb8d6288dbc6c7a}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1010e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4180) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = dup3(r4, r2, 0x80000) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newtaction={0x18, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}]}, 0x18}}, 0x0) 15m19.603222547s ago: executing program 3 (id=408): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) setresuid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005a40)={0x30, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) 15m18.465775605s ago: executing program 3 (id=410): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r6, 0x31f}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x700) 15m15.880916012s ago: executing program 3 (id=413): socket(0x10, 0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000002980)=""/4087, 0xff7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = syz_io_uring_setup(0x100023a, &(0x7f0000000300)={0x0, 0x2a36, 0x200, 0x4, 0x20000001}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f00000000c0)="ff29f2006d47ffffffffffffff1f2b020000000029cf00006a4139790d811b7ce1954a17ad6001", 0x27) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @broadcast=0xac141436}}) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r10, @ANYBLOB="14000200776731"], 0x34}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 15m14.107518508s ago: executing program 3 (id=417): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) socket$kcm(0x1e, 0x5, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e00000010008188e6b62aa73772cc9f1ba1f8483b0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x1415}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[r5, r5], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 15m10.037237301s ago: executing program 3 (id=425): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x401, 0xfffffffe, 0x35314142, 0x0, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000380)=""/176, 0xb0, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) rt_sigsuspend(0x0, 0x0) add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="d70e8365fbf081299cf152c39107fa8e6989db079fba116ae42df9fc4bbe692a3e8e4bff7ba32472c4a865b4712fda8b33a174a946182a9faf", 0x39, 0xfffffffffffffffd) socket$rds(0x15, 0x5, 0x0) 14m54.020415513s ago: executing program 32 (id=425): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x401, 0xfffffffe, 0x35314142, 0x0, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000380)=""/176, 0xb0, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) rt_sigsuspend(0x0, 0x0) add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="d70e8365fbf081299cf152c39107fa8e6989db079fba116ae42df9fc4bbe692a3e8e4bff7ba32472c4a865b4712fda8b33a174a946182a9faf", 0x39, 0xfffffffffffffffd) socket$rds(0x15, 0x5, 0x0) 9m29.64941444s ago: executing program 2 (id=1087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c0000"], 0x18}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}) 9m22.434863689s ago: executing program 2 (id=1097): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = io_uring_setup(0x17ba, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r9, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r9, 0xc0506107, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300876181c5fc349a67a61c1539e0560b8ddb5fe29f8c39e7de63c95648963d021362f3366924a7ddf4952c742d5651370036d98bfb", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x54583}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xc0, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x13a6, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xc0}}, 0xc1f7a7e4299f8e81) 9m20.300347879s ago: executing program 2 (id=1102): r0 = open(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x123341, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x40) shmctl$IPC_RMID(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400000000000200f95d5f86071eb89e3ba7"], 0x38}}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1a, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000b8000000160a01020000000000000000010000000900010073797a30000000000900020073797a30000000008400038008000240000000000800014000000000080002400000000268000380140001006261746164765f736c6176655f3100001400010076657468305f746f5f6873720000000014000100687372300000000000000000000000001400010076657468305f746f5f626174616476001400010073797a6b616c6c6572310000000000000800074000000001140000001000010000000000000000000000000af3ea5994c94eea78814d20070bbc7d790b2ae8b7647eaba6de588e779171183b4255a728f3ed031e7b44e7b4bfd87e6c2b49a2301acccb2eaf891a856a42a4963f39f03dbbf47a6f0642d41f0fe90dac13a9ea18fa332519da22dd550bfbf0a25fb5a40ebc1a37334766df2e4f4e1c0dbc7c6585846dab8e63cd130684135beb8471461fe2c89b480d2a8b8a55df3b081a61cf0e1aa9569e3841a540a5bee8ef619be19df4076c03fac6fbd80eaa40b91970e5f717159ef198bbcfb7625b049cf37b0e2f806ba1f0586c517c4ed10c6eb5e26c3a6557aa3389441da35e50b89e9f852403b72d1e1f9e5ca542fee520b3d208187e04ebc950775f7a151259"], 0x100}}, 0x2400c044) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r1, r10, 0x0, 0x2) 9m16.672279082s ago: executing program 2 (id=1107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0xd4b7, 0xa) r1 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0002000000020000002c0004802800018007000100637400001c0002800800024000000008080009400000000d05000300010000000900010073797a30000000000900020073797a3200000000140000001100010040be904b000000000000000a"], 0x80}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f00000000c0)="823be7271019b3fe048765ad05be33fc", 0x10}], 0x1, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x0, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0x15) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') 9m12.531480087s ago: executing program 2 (id=1113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9m11.914775004s ago: executing program 2 (id=1115): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 8m56.00697972s ago: executing program 33 (id=1115): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 5m17.612456238s ago: executing program 5 (id=1530): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 5m17.556378048s ago: executing program 5 (id=1531): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001440)={0xa00000, 0x1ff, 0xc, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x5, '\x00', @value64=0xc}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x1f, 0x1, 0x401}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) write$tun(r7, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2022}) 5m15.785163807s ago: executing program 5 (id=1533): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r7, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000180)={&(0x7f0000000240)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000480)=""/248, 0xf8}, {0x0}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/65, 0x41}, {&(0x7f0000000840)=""/119, 0x77}], 0x8, &(0x7f0000000040)=""/40, 0x28}, 0x2003) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.956912747s ago: executing program 5 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newtfilter={0x29c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x268, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}, @TCA_MATCHALL_ACT={0x25c, 0x2, [@m_xt={0x40, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "72a810971dc625abc0b9c8aabba3ac628a4a26"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x8c, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x5d, 0x6, "cc57aea047b57743eee7f29e225fb72c1dbafc7ba9908812deb5ff422c802bbd45dd7762585f294cbe0c0470132fb52255742f3dfcceca4920e0af4b10b884af97b48ce35c6e2411387ac617f9ebf50a831655cc4fa5a0e5b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_simple={0xd4, 0xb, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, 'matchall\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0x8, 0x7f, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x96, 0x10, 0x0, 0x7, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x49, 0x2, 0x100, 0xf}}]}, {0x4d, 0x6, "d6a9d8bf9fd64b437a89b02b60aa3db4c529245e643d72b4c51fbe0a6bb68f756e12d47bab6129e22334adede17f1de7144a3c80666c3cb119d012bb3e2e492e902f913e1ad0f9ae96"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x88, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x5c, 0x6, "ef15f4ff3fd71b3644fa04138305403e06cdb56b9ff5baef3d74cdeec3b4f0852ea3c478fecbf8a42c9e8b7544e83c4788c888927c9d6b070583ec3f5f3741aac01e5990fb7037f9783b5f8863e99838df8079b519171ca6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x29c}}, 0x44800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a1a4f6ab5fa87669f21978401f7811767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a6cafe2c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961426b18b0cc36", 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000280), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) 5m13.264913803s ago: executing program 5 (id=1540): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xa2\x9cV\t\xf4s\x84\x01\xa8\xb7\xec\x19\x8d\xf3rq\x11\xd7\x0f\xcbR\xab\xc6@(\xc2\xcfp\x02if\xe5\xbf\xce\xa4\x16|\x97\xcb\x8a\xd6\xa6G:)%}k\x9d\x13\x8b\x00\x00'}]}, 0x3a) close(r5) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 5m10.992003224s ago: executing program 5 (id=1545): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xa2\x9cV\t\xf4s\x84\x01\xa8\xb7\xec\x19\x8d\xf3rq\x11\xd7\x0f\xcbR\xab\xc6@(\xc2\xcfp\x02if\xe5\xbf\xce\xa4\x16|\x97\xcb\x8a\xd6\xa6G:)%}k\x9d\x13\x8b\x00\x00'}]}, 0x3a) close(r5) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 4m54.783863574s ago: executing program 34 (id=1545): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xa2\x9cV\t\xf4s\x84\x01\xa8\xb7\xec\x19\x8d\xf3rq\x11\xd7\x0f\xcbR\xab\xc6@(\xc2\xcfp\x02if\xe5\xbf\xce\xa4\x16|\x97\xcb\x8a\xd6\xa6G:)%}k\x9d\x13\x8b\x00\x00'}]}, 0x3a) close(r5) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 7.033946613s ago: executing program 4 (id=3099): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.94766319s ago: executing program 4 (id=3101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 6.657424698s ago: executing program 4 (id=3102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 6.048743002s ago: executing program 7 (id=3106): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.936649964s ago: executing program 6 (id=3107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44401, 0x0) 5.863087222s ago: executing program 7 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c014}, 0x4800) 5.813095601s ago: executing program 6 (id=3110): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001410) ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0x604000000000000) 5.732607249s ago: executing program 7 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x10) 5.533818887s ago: executing program 6 (id=3115): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x9fd, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0xf71d, 0x83, 0x3, 0x2800, 0x2807, 0x2, 0xba2, 0x7, 0x38, {0x8, 0xfffffffd}, 0xd0, 0x9}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x44040}, 0x80) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc120d", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x700) 5.525101079s ago: executing program 7 (id=3116): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0xac, ""/172}) 5.26424871s ago: executing program 7 (id=3119): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.484400862s ago: executing program 6 (id=3120): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x9fd, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0xf71d, 0x83, 0x3, 0x2800, 0x2807, 0x2, 0xba2, 0x7, 0x38, {0x8, 0xfffffffd}, 0xd0, 0x9}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x44040}, 0x80) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc120d", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x700) 4.183350572s ago: executing program 0 (id=3121): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) 3.830958654s ago: executing program 7 (id=3123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x9, "3eed"}, @global=@item_012={0x1, 0x1, 0xa, '\x00'}]}}, 0x0}, 0x0) 3.830432164s ago: executing program 0 (id=3124): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x0, @fd_index, 0x0, 0x20000000, 0x36ab, 0x0, 0x0, {0x1}}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 3.145951162s ago: executing program 6 (id=3126): pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x8f5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f0000001480)=[0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="0200000001000000000000000000"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x49, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0xffffffffffffffe8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[{0x2, 0x2, 0x9, 0x6}, {0x0, 0x5, 0x3, 0x5}, {0x5, 0x2, 0xf, 0x7}, {0x1, 0x4, 0x9, 0xb}, {0x4, 0x4, 0xa, 0x2}], 0x10, 0xfffffff7, @void, @value}, 0x94) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3.032475922s ago: executing program 0 (id=3127): r0 = socket(0x11, 0x800000003, 0x3) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x10001, 0x4, 0xf, 0x12, 0x1e, 0x2}}]}}]}, 0x148}}, 0x0) 2.332826403s ago: executing program 1 (id=3129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) capget(&(0x7f00000000c0)={0x20080522}, 0x0) 2.315023745s ago: executing program 0 (id=3130): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x270, 0x1) 2.178568329s ago: executing program 1 (id=3131): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.178173918s ago: executing program 4 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 2.109795435s ago: executing program 1 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000013c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4804) 2.05683503s ago: executing program 6 (id=3134): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x7, "3951b38e"}, @global=@item_4={0x3, 0x1, 0x0, "cacb7460"}, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "8c9b9173"}, @local=@item_4={0x3, 0x2, 0x1, "7ddc4980"}, @local=@item_4={0x3, 0x2, 0x2, "fd024063"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x2, 0x2, 0x3, "75df"}]}}, 0x0}, 0x0) 1.974276225s ago: executing program 0 (id=3135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0xe0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f0000002540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000002580)}}, 0x10) bind$packet(r0, &(0x7f0000002700)={0x11, 0x4, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) dup2(r5, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, '%I0', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x26, 0x1, 0x1, 0x1, 0x5, 0x8}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x80, 0x1, 0x1, 0x2, 0x2, 0x6}, 0x2, {0x8, 0x7fff, 0x3, 0x18, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000240)) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x4}}) 1.973724205s ago: executing program 1 (id=3136): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010006", 0x7) 1.973375064s ago: executing program 4 (id=3137): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0088a8132788a87c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.892180029s ago: executing program 4 (id=3138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000080)=""/1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240150000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, r7, 0x3, &(0x7f0000000340)) 1.875573917s ago: executing program 1 (id=3139): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x17) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001180)=0x1007) 41.734018ms ago: executing program 1 (id=3140): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) 0s ago: executing program 0 (id=3141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ility=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1044.447770][ T29] audit: type=1400 audit(1733015755.301:1270): avc: denied { perfmon } for pid=14791 comm="syz.6.1860" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1044.470664][ T29] audit: type=1400 audit(1733015755.301:1271): avc: denied { create } for pid=14791 comm="syz.6.1860" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1044.556673][ T29] audit: type=1400 audit(1733015755.301:1272): avc: denied { map } for pid=14791 comm="syz.6.1860" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1044.581008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.617787][ T29] audit: type=1400 audit(1733015755.301:1273): avc: denied { read write } for pid=14791 comm="syz.6.1860" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1044.701874][ T29] audit: type=1400 audit(1733015755.381:1274): avc: denied { read write } for pid=14803 comm="syz.1.1865" name="radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1044.751822][ T29] audit: type=1400 audit(1733015755.381:1275): avc: denied { open } for pid=14803 comm="syz.1.1865" path="/dev/radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1044.871564][ T29] audit: type=1400 audit(1733015755.441:1276): avc: denied { append } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1045.371634][ T5897] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1045.480451][T14844] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1882'. [ 1045.717991][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1045.729857][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 1024 [ 1045.741482][ T5897] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1045.751693][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1045.761709][ T5897] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1045.922018][ T5897] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1045.950066][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.112774][ T5897] usb 8-1: Product: syz [ 1046.170436][ T5897] usb 8-1: Manufacturer: syz [ 1046.274520][ T5897] usb 8-1: SerialNumber: syz [ 1046.309802][ T5897] usb 8-1: config 0 descriptor?? [ 1046.326379][T14832] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1046.348301][ T5897] option 8-1:0.0: GSM modem (1-port) converter detected [ 1046.603711][T13950] usb 8-1: USB disconnect, device number 4 [ 1046.627796][T13950] option 8-1:0.0: device disconnected [ 1046.667502][T14867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1892'. [ 1048.491351][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1048.491369][ T29] audit: type=1400 audit(1733015758.571:1333): avc: denied { append } for pid=14879 comm="syz.6.1897" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1048.525977][ T29] audit: type=1400 audit(1733015758.571:1334): avc: denied { open } for pid=14879 comm="syz.6.1897" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1048.550158][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.557361][ T29] audit: type=1400 audit(1733015758.571:1335): avc: denied { create } for pid=14879 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.891221][ T29] audit: type=1400 audit(1733015758.571:1336): avc: denied { setopt } for pid=14879 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.001625][ T29] audit: type=1400 audit(1733015758.571:1337): avc: denied { bind } for pid=14879 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.031498][T14906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 1049.093993][ T29] audit: type=1400 audit(1733015758.571:1338): avc: denied { name_bind } for pid=14879 comm="syz.6.1897" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1049.138789][ T29] audit: type=1400 audit(1733015758.571:1339): avc: denied { node_bind } for pid=14879 comm="syz.6.1897" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1049.160807][ T29] audit: type=1400 audit(1733015758.581:1340): avc: denied { write } for pid=14879 comm="syz.6.1897" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.183033][ T29] audit: type=1400 audit(1733015758.581:1341): avc: denied { connect } for pid=14879 comm="syz.6.1897" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.205604][ T29] audit: type=1400 audit(1733015758.581:1342): avc: denied { name_connect } for pid=14879 comm="syz.6.1897" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1050.951718][T14963] netlink: 'syz.7.1919': attribute type 11 has an invalid length. [ 1051.431246][ T117] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1051.439635][T14985] netlink: 'syz.4.1928': attribute type 5 has an invalid length. [ 1052.190572][ T117] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1052.221276][ T117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.315661][ T117] usb 8-1: config 0 descriptor?? [ 1052.894235][ T5821] Bluetooth: hci1: sending frame failed (-49) [ 1052.919740][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1053.011234][T15026] fuse: Unknown parameter '00000000000000000011' [ 1053.225246][ T117] ath6kl: Failed to submit usb control message: -71 [ 1053.232773][ T117] ath6kl: unable to send the bmi data to the device: -71 [ 1053.239899][ T117] ath6kl: Unable to send get target info: -71 [ 1053.247123][ T117] ath6kl: Failed to init ath6kl core: -71 [ 1053.274626][ T117] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1053.303406][ T117] usb 8-1: USB disconnect, device number 5 [ 1053.671263][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1053.671283][ T29] audit: type=1400 audit(1733015764.741:1383): avc: denied { bind } for pid=15038 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1053.696961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.771623][T15045] macsec0: entered promiscuous mode [ 1053.779542][T15045] macsec0: entered allmulticast mode [ 1053.789097][T15045] veth1_macvtap: entered allmulticast mode [ 1054.337498][ T29] audit: type=1400 audit(1733015765.421:1384): avc: denied { read } for pid=15049 comm="syz.4.1945" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1054.484815][ T29] audit: type=1400 audit(1733015765.421:1385): avc: denied { open } for pid=15049 comm="syz.4.1945" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1054.569600][T15056] netlink: 'syz.4.1946': attribute type 2 has an invalid length. [ 1054.626693][T15056] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 1054.634824][ T29] audit: type=1400 audit(1733015765.451:1386): avc: denied { ioctl } for pid=15049 comm="syz.4.1945" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1055.022947][ T29] audit: type=1400 audit(1733015765.781:1387): avc: denied { getopt } for pid=15060 comm="syz.0.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1055.532865][T15081] netlink: 'syz.4.1954': attribute type 10 has an invalid length. [ 1055.778727][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.786494][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.167152][ T29] audit: type=1400 audit(1733015767.051:1388): avc: denied { read } for pid=15093 comm="syz.0.1959" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1056.389608][ T29] audit: type=1400 audit(1733015767.111:1389): avc: denied { open } for pid=15093 comm="syz.0.1959" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1056.413302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.659629][ T29] audit: type=1400 audit(1733015767.531:1390): avc: denied { map } for pid=15091 comm="syz.7.1957" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1056.682956][ T29] audit: type=1400 audit(1733015767.531:1391): avc: denied { execute } for pid=15091 comm="syz.7.1957" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1057.281265][ T29] audit: type=1400 audit(1733015768.341:1392): avc: denied { write } for pid=15105 comm="syz.1.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1057.628279][T15125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.848241][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 1057.899972][T15133] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1971'. [ 1057.977180][T15140] fuse: Unknown parameter '00000000000000000011' [ 1058.131966][T11458] Bluetooth: hci6: command 0x0406 tx timeout [ 1059.135140][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 1059.169147][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1059.169165][ T29] audit: type=1400 audit(1733015770.241:1396): avc: denied { write } for pid=15155 comm="syz.0.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1059.244379][T15159] overlayfs: empty lowerdir [ 1059.251362][ T29] audit: type=1400 audit(1733015770.331:1397): avc: denied { mounton } for pid=15158 comm="syz.7.1983" path="/55/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1059.422466][T15164] netlink: 15 bytes leftover after parsing attributes in process `syz.7.1985'. [ 1059.535100][ T29] audit: type=1400 audit(1733015770.411:1398): avc: denied { create } for pid=15129 comm="syz.6.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1059.617347][ T29] audit: type=1400 audit(1733015770.411:1399): avc: denied { ioctl } for pid=15129 comm="syz.6.1972" path="socket:[47570]" dev="sockfs" ino=47570 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1059.731481][ T29] audit: type=1400 audit(1733015770.801:1400): avc: denied { map } for pid=15171 comm="syz.4.1988" path="/dev/video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1059.886732][ T29] audit: type=1400 audit(1733015770.871:1401): avc: denied { ioctl } for pid=15177 comm="syz.7.1989" path="mnt:[4026534395]" dev="nsfs" ino=4026534395 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1060.679982][ T29] audit: type=1400 audit(1733015771.691:1402): avc: denied { create } for pid=15185 comm="syz.7.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1060.720133][ T29] audit: type=1400 audit(1733015771.691:1403): avc: denied { setopt } for pid=15185 comm="syz.7.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1060.807866][ T29] audit: type=1400 audit(1733015771.731:1404): avc: denied { getopt } for pid=15182 comm="syz.4.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1061.056651][ T29] audit: type=1400 audit(1733015771.791:1405): avc: denied { append } for pid=15191 comm="syz.6.1993" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1061.867317][T15217] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1061.874603][T15217] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1063.421842][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2011'. [ 1063.482415][ T117] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1063.671601][ T117] usb 5-1: config index 0 descriptor too short (expected 64922, got 72) [ 1063.701091][ T117] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1063.714062][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.743166][ T117] usb 5-1: Product: syz [ 1063.747378][ T117] usb 5-1: Manufacturer: syz [ 1063.760483][ T117] usb 5-1: SerialNumber: syz [ 1064.358577][ T117] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1064.848048][T15265] tmpfs: Bad value for 'mpol' [ 1065.127635][ T5863] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1065.411445][ T48] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1065.706303][ T117] usb 5-1: USB disconnect, device number 15 [ 1065.742088][ T48] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1065.754469][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1066.278314][ T5863] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1066.286106][ T5863] ath9k_htc: Failed to initialize the device [ 1066.301067][ T117] usb 5-1: ath9k_htc: USB layer deinitialized [ 1066.870635][ T48] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1066.880783][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.889214][ T48] usb 8-1: Product: syz [ 1066.893441][ T48] usb 8-1: Manufacturer: syz [ 1066.898404][ T48] usb 8-1: SerialNumber: syz [ 1066.912063][ T48] usb 8-1: config 0 descriptor?? [ 1068.389174][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1068.389192][ T29] audit: type=1400 audit(1733015779.331:1407): avc: denied { ioctl } for pid=15304 comm="syz.4.2031" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47721 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1068.567901][ T48] input: Griffin PowerMate as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input16 [ 1068.639548][ T29] audit: type=1400 audit(1733015779.721:1408): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3056 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.665593][T15312] netlink: 'syz.1.2032': attribute type 4 has an invalid length. [ 1068.679684][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 1068.716875][ T29] audit: type=1400 audit(1733015779.721:1409): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3056 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.743243][ C1] powermate: config urb returned -71 [ 1068.748911][ C1] powermate: config urb returned -71 [ 1068.758095][ C1] powermate: config urb returned -71 [ 1068.765813][ C1] powermate: config urb returned -71 [ 1068.905457][ T29] audit: type=1400 audit(1733015779.721:1410): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3056 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.105288][ T29] audit: type=1400 audit(1733015780.151:1411): avc: denied { read } for pid=15322 comm="syz.1.2038" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1069.123251][ T48] usb 8-1: USB disconnect, device number 6 [ 1069.128707][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1069.169896][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 1069.308835][ T29] audit: type=1400 audit(1733015780.151:1412): avc: denied { open } for pid=15322 comm="syz.1.2038" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1069.721607][ T29] audit: type=1400 audit(1733015780.191:1413): avc: denied { ioctl } for pid=15322 comm="syz.1.2038" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1069.841427][ T29] audit: type=1400 audit(1733015780.921:1414): avc: denied { write } for pid=15332 comm="syz.7.2043" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1071.533623][ T29] audit: type=1400 audit(1733015782.611:1415): avc: denied { getopt } for pid=15348 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1072.021265][ T29] audit: type=1400 audit(1733015782.751:1416): avc: denied { setopt } for pid=15347 comm="syz.1.