last executing test programs: 16.334938607s ago: executing program 2 (id=4135): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 12.771675887s ago: executing program 2 (id=4142): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000640)={0x0, 0x0, 0x9}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmdt(r2) 11.572258125s ago: executing program 2 (id=4146): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 8.870202095s ago: executing program 3 (id=4154): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x6, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) sendto$inet6(r4, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) unshare(0x2040400) 8.339936955s ago: executing program 4 (id=4155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) unshare(0x54000000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26f7ec9939aba531cc3612"], 0x1c}, 0x1, 0x0, 0x0, 0x40860}, 0x48840) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x6, 0x1, 0xfff}, {0x80, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x9, 0x4}, {0x3, 0x3, 0x0, 0x10001}, {0x83, 0x4, 0x0, 0x1}]}) 7.902978748s ago: executing program 4 (id=4157): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008ba000/0x2000)=nil, 0x2000}, 0x3}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 7.647772395s ago: executing program 3 (id=4158): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x6, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) unshare(0x2040400) 7.475795802s ago: executing program 2 (id=4160): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000640)={0x0, 0x0, 0x9}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2008080, &(0x7f00000000c0)={[{@quota}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, 0x0) r4 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 6.26667888s ago: executing program 4 (id=4162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) 6.106451279s ago: executing program 1 (id=4163): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @multicast2}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x80000001, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.917424803s ago: executing program 0 (id=4164): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008ba000/0x2000)=nil, 0x2000}, 0x3}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5.832174252s ago: executing program 1 (id=4165): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008ba000/0x2000)=nil, 0x2000}, 0x3}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.55570676s ago: executing program 0 (id=4166): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x2400801c) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.536736768s ago: executing program 1 (id=4167): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x180, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) 4.501292199s ago: executing program 2 (id=4168): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 4.323321707s ago: executing program 4 (id=4169): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) listen(r3, 0x400005) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 3.613715901s ago: executing program 1 (id=4170): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008ba000/0x2000)=nil, 0x2000}, 0x3}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 3.561186353s ago: executing program 3 (id=4171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) unshare(0x54000000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26f7ec9939aba531cc3612"], 0x1c}, 0x1, 0x0, 0x0, 0x40860}, 0x48840) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x6, 0x1, 0xfff}, {0x80, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x9, 0x4}, {0x3, 0x3, 0x0, 0x10001}, {0x83, 0x4, 0x0, 0x1}]}) 2.465423126s ago: executing program 1 (id=4172): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 2.295664096s ago: executing program 3 (id=4173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008ba000/0x2000)=nil, 0x2000}, 0x3}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.2903155s ago: executing program 0 (id=4174): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, r4, 0x0) execveat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)={[&(0x7f00000005c0)='dummy0\x00', &(0x7f0000000600)='lowpan\x00', &(0x7f0000000640)='-{&-+^+}\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='vcan0\x00']}, &(0x7f00000008c0)={[&(0x7f0000000800)='\x00', &(0x7f0000000840)='(,\x00', &(0x7f0000000880)='vcan0\x00']}, 0x100) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0xb, &(0x7f0000000280), &(0x7f0000000440)=0x4) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000380)={'dummy0\x00'}) 2.054126679s ago: executing program 0 (id=4175): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @multicast2}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x80000001, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.039297964s ago: executing program 4 (id=4176): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x400005) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 2.027037641s ago: executing program 0 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, r4, 0x0) execveat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)={[&(0x7f00000005c0)='dummy0\x00', &(0x7f0000000600)='lowpan\x00', &(0x7f0000000640)='-{&-+^+}\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='vcan0\x00']}, &(0x7f00000008c0)={[&(0x7f0000000800)='\x00', &(0x7f0000000840)='(,\x00', &(0x7f0000000880)='vcan0\x00']}, 0x100) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0xb, &(0x7f0000000280), &(0x7f0000000440)=0x4) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000380)={'dummy0\x00'}) 1.444203108s ago: executing program 0 (id=4178): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x6, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) sendto$inet6(r4, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) unshare(0x2040400) 1.368818114s ago: executing program 3 (id=4179): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000640)={0x0, 0x0, 0x9}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2008080, &(0x7f00000000c0)={[{@quota}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, 0x0) r4 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 695.825157ms ago: executing program 3 (id=4180): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) listen(r3, 0x400005) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 418.257518ms ago: executing program 2 (id=4181): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x6, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) sendto$inet6(r4, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) unshare(0x2040400) 77.175141ms ago: executing program 1 (id=4182): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket(0x10, 0x803, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) listen(r3, 0x400005) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 0s ago: executing program 4 (id=4183): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x6, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) sendto$inet6(r4, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) unshare(0x2040400) kernel console output (not intermixed with test programs): comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.071488][ T5873] usb 5-1: USB disconnect, device number 23 [ 834.074965][ T30] audit: type=1326 audit(1745136451.053:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14864 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.103618][ T30] audit: type=1326 audit(1745136451.083:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14864 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.127005][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.149028][ T30] audit: type=1326 audit(1745136451.083:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14864 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.177719][ T30] audit: type=1326 audit(1745136451.103:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14864 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.206383][ T30] audit: type=1326 audit(1745136451.123:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14864 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa58e169 code=0x7fc00000 [ 834.240094][ T30] audit: type=1400 audit(1745136451.303:4383): avc: denied { create } for pid=14844 comm="syz.3.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 834.774436][ T30] audit: type=1400 audit(1745136451.853:4384): avc: denied { read append } for pid=14882 comm="syz.2.2471" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 834.798094][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.979802][ T5870] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 836.078789][T14902] syz.4.2475: attempt to access beyond end of device [ 836.078789][T14902] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 836.091913][T14902] efs: cannot read volume header [ 836.589881][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 836.609054][T14912] siw: device registration error -23 [ 836.744491][ T5873] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 836.814650][ T5870] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 836.897289][ T5870] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 836.988454][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.999027][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 837.011163][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 837.017653][ T5870] usb 4-1: config 0 has no interface number 0 [ 837.026973][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.036682][T14916] afs: Unknown parameter 'dont_hash' [ 837.039401][ T5870] usb 4-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.055914][ T5870] usb 4-1: config 0 interface 125 has no altsetting 0 [ 837.066178][ T5873] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 837.330195][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.338695][ T5870] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 837.348213][ T5873] usb 5-1: Product: syz [ 837.354686][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.362771][ T5873] usb 5-1: Manufacturer: syz [ 837.367764][ T5870] usb 4-1: Product: syz [ 837.372505][ T5873] usb 5-1: SerialNumber: syz [ 837.390760][ T5873] usb 5-1: config 0 descriptor?? [ 837.403032][ T5870] usb 4-1: Manufacturer: syz [ 837.407789][ T5870] usb 4-1: SerialNumber: syz [ 837.843874][T14898] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2475'. [ 837.852982][ T5873] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 837.859995][T14898] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 837.958423][ T5870] usb 4-1: config 0 descriptor?? [ 837.969511][ T5870] usb 4-1: can't set config #0, error -71 [ 837.978636][ T5870] usb 4-1: USB disconnect, device number 27 [ 838.935806][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 839.300297][ T5873] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 839.308423][ T30] audit: type=1400 audit(1745136456.203:4390): avc: denied { write } for pid=14933 comm="syz.3.2488" path="socket:[37052]" dev="sockfs" ino=37052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 840.819853][ T5873] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 840.879000][ T5873] usb 5-1: USB disconnect, device number 24 [ 840.890804][ T30] audit: type=1400 audit(1745136458.193:4391): avc: denied { create } for pid=14947 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 840.977744][ T30] audit: type=1400 audit(1745136458.253:4392): avc: denied { mount } for pid=14942 comm="syz.1.2489" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 841.217091][ T30] audit: type=1400 audit(1745136458.503:4393): avc: denied { setopt } for pid=14947 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 841.762967][ T30] audit: type=1400 audit(1745136458.723:4394): avc: denied { create } for pid=14947 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 841.790094][ T30] audit: type=1400 audit(1745136458.723:4395): avc: denied { write } for pid=14947 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 842.589125][T14967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2499'. [ 843.492335][ T30] audit: type=1400 audit(1745136460.313:4396): avc: denied { read write } for pid=14962 comm="syz.2.2496" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 843.526251][ T30] audit: type=1400 audit(1745136460.313:4397): avc: denied { open } for pid=14962 comm="syz.2.2496" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 843.549936][ T30] audit: type=1400 audit(1745136460.413:4398): avc: denied { mounton } for pid=14962 comm="syz.2.2496" path="/469/file0" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 843.577535][ T30] audit: type=1400 audit(1745136460.413:4399): avc: denied { mount } for pid=14962 comm="syz.2.2496" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 844.311994][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 844.313060][ T30] audit: type=1400 audit(1745136461.293:4401): avc: denied { create } for pid=14975 comm="syz.0.