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1072.332858][T15368] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2056'. [ 1072.801266][ T5897] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1073.341193][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1073.352293][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1073.363217][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1073.385695][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1073.396758][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1073.407005][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.430077][ T5897] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1073.439572][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.447737][ T5897] usb 5-1: Product: syz [ 1073.452376][ T5897] usb 5-1: Manufacturer: syz [ 1073.457007][ T5897] usb 5-1: SerialNumber: syz [ 1073.734279][ T5897] usb 5-1: config 0 descriptor?? [ 1073.955154][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1073.955191][ T29] audit: type=1400 audit(1733015785.041:1437): avc: denied { write } for pid=15420 comm="syz.0.2080" name="snmp6" dev="proc" ino=4026533084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1074.179267][T15428] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2083'. [ 1074.296088][ T5897] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 1074.414221][ T5897] usb 5-1: USB disconnect, device number 16 [ 1075.094361][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2093'. [ 1075.341556][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 1075.735689][ T29] audit: type=1400 audit(1733015786.821:1438): avc: denied { append } for pid=15476 comm="syz.6.2103" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1075.780670][T15473] ======================================================= [ 1075.780670][T15473] WARNING: The mand mount option has been deprecated and [ 1075.780670][T15473] and is ignored by this kernel. Remove the mand [ 1075.780670][T15473] option from the mount to silence this warning. [ 1075.780670][T15473] ======================================================= [ 1075.904479][T15473] Device name cannot be null; rc = [-22] [ 1076.482563][T15500] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1076.542204][ T29] audit: type=1400 audit(1733015787.611:1439): avc: denied { accept } for pid=15497 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1076.614263][T15508] dlm: Unknown command passed to DLM device : 0 [ 1076.614263][T15508] [ 1076.669420][ T29] audit: type=1400 audit(1733015787.691:1440): avc: denied { append } for pid=15507 comm="syz.1.2117" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.719002][ T29] audit: type=1400 audit(1733015787.801:1441): avc: denied { create } for pid=15512 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1076.766750][ T29] audit: type=1400 audit(1733015787.851:1442): avc: denied { bind } for pid=15512 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1076.906860][T15522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.925451][T15521] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1077.068938][T15526] netlink: 'syz.6.2126': attribute type 2 has an invalid length. [ 1077.106219][ T29] audit: type=1400 audit(1733015788.191:1443): avc: denied { create } for pid=15529 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1077.141181][ T29] audit: type=1400 audit(1733015788.191:1444): avc: denied { bind } for pid=15529 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1077.454673][T15544] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1077.864052][T15561] tmpfs: Bad value for 'nr_blocks' [ 1077.895793][ T29] audit: type=1400 audit(1733015788.981:1445): avc: denied { sys_module } for pid=15563 comm="syz.7.2143" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1078.159367][ T29] audit: type=1400 audit(1733015789.241:1446): avc: denied { read } for pid=15571 comm="syz.1.2147" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.431566][T15580] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 1079.257506][T15601] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 1079.467743][ T7557] Bluetooth: hci1: Frame reassembly failed (-84) [ 1079.530447][T15612] netlink: 'syz.1.2163': attribute type 10 has an invalid length. [ 1079.540279][T15612] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1079.555305][T15612] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1079.570977][T15612] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1080.057539][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1080.057556][ T29] audit: type=1400 audit(1733015791.121:1448): avc: denied { ioctl } for pid=15617 comm="syz.6.2166" path="socket:[50248]" dev="sockfs" ino=50248 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1080.088819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.144501][T15623] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2168'. [ 1080.154619][T15623] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2168'. [ 1080.163851][T15623] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2168'. [ 1080.173449][T15623] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2168'. [ 1080.554604][ T29] audit: type=1400 audit(1733015791.611:1449): avc: denied { getopt } for pid=15632 comm="syz.0.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1081.518657][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 1082.075577][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1082.942491][ T29] audit: type=1400 audit(1733015794.031:1450): avc: denied { append } for pid=15667 comm="syz.1.2187" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1083.718391][ T29] audit: type=1400 audit(1733015794.791:1451): avc: denied { read write } for pid=15692 comm="syz.1.2196" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1083.744506][T12879] Bluetooth: hci1: Frame reassembly failed (-84) [ 1083.751920][ T29] audit: type=1400 audit(1733015794.791:1452): avc: denied { open } for pid=15692 comm="syz.1.2196" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1083.778249][T15697] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 1083.805336][T15697] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1083.834002][T15697] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1083.861659][T15697] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1084.350787][ T29] audit: type=1400 audit(1733015795.431:1453): avc: denied { bind } for pid=15716 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1084.373301][ T29] audit: type=1400 audit(1733015795.431:1454): avc: denied { node_bind } for pid=15716 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1084.654913][ T29] audit: type=1400 audit(1733015795.741:1455): avc: denied { ioctl } for pid=15730 comm="syz.1.2214" path="socket:[50581]" dev="sockfs" ino=50581 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1085.301222][ T5863] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1085.451236][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 1085.462836][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.474498][ T5863] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1085.484321][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.504892][ T5863] usb 2-1: config 0 descriptor?? [ 1085.619241][ T29] audit: type=1400 audit(1733015796.701:1456): avc: denied { read } for pid=15745 comm="syz.7.2221" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1085.653085][ T29] audit: type=1400 audit(1733015796.741:1457): avc: denied { open } for pid=15745 comm="syz.7.2221" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1085.679995][ T29] audit: type=1400 audit(1733015796.741:1458): avc: denied { map } for pid=15745 comm="syz.7.2221" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1085.703857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.731354][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1086.153522][ T5863] kye 0003:0458:5013.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1086.180508][ T5863] kye 0003:0458:5013.0002: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 1086.690744][ T5863] kye 0003:0458:5013.0002: tablet-enabling feature report not found [ 1086.823667][ T5863] kye 0003:0458:5013.0002: tablet enabling failed [ 1086.911571][ T5863] usb 2-1: USB disconnect, device number 16 [ 1086.917575][ T29] audit: type=1400 audit(1733015797.991:1459): avc: denied { create } for pid=15767 comm="syz.7.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1086.937024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.959513][ T29] audit: type=1400 audit(1733015798.001:1460): avc: denied { write } for pid=15767 comm="syz.7.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1087.041870][ T29] audit: type=1400 audit(1733015798.121:1461): avc: denied { bind } for pid=15770 comm="syz.7.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1087.146444][ T29] audit: type=1400 audit(1733015798.121:1462): avc: denied { write } for pid=15770 comm="syz.7.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1087.255150][T11458] Bluetooth: hci1: sending frame failed (-49) [ 1087.265827][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1087.367162][ T7557] Bluetooth: hci5: Frame reassembly failed (-84) [ 1087.405244][T15777] netlink: 'syz.7.2235': attribute type 10 has an invalid length. [ 1087.414022][T15777] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1087.426677][T15777] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1087.437601][T15777] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1089.033168][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1089.932850][T11458] Bluetooth: hci5: command 0x1003 tx timeout [ 1089.942065][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1090.939766][ T29] audit: type=1400 audit(1733015802.021:1463): avc: denied { write } for pid=15824 comm="syz.7.2253" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1090.964829][ T29] audit: type=1400 audit(1733015802.051:1464): avc: denied { create } for pid=15823 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1091.115762][ T29] audit: type=1400 audit(1733015802.181:1465): avc: denied { bind } for pid=15823 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1091.181541][ T29] audit: type=1400 audit(1733015802.241:1466): avc: denied { setopt } for pid=15823 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1091.201093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1091.249564][T12879] Bluetooth: hci1: Frame reassembly failed (-84) [ 1091.287366][T15826] "syz.4.2251" (15826) uses obsolete ecb(arc4) skcipher [ 1091.339403][T15840] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 1091.376276][T15840] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1091.389648][ T29] audit: type=1400 audit(1733015802.471:1467): avc: denied { block_suspend } for pid=15841 comm="syz.4.2256" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1091.407557][T15840] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1091.445578][T15840] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1091.776608][ T7557] Bluetooth: hci5: Frame reassembly failed (-84) [ 1093.251918][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1093.532096][ T29] audit: type=1400 audit(1733015804.621:1468): avc: denied { read } for pid=15866 comm="syz.1.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1093.551659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.617715][ T29] audit: type=1400 audit(1733015804.701:1469): avc: denied { map } for pid=15871 comm="syz.6.2265" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1093.651340][T11458] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1094.610345][ T6058] Bluetooth: hci1: Frame reassembly failed (-84) [ 1094.681818][T15893] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 1094.691584][T15893] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1094.722435][ T29] audit: type=1400 audit(1733015805.801:1470): avc: denied { setopt } for pid=15894 comm="syz.0.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1094.762073][T15893] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1095.066265][T15893] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1095.397902][T15916] can0: slcan on ttyS3. [ 1095.404928][ T29] audit: type=1400 audit(1733015806.491:1471): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1095.542533][T15915] can0 (unregistered): slcan off ttyS3. [ 1096.586306][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1096.789776][ T29] audit: type=1400 audit(1733015807.831:1472): avc: denied { setopt } for pid=15922 comm="syz.7.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1096.961442][ T29] audit: type=1400 audit(1733015808.041:1473): avc: denied { map } for pid=15922 comm="syz.7.2286" path="socket:[50841]" dev="sockfs" ino=50841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1097.039070][ T29] audit: type=1400 audit(1733015808.041:1474): avc: denied { read } for pid=15922 comm="syz.7.2286" path="socket:[50841]" dev="sockfs" ino=50841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1098.358378][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 1098.976621][ T29] audit: type=1400 audit(1733015810.061:1475): avc: denied { mount } for pid=15972 comm="syz.7.2299" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1099.117392][ T29] audit: type=1400 audit(1733015810.201:1476): avc: denied { unmount } for pid=13540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1099.251809][ T8813] Bluetooth: hci1: Frame reassembly failed (-84) [ 1099.272709][T15980] netlink: 'syz.1.2300': attribute type 10 has an invalid length. [ 1099.280826][T15980] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1099.293872][T15980] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1099.306272][T15980] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1100.246942][T16003] fuse: Unknown parameter '00000000000000000010' [ 1102.086223][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1102.569976][T11458] Bluetooth: hci1: command 0x1003 tx timeout [ 1102.785121][T16023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1104.945106][T16036] nbd: must specify a size in bytes for the device [ 1105.817500][ T29] audit: type=1400 audit(1733015816.901:1477): avc: denied { connect } for pid=16052 comm="syz.0.2321" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1106.001498][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1106.325526][T16061] netlink: 'syz.6.2323': attribute type 10 has an invalid length. [ 1106.356738][T16061] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1106.369345][T16061] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1106.383736][T16061] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1107.731336][ T5863] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1107.977729][T13949] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1108.687042][T11458] Bluetooth: hci1: command 0x1003 tx timeout [ 1108.694529][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1109.076311][T16095] fuse: Unknown parameter '00000000000000000010' [ 1109.411755][T13949] usb 5-1: Using ep0 maxpacket: 32 [ 1109.422029][T13949] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1109.440630][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 1109.461290][T13949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.504021][ T5863] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1109.515127][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.537404][T13949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.564796][ T5863] usb 2-1: config 0 descriptor?? [ 1109.578440][T13949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1109.604400][ T5863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1109.651441][T13949] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1109.674092][T13949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.696948][T13949] usb 5-1: config 0 descriptor?? [ 1109.935687][T16077] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1109.957845][T13949] usbhid 5-1:0.0: can't add hid device: -71 [ 1109.975630][T13949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1110.039430][T13949] usb 5-1: USB disconnect, device number 17 [ 1110.225417][ T5863] usb 2-1: USB disconnect, device number 17 [ 1110.607377][ T29] audit: type=1400 audit(1733015821.691:1478): avc: denied { create } for pid=16129 comm="syz.4.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1110.630807][ T29] audit: type=1400 audit(1733015821.691:1479): avc: denied { connect } for pid=16129 comm="syz.4.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1110.650419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.675550][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 1110.832075][T16137] netlink: 'syz.7.2348': attribute type 10 has an invalid length. [ 1110.861370][T16137] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1110.891266][T16137] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1110.912264][T16137] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1111.043048][T16142] fuse: Unknown parameter '00000000000000000010' [ 1111.634372][ T29] audit: type=1400 audit(1733015822.721:1480): avc: denied { create } for pid=16148 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1111.733880][ T29] audit: type=1400 audit(1733015822.801:1481): avc: denied { setopt } for pid=16148 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1111.754155][ T29] audit: type=1400 audit(1733015822.811:1482): avc: denied { write } for pid=16148 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1112.173947][T16167] fuse: Unknown parameter '00000000000000000010' [ 1112.727299][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 1112.741428][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1112.910204][ T29] audit: type=1400 audit(1733015823.931:1483): avc: denied { connect } for pid=16176 comm="syz.1.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1113.783908][T16190] fuse: Unknown parameter '00000000000000000010' [ 1114.189957][T16198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1114.565168][ T5821] Bluetooth: hci1: sending frame failed (-49) [ 1114.586579][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1114.674362][T16212] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 1114.889227][T16212] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1115.178594][T16212] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1115.192549][T16212] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1115.231234][ T5863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1115.381472][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 1115.399981][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.418800][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.485206][ T5863] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1115.542404][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.555907][ T5863] usb 5-1: config 0 descriptor?? [ 1115.569747][ T29] audit: type=1400 audit(1733015826.651:1484): avc: denied { create } for pid=16221 comm="syz.7.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1115.646129][ T29] audit: type=1400 audit(1733015826.651:1485): avc: denied { setopt } for pid=16221 comm="syz.7.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1115.815243][T16230] tipc: Failed to obtain node identity [ 1115.842455][T16230] tipc: Enabling of bearer rejected, failed to enable media [ 1115.983307][ T5863] hid-alps 0003:044E:120C.0003: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 1116.249479][ T48] usb 5-1: USB disconnect, device number 18 [ 1116.891584][ T29] audit: type=1400 audit(1733015827.971:1486): avc: denied { write } for pid=16245 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1117.220010][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.226698][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.271398][T16250] netlink: 'syz.6.2392': attribute type 18 has an invalid length. [ 1118.090401][ T29] audit: type=1400 audit(1733015829.171:1487): avc: denied { read } for pid=16267 comm="syz.1.2399" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1118.130960][ T29] audit: type=1400 audit(1733015829.171:1488): avc: denied { open } for pid=16267 comm="syz.1.2399" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1118.249668][ T29] audit: type=1400 audit(1733015829.171:1489): avc: denied { ioctl } for pid=16267 comm="syz.1.2399" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1119.425393][ T29] audit: type=1400 audit(1733015830.011:1490): avc: denied { setopt } for pid=16283 comm="syz.6.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1119.586918][ T29] audit: type=1400 audit(1733015830.051:1491): avc: denied { ioctl } for pid=16283 comm="syz.6.2404" path="socket:[51683]" dev="sockfs" ino=51683 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1120.201187][ T29] audit: type=1400 audit(1733015831.281:1492): avc: denied { bind } for pid=16295 comm="syz.6.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1120.789428][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2409'. [ 1121.231353][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1121.261368][ T48] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1121.391485][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 1121.447474][ T48] usb 8-1: Using ep0 maxpacket: 32 [ 1121.461481][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1121.473243][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1121.484455][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1121.494557][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.537144][ T48] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1121.545560][ T48] usb 8-1: config 0 has no interface number 0 [ 1121.552389][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1121.561574][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1121.570346][ T5897] usb 2-1: Product: syz [ 1121.574643][ T5897] usb 2-1: Manufacturer: syz [ 1121.579472][ T5897] usb 2-1: SerialNumber: syz [ 1121.608070][ T5897] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input18 [ 1121.641297][ T48] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1121.650394][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.662183][ T48] usb 8-1: Product: syz [ 1121.666402][ T48] usb 8-1: Manufacturer: syz [ 1121.671051][ T48] usb 8-1: SerialNumber: syz [ 1121.681799][ T48] usb 8-1: config 0 descriptor?? [ 1121.734487][ T48] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1121.964298][T13950] usb 2-1: USB disconnect, device number 18 [ 1122.013405][ T48] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1122.034629][T13950] appletouch 2-1:1.0: input: appletouch disconnected [ 1122.046163][ T48] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1122.381482][ T5863] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1122.413251][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1122.413557][T13950] usb 8-1: USB disconnect, device number 7 [ 1122.452907][T13950] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1122.479233][T13950] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1122.505255][T13950] quatech2 8-1:0.51: device disconnected [ 1122.541766][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 1122.552163][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.576014][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.591475][ T5863] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1122.610999][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.657205][ T5863] usb 5-1: config 0 descriptor?? [ 1122.675182][ T29] audit: type=1400 audit(1733015833.761:1493): avc: denied { read write } for pid=16328 comm="syz.1.2421" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1122.708872][T13949] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 1122.728854][T13949] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 1122.748988][T13949] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 1122.754753][ T29] audit: type=1400 audit(1733015833.761:1494): avc: denied { open } for pid=16328 comm="syz.1.2421" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1122.776463][T13949] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 1123.101052][ T5863] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 1123.115084][ T5863] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 1123.142086][ T5863] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 1123.160005][ T5863] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 1123.167183][ T5863] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 1123.207789][ T5863] lenovo 0003:17EF:6062.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 1123.334088][ T48] usb 5-1: USB disconnect, device number 19 [ 1124.138644][ T29] audit: type=1400 audit(1733015835.221:1495): avc: denied { ioctl } for pid=16345 comm="syz.6.2429" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1124.796306][ T29] audit: type=1400 audit(1733015835.881:1496): avc: denied { read } for pid=16372 comm="syz.7.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1124.816811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.891397][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1125.070352][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.096295][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.123920][ T5897] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1125.145946][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.194017][ T5897] usb 5-1: config 0 descriptor?? [ 1126.182580][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.190310][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.198104][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.206363][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.213987][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.221459][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.228875][ T5897] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 1126.253390][ T5897] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 1126.275414][ T5897] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 1126.450871][ T5897] usb 5-1: USB disconnect, device number 20 [ 1126.474733][ T29] audit: type=1400 audit(1733015837.561:1497): avc: denied { listen } for pid=16387 comm="syz.1.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1126.522633][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 1126.550402][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 1126.600554][T16390] netlink: 'syz.0.2447': attribute type 5 has an invalid length. [ 1127.521275][T13950] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1127.682956][T13950] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1127.717207][T13950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.736032][T13950] usb 8-1: config 0 descriptor?? [ 1127.755851][T13950] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1128.071325][ T5863] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1128.213125][T13950] gspca_cpia1: usb_control_msg 03, error -32 [ 1128.220058][T13950] gspca_cpia1: usb_control_msg 03, error -71 [ 1128.227747][T13950] gspca_cpia1: usb_control_msg 01, error -71 [ 1128.241169][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.254211][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.264674][T13950] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1128.311538][T13950] usb 8-1: USB disconnect, device number 8 [ 1128.318020][ T5863] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1128.381388][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.965155][ T5863] usb 2-1: config 0 descriptor?? [ 1129.195945][ T29] audit: type=1400 audit(1733015840.281:1498): avc: denied { read } for pid=16468 comm="syz.4.2478" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1129.263193][ T29] audit: type=1400 audit(1733015840.281:1499): avc: denied { open } for pid=16468 comm="syz.4.2478" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1129.287189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.417593][ T5863] vrc2 0003:07C0:1125.0007: fixing up VRC-2 report descriptor [ 1129.453169][ T5863] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0007/input/input19 [ 1129.559455][ T5863] vrc2 0003:07C0:1125.0007: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 1129.581537][ T117] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1129.649969][ T5863] usb 2-1: USB disconnect, device number 19 [ 1129.751696][ T117] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.767283][ T29] audit: type=1400 audit(1733015840.841:1500): avc: denied { read } for pid=16486 comm="syz.6.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1129.786675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.800316][ T117] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1129.815141][ T117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1129.830984][ T117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.844801][ T117] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1129.869169][ T117] usb 8-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1129.891534][ T117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.909593][ T117] usb 8-1: config 0 descriptor?? [ 1130.693913][ T117] hid (null): unknown global tag 0xd [ 1130.745412][ T117] hid-u2fzero 0003:20A0:4287.0008: collection stack underflow [ 1130.757244][ T117] hid-u2fzero 0003:20A0:4287.0008: item 0 1 0 12 parsing failed [ 1130.767553][ T117] hid-u2fzero 0003:20A0:4287.0008: probe with driver hid-u2fzero failed with error -22 [ 1130.865356][ T29] audit: type=1400 audit(1733015841.951:1501): avc: denied { write } for pid=16500 comm="syz.1.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1130.991818][ T117] usb 8-1: USB disconnect, device number 9 [ 1131.215264][ T29] audit: type=1400 audit(1733015842.301:1502): avc: denied { bind } for pid=16513 comm="syz.1.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1131.391409][ T5863] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1131.618844][T16520] fuse: Unknown parameter '00000000000000000010' [ 1132.107023][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 1132.192077][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.203784][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.214247][ T5863] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1132.223450][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.244174][ T5863] usb 5-1: config 0 descriptor?? [ 1132.465575][ T5863] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1132.507603][T16530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.670944][T16512] iowarrior 5-1:0.0: Error -90 while submitting URB [ 1132.679680][T13950] usb 5-1: USB disconnect, device number 21 [ 1132.758673][ T5863] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1132.867856][ T29] audit: type=1400 audit(1733015843.951:1503): avc: denied { write } for pid=16541 comm="syz.0.2509" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1132.911305][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 1132.919310][ T5863] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1132.943866][ T5863] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1132.965670][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.978776][ T5863] usb 8-1: Product: syz [ 1132.987792][ T5863] usb 8-1: Manufacturer: syz [ 1133.007525][ T5863] usb 8-1: SerialNumber: syz [ 1133.038268][ T5863] usb 8-1: config 0 descriptor?? [ 1133.054872][ T5863] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1133.138205][ T29] audit: type=1400 audit(1733015844.221:1504): avc: denied { create } for pid=16544 comm="syz.6.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1133.161545][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1133.189375][ T29] audit: type=1400 audit(1733015844.251:1505): avc: denied { write } for pid=16544 comm="syz.6.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1133.628637][ T5863] gspca_zc3xx: reg_w_i err -71 [ 1133.831008][T16562] fuse: Unknown parameter '00000000000000000010' [ 1134.213126][ T29] audit: type=1400 audit(1733015845.291:1506): avc: denied { sqpoll } for pid=16559 comm="syz.4.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1134.291391][ T5863] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1134.297814][ T5863] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1134.369172][ T5863] usb 8-1: USB disconnect, device number 10 [ 1134.852319][T16581] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1134.897693][T16583] netlink: 'syz.4.2524': attribute type 1 has an invalid length. [ 1134.906119][T16583] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1135.119370][ T29] audit: type=1400 audit(1733015846.201:1507): avc: denied { create } for pid=16590 comm="syz.1.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1135.159303][ T29] audit: type=1400 audit(1733015846.201:1508): avc: denied { connect } for pid=16590 comm="syz.1.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1135.180196][ T29] audit: type=1400 audit(1733015846.201:1509): avc: denied { ioctl } for pid=16590 comm="syz.1.2528" path="socket:[54280]" dev="sockfs" ino=54280 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1136.956900][ T29] audit: type=1400 audit(1733015848.041:1510): avc: denied { read } for pid=16631 comm="syz.1.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1138.032235][T16651] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1138.098027][T16654] overlayfs: conflicting lowerdir path [ 1138.111444][ T29] audit: type=1400 audit(1733015849.181:1511): avc: denied { unlink } for pid=16652 comm="syz.7.2553" name="#2a" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1138.251597][T16658] netlink: 'syz.1.2555': attribute type 2 has an invalid length. [ 1139.071388][T16670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1139.231270][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1139.521366][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1139.540841][ T29] audit: type=1400 audit(1733015850.621:1512): avc: denied { getopt } for pid=16680 comm="syz.6.