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 844.443338][ T30] audit: type=1400 audit(1745136461.303:4402): avc: denied { write } for pid=14975 comm="syz.0.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 844.484284][ T30] audit: type=1400 audit(1745136461.313:4403): avc: denied { setopt } for pid=14975 comm="syz.0.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 844.815365][ T30] audit: type=1400 audit(1745136461.353:4404): avc: denied { nlmsg_read } for pid=14975 comm="syz.0.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 844.949205][ T30] audit: type=1400 audit(1745136462.153:4405): avc: denied { bind } for pid=14989 comm="syz.1.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 845.000980][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 845.009822][ T30] audit: type=1400 audit(1745136462.273:4406): avc: denied { ioctl } for pid=14989 comm="syz.1.2506" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37143 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 845.037281][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 845.044441][ T30] audit: type=1400 audit(1745136462.333:4407): avc: denied { open } for pid=14994 comm="syz.4.2508" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 845.266491][ T30] audit: type=1400 audit(1745136462.393:4408): avc: denied { write } for pid=14978 comm="syz.3.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 845.292597][ T30] audit: type=1400 audit(1745136462.583:4409): avc: denied { write } for pid=14997 comm="syz.1.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 845.494934][T15004] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2510'. [ 845.570110][ T30] audit: type=1400 audit(1745136462.583:4410): avc: denied { nlmsg_write } for pid=14997 comm="syz.1.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 845.844689][T15004] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2510'. [ 846.892980][T15020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2516'. [ 847.542022][T15041] 9pnet_fd: Insufficient options for proto=fd [ 847.731531][T15044] netlink: 'syz.4.2525': attribute type 30 has an invalid length. [ 847.756892][T15044] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 847.766248][T15044] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 847.907253][T15045] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 848.362149][T15054] tmpfs: Bad value for 'mpol' [ 848.515475][T15056] overlayfs: failed to clone lowerpath [ 848.599827][T15057] overlayfs: failed to clone upperpath [ 849.609977][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 849.609994][ T30] audit: type=1400 audit(1745136466.543:4413): avc: denied { connect } for pid=15062 comm="syz.4.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 849.653027][ T30] audit: type=1400 audit(1745136466.593:4414): avc: denied { ioctl } for pid=15062 comm="syz.4.2533" path="socket:[37271]" dev="sockfs" ino=37271 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 850.419833][ T30] audit: type=1400 audit(1745136467.323:4415): avc: denied { create } for pid=15070 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 850.458700][ T30] audit: type=1400 audit(1745136467.353:4416): avc: denied { read } for pid=15070 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 850.479580][ T30] audit: type=1400 audit(1745136467.403:4417): avc: denied { mount } for pid=15070 comm="syz.2.2537" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 850.579445][ T30] audit: type=1400 audit(1745136467.433:4418): avc: denied { remount } for pid=15070 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 850.678127][ T30] audit: type=1400 audit(1745136467.463:4419): avc: denied { sqpoll } for pid=15070 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 850.700229][ T30] audit: type=1400 audit(1745136467.873:4420): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 852.048624][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 852.124164][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 852.134215][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'. [ 852.745208][ T30] audit: type=1400 audit(1745136470.043:4421): avc: denied { read } for pid=15142 comm="syz.2.2562" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 852.968989][ T30] audit: type=1400 audit(1745136470.043:4422): avc: denied { open } for pid=15142 comm="syz.2.2562" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 854.501378][ T5872] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 854.523446][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 854.533337][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2572'. [ 854.800321][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 854.808557][ T5872] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 854.817076][ T5872] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 854.829366][ T5872] usb 4-1: config 0 has no interface number 1 [ 854.887287][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 854.897175][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2575'. [ 854.978335][ T5872] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 854.993810][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.008583][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 855.029769][T13138] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 855.067610][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.077831][ T5872] usb 4-1: Product: syz [ 855.082514][ T5872] usb 4-1: Manufacturer: syz [ 855.091354][ T5872] usb 4-1: SerialNumber: syz [ 855.106843][ T5872] usb 4-1: config 0 descriptor?? [ 855.118266][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 855.129939][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 855.129952][ T30] audit: type=1400 audit(1745136472.423:4424): avc: denied { create } for pid=15188 comm="syz.2.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 856.311155][T13138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.319837][ T30] audit: type=1400 audit(1745136472.753:4425): avc: denied { write } for pid=15188 comm="syz.2.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 856.541695][T13138] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 856.551049][ T30] audit: type=1400 audit(1745136472.753:4426): avc: denied { ioctl } for pid=15188 comm="syz.2.2576" path="socket:[37498]" dev="sockfs" ino=37498 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 856.575981][T13138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.589975][T13138] usb 5-1: Product: syz [ 856.594207][T13138] usb 5-1: Manufacturer: syz [ 856.598844][T13138] usb 5-1: SerialNumber: syz [ 856.806713][T13138] usb 5-1: config 0 descriptor?? [ 856.836609][T13138] usb 5-1: ucan: probing device on interface #0 [ 856.847751][ T30] audit: type=1400 audit(1745136474.143:4427): avc: denied { create } for pid=15166 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 856.918085][T13138] usb 5-1: ucan: invalid EP count (0) [ 856.931231][T13138] usb 5-1: ucan: probe failed; try to update the device firmware [ 856.937677][ T30] audit: type=1400 audit(1745136474.143:4428): avc: denied { bind } for pid=15166 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 858.087300][T15221] netlink: 'syz.0.2588': attribute type 10 has an invalid length. [ 858.109653][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 858.113539][ T2325] pvrusb2: Invalid write control endpoint [ 858.229602][ T2325] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 858.242750][ T5872] usb 4-1: USB disconnect, device number 28 [ 858.249565][ T30] audit: type=1400 audit(1745136475.543:4429): avc: denied { firmware_load } for pid=2325 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 858.280811][T13138] usb 5-1: USB disconnect, device number 25 [ 858.287007][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.320385][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 858.339795][ T2325] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 858.355778][T15221] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 858.375882][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 859.943588][ T30] audit: type=1400 audit(1745136477.223:4430): avc: denied { map } for pid=15244 comm="syz.0.2597" path="socket:[37598]" dev="sockfs" ino=37598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 860.024974][ T30] audit: type=1400 audit(1745136477.223:4431): avc: denied { read accept } for pid=15244 comm="syz.0.2597" path="socket:[37598]" dev="sockfs" ino=37598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 860.839918][ T30] audit: type=1400 audit(1745136477.593:4432): avc: denied { setopt } for pid=15246 comm="syz.1.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 861.361958][ T30] audit: type=1400 audit(1745136478.663:4433): avc: denied { write } for pid=15275 comm="syz.4.2607" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 861.475837][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 862.469493][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 862.525622][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'. [ 862.844503][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 862.891014][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 863.486462][ T30] audit: type=1326 audit(1745136480.783:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 863.605157][ T30] audit: type=1326 audit(1745136480.783:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e8e78cad0 code=0x7ffc0000 [ 863.630057][ T30] audit: type=1326 audit(1745136480.783:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 863.665663][ T30] audit: type=1326 audit(1745136480.783:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 863.739858][T15318] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2621'. [ 863.757374][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 863.767149][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 863.877001][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 863.967305][ T30] audit: type=1326 audit(1745136480.783:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 864.020340][ T30] audit: type=1326 audit(1745136480.783:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 864.046782][ T30] audit: type=1326 audit(1745136480.783:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.3.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8e78e169 code=0x7ffc0000 [ 864.109223][ T30] audit: type=1400 audit(1745136481.173:4441): avc: denied { setopt } for pid=15322 comm="syz.0.