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1139.591267][ T5897] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.602481][ T5897] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.615647][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.622460][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1139.631624][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.641670][ T5897] usb 5-1: config 0 descriptor?? [ 1139.691576][T13950] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1139.842866][T13950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.864490][T13950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.915588][T13950] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1139.925424][T13950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.503533][T13950] usb 8-1: config 0 descriptor?? [ 1140.504989][ T5897] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 1140.546643][ T5897] appleir 0003:05AC:8243.0009: item fetching failed at offset 4/11 [ 1140.558317][ T5897] appleir 0003:05AC:8243.0009: parse failed [ 1140.565415][ T5897] appleir 0003:05AC:8243.0009: probe with driver appleir failed with error -22 [ 1140.587018][ T5897] usb 5-1: USB disconnect, device number 22 [ 1140.955135][T13950] holtek_kbd 0003:04D9:A055.000A: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.7-1/input0 [ 1141.079159][ T29] audit: type=1400 audit(1733015852.161:1513): avc: denied { connect } for pid=16705 comm="syz.6.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1141.136237][ T29] audit: type=1400 audit(1733015852.161:1514): avc: denied { write } for pid=16703 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1141.187110][ T5884] usb 8-1: USB disconnect, device number 11 [ 1141.244470][ T29] audit: type=1400 audit(1733015852.331:1515): avc: denied { listen } for pid=16710 comm="syz.6.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1141.461682][T13950] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 1141.494962][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 1141.548131][T16720] netlink: 'syz.6.2579': attribute type 10 has an invalid length. [ 1141.556115][T16720] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1141.568727][T16720] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1141.586885][T16720] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1141.623264][T13950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1141.634586][T13950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.644755][T13950] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1141.654670][T13950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.665738][T13950] usb 5-1: config 0 descriptor?? [ 1142.060527][ T29] audit: type=1400 audit(1733015853.141:1516): avc: denied { execute } for pid=16728 comm="syz.1.2583" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1142.133283][T16731] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1142.502661][ T29] audit: type=1400 audit(1733015853.141:1517): avc: denied { execute_no_trans } for pid=16728 comm="syz.1.2583" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1142.528273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.584835][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: unknown main item tag 0x0 [ 1142.593031][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: unknown main item tag 0x0 [ 1142.601216][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: unknown main item tag 0x0 [ 1142.609330][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: unknown main item tag 0x0 [ 1142.617892][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: unknown main item tag 0x0 [ 1142.651006][T13950] aquacomputer_d5next 0003:0C70:F0BD.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 1142.759373][T13950] usb 5-1: USB disconnect, device number 23 [ 1143.422315][ T29] audit: type=1400 audit(1733015854.511:1518): avc: denied { create } for pid=16749 comm="syz.4.2591" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1143.462409][ T29] audit: type=1400 audit(1733015854.511:1519): avc: denied { read } for pid=16749 comm="syz.4.2591" name="file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1143.520423][ T29] audit: type=1400 audit(1733015854.511:1520): avc: denied { open } for pid=16749 comm="syz.4.2591" path="/504/file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1143.554533][ T29] audit: type=1400 audit(1733015854.511:1521): avc: denied { ioctl } for pid=16749 comm="syz.4.2591" path="/504/file0" dev="tmpfs" ino=2710 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1143.591289][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 1143.598698][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1144.141525][T16773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2595'. [ 1145.225682][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1145.225688][T16792] bond0: (slave caif0): Error: Device type is different from other slaves [ 1145.225699][ T29] audit: type=1400 audit(1733015856.311:1526): avc: denied { ioctl } for pid=16791 comm="syz.0.2608" path="socket:[54588]" dev="sockfs" ino=54588 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1145.421763][T16796] fuse: Unknown parameter '00000000000000000010' [ 1146.218885][ T8813] Bluetooth: hci1: Frame reassembly failed (-84) [ 1146.227375][T16806] netlink: 'syz.0.2609': attribute type 10 has an invalid length. [ 1146.235694][T16806] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1146.262071][T16806] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1146.311463][T16806] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1147.121550][ T29] audit: type=1400 audit(1733015858.111:1527): avc: denied { mount } for pid=16823 comm="syz.4.2617" name="/" dev="hugetlbfs" ino=53756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1147.250726][ T29] audit: type=1400 audit(1733015858.241:1528): avc: denied { remount } for pid=16823 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1147.439754][ T29] audit: type=1400 audit(1733015858.521:1529): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1148.368339][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 1148.539099][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1148.692510][ T29] audit: type=1400 audit(1733015859.781:1530): avc: denied { write } for pid=16839 comm="syz.1.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1148.789473][ T29] audit: type=1400 audit(1733015859.781:1531): avc: denied { read } for pid=16839 comm="syz.1.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1148.878031][ T29] audit: type=1326 audit(1733015859.961:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16851 comm="syz.4.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9ad80849 code=0x7ffc0000 [ 1148.906357][ T29] audit: type=1326 audit(1733015859.961:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16851 comm="syz.4.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9ad80849 code=0x7ffc0000 [ 1148.940985][ T29] audit: type=1326 audit(1733015859.991:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16851 comm="syz.4.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a9ad80849 code=0x7ffc0000 [ 1148.985349][ T29] audit: type=1326 audit(1733015859.991:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16851 comm="syz.4.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9ad80849 code=0x7ffc0000 [ 1149.111379][T13950] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1149.547111][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.558163][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.588469][T16864] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1149.596625][T13950] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1149.624668][T13950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.642614][T13950] usb 2-1: config 0 descriptor?? [ 1149.840005][T16871] fuse: blksize only supported for fuseblk [ 1150.175194][T16879] fuse: Unknown parameter '00000000000000000010' [ 1150.619466][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1150.619481][ T29] audit: type=1400 audit(1733015861.701:1544): avc: denied { mount } for pid=16867 comm="syz.6.2633" name="/" dev="ramfs" ino=53840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1150.736635][T13950] zeroplus 0003:0C12:0030.000C: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 1150.748376][T13950] zeroplus 0003:0C12:0030.000C: no inputs found [ 1150.801286][ T29] audit: type=1400 audit(1733015861.841:1545): avc: denied { ioctl } for pid=16867 comm="syz.6.2633" path="socket:[53830]" dev="sockfs" ino=53830 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1150.839014][T13950] usb 2-1: USB disconnect, device number 20 [ 1150.865703][T16883] netlink: 'syz.7.2634': attribute type 10 has an invalid length. [ 1150.893826][T16883] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1150.913097][T16883] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1150.944360][T16883] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1150.951873][ T29] audit: type=1400 audit(1733015862.031:1546): avc: denied { unmount } for pid=11456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1151.049545][ T29] audit: type=1400 audit(1733015862.131:1547): avc: denied { read } for pid=16890 comm="syz.6.2640" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1151.085300][ T29] audit: type=1400 audit(1733015862.131:1548): avc: denied { open } for pid=16890 comm="syz.6.2640" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1151.189617][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2641'. [ 1151.198811][T16896] tipc: Started in network mode [ 1151.198849][T16896] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 1151.212146][T16896] tipc: Enabled bearer , priority 10 [ 1151.222164][ T29] audit: type=1400 audit(1733015862.171:1549): avc: denied { ioctl } for pid=16890 comm="syz.6.2640" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1152.355559][ T5897] tipc: Node number set to 10398378 [ 1152.418841][ T5884] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1152.581415][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 1152.595308][ T5884] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.609555][ T5884] usb 8-1: config 0 has no interface number 0 [ 1152.625544][ T5884] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1152.641036][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.653000][ T5884] usb 8-1: Product: syz [ 1152.657314][ T5884] usb 8-1: Manufacturer: syz [ 1152.670502][ T5884] usb 8-1: SerialNumber: syz [ 1152.689013][ T5884] usb 8-1: config 0 descriptor?? [ 1152.699765][ T5884] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1153.582191][ T5884] gspca_spca1528: reg_w err -71 [ 1153.601485][ T5884] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1153.621932][ T5884] usb 8-1: USB disconnect, device number 12 [ 1153.740130][ T5897] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1154.414959][ T5897] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1154.423444][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.458667][ T5897] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1154.504063][ T5897] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1154.542023][ T5897] usb 5-1: Manufacturer: syz [ 1154.599132][ T5897] usb 5-1: config 0 descriptor?? [ 1155.183206][ T29] audit: type=1400 audit(1733015866.271:1550): avc: denied { create } for pid=16965 comm="syz.6.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1155.211255][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1155.231284][ T5897] Registered IR keymap rc-empty [ 1155.237906][ T5897] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1155.249331][ T5897] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 1155.321851][ T29] audit: type=1400 audit(1733015866.271:1551): avc: denied { listen } for pid=16965 comm="syz.6.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1155.806343][T16980] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 1155.810818][ T29] audit: type=1400 audit(1733015866.891:1552): avc: denied { load_policy } for pid=16979 comm="syz.6.2675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1155.831664][T16980] SELinux: failed to load policy [ 1155.879067][ T117] usb 5-1: USB disconnect, device number 24 [ 1156.218987][T16989] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1156.481325][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1156.691611][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.774611][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.817250][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.934039][ T25] usb 8-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1156.943332][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.955692][ T25] usb 8-1: config 0 descriptor?? [ 1157.445373][ T25] playstation 0003:054C:0BA0.000D: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.7-1/input0 [ 1157.471934][T17014] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 1157.516048][T17014] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1157.517123][T17016] team0: Cannot enslave team device to itself [ 1157.759331][ T29] audit: type=1400 audit(1733015868.841:1553): avc: denied { mount } for pid=17021 comm="syz.0.2692" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1157.802607][ T25] playstation 0003:054C:0BA0.000D: Failed to retrieve feature with reportID 18: -71 [ 1157.812706][ T25] playstation 0003:054C:0BA0.000D: Failed to retrieve DualShock4 pairing info: -71 [ 1157.822510][ T25] playstation 0003:054C:0BA0.000D: Failed to get MAC address from DualShock4 [ 1157.836925][ T25] playstation 0003:054C:0BA0.000D: Failed to create dualshock4. [ 1157.845448][ T29] audit: type=1400 audit(1733015868.881:1554): avc: denied { remount } for pid=17021 comm="syz.0.2692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1157.866852][ T25] playstation 0003:054C:0BA0.000D: probe with driver playstation failed with error -71 [ 1158.392743][ T25] usb 8-1: USB disconnect, device number 13 [ 1158.425064][ T29] audit: type=1400 audit(1733015868.931:1555): avc: denied { read } for pid=17023 comm="syz.4.2693" path="socket:[54176]" dev="sockfs" ino=54176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1158.467639][T17031] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2695'. [ 1158.509933][T17031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2695'. [ 1158.526191][T17030] pimreg4: entered allmulticast mode [ 1158.564296][ T29] audit: type=1400 audit(1733015868.941:1556): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1158.901769][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1158.999128][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1159.010457][T17056] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1159.021962][T17056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1159.072659][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.094335][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.121418][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1159.130585][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.148310][ T29] audit: type=1400 audit(1733015870.231:1557): avc: denied { getopt } for pid=17061 comm="syz.0.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1159.179272][ T25] usb 8-1: config 0 descriptor?? [ 1159.333285][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 1159.342745][ T117] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1159.516838][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.528852][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.539297][ T117] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.552545][ T117] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1159.562071][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.574312][ T117] usb 2-1: config 0 descriptor?? [ 1159.611473][ T25] logitech 0003:046D:C295.000E: hidraw0: USB HID v10.00 Device [HID 046d:c295] on usb-dummy_hcd.7-1/input0 [ 1159.623938][ T25] logitech 0003:046D:C295.000E: no inputs found [ 1159.844242][ T25] usb 8-1: USB disconnect, device number 14 [ 1160.009092][ T117] acrux 0003:1A34:0802.000F: unknown main item tag 0x0 [ 1160.027125][ T117] acrux 0003:1A34:0802.000F: unknown main item tag 0x0 [ 1160.040153][ T117] acrux 0003:1A34:0802.000F: unknown main item tag 0x0 [ 1160.057424][ T117] acrux 0003:1A34:0802.000F: unknown main item tag 0x0 [ 1160.068838][ T117] acrux 0003:1A34:0802.000F: unknown main item tag 0x0 [ 1160.097897][ T117] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 1160.114258][ T117] acrux 0003:1A34:0802.000F: no inputs found [ 1160.120481][ T117] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 1160.232962][ T117] usb 2-1: USB disconnect, device number 21 [ 1160.637935][ T29] audit: type=1400 audit(1733015871.721:1558): avc: denied { ioctl } for pid=17087 comm="syz.0.2721" path="socket:[55057]" dev="sockfs" ino=55057 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1161.122649][T12879] Bluetooth: hci1: Frame reassembly failed (-84) [ 1161.199382][T17107] netlink: 'syz.4.2729': attribute type 10 has an invalid length. [ 1161.211302][T17107] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1161.272014][T17107] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1161.313049][ T117] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1161.342248][T17107] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1161.378776][ T29] audit: type=1400 audit(1733015872.461:1559): avc: denied { ioctl } for pid=17110 comm="syz.1.2730" path="socket:[55485]" dev="sockfs" ino=55485 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1161.403633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.422274][T17114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2731'. [ 1161.473144][ T117] usb 8-1: Using ep0 maxpacket: 32 [ 1161.480294][ T117] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.505148][ T117] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1161.526672][ T117] usb 8-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1161.556114][ T117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.587538][ T117] usb 8-1: config 0 descriptor?? [ 1161.642156][T17122] overlayfs: disabling nfs_export due to verity=on [ 1161.648747][T17122] overlayfs: missing 'lowerdir' [ 1162.142217][ T117] asus 0003:048D:CE50.0010: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.7-1/input0 [ 1162.161534][ T117] asus 0003:048D:CE50.0010: Asus input not registered [ 1162.239979][ T117] asus 0003:048D:CE50.0010: probe with driver asus failed with error -12 [ 1162.356541][ T5897] usb 8-1: USB disconnect, device number 15 [ 1162.441799][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1163.171401][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 1163.178099][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1163.680352][ T29] audit: type=1400 audit(1733015874.761:1560): avc: denied { connect } for pid=17152 comm="syz.7.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1163.945721][ T5897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1164.155636][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.228287][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.322836][ T5897] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1164.385927][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.536602][ T5897] usb 5-1: config 0 descriptor?? [ 1164.651520][T13950] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1164.808987][T17168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1164.819026][T13950] usb 2-1: Using ep0 maxpacket: 32 [ 1164.826231][T17168] batman_adv: batadv0: Adding interface: gretap1 [ 1164.833702][T17168] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.861202][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.872383][T17168] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1164.882806][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.894211][T13950] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1164.907257][T13950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.923116][T13950] usb 2-1: config 0 descriptor?? [ 1164.972496][ T5897] ortek 0003:1223:3F07.0011: unknown main item tag 0x6 [ 1164.979731][ T5897] ortek 0003:1223:3F07.0011: bogus close delimiter [ 1164.998319][ T5897] ortek 0003:1223:3F07.0011: item 0 0 2 10 parsing failed [ 1165.009543][ T5897] ortek 0003:1223:3F07.0011: probe with driver ortek failed with error -22 [ 1165.212827][ T117] usb 5-1: USB disconnect, device number 25 [ 1165.359718][T13950] hid-retrode 0003:0403:97C1.0012: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 1166.023326][ T5897] usb 2-1: USB disconnect, device number 22 [ 1166.641388][ T5884] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1166.852784][ T5884] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.948134][ T5884] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1167.086034][ T5884] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1167.102330][ T5884] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1167.130107][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.141583][ T5884] usb 8-1: config 0 descriptor?? [ 1167.460166][T17202] netlink: 'syz.4.2768': attribute type 18 has an invalid length. [ 1167.511527][T13950] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1167.681414][T13950] usb 2-1: Using ep0 maxpacket: 8 [ 1167.689519][ T5884] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 1167.697980][ T5884] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 1167.699472][T13950] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1167.706476][ T5884] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 1167.723120][ T5884] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 1167.724169][T13950] usb 2-1: config 0 has no interface number 1 [ 1167.731043][ T5884] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 1167.746538][T13950] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1167.807384][ T5884] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1168.137021][ T5884] hid-thrustmaster 0003:044F:B65D.0013: setup data couldn't be sent [ 1168.184070][ C1] hid-thrustmaster 0003:044F:B65D.0013: URB to get model id failed with error -71 [ 1168.267552][T13950] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1168.280153][T13950] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1168.284703][ T5884] usb 8-1: USB disconnect, device number 16 [ 1168.291725][T13950] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1168.307951][T13950] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1168.321283][T13950] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1168.333595][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1168.343497][T13950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1168.355503][T13950] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1168.370647][T13950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.391894][T13950] usb 2-1: Product: syz [ 1168.396113][T13950] usb 2-1: Manufacturer: syz [ 1168.400725][T13950] usb 2-1: SerialNumber: syz [ 1168.489108][T13950] usb 2-1: config 0 descriptor?? [ 1168.501982][T17196] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1168.529893][T13950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1168.554722][T13950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1168.635667][T13950] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1168.741850][T13950] usb 2-1: USB disconnect, device number 23 [ 1169.127438][ T5897] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1169.568335][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1169.578438][ T5897] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.592352][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1169.599120][ T5897] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1169.639763][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.662307][ T5897] usb 5-1: config 0 descriptor?? [ 1169.754841][T12810] udevd[12810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.048119][ T29] audit: type=1400 audit(1733015881.131:1561): avc: denied { setopt } for pid=17218 comm="syz.6.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1170.094014][T17218] delete_channel: no stack [ 1170.098648][T17233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.107573][ T5897] asus 0003:048D:CE50.0014: item fetching failed at offset 0/2 [ 1170.108098][ T5897] asus 0003:048D:CE50.0014: Asus hid parse failed: -22 [ 1170.308073][ T5897] asus 0003:048D:CE50.0014: probe with driver asus failed with error -22 [ 1170.327496][ T5897] usb 5-1: USB disconnect, device number 26 [ 1171.581262][ T5897] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1171.997515][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.080236][ T5897] usb 8-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1172.082510][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2787'. [ 1172.098255][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.259068][ T29] audit: type=1400 audit(1733015883.341:1562): avc: denied { ioctl } for pid=17264 comm="syz.4.2789" path="socket:[55799]" dev="sockfs" ino=55799 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1172.261860][ T5897] usb 8-1: config 0 descriptor?? [ 1172.504095][T17274] program syz.6.2792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.738023][ T5897] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.7-1/input0 [ 1173.118782][ T117] usb 8-1: USB disconnect, device number 17 [ 1173.950791][T17300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.961829][ T5897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1174.420373][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.502780][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1174.554556][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.652272][ T5897] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1174.734049][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.757237][ T5897] usb 2-1: config 0 descriptor?? [ 1174.781701][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 1174.793397][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1174.812340][ T25] usb 8-1: config 127 has an invalid interface number: 25 but max is 0 [ 1174.823964][ T25] usb 8-1: config 127 has no interface number 0 [ 1174.833607][ T25] usb 8-1: config 127 interface 25 has no altsetting 0 [ 1174.850545][ T25] usb 8-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1174.859850][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.868036][ T25] usb 8-1: Product: syz [ 1174.872348][ T25] usb 8-1: Manufacturer: syz [ 1174.877003][ T25] usb 8-1: SerialNumber: syz [ 1175.232034][ T5897] cp2112 0003:10C4:EA90.0016: item fetching failed at offset 5/7 [ 1175.255904][ T5897] cp2112 0003:10C4:EA90.0016: parse failed [ 1175.265662][ T25] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1175.286222][ T5897] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -22 [ 1175.475873][ T5863] usb 2-1: USB disconnect, device number 24 [ 1175.910930][ T25] usb 8-1: reset high-speed USB device number 18 using dummy_hcd [ 1176.341238][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1176.538815][ T25] usb 8-1: device firmware changed [ 1176.552482][ T25] ueagle-atm 8-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1176.562508][ T25] usb 8-1: USB disconnect, device number 18 [ 1178.613092][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.619718][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.078374][ T29] audit: type=1400 audit(1733015890.131:1563): avc: denied { read } for pid=17373 comm="syz.1.2835" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1179.157269][ T29] audit: type=1400 audit(1733015890.131:1564): avc: denied { open } for pid=17373 comm="syz.1.2835" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1179.181796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.373637][ T29] audit: type=1400 audit(1733015890.351:1565): avc: denied { ioctl } for pid=17375 comm="syz.4.2836" path="socket:[56023]" dev="sockfs" ino=56023 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1179.398417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.439775][ T29] audit: type=1400 audit(1733015890.381:1566): avc: denied { write } for pid=17379 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1179.458976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.579531][T17390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2841'. [ 1179.651002][ T29] audit: type=1400 audit(1733015890.731:1567): avc: denied { read } for pid=17389 comm="syz.0.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1180.544643][T17406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1180.551978][T17406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1180.571271][ T29] audit: type=1400 audit(1733015891.631:1568): avc: denied { write } for pid=17405 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1180.601757][T17406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1180.608299][T17406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1180.624204][ T29] audit: type=1400 audit(1733015891.681:1569): avc: denied { read } for pid=17408 comm="syz.0.2850" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1180.650893][ T29] audit: type=1400 audit(1733015891.681:1570): avc: denied { open } for pid=17408 comm="syz.0.2850" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1180.768932][ T29] audit: type=1400 audit(1733015891.681:1571): avc: denied { ioctl } for pid=17408 comm="syz.0.2850" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1180.845567][T17418] /dev/nullb0: Can't open blockdev [ 1180.865101][T17420] nbd: must specify an index to disconnect [ 1180.869878][T17417] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2852'. [ 1180.925513][T17422] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2853'. [ 1181.311936][T13950] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1181.471325][T13950] usb 2-1: Using ep0 maxpacket: 32 [ 1181.480396][T13950] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1181.489493][T13950] usb 2-1: config 0 has no interface number 0 [ 1181.514124][T13950] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1181.622389][T13950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.714106][T13950] usb 2-1: Product: syz [ 1181.718731][T13950] usb 2-1: Manufacturer: syz [ 1181.726497][T13950] usb 2-1: SerialNumber: syz [ 1181.903284][T13950] usb 2-1: config 0 descriptor?? [ 1181.998006][T13950] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1182.203553][T13950] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1182.232592][T13950] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1182.758027][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1182.758849][ T25] usb 2-1: USB disconnect, device number 25 [ 1183.113369][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1183.212435][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1183.225108][ T25] quatech2 2-1:0.51: device disconnected [ 1183.448922][ T29] audit: type=1400 audit(1733015894.531:1572): avc: denied { wake_alarm } for pid=17467 comm="syz.4.2871" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1184.317898][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2878'. [ 1184.358004][T17483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2880'. [ 1185.421228][ T5897] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1185.510964][ T29] audit: type=1400 audit(1733015896.591:1573): avc: denied { name_bind } for pid=17508 comm="syz.6.2891" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1185.751252][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1185.770664][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.780561][ T5897] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1185.789942][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.833959][ T5897] usb 5-1: config 0 descriptor?? [ 1186.361401][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1186.455368][ T8825] Bluetooth: hci1: Frame reassembly failed (-84) [ 1186.502073][T17524] netlink: 'syz.6.2895': attribute type 10 has an invalid length. [ 1186.530795][ T5897] wacom 0003:056A:032C.0017: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 1186.533473][T17524] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1186.561391][T17524] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1186.581456][T17524] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1186.591342][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 1186.602769][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.614675][ T25] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1186.634593][ T29] audit: type=1400 audit(1733015897.721:1574): avc: denied { shutdown } for pid=17527 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1186.645958][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.699281][ T29] audit: type=1400 audit(1733015897.721:1575): avc: denied { read } for pid=17527 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1186.724099][ T25] usb 8-1: config 0 descriptor?? [ 1186.735274][ T5897] usb 5-1: USB disconnect, device number 27 [ 1187.568881][ T25] waterforce 0003:1044:7A4D.0018: item fetching failed at offset 0/3 [ 1187.580810][ T25] waterforce 0003:1044:7A4D.0018: hid parse failed with -22 [ 1187.588598][ T25] waterforce 0003:1044:7A4D.0018: probe with driver waterforce failed with error -22 [ 1187.760877][ T25] usb 8-1: USB disconnect, device number 19 [ 1187.971299][ T5863] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1188.058341][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'. [ 1188.125779][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 1188.152341][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.179101][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.211585][ T5863] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1188.220673][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.250880][ T5863] usb 5-1: config 0 descriptor?? [ 1188.453250][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 1188.461843][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1189.138807][ T5863] hkems 0003:2006:0118.0019: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 1189.150010][ T5863] hkems 0003:2006:0118.0019: no inputs found [ 1189.156133][ T5863] hkems 0003:2006:0118.0019: force feedback init failed [ 1189.175216][ T5863] usb 5-1: USB disconnect, device number 28 [ 1189.743484][T17566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.797266][T17581] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1190.825443][T17579] ax25_connect(): syz.7.2917 uses autobind, please contact jreuter@yaina.de [ 1190.846635][ T29] audit: type=1400 audit(1733015901.911:1576): avc: denied { connect } for pid=17578 comm="syz.7.