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 865.075909][T15356] syz.4.2633: attempt to access beyond end of device [ 865.075909][T15356] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 865.089150][T15356] efs: cannot read volume header [ 865.125126][T15356] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2633'. [ 865.134489][T15356] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 865.527273][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2637'. [ 865.537278][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 865.807360][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 865.817334][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2641'. [ 865.938411][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 865.938424][ T30] audit: type=1400 audit(1745136483.233:4443): avc: denied { create } for pid=15372 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 866.154583][T15389] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2647'. [ 866.594913][T15397] syz.3.2648: attempt to access beyond end of device [ 866.594913][T15397] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 866.608156][T15397] efs: cannot read volume header [ 866.629500][T15397] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 867.138621][T15401] tipc: Enabling of bearer rejected, failed to enable media [ 867.295942][ T30] audit: type=1400 audit(1745136484.593:4444): avc: denied { create } for pid=15409 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 867.338564][ T30] audit: type=1400 audit(1745136484.623:4445): avc: denied { write } for pid=15409 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 868.935670][T15445] syz.4.2661: attempt to access beyond end of device [ 868.935670][T15445] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 868.948778][T15445] efs: cannot read volume header [ 868.961923][T15445] __nla_validate_parse: 3 callbacks suppressed [ 868.961957][T15445] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2661'. [ 868.977467][T15445] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 869.454387][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 869.815855][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.526567][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 870.591267][ T30] audit: type=1400 audit(1745136487.883:4446): avc: denied { create } for pid=15466 comm="syz.3.2670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 870.855011][ T30] audit: type=1400 audit(1745136488.143:4447): avc: denied { bind } for pid=15475 comm="syz.2.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 871.121494][ T30] audit: type=1400 audit(1745136488.143:4448): avc: denied { write } for pid=15475 comm="syz.2.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 872.249181][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 872.259237][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'. [ 872.801768][T15544] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2700'. [ 873.255051][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'. [ 874.007335][ T30] audit: type=1400 audit(1745136491.303:4449): avc: denied { read } for pid=15568 comm="syz.2.2710" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 874.045074][ T30] audit: type=1400 audit(1745136491.303:4450): avc: denied { open } for pid=15568 comm="syz.2.2710" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 874.193886][T15578] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2714'. [ 874.239915][T13782] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 874.579905][T13782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.593338][T13782] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.614547][T13782] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 874.664846][T13782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 874.766910][T13782] usb 3-1: SerialNumber: syz [ 875.051866][T13782] usb 3-1: 0:2 : does not exist [ 875.068283][T13782] usb 3-1: unit 255 not found! [ 875.105377][T13782] usb 3-1: USB disconnect, device number 20 [ 875.283205][T15597] syz.4.2722: attempt to access beyond end of device [ 875.283205][T15597] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 875.298071][T15597] syz.4.2722: attempt to access beyond end of device [ 875.298071][T15597] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 875.341693][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 875.364826][T15597] syz.4.2722: attempt to access beyond end of device [ 875.364826][T15597] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 875.378287][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 875.388857][T15597] syz.4.2722: attempt to access beyond end of device [ 875.388857][T15597] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 875.406043][T15225] udevd[15225]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.438767][T15597] syz.4.2722: attempt to access beyond end of device [ 875.438767][T15597] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 875.475812][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 875.501838][T15597] syz.4.2722: attempt to access beyond end of device [ 875.501838][T15597] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 875.527237][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 875.570604][T15597] syz.4.2722: attempt to access beyond end of device [ 875.570604][T15597] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 875.588291][T15597] syz.4.2722: attempt to access beyond end of device [ 875.588291][T15597] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 875.614360][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 875.624404][T15597] syz.4.2722: attempt to access beyond end of device [ 875.624404][T15597] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 875.638911][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 875.687760][T15597] syz.4.2722: attempt to access beyond end of device [ 875.687760][T15597] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 875.740073][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 875.759980][T15597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 875.769506][T15597] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 878.117003][T15634] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 878.124980][T15634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2733'. [ 878.171322][T15635] loop9: detected capacity change from 0 to 7 [ 878.204927][T15635] Dev loop9: unable to read RDB block 7 [ 878.210618][T15635] loop9: unable to read partition table [ 878.216418][T15635] loop9: partition table beyond EOD, truncated [ 878.223594][T15635] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 878.277639][ T30] audit: type=1400 audit(1745136495.573:4451): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 878.657313][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2739'. [ 879.238541][ T30] audit: type=1400 audit(1745136496.533:4452): avc: denied { append } for pid=15657 comm="syz.4.2743" name="loop0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.266100][T13138] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 879.312254][ T30] audit: type=1400 audit(1745136496.613:4453): avc: denied { read } for pid=15660 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.531018][T13138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.542142][T13138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.647450][T13138] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 879.657839][T13138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.936030][T13138] usb 3-1: config 0 descriptor?? [ 880.523732][T13138] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 880.535855][T13138] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 880.572269][T13782] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 880.729798][T13782] usb 5-1: Using ep0 maxpacket: 32 [ 880.736595][T13782] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 880.737485][ T30] audit: type=1400 audit(1745136498.033:4454): avc: denied { append } for pid=15646 comm="syz.2.2740" name="hidraw0" dev="devtmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 880.770567][T13138] usb 3-1: USB disconnect, device number 21 [ 880.774276][T13782] usb 5-1: config 0 has no interface number 0 [ 880.786251][T13782] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 880.796816][T13782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.805183][T13782] usb 5-1: Product: syz [ 880.809529][T13782] usb 5-1: Manufacturer: syz [ 880.814467][T13782] usb 5-1: SerialNumber: syz [ 880.822887][T13782] usb 5-1: config 0 descriptor?? [ 880.829646][T13782] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 881.038484][T13782] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 881.050746][T13782] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 881.388406][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2754'. [ 881.706383][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 881.730886][ T5870] usb 5-1: USB disconnect, device number 26 [ 881.834574][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 881.861642][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 881.876628][ T5870] quatech2 5-1:0.51: device disconnected [ 882.960289][ T5901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 883.119825][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 883.127744][ T5901] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 883.144576][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.208004][ T5901] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 883.217419][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.230712][ T5901] usb 5-1: config 0 descriptor?? [ 883.737562][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.752174][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.769660][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.788666][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.796150][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.804649][ T5901] lenovo 0003:17EF:60FE.0008: unknown main item tag 0x0 [ 883.818912][ T5901] lenovo 0003:17EF:60FE.0008: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.4-1/input0 [ 883.865711][ T30] audit: type=1400 audit(1745136501.163:4455): avc: denied { bind } for pid=15735 comm="syz.2.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 884.095018][ T5870] usb 5-1: USB disconnect, device number 27 [ 884.183762][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2774'. [ 884.982497][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2780'. [ 884.995402][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2780'. [ 885.355618][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 885.384504][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'. [ 885.409970][T13782] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 885.559899][T13782] usb 3-1: Using ep0 maxpacket: 16 [ 885.570185][T13782] usb 3-1: config 0 interface 0 has no altsetting 0 [ 885.585851][T13782] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 885.644646][T13782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.668747][T13782] usb 3-1: config 0 descriptor?? [ 886.214771][T13782] hid (null): unknown global tag 0xd [ 886.337857][T13782] usb 3-1: USB disconnect, device number 22 [ 887.644960][T15794] sz1: rxe_newlink: already configured on lo [ 888.162437][ T30] audit: type=1400 audit(1745136505.463:4456): avc: denied { nlmsg_read } for pid=15798 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 888.323436][ T30] audit: type=1400 audit(1745136505.623:4457): avc: denied { create } for pid=15803 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 888.427320][T15810] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 888.438342][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 888.465044][T15812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2797'. [ 890.190642][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 890.930464][T15853] rdma_rxe: rxe_newlink: failed to add lo [ 891.080982][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 892.007336][ T30] audit: type=1400 audit(1745136509.303:4458): avc: denied { write } for pid=15862 comm="syz.4.2811" path="socket:[39449]" dev="sockfs" ino=39449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 892.033123][T15863] Bluetooth: MGMT ver 1.23 [ 892.602185][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2816'. [ 893.296017][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 893.682815][T15889] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 893.701871][T15889] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.2821'. [ 893.965995][T15902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 894.060286][ T30] audit: type=1400 audit(1745136511.363:4459): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 894.109018][ T30] audit: type=1400 audit(1745136511.403:4460): avc: denied { connect } for pid=15907 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 894.143048][ T5828] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 894.188579][T15916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2832'. [ 894.525383][ T30] audit: type=1400 audit(1745136511.823:4461): avc: denied { create } for pid=15929 comm="syz.1.