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1191.583953][ T5897] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1191.751247][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 1191.762851][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.775601][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.816483][ T5897] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1191.853338][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.912472][ T5897] usb 8-1: config 0 descriptor?? [ 1192.550600][ T5897] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review [ 1192.669505][ T5897] bigben 0003:146B:0902.001A: item fetching failed at offset 3/5 [ 1192.702637][ T5897] bigben 0003:146B:0902.001A: parse failed [ 1192.709605][ T5897] bigben 0003:146B:0902.001A: probe with driver bigben failed with error -22 [ 1192.951280][ T5897] usb 8-1: USB disconnect, device number 20 [ 1193.294901][T17613] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1193.352122][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1193.541362][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1193.548225][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1193.558757][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.753047][ T25] usb 5-1: config 0 descriptor?? [ 1193.760877][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1194.332090][ T25] gspca_sunplus: reg_w_riv err -110 [ 1194.338151][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1194.943002][ T29] audit: type=1400 audit(1733015906.031:1577): avc: denied { set_context_mgr } for pid=17640 comm="syz.7.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1195.375952][T17660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2950'. [ 1195.990145][T13950] usb 5-1: USB disconnect, device number 29 [ 1196.258900][T17687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.771290][ T29] audit: type=1400 audit(1733015907.851:1578): avc: denied { watch } for pid=17688 comm="syz.6.2963" path="/346" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1196.795424][ T29] audit: type=1400 audit(1733015907.851:1579): avc: denied { watch_sb watch_reads } for pid=17688 comm="syz.6.2963" path="/346" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1196.881657][ T117] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1197.048820][ T29] audit: type=1400 audit(1733015908.131:1580): avc: denied { name_bind } for pid=17701 comm="syz.1.2969" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1197.131366][ T29] audit: type=1400 audit(1733015908.161:1581): avc: denied { node_bind } for pid=17701 comm="syz.1.2969" saddr=fe88::2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1197.143747][T17705] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 1197.164209][ T117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.187644][ T117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.198006][ T117] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 1197.208096][ T117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.235730][ T117] usb 8-1: config 0 descriptor?? [ 1197.248826][T17705] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1197.348383][ T29] audit: type=1400 audit(1733015908.431:1582): avc: denied { module_load } for pid=17707 comm="syz.0.2972" path=2F6D656D66643A791035FBF77583253A72C2B978A471C1EA5F8C5A37E7619B11780EA1CF1A985337C9202864656C6574656429 dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1198.356286][T17709] Invalid ELF header len 5 [ 1198.801300][ T117] hid-rmi 0003:1532:011D.001B: unbalanced delimiter at end of report description [ 1198.810945][ T117] hid-rmi 0003:1532:011D.001B: parse failed [ 1198.817167][ T117] hid-rmi 0003:1532:011D.001B: probe with driver hid-rmi failed with error -22 [ 1198.830987][ T117] usb 8-1: USB disconnect, device number 21 [ 1199.111352][ T5897] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1199.360505][ T5897] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 1199.386078][ T5897] usb 5-1: config 4 has no interface number 0 [ 1199.451584][ T5897] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1199.500176][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.600064][ T5897] usb 5-1: Product: syz [ 1199.638422][ T5897] usb 5-1: Manufacturer: syz [ 1199.648438][ T5897] usb 5-1: SerialNumber: syz [ 1199.712560][ T5897] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1200.110665][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1200.111448][T13949] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1200.121773][ T5897] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1200.710063][ T5897] usb 5-1: USB disconnect, device number 30 [ 1200.863730][T13949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.009964][T13949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.020541][T13949] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 1201.029859][T13949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.040389][T13949] usb 2-1: config 0 descriptor?? [ 1201.623498][ T29] audit: type=1400 audit(1733015912.711:1583): avc: denied { shutdown } for pid=17749 comm="syz.4.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1201.669296][ T29] audit: type=1400 audit(1733015912.711:1584): avc: denied { read } for pid=17749 comm="syz.4.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1201.838285][T13949] wacom 0003:056A:00DD.001C: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 1201.849143][T13949] wacom 0003:056A:00DD.001C: hidraw0: USB HID v0.20 Device [HID 056a:00dd] on usb-dummy_hcd.1-1/input0 [ 1201.862631][T13949] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00DD.001C/input/input24 [ 1201.909556][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1202.072371][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2990'. [ 1202.138100][T13949] usb 2-1: USB disconnect, device number 26 [ 1202.257562][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2992'. [ 1202.281360][ T29] audit: type=1400 audit(1733015913.341:1585): avc: denied { nlmsg_read } for pid=17763 comm="syz.7.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1202.302012][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.997333][T17772] netlink: 'syz.7.2995': attribute type 1 has an invalid length. [ 1203.005364][T17772] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2995'. [ 1203.022852][T17769] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1203.283702][ T29] audit: type=1400 audit(1733015914.361:1586): avc: denied { mount } for pid=17780 comm="syz.1.2999" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1203.306065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1203.336556][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3000'. [ 1203.356300][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3000'. [ 1203.382881][T17788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3002'. [ 1203.405824][ T29] audit: type=1400 audit(1733015914.411:1587): avc: denied { remount } for pid=17780 comm="syz.1.2999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1203.431371][T17788] tipc: Invalid UDP bearer configuration [ 1203.431420][T17788] tipc: Enabling of bearer rejected, failed to enable media [ 1203.464029][ T29] audit: type=1400 audit(1733015914.491:1588): avc: denied { view } for pid=17784 comm="syz.4.3001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1203.540234][ T29] audit: type=1400 audit(1733015914.541:1589): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1204.352365][T17806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.611402][ T25] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1204.641025][T17816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.948514][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.077035][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1205.312339][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1205.434729][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1205.475232][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.541401][T13949] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1205.596460][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1205.606084][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.612485][T17833] netlink: 'syz.7.3020': attribute type 1 has an invalid length. [ 1205.621216][ T25] usb 2-1: Product: syz [ 1205.626026][ T25] usb 2-1: Manufacturer: syz [ 1205.630635][ T25] usb 2-1: SerialNumber: syz [ 1205.631344][T17833] netlink: 'syz.7.3020': attribute type 3 has an invalid length. [ 1205.643392][T17833] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1205.672791][ T25] usb 2-1: config 0 descriptor?? [ 1205.722427][T17805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1205.801347][T13949] usb 5-1: Using ep0 maxpacket: 8 [ 1205.809161][T13949] usb 5-1: too many configurations: 31, using maximum allowed: 8 [ 1205.822390][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.834130][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1205.884122][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.908659][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1205.930009][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.951387][ T25] rc_core: IR keymap rc-xbox-dvd not found [ 1205.957709][ T25] Registered IR keymap rc-empty [ 1205.963381][ T25] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1205.973583][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 1205.990350][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.019605][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1206.027545][ T25] usb 2-1: USB disconnect, device number 27 [ 1206.201295][ T5897] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1206.449663][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 1206.489723][ T5897] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1206.509402][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.526613][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1206.545438][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.575971][ T5897] usb 8-1: Product: syz [ 1206.580193][ T5897] usb 8-1: Manufacturer: syz [ 1206.649893][ T5897] usb 8-1: SerialNumber: syz [ 1206.670100][ T5897] usb 8-1: config 0 descriptor?? [ 1206.678089][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.690408][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.760566][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.772340][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.817265][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.828594][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.848123][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.860161][T13949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 1206.874729][T13949] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 1206.886109][T13949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.893643][ T25] usb 8-1: USB disconnect, device number 22 [ 1206.913507][T13949] usb 5-1: Product: syz [ 1206.923927][T13949] usb 5-1: Manufacturer: syz [ 1206.928713][T13949] usb 5-1: SerialNumber: syz [ 1206.950046][T17822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1207.371656][ T29] audit: type=1400 audit(1733015918.461:1590): avc: denied { ioctl } for pid=17864 comm="syz.6.3034" path="socket:[58734]" dev="sockfs" ino=58734 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1207.410445][T13949] appletouch 5-1:1.0: Geyser mode initialized. [ 1207.418873][T13949] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input28 [ 1207.681553][ T29] audit: type=1400 audit(1733015918.771:1591): avc: denied { setopt } for pid=17873 comm="syz.7.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1207.747314][ T117] usb 5-1: USB disconnect, device number 31 [ 1207.753494][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1207.803063][T17876] fuse: Bad value for 'group_id' [ 1207.815806][T17876] fuse: Bad value for 'group_id' [ 1207.831734][ T117] appletouch 5-1:1.0: input: appletouch disconnected [ 1207.948884][ T29] audit: type=1400 audit(1733015919.031:1592): avc: denied { bind } for pid=17879 comm="syz.7.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1208.019849][ T29] audit: type=1400 audit(1733015919.051:1593): avc: denied { node_bind } for pid=17879 comm="syz.7.3041" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1208.522445][T17902] Invalid source name [ 1208.900719][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1208.970318][T17922] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 1208.978468][ T5897] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1208.984468][T17923] syz.1.3060 (17923) used obsolete PPPIOCDETACH ioctl [ 1208.988657][T17922] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1209.056800][T17922] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1209.088808][T17922] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1209.151426][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 1209.158809][ T5897] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1209.169309][ T5897] usb 8-1: config 0 has no interface number 0 [ 1209.178736][ T5897] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1209.198565][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.221235][ T5897] usb 8-1: Product: syz [ 1209.225458][ T5897] usb 8-1: Manufacturer: syz [ 1209.230088][ T5897] usb 8-1: SerialNumber: syz [ 1209.259365][ T5897] usb 8-1: config 0 descriptor?? [ 1209.273605][ T5897] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1209.357154][ T29] audit: type=1400 audit(1733015920.441:1594): avc: denied { append } for pid=17930 comm="syz.1.3063" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1209.473947][ T5897] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1209.480933][ T5897] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1209.513707][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 1209.518528][ T5897] usb 8-1: USB disconnect, device number 23 [ 1210.984180][T11458] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1211.855729][T17969] pim6reg: left allmulticast mode [ 1212.144229][T17975] can0: slcan on ptm0. [ 1212.342779][T17974] can0 (unregistered): slcan off ptm0. [ 1212.507338][T17987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.453156][T18000] fuse: Unknown parameter '00000000000000000010' [ 1213.721509][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1213.913052][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.937227][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1213.981345][ T25] usb 2-1: config 1 has no interface number 0 [ 1214.003598][ T25] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.034512][ T25] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1214.075699][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.091850][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.120914][ T25] usb 2-1: Product: syz [ 1214.126285][ T25] usb 2-1: Manufacturer: syz [ 1214.161207][ T25] usb 2-1: SerialNumber: syz [ 1215.002969][ T25] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1215.014366][ T25] cdc_ncm 2-1:1.1: bind() failure [ 1215.085828][ T25] usb 2-1: USB disconnect, device number 28 [ 1215.793909][ T29] audit: type=1400 audit(1733015926.871:1595): avc: denied { mounton } for pid=18056 comm="syz.7.3103" path="/proc/743/task" dev="proc" ino=58288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1215.841716][ T29] audit: type=1400 audit(1733015926.881:1596): avc: denied { mount } for pid=18056 comm="syz.7.3103" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1216.164681][ T29] audit: type=1400 audit(1733015927.251:1597): avc: denied { listen } for pid=18071 comm="syz.0.