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.894217][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 895.399940][T13782] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 895.559807][T13782] usb 5-1: Using ep0 maxpacket: 8 [ 895.566007][T13782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.576048][T13782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 895.586000][T13782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 895.596136][T13782] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.609202][T13782] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 895.618291][T13782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.000335][T13782] usb 5-1: usb_control_msg returned -32 [ 896.005954][T13782] usbtmc 5-1:16.0: can't read capabilities [ 896.104652][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 896.416135][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 897.121670][T15983] tipc: Enabled bearer , priority 27 [ 897.139045][T15983] netlink: 'syz.1.2856': attribute type 10 has an invalid length. [ 897.373391][T15983] tipc: Resetting bearer [ 897.517064][T15983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.593869][T15983] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 897.713591][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 898.040255][ T5901] usb 5-1: USB disconnect, device number 28 [ 898.074977][ T30] audit: type=1400 audit(1745136515.373:4462): avc: denied { connect } for pid=16003 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 898.290351][T13782] tipc: Node number set to 2886997162 [ 898.305443][ T30] audit: type=1400 audit(1745136515.603:4463): avc: denied { watch } for pid=16010 comm="syz.4.2866" path="/537/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=39775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 898.425456][ T30] audit: type=1400 audit(1745136515.603:4464): avc: denied { watch_sb watch_reads } for pid=16010 comm="syz.4.2866" path="/537/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=39775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 898.795125][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 899.335169][ T5901] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 899.473620][ T30] audit: type=1400 audit(1745136516.773:4465): avc: denied { read } for pid=16030 comm="syz.3.2872" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 899.517986][T16034] block device autoloading is deprecated and will be removed. [ 899.550088][ T5901] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 899.559220][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.586090][ T30] audit: type=1400 audit(1745136516.773:4466): avc: denied { open } for pid=16030 comm="syz.3.2872" path="/480/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 899.610241][ T5901] usb 5-1: config 0 descriptor?? [ 899.631510][ T5901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 899.852036][ T5901] gp8psk: usb in 128 operation failed. [ 900.084004][ T5901] gp8psk: usb in 137 operation failed. [ 900.089552][ T5901] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 900.141627][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 900.169173][ T5901] usb 5-1: USB disconnect, device number 29 [ 900.247677][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 900.292938][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 900.368567][ T30] audit: type=1400 audit(1745136517.663:4467): avc: denied { bind } for pid=16050 comm="syz.3.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 900.646688][ T30] audit: type=1400 audit(1745136517.943:4468): avc: denied { read } for pid=16058 comm="syz.3.2883" path="socket:[38672]" dev="sockfs" ino=38672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 900.766041][ T30] audit: type=1400 audit(1745136518.063:4469): avc: denied { ioctl } for pid=16063 comm="syz.4.2884" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 901.053198][T16076] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2886'. [ 901.062625][T16076] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 901.519900][T16077] netlink: 'syz.4.2887': attribute type 10 has an invalid length. [ 902.032322][T13782] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 902.590965][T13782] usb 3-1: Using ep0 maxpacket: 8 [ 902.674995][T13782] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 902.684356][T13782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.693052][T13782] usb 3-1: Product: syz [ 902.697341][T13782] usb 3-1: Manufacturer: syz [ 902.702584][T13782] usb 3-1: SerialNumber: syz [ 902.711550][T13782] usb 3-1: config 0 descriptor?? [ 902.725152][T13782] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 904.114940][ T30] audit: type=1400 audit(1745136521.413:4470): avc: denied { read write } for pid=16117 comm="syz.4.2900" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 904.200591][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2899'. [ 904.528724][T13782] gspca_sonixj: reg_w1 err -71 [ 904.542105][ T30] audit: type=1400 audit(1745136521.413:4471): avc: denied { open } for pid=16117 comm="syz.4.2900" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 904.544243][T16118] libceph: resolve '. [ 904.544243][T16118] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 904.544243][T16118] ' (ret=-3): failed [ 904.618617][ T30] audit: type=1400 audit(1745136521.913:4472): avc: denied { bind } for pid=16124 comm="syz.4.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 904.709846][T13782] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 904.719054][T13782] usb 3-1: USB disconnect, device number 23 [ 907.714187][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 907.890759][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 909.287632][T16180] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2920'. [ 909.297063][T16180] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 910.890153][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 911.339738][ T5901] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 911.497692][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 911.516909][T16211] tipc: Started in network mode [ 911.521937][T16211] tipc: Node identity 7f000001, cluster identity 4711 [ 911.529202][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 911.529367][T16211] tipc: Enabling of bearer rejected, failed to enable media [ 911.571623][T16211] tipc: Enabled bearer , priority 0 [ 911.580032][ T5901] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 911.619602][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.629534][ T30] audit: type=1400 audit(1745136528.913:4473): avc: denied { create } for pid=16213 comm="syz.3.2931" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 911.654743][ T5901] usb 3-1: Product: syz [ 911.669828][ T5901] usb 3-1: Manufacturer: syz [ 911.674508][ T5901] usb 3-1: SerialNumber: syz [ 911.680503][ T30] audit: type=1400 audit(1745136528.923:4474): avc: denied { mounton } for pid=16213 comm="syz.3.2931" path="/494/file0" dev="tmpfs" ino=2617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 911.707436][ T5901] usb 3-1: config 0 descriptor?? [ 911.717811][ T30] audit: type=1400 audit(1745136528.933:4475): avc: denied { mount } for pid=16213 comm="syz.3.2931" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 911.742847][ T5901] hub 3-1:0.0: bad descriptor, ignoring hub [ 911.749120][ T5901] hub 3-1:0.0: probe with driver hub failed with error -5 [ 911.758522][ T5901] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 911.777288][ T30] audit: type=1400 audit(1745136528.933:4476): avc: denied { setattr } for pid=16213 comm="syz.3.2931" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 911.804352][ T30] audit: type=1400 audit(1745136529.013:4477): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 911.841614][T16216] tipc: Resetting bearer [ 911.849520][ T30] audit: type=1400 audit(1745136529.133:4478): avc: denied { read } for pid=5182 comm="acpid" name="mouse1" dev="devtmpfs" ino=3032 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 911.886139][ T30] audit: type=1400 audit(1745136529.133:4479): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3032 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 912.003349][T16203] block nbd2: NBD_DISCONNECT [ 912.097433][ T30] audit: type=1400 audit(1745136529.393:4480): avc: denied { mount } for pid=16226 comm="syz.1.2937" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 912.153572][T16200] block nbd2: Disconnected due to user request. [ 912.163302][T16200] block nbd2: shutting down sockets [ 912.217352][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 912.914135][ T5873] tipc: Node number set to 2130706433 [ 912.978161][T16240] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 912.988240][ T30] audit: type=1400 audit(1745136530.283:4481): avc: denied { relabelto } for pid=16239 comm="syz.0.2943" name=6D656D66643A9D23 dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_log_t:s0" [ 913.016774][T16240] No control pipe specified [ 913.077609][ T30] audit: type=1400 audit(1745136530.313:4482): avc: denied { associate } for pid=16239 comm="syz.0.2943" name=6D656D66643A9D23 dev="tmpfs" ino=426 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cron_log_t:s0" [ 913.355269][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 914.015714][T16254] 9pnet_fd: p9_fd_create_tcp (16254): problem creating socket [ 914.731820][T16267] bio_check_eod: 2 callbacks suppressed [ 914.731858][T16267] syz.1.2949: attempt to access beyond end of device [ 914.731858][T16267] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 914.750406][T16267] efs: cannot read volume header [ 914.760782][T16267] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2949'. [ 914.770203][T16267] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 917.917189][ T972] usb 3-1: USB disconnect, device number 24 [ 920.908730][ T2325] pvrusb2: request_firmware fatal error with code=-110 [ 920.908777][T16325] overlayfs: failed to clone upperpath [ 920.920959][ T2325] pvrusb2: Failure uploading firmware1 [ 920.944606][ T2325] pvrusb2: Device initialization was not successful. [ 921.392315][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 921.402503][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 921.414368][ T2325] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 921.430508][ T5872] pvrusb2: Device being rendered inoperable [ 921.496798][ T2325] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 921.811290][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 921.811305][ T30] audit: type=1400 audit(1745136539.103:4484): avc: denied { map } for pid=16337 comm="syz.2.2974" path="socket:[41173]" dev="sockfs" ino=41173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 921.912010][ T30] audit: type=1400 audit(1745136539.103:4485): avc: denied { read } for pid=16337 comm="syz.2.2974" path="socket:[41173]" dev="sockfs" ino=41173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 923.993233][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2977'. [ 924.261397][T16365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16365 comm=syz.0.2977 [ 924.512387][ T5197] udevd[5197]: worker [15174] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 924.840657][ T30] audit: type=1400 audit(1745136542.123:4486): avc: denied { read } for pid=16356 comm="syz.0.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 925.894541][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 925.906716][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 926.262497][ T30] audit: type=1400 audit(1745136543.563:4487): avc: denied { read } for pid=16392 comm="syz.3.2988" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 926.286902][ T30] audit: type=1400 audit(1745136543.563:4488): avc: denied { open } for pid=16392 comm="syz.3.2988" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 926.311961][ T30] audit: type=1400 audit(1745136543.583:4489): avc: denied { ioctl } for pid=16392 comm="syz.3.2988" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 927.516586][ T30] audit: type=1400 audit(1745136544.813:4490): avc: denied { listen } for pid=16413 comm="syz.4.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.628349][ T30] audit: type=1400 audit(1745136544.813:4491): avc: denied { accept } for pid=16413 comm="syz.4.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.798544][ T30] audit: type=1400 audit(1745136545.093:4492): avc: denied { ioctl } for pid=16420 comm="syz.1.2997" path="socket:[40460]" dev="sockfs" ino=40460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 928.301975][T16428] Failed to initialize the IGMP autojoin socket (err -2) [ 928.616617][ T30] audit: type=1400 audit(1745136545.903:4493): avc: denied { accept } for pid=16440 comm="syz.4.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 928.851896][T16453] kvm: emulating exchange as write [ 929.017592][ T30] audit: type=1400 audit(1745136546.313:4494): avc: denied { read write } for pid=16457 comm="syz.4.3008" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.849443][ T30] audit: type=1400 audit(1745136546.313:4495): avc: denied { open } for pid=16457 comm="syz.4.3008" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 930.699444][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 931.046152][T16485] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3011'. [ 931.476489][ T30] audit: type=1400 audit(1745136548.773:4496): avc: denied { bind } for pid=16490 comm="syz.0.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 931.517457][ T30] audit: type=1400 audit(1745136548.803:4497): avc: denied { listen } for pid=16490 comm="syz.0.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 932.060764][ T30] audit: type=1400 audit(1745136548.813:4498): avc: denied { connect } for pid=16490 comm="syz.0.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 933.036998][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3020'. [ 933.619719][ T30] audit: type=1400 audit(1745136550.823:4499): avc: denied { write } for pid=16523 comm="syz.4.3028" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 933.813750][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'. [ 934.772744][ T30] audit: type=1400 audit(1745136552.073:4500): avc: denied { mount } for pid=16537 comm="syz.1.3030" name="/" dev="autofs" ino=40685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 935.581806][ T30] audit: type=1400 audit(1745136552.873:4501): avc: denied { ioctl } for pid=16548 comm="syz.2.3033" path="socket:[41642]" dev="sockfs" ino=41642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 935.631077][T16549] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 935.714990][T16553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 935.725829][T16553] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 936.073996][ T30] audit: type=1400 audit(1745136553.363:4502): avc: denied { shutdown } for pid=16551 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 937.439842][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 937.512011][T16582] syz.1.3042: attempt to access beyond end of device [ 937.512011][T16582] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 937.525306][T16582] efs: cannot read volume header [ 937.540444][T16582] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3042'. [ 937.549909][T16582] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 937.639913][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 937.749785][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 937.838729][ T30] audit: type=1400 audit(1745136555.133:4503): avc: denied { map } for pid=16562 comm="syz.2.3038" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 937.885095][ T5870] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 938.078251][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.129247][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 938.149970][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 938.175537][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.235900][ T5870] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 938.246323][ T5870] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 938.275033][ T5870] usb 5-1: Manufacturer: syz [ 938.318321][ T5870] usb 5-1: config 0 descriptor?? [ 938.830850][ T5870] rc_core: IR keymap rc-hauppauge not found [ 938.839447][ T5870] Registered IR keymap rc-empty [ 938.847023][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 938.874437][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 938.920475][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 938.933578][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'. [ 939.392913][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 939.461035][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 940.248258][ T30] audit: type=1400 audit(1745136557.523:4504): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3038 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 940.717323][ T30] audit: type=1400 audit(1745136557.593:4505): avc: denied { watch } for pid=16600 comm="syz.0.3048" path="/706" dev="tmpfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 940.741382][ T30] audit: type=1400 audit(1745136557.593:4506): avc: denied { watch_sb watch_reads } for pid=16600 comm="syz.0.3048" path="/706" dev="tmpfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 940.762985][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 940.768824][T16603] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 940.777668][T16603] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 940.821875][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.110173][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.146618][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.413810][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.439955][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.459955][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.481280][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.500388][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.520204][ T5870] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 941.543810][ T5870] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 941.551913][ T5870] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 941.590057][T16619] netlink: 'syz.3.3050': attribute type 1 has an invalid length. [ 941.613926][ T5870] usb 5-1: USB disconnect, device number 30 [ 942.307755][T16619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 942.404000][T16623] bond1: (slave veth3): Enslaving as an active interface with a down link [ 944.825897][T16655] 9pnet_virtio: no channels available for device [ 947.160988][T16684] misc userio: Invalid payload size [ 947.893670][ T30] audit: type=1400 audit(1745136565.193:4507): avc: denied { read } for pid=16692 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 947.929977][ T30] audit: type=1400 audit(1745136565.223:4508): avc: denied { setopt } for pid=16692 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 948.583170][ T30] audit: type=1400 audit(1745136565.883:4509): avc: denied { load_policy } for pid=16703 comm="syz.4.3076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 948.583785][T16704] SELinux: failed to load policy [ 948.941899][ T30] audit: type=1400 audit(1745136566.243:4510): avc: denied { setopt } for pid=16710 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 950.118553][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'. [ 950.663683][ T30] audit: type=1400 audit(1745136567.963:4511): avc: denied { execute_no_trans } for pid=16731 comm="syz.0.3086" path="/715/file0" dev="tmpfs" ino=3792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 950.875380][ T972] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 951.501939][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.512645][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 951.524216][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.535214][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 951.672003][ T972] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.829783][ T972] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.349972][ T972] usb 3-1: Manufacturer: syz [ 952.373767][ T972] usb 3-1: config 0 descriptor?? [ 952.376399][ T30] audit: type=1400 audit(1745136569.233:4512): avc: denied { write } for pid=16743 comm="syz.1.3090" path="socket:[42159]" dev="sockfs" ino=42159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 952.486312][ T30] audit: type=1400 audit(1745136569.723:4513): avc: denied { checkpoint_restore } for pid=16741 comm="syz.4.3089" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 952.610486][ T30] audit: type=1400 audit(1745136569.823:4514): avc: denied { write } for pid=16749 comm="syz.3.3091" path="socket:[42168]" dev="sockfs" ino=42168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 952.638124][ T30] audit: type=1400 audit(1745136569.923:4515): avc: denied { create } for pid=16729 comm="syz.2.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 952.688497][ T30] audit: type=1400 audit(1745136569.933:4516): avc: denied { ioctl } for pid=16729 comm="syz.2.3085" path="socket:[41901]" dev="sockfs" ino=41901 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 952.889781][ T972] rc_core: IR keymap rc-hauppauge not found [ 953.133093][ T972] Registered IR keymap rc-empty [ 953.833338][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.869910][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.904389][ T972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 953.933562][ T972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 953.951168][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 953.969771][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.096545][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.569943][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.641267][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.749801][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.790027][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 954.857686][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.211055][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.232246][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 955.277383][ T972] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 955.313417][ T972] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 955.384273][ T972] usb 3-1: USB disconnect, device number 25 [ 955.752310][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 955.764854][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 956.361897][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'. [ 958.539819][ T972] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 959.191267][ T972] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 959.201072][ T972] usb 3-1: config 0 has no interface number 0 [ 959.362397][ T972] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=c8.a9 [ 959.467520][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.495235][ T30] audit: type=1400 audit(1745136576.793:4517): avc: denied { write } for pid=16814 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 959.498464][ T972] usb 3-1: Product: syz [ 959.534032][ T30] audit: type=1400 audit(1745136576.793:4518): avc: denied { accept } for pid=16814 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 959.636104][ T30] audit: type=1400 audit(1745136576.793:4519): avc: denied { read } for pid=16814 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 959.668262][ T972] usb 3-1: Manufacturer: syz [ 959.687334][ T972] usb 3-1: SerialNumber: syz [ 959.862688][ T972] usb 3-1: config 0 descriptor?? [ 960.343279][T16800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3105'. [ 960.352445][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3105'. [ 960.363909][T16800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3105'. [ 960.409950][T16800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3105'. [ 960.440179][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3113'. [ 960.911919][ T972] ath6kl: Failed to submit usb control message: -71 [ 960.948530][ T972] ath6kl: unable to send the bmi data to the device: -71 [ 960.978976][ T972] ath6kl: Unable to send get target info: -71 [ 961.078137][ T972] ath6kl: Failed to init ath6kl core: -71 [ 961.110126][ T972] ath6kl_usb 3-1:0.12: probe with driver ath6kl_usb failed with error -71 [ 961.157159][ T972] usb 3-1: USB disconnect, device number 26 [ 963.121054][T16854] random: crng reseeded on system resumption [ 963.574391][ T30] audit: type=1400 audit(1745136580.423:4520): avc: denied { write } for pid=16843 comm="syz.3.3118" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 963.989759][ T30] audit: type=1400 audit(1745136580.423:4521): avc: denied { open } for pid=16843 comm="syz.3.3118" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 964.408125][ T30] audit: type=1400 audit(1745136581.693:4522): avc: denied { mounton } for pid=16862 comm="syz.3.3124" path="/528/file0" dev="tmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 965.972921][T16876] SELinux: failed to load policy [ 966.497232][T16886] kvm: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 966.506302][T16886] kvm: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 966.521822][T16886] kvm: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 966.855095][T16886] kvm: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 966.865437][T16886] kvm: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x801 [ 967.322526][T16886] kvm_intel: kvm [16885]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x801 [ 971.987698][ T30] audit: type=1400 audit(1745136589.283:4523): avc: denied { setopt } for pid=16934 comm="syz.2.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 974.428011][T16959] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3149'. [ 974.474177][ T30] audit: type=1400 audit(1745136591.773:4524): avc: denied { write } for pid=16960 comm="syz.3.3148" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 975.434051][T16974] overlayfs: failed to clone upperpath [ 977.084339][ T30] audit: type=1400 audit(1745136593.913:4525): avc: denied { execute } for pid=16978 comm="syz.3.3155" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 978.960175][T16929] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 979.139541][ T30] audit: type=1400 audit(1745136596.433:4526): avc: denied { bind } for pid=17013 comm="syz.1.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 979.164184][T17014] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3165'. [ 979.177145][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 979.186274][T16929] usb 5-1: Using ep0 maxpacket: 16 [ 979.677980][T16929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.690260][T16929] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 979.707586][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 979.721062][T16929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.729068][T16929] usb 5-1: Product: syz [ 979.754458][T16929] usb 5-1: Manufacturer: syz [ 979.759085][T16929] usb 5-1: SerialNumber: syz [ 979.771137][T16929] usb 5-1: config 0 descriptor?? [ 979.783996][T16929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 980.042659][T17007] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3162'. [ 980.052091][T17007] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 980.945768][T16929] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 980.970610][T16929] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 981.151452][T16929] usb 5-1: USB disconnect, device number 31 [ 982.320631][ T2325] pvrusb2: request_firmware fatal error with code=-110 [ 982.353432][ T2325] pvrusb2: Failure uploading firmware1 [ 982.368529][ T2325] pvrusb2: Device initialization was not successful. [ 982.389644][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 982.411962][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 982.442642][ T5872] pvrusb2: Device being rendered inoperable [ 982.873884][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 982.885208][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 983.505198][ T30] audit: type=1400 audit(1745136600.023:4527): avc: denied { create } for pid=17060 comm="syz.2.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 983.577888][ T30] audit: type=1400 audit(1745136600.023:4528): avc: denied { mount } for pid=17060 comm="syz.2.3179" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 984.760835][ T30] audit: type=1400 audit(1745136600.033:4529): avc: denied { unmount } for pid=17060 comm="syz.2.3179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 985.502842][T17072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.518685][ T30] audit: type=1400 audit(1745136602.803:4530): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 988.586286][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 988.596106][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 988.761454][T17113] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 993.139121][ T30] audit: type=1326 audit(1745136610.433:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 993.210641][ T30] audit: type=1326 audit(1745136610.463:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 993.347876][ T30] audit: type=1326 audit(1745136610.463:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 993.386152][ T30] audit: type=1326 audit(1745136610.463:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 993.925371][ T30] audit: type=1326 audit(1745136610.463:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 993.953772][ T30] audit: type=1326 audit(1745136610.463:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 994.190875][ T30] audit: type=1326 audit(1745136610.463:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 994.670470][ T30] audit: type=1326 audit(1745136610.463:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb25b78cad0 code=0x7ffc0000 [ 994.718965][ T30] audit: type=1326 audit(1745136610.463:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 994.828109][ T30] audit: type=1326 audit(1745136610.463:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb25b78e169 code=0x7ffc0000 [ 998.188399][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 998.188415][ T30] audit: type=1400 audit(1745136615.483:4570): avc: denied { map } for pid=17171 comm="syz.3.3206" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 998.389177][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 998.497610][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 998.942510][ T30] audit: type=1400 audit(1745136616.083:4571): avc: denied { setopt } for pid=17201 comm="syz.4.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 998.984026][ T30] audit: type=1400 audit(1745136616.093:4572): avc: denied { write } for pid=17201 comm="syz.4.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1001.078726][T17228] syz.3.3223: attempt to access beyond end of device [ 1001.078726][T17228] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1001.091835][T17228] efs: cannot read volume header [ 1001.455013][T17234] netlink: 'syz.2.3226': attribute type 8 has an invalid length. [ 1001.595360][T16929] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1002.227225][T16832] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1002.270012][T16929] usb 4-1: Using ep0 maxpacket: 16 [ 1002.293934][T16929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.315488][T16929] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1002.341955][T16929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.350178][T16929] usb 4-1: Product: syz [ 1002.354527][T16929] usb 4-1: Manufacturer: syz [ 1002.359213][T16929] usb 4-1: SerialNumber: syz [ 1002.389660][T16832] usb 3-1: Using ep0 maxpacket: 16 [ 1002.433307][T16929] usb 4-1: config 0 descriptor?? [ 1002.457115][T16929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1002.645847][T16832] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1002.655890][T17226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3223'. [ 1002.665796][T17226] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1002.676319][T16832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.725004][T16832] usb 3-1: Product: syz [ 1002.765554][T16832] usb 3-1: Manufacturer: syz [ 1002.794649][T16832] usb 3-1: SerialNumber: syz [ 1002.989006][T16832] usb 3-1: config 0 descriptor?? [ 1003.013864][T16832] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1003.019890][T16929] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1003.028331][T16929] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1003.108636][T16832] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1003.300003][T16832] usb 3-1: USB disconnect, device number 27 [ 1003.334294][T17209] udevd[17209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.503251][T17253] ceph: No mds server is up or the cluster is laggy [ 1003.510392][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1003.780009][T16832] libceph: mon0 (1)[c::]:6789 connect error [ 1003.792829][T16929] usb 4-1: USB disconnect, device number 29 [ 1004.455812][T17262] vlan2: entered allmulticast mode [ 1004.461818][T17262] batadv0: entered allmulticast mode [ 1005.473816][T17276] SELinux: Context system_u:object_r:crond_unit_file_t:s0 is not valid (left unmapped). [ 1006.144645][ T30] audit: type=1400 audit(1745136623.443:4573): avc: denied { relabelto } for pid=17266 comm="syz.3.3233" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 1006.183550][ T30] audit: type=1400 audit(1745136623.473:4574): avc: denied { associate } for pid=17266 comm="syz.3.3233" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_unit_file_t:s0" [ 1006.979193][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1007.059149][T17285] ceph: No mds server is up or the cluster is laggy [ 1007.376732][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1007.450135][ T30] audit: type=1400 audit(1745136624.743:4575): avc: denied { getopt } for pid=17294 comm="syz.0.