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1216.321194][ T29] audit: type=1400 audit(1733015927.391:1598): avc: denied { name_bind } for pid=18081 comm="syz.1.3113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1216.406830][ T29] audit: type=1400 audit(1733015927.491:1599): avc: denied { write } for pid=18085 comm="syz.7.3116" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1218.067526][T18109] IPv6: NLM_F_CREATE should be specified when creating new route [ 1218.415896][ T5897] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1218.955284][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.967217][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.977161][ T5897] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1218.986628][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.004945][ T5897] usb 8-1: config 0 descriptor?? [ 1219.518231][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1219.803008][T18134] sch_fq: defrate 0 ignored. [ 1219.836145][ T5897] chicony 0003:04F2:1421.001D: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.7-1/input0 [ 1219.987896][ T5897] usb 8-1: USB disconnect, device number 24 [ 1220.237531][ T29] audit: type=1400 audit(1733015931.321:1600): avc: denied { shutdown } for pid=18149 comm="syz.1.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1326.911144][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1326.918244][ C0] rcu: 1-...!: (0 ticks this GP) idle=6af4/1/0x4000000000000000 softirq=61308/61308 fqs=0 [ 1326.930621][ C0] rcu: (detected by 0, t=10502 jiffies, g=50413, q=262 ncpus=2) [ 1326.938372][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1326.938417][ C1] NMI backtrace for cpu 1 [ 1326.938499][ C1] CPU: 1 UID: 0 PID: 5811 Comm: syz-executor Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 1326.938523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1326.938535][ C1] RIP: 0010:enqueue_hrtimer+0x15c/0x3c0 [ 1326.938583][ C1] Code: 1f 00 00 00 44 89 ee e8 02 d5 12 00 41 83 fd 1f 0f 87 b3 73 a2 09 e8 b3 d2 12 00 44 89 e9 b8 01 00 00 00 49 8d 7c 24 44 d3 e0 <48> 89 fa 41 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 [ 1326.938601][ C1] RSP: 0018:ffffc90000a18e00 EFLAGS: 00000002 [ 1326.938625][ C1] RAX: 0000000000000002 RBX: ffff8880b872cb00 RCX: 0000000000000001 [ 1326.938637][ C1] RDX: ffff88802f6b2440 RSI: ffffffff817bf26d RDI: ffff8880b872ca44 [ 1326.938650][ C1] RBP: ffff888060854340 R08: 0000000000000005 R09: 000000000000001f [ 1326.938663][ C1] R10: 0000000000000001 R11: 0000000000000008 R12: ffff8880b872ca00 [ 1326.938675][ C1] R13: 0000000000000001 R14: ffff8880b872ca00 R15: ffffffff89365a00 [ 1326.938689][ C1] FS: 0000555586736500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1326.938707][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.938721][ C1] CR2: 00007fa542e756c0 CR3: 00000000617ea000 CR4: 00000000003526f0 [ 1326.938733][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1326.938745][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1326.938757][ C1] Call Trace: [ 1326.938764][ C1] [ 1326.938774][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1326.938833][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1326.938857][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1326.938890][ C1] ? enqueue_hrtimer+0x15c/0x3c0 [ 1326.938917][ C1] ? default_do_nmi+0x6a/0x160 [ 1326.938947][ C1] ? exc_nmi+0x170/0x1e0 [ 1326.938964][ C1] ? end_repeat_nmi+0xf/0x53 [ 1326.939003][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1326.939030][ C1] ? enqueue_hrtimer+0x14d/0x3c0 [ 1326.939057][ C1] ? enqueue_hrtimer+0x15c/0x3c0 [ 1326.939085][ C1] ? enqueue_hrtimer+0x15c/0x3c0 [ 1326.939113][ C1] ? enqueue_hrtimer+0x15c/0x3c0 [ 1326.939139][ C1] [ 1326.939145][ C1] [ 1326.939152][ C1] __hrtimer_run_queues+0x903/0xae0 [ 1326.939184][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1326.939211][ C1] ? read_tsc+0x9/0x20 [ 1326.939247][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1326.939286][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1326.939311][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1326.939339][ C1] [ 1326.939345][ C1] [ 1326.939352][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.939380][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 1326.939410][ C1] Code: 75 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b <8b> 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 [ 1326.939429][ C1] RSP: 0018:ffffc900032277c8 EFLAGS: 00000246 [ 1326.939447][ C1] RAX: 0000000080000002 RBX: ffffea0001c3a6b4 RCX: ffffffff81d9b40a [ 1326.939460][ C1] RDX: ffff88802f6b2440 RSI: ffffffff81d9b41f RDI: 0000000000000005 [ 1326.939473][ C1] RBP: ffffea0001c3a680 R08: 0000000000000005 R09: 000000000000007f [ 1326.939485][ C1] R10: 0000000000000085 R11: 0000000000000007 R12: 0000000000000008 [ 1326.939496][ C1] R13: ffff888065dee660 R14: dffffc0000000000 R15: ffffea0001c3a680 [ 1326.939513][ C1] ? copy_page_range+0xf9a/0x57d0 [ 1326.939552][ C1] ? copy_page_range+0xfaf/0x57d0 [ 1326.939574][ C1] copy_page_range+0xfaf/0x57d0 [ 1326.939608][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1326.939628][ C1] ? find_held_lock+0x2d/0x110 [ 1326.939666][ C1] ? __pfx_lock_release+0x10/0x10 [ 1326.939686][ C1] ? lock_acquire+0x2f/0xb0 [ 1326.939706][ C1] ? copy_process+0x7dc5/0x8df0 [ 1326.939740][ C1] ? down_write+0x14e/0x200 [ 1326.939772][ C1] ? up_write+0x1b2/0x520 [ 1326.939797][ C1] copy_process+0x7e77/0x8df0 [ 1326.939823][ C1] ? hlock_class+0x4e/0x130 [ 1326.939859][ C1] ? __pfx_copy_process+0x10/0x10 [ 1326.939897][ C1] kernel_clone+0xfd/0x960 [ 1326.939925][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1326.939955][ C1] ? find_held_lock+0x59/0x110 [ 1326.939982][ C1] ? find_held_lock+0x2d/0x110 [ 1326.940011][ C1] __do_sys_clone+0xba/0x100 [ 1326.940037][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1326.940068][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 1326.940095][ C1] do_syscall_64+0xcd/0x250 [ 1326.940123][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.940150][ C1] RIP: 0033:0x7fa542177093 [ 1326.940170][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1326.940188][ C1] RSP: 002b:00007ffe56697df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1326.940205][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa542177093 [ 1326.940218][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1326.940230][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1326.940241][ C1] R10: 00005555867367d0 R11: 0000000000000246 R12: 0000000000000000 [ 1326.940257][ C1] R13: 000000000012a19d R14: 0000000000129d9f R15: 00007ffe56697f80 [ 1326.940276][ C1] [ 1326.940400][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g50413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1327.458873][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1327.468861][ C0] rcu: RCU grace-period kthread stack dump: [ 1327.474745][ C0] task:rcu_preempt state:R running task stack:28424 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1327.486548][ C0] Call Trace: [ 1327.489834][ C0] [ 1327.492775][ C0] __schedule+0xe58/0x5ad0 [ 1327.497206][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1327.502437][ C0] ? __pfx___schedule+0x10/0x10 [ 1327.507297][ C0] ? schedule+0x298/0x350 [ 1327.511646][ C0] ? __pfx_lock_release+0x10/0x10 [ 1327.516687][ C0] ? lock_acquire+0x2f/0xb0 [ 1327.521207][ C0] ? schedule+0x1fd/0x350 [ 1327.525642][ C0] schedule+0xe7/0x350 [ 1327.529723][ C0] schedule_timeout+0x124/0x280 [ 1327.534584][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1327.539979][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1327.545291][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1327.551138][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1327.556615][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1327.561502][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1327.566797][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1327.571488][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1327.576705][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1327.582524][ C0] rcu_gp_kthread+0x271/0x380 [ 1327.587298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1327.592513][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1327.597726][ C0] ? __kthread_parkme+0x148/0x220 [ 1327.602780][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1327.607988][ C0] kthread+0x2c1/0x3a0 [ 1327.612074][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1327.617282][ C0] ? __pfx_kthread+0x10/0x10 [ 1327.621885][ C0] ret_from_fork+0x45/0x80 [ 1327.626309][ C0] ? __pfx_kthread+0x10/0x10 [ 1327.630915][ C0] ret_from_fork_asm+0x1a/0x30 [ 1327.635726][ C0] [ 1327.638751][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1327.645069][ C0] CPU: 0 UID: 0 PID: 18147 Comm: syz.4.3138 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 1327.655486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1327.665543][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 1327.670936][ C0] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 4f 13 75 7e <65> 8b 05 50 13 75 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 1327.690549][ C0] RSP: 0018:ffffc90003637860 EFLAGS: 00000202 [ 1327.696624][ C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffffff8182b7cc [ 1327.704598][ C0] RDX: ffff88807ba22440 RSI: 0000000000000000 RDI: 0000000000000005 [ 1327.712573][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1327.720545][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8949 [ 1327.728519][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 1327.736493][ C0] FS: 0000555581706500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1327.745431][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1327.752019][ C0] CR2: 00007f5ab070d178 CR3: 000000006300c000 CR4: 00000000003526f0 [ 1327.759997][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1327.767968][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1327.775942][ C0] Call Trace: [ 1327.779225][ C0] [ 1327.782092][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1327.788449][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1327.793669][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1327.799166][ C0] ? timekeeping_advance+0x70a/0xa60 [ 1327.804458][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1327.810112][ C0] ? __asan_memcpy+0x3c/0x60 [ 1327.814722][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 1327.820042][ C0] ? rcu_is_watching+0x12/0xc0 [ 1327.824823][ C0] ? update_process_times+0x178/0x2d0 [ 1327.830212][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1327.835965][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1327.841446][ C0] ? update_wall_time+0x1c/0x40 [ 1327.846306][ C0] ? tick_nohz_handler+0x376/0x530 [ 1327.851436][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1327.856908][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1327.862310][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1327.868043][ C0] ? read_tsc+0x9/0x20 [ 1327.872135][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1327.877273][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1327.883439][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1327.889254][ C0] [ 1327.892198][ C0] [ 1327.895133][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1327.901308][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 1327.907408][ C0] ? write_comp_data+0x11/0x90 [ 1327.912183][ C0] smp_call_function_many_cond+0x47c/0x1300 [ 1327.918096][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1327.923141][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1327.928177][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1327.933306][ C0] text_poke_bp_batch+0x22b/0x760 [ 1327.938346][ C0] ? __pfx_text_poke_loc_init+0x10/0x10 [ 1327.943905][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1327.949473][ C0] ? rcu_is_watching+0x12/0xc0 [ 1327.954256][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1327.960254][ C0] text_poke_bp+0xa3/0xd0 [ 1327.964604][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 1327.969649][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1327.974691][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1327.980681][ C0] __static_call_transform+0x34d/0x770 [ 1327.986167][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 1327.992177][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1327.998177][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 1328.003750][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1328.009736][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 1328.015290][ C0] arch_static_call_transform+0x5d/0xb0 [ 1328.020840][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1328.026827][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 1328.032383][ C0] __static_call_update+0xee/0x660 [ 1328.037530][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 1328.043090][ C0] ? __pfx___static_call_update+0x10/0x10 [ 1328.048822][ C0] ? rcu_is_watching+0x12/0xc0 [ 1328.053601][ C0] ? __kmalloc_noprof+0x23b/0x510 [ 1328.058670][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 1328.064248][ C0] tracepoint_probe_unregister+0xb0c/0xd70 [ 1328.070086][ C0] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1328.076185][ C0] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1328.082538][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 1328.087935][ C0] bpf_raw_tp_link_release+0x35/0x70 [ 1328.093229][ C0] bpf_link_free+0xe9/0x390 [ 1328.097740][ C0] bpf_link_release+0x5d/0x80 [ 1328.102425][ C0] __fput+0x3f8/0xb60 [ 1328.106446][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.111655][ C0] task_work_run+0x14e/0x250 [ 1328.116256][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1328.121378][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 1328.127122][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1328.132771][ C0] do_syscall_64+0xda/0x250 [ 1328.137289][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.143195][ C0] RIP: 0033:0x7f0a9ad80849 [ 1328.147614][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.167226][ C0] RSP: 002b:00007ffe53d65058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1328.175648][ C0] RAX: 0000000000000000 RBX: 00007f0a9af47ba0 RCX: 00007f0a9ad80849 [ 1328.183622][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1328.191615][ C0] RBP: 00007f0a9af47ba0 R08: 0000000000004ad4 R09: 00007ffe53d6533f [ 1328.199593][ C0] R10: 00007f0a9af47ac0 R11: 0000000000000246 R12: 000000000012a51a [ 1328.207583][ C0] R13: 00007f0a9af46080 R14: 0000000000000032 R15: ffffffffffffffff [ 1328.215598][ C0]