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1008.164121][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1008.173937][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1008.475672][T17302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1010.809131][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1011.494384][ T30] audit: type=1326 audit(1745136628.793:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17323 comm="syz.0.3249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb25b78e169 code=0x0 [ 1011.512720][T17347] fuse: Bad value for 'fd' [ 1011.521296][ T30] audit: type=1400 audit(1745136628.813:4577): avc: denied { mounton } for pid=17345 comm="syz.3.3256" path="/552/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1012.664262][ T30] audit: type=1400 audit(1745136629.943:4578): avc: denied { append } for pid=17353 comm="syz.3.3257" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1012.799834][T17356] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1012.799834][T17356] program syz.2.3258 not setting count and/or reply_len properly [ 1012.931707][ T30] audit: type=1400 audit(1745136630.093:4579): avc: denied { ioctl } for pid=17352 comm="syz.2.3258" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1012.957239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.032563][ T30] audit: type=1400 audit(1745136632.333:4580): avc: denied { mount } for pid=17377 comm="syz.1.3263" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1016.022323][ T30] audit: type=1400 audit(1745136632.333:4581): avc: denied { search } for pid=17377 comm="syz.1.3263" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1016.834653][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1019.964550][ T30] audit: type=1400 audit(1745136637.263:4582): avc: denied { getopt } for pid=17422 comm="syz.0.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1020.555829][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1021.591800][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3279'. [ 1021.872672][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1022.233823][ T30] audit: type=1400 audit(1745136639.533:4583): avc: denied { write } for pid=17447 comm="syz.4.3282" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1022.729505][ T30] audit: type=1400 audit(1745136639.553:4584): avc: denied { open } for pid=17447 comm="syz.4.3282" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1026.086370][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 1027.430031][ T30] audit: type=1400 audit(1745136644.293:4585): avc: denied { mount } for pid=17484 comm="syz.3.3291" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1028.079441][T17499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1028.088461][T17499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1030.065417][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1030.075297][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1031.139907][ T30] audit: type=1400 audit(1745136648.443:4586): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1031.690855][ T30] audit: type=1400 audit(1745136648.993:4587): avc: denied { search } for pid=17524 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.879721][ T30] audit: type=1400 audit(1745136649.013:4588): avc: denied { read } for pid=17528 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.906146][T17530] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1032.371824][ T30] audit: type=1400 audit(1745136649.013:4589): avc: denied { open } for pid=17528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.371867][ T30] audit: type=1400 audit(1745136649.013:4590): avc: denied { getattr } for pid=17528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.371899][ T30] audit: type=1400 audit(1745136649.013:4591): avc: denied { getattr } for pid=17528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1749 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.468919][ T30] audit: type=1400 audit(1745136649.063:4592): avc: denied { read } for pid=17532 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1749 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.495137][ T30] audit: type=1400 audit(1745136649.063:4593): avc: denied { open } for pid=17532 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1749 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.846633][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1033.015053][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1033.390457][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1033.955690][ T30] audit: type=1400 audit(1745136651.163:4594): avc: denied { nlmsg_write } for pid=17548 comm="syz.0.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1034.272066][ T30] audit: type=1400 audit(1745136651.573:4595): avc: denied { write } for pid=17558 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1035.585130][ T30] audit: type=1400 audit(1745136652.873:4596): avc: denied { write } for pid=17524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.736448][ T30] audit: type=1400 audit(1745136652.873:4597): avc: denied { add_name } for pid=17524 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.153023][ T30] audit: type=1400 audit(1745136652.873:4598): avc: denied { create } for pid=17524 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.040555][ T30] audit: type=1400 audit(1745136652.873:4599): avc: denied { write } for pid=17524 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=5984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.080095][ T30] audit: type=1400 audit(1745136652.873:4600): avc: denied { append } for pid=17524 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.104616][ T30] audit: type=1400 audit(1745136653.903:4601): avc: denied { remove_name } for pid=17590 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.128555][ T30] audit: type=1400 audit(1745136653.903:4602): avc: denied { unlink } for pid=17590 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.492857][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1038.512673][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1039.970968][T17625] syz.1.3322: attempt to access beyond end of device [ 1039.970968][T17625] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1039.983828][T17625] efs: cannot read volume header [ 1039.990610][T17625] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1039.999925][T17625] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1040.075165][T17630] syz.3.3323: attempt to access beyond end of device [ 1040.075165][T17630] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1040.089345][T17630] efs: cannot read volume header [ 1040.389819][T16929] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1040.569799][T16929] usb 4-1: Using ep0 maxpacket: 16 [ 1040.582692][T16929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.753069][T16929] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1040.817216][T16929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.041861][T16929] usb 4-1: Product: syz [ 1041.046515][T16929] usb 4-1: Manufacturer: syz [ 1041.051572][T16929] usb 4-1: SerialNumber: syz [ 1041.060781][T16929] usb 4-1: config 0 descriptor?? [ 1041.067739][T16929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1041.410569][T17630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3323'. [ 1041.420050][T17630] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1041.914535][T16929] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1041.927332][T16929] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1042.386705][T17668] ceph: No mds server is up or the cluster is laggy [ 1042.395192][T16929] libceph: mon0 (1)[c::]:6789 connect error [ 1042.820930][T16929] usb 4-1: USB disconnect, device number 30 [ 1042.876091][T17680] vivid-004: disconnect [ 1043.904508][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3334'. [ 1043.919412][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3334'. [ 1044.014952][T17674] vivid-004: reconnect [ 1044.640402][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1045.359271][T17708] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3341'. [ 1045.380647][T17708] erofs (device nbd3): cannot find valid erofs superblock [ 1046.674226][ T30] audit: type=1400 audit(1745136663.963:4603): avc: denied { create } for pid=17725 comm="syz.4.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1047.756761][T17733] syz.3.3345: attempt to access beyond end of device [ 1047.756761][T17733] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1047.769870][T17733] efs: cannot read volume header [ 1048.210108][ T5873] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1048.369999][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1048.396113][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.135775][ T5873] usb 4-1: string descriptor 0 read error: -71 [ 1049.206702][ T5873] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1049.263379][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.310210][ T5873] usb 4-1: config 0 descriptor?? [ 1049.326985][ T5873] usb 4-1: can't set config #0, error -71 [ 1049.343680][ T5873] usb 4-1: USB disconnect, device number 31 [ 1051.562421][ T30] audit: type=1400 audit(1745136668.123:4604): avc: denied { read } for pid=17759 comm="syz.1.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1055.819713][ T30] audit: type=1800 audit(1745136673.073:4605): pid=17796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3357" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1057.024048][T17800] overlayfs: failed to clone lowerpath [ 1057.035011][T17801] syz.3.3361: attempt to access beyond end of device [ 1057.035011][T17801] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1057.047947][T17801] efs: cannot read volume header [ 1059.039803][ T5873] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1060.800139][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 1061.149880][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 1063.550893][T17858] @: renamed from vlan0 (while UP) [ 1064.866185][T17867] syz.4.3377: attempt to access beyond end of device [ 1064.866185][T17867] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1064.879136][T17867] efs: cannot read volume header [ 1064.885926][T17867] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1064.895400][T17867] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1064.989031][ T30] audit: type=1400 audit(1745136682.263:4606): avc: denied { bind } for pid=17865 comm="syz.1.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1066.272873][T17882] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1066.290155][T17882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.665967][ T30] audit: type=1400 audit(1745136683.943:4607): avc: denied { read write } for pid=17871 comm="syz.2.3379" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1066.669156][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1066.718229][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1066.718299][ T30] audit: type=1400 audit(1745136683.953:4608): avc: denied { open } for pid=17871 comm="syz.2.3379" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1066.811295][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1066.829710][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1066.857586][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1066.999726][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1067.158568][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1067.184527][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1067.307623][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1067.416311][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1067.446583][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1067.456432][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1068.034351][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.059298][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.075035][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.090740][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.098357][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.106650][ T5870] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 1068.313345][ T5870] hid-generic FFF9:0000:0203.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1071.499782][T17936] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1072.249465][T17939] netlink: 'syz.1.3393': attribute type 10 has an invalid length. [ 1072.257332][T17939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1072.266395][T17939] batadv0: entered promiscuous mode [ 1072.271613][T17939] batadv0: entered allmulticast mode [ 1072.277377][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.292220][T17939] bond0: (slave batadv0): Releasing backup interface [ 1072.299348][T17939] tipc: Resetting bearer [ 1072.306467][T17939] tipc: Resetting bearer [ 1072.312042][T17939] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1073.473399][T17957] Failed to initialize the IGMP autojoin socket (err -2) [ 1076.078091][T18006] veth0_vlan: left promiscuous mode [ 1076.088315][T18006] veth0_vlan: entered promiscuous mode [ 1077.293174][ T30] audit: type=1400 audit(1745136694.583:4609): avc: denied { mount } for pid=18017 comm="syz.4.3410" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1077.588992][T18028] tipc: Enabled bearer , priority 10 [ 1078.942569][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1079.292764][ T5873] tipc: Node number set to 43690 [ 1079.495046][ T30] audit: type=1400 audit(1745136696.783:4610): avc: denied { ioctl } for pid=18035 comm="syz.3.3415" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1080.226891][ T30] audit: type=1400 audit(1745136697.523:4611): avc: denied { shutdown } for pid=18047 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1080.246799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.746602][T18057] hugetlbfs: syz.1.3421 (18057): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1080.758229][ T30] audit: type=1400 audit(1745136698.053:4612): avc: denied { connect } for pid=18056 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1080.777818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.785986][ T30] audit: type=1400 audit(1745136698.053:4613): avc: denied { bind } for pid=18056 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1080.805993][ T30] audit: type=1400 audit(1745136698.053:4614): avc: denied { read } for pid=18056 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1080.877776][ T30] audit: type=1400 audit(1745136698.173:4615): avc: denied { create } for pid=18058 comm="syz.1.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1080.989659][ T30] audit: type=1400 audit(1745136698.263:4616): avc: denied { ioctl } for pid=18058 comm="syz.1.3422" path="socket:[45050]" dev="sockfs" ino=45050 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1081.115807][T18068] overlayfs: failed to clone lowerpath [ 1081.262038][ T30] audit: type=1400 audit(1745136698.413:4617): avc: denied { mount } for pid=18065 comm="syz.4.3426" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1081.304975][T18068] overlayfs: failed to clone upperpath [ 1081.887092][ T30] audit: type=1400 audit(1745136699.143:4618): avc: denied { map } for pid=18064 comm="syz.2.3416" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1081.910823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.454561][ T30] audit: type=1400 audit(1745136699.143:4619): avc: denied { execute } for pid=18064 comm="syz.2.3416" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1083.438742][T18094] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 1083.446539][T18094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3427'. [ 1083.459330][T18094] loop9: detected capacity change from 0 to 7 [ 1083.559346][T18094] Dev loop9: unable to read RDB block 7 [ 1083.565175][T18094] loop9: unable to read partition table [ 1083.571638][T18094] loop9: partition table beyond EOD, truncated [ 1083.577903][T18094] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 1084.180854][T18106] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1084.993349][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1085.375500][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1085.583138][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 1086.420216][ T30] audit: type=1400 audit(1745136703.683:4620): avc: denied { mount } for pid=18128 comm="syz.0.3438" name="/" dev="rpc_pipefs" ino=47205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1089.057830][T18145] bond0: option resend_igmp: invalid value (7540) [ 1089.064554][T18145] bond0: option resend_igmp: allowed values 0 - 255 [ 1089.856495][T18154] Failed to initialize the IGMP autojoin socket (err -2) [ 1090.181134][T18157] netlink: 'syz.3.3446': attribute type 3 has an invalid length. [ 1090.188973][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1091.157591][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1093.293649][ T30] audit: type=1326 audit(1745136710.183:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.1.3455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ad98e169 code=0x0 [ 1094.459162][T18204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.799150][T18219] syz.2.3463: attempt to access beyond end of device [ 1096.799150][T18219] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1096.812332][T18219] syz.2.3463: attempt to access beyond end of device [ 1096.812332][T18219] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1096.825271][T18219] Mount JFS Failure: -5 [ 1097.868241][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1099.248848][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1099.589714][T18270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.845303][ T30] audit: type=1400 audit(1745136719.143:4622): avc: denied { create } for pid=18266 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1103.016724][ T30] audit: type=1400 audit(1745136720.313:4623): avc: denied { write } for pid=18266 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1103.207525][T18311] can0: slcan on ptm0. [ 1103.771610][T18313] netlink: 4944 bytes leftover after parsing attributes in process `syz.2.3482'. [ 1104.331564][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1104.530385][T18310] can0 (unregistered): slcan off ptm0. [ 1104.572762][ T30] audit: type=1400 audit(1745136721.873:4624): avc: denied { setopt } for pid=18325 comm="syz.4.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1105.572369][ T30] audit: type=1400 audit(1745136722.873:4625): avc: denied { accept } for pid=18318 comm="syz.1.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1107.218229][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1108.797550][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1109.867424][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1109.918629][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1110.853031][T18407] Invalid ELF header magic: != ELF [ 1113.136807][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1113.456855][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1113.466213][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1113.475618][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1113.867602][T18445] /dev/nullb0: Can't lookup blockdev [ 1114.469315][ T30] audit: type=1400 audit(1745136731.763:4626): avc: denied { listen } for pid=18447 comm="syz.3.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1115.614117][T18470] libceph: resolve '0.' (ret=-3): failed [ 1116.511545][T18470] Failed to initialize the IGMP autojoin socket (err -2) [ 1117.021373][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1117.021977][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1117.636750][T18495] veth0_vlan: left promiscuous mode [ 1117.642527][T18495] veth0_vlan: entered promiscuous mode [ 1118.583672][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1120.368414][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1120.378437][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1120.782616][ T30] audit: type=1400 audit(1745136737.933:4627): avc: denied { getopt } for pid=18534 comm="syz.3.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1121.247544][T18547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1121.247544][T18547] program syz.3.3548 not setting count and/or reply_len properly [ 1122.625948][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1122.955732][T18573] syz.3.3556: attempt to access beyond end of device [ 1122.955732][T18573] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1122.969454][T18573] efs: cannot read volume header [ 1123.682747][T16929] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1123.754380][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1124.249740][T16929] usb 4-1: Using ep0 maxpacket: 16 [ 1124.681350][T16929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.695838][T16929] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1124.706084][T16929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.759839][T16929] usb 4-1: Product: syz [ 1124.770139][T16929] usb 4-1: Manufacturer: syz [ 1124.774732][T16929] usb 4-1: SerialNumber: syz [ 1124.873909][T16929] usb 4-1: config 0 descriptor?? [ 1124.895295][T16929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1125.084161][T18573] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1125.094627][T18573] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1125.233691][T18597] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1125.467196][T16929] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1125.478531][T16929] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1126.651907][T16929] usb 4-1: USB disconnect, device number 33 [ 1129.022494][ T30] audit: type=1400 audit(1745136746.323:4628): avc: denied { wake_alarm } for pid=18635 comm="syz.2.3574" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1129.807367][T18652] syz.1.3577: attempt to access beyond end of device [ 1129.807367][T18652] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1129.807425][T18652] efs: cannot read volume header [ 1129.809044][T18652] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3577'. [ 1129.836440][T18652] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1130.106402][T18655] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3570'. [ 1132.235266][T18677] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1133.108802][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1133.163393][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1138.016883][T18728] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3602'. [ 1139.488930][T18759] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1142.091095][T18782] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1142.101458][T18802] syz.3.3625: attempt to access beyond end of device [ 1142.101458][T18802] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1142.300502][T18804] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1142.501564][T18802] efs: cannot read volume header [ 1142.979715][ T5873] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1143.122451][T18812] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1143.599677][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1143.619120][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.657037][ T5873] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1143.683242][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.785090][ T5873] usb 4-1: Product: syz [ 1143.789302][ T5873] usb 4-1: Manufacturer: syz [ 1143.794079][ T5873] usb 4-1: SerialNumber: syz [ 1143.810164][ T5873] usb 4-1: config 0 descriptor?? [ 1143.818947][ T5873] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1143.894174][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1143.907096][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1144.062444][T18802] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1144.071933][T18802] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1144.918204][ T5873] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1145.416590][ T5873] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1145.475729][ T5873] usb 4-1: USB disconnect, device number 34 [ 1145.549856][T18841] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1145.549856][T18841] program syz.2.3639 not setting count and/or reply_len properly [ 1146.012379][T18837] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1149.065798][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1149.075893][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1149.434750][T16832] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1150.589777][T16832] usb 3-1: Using ep0 maxpacket: 16 [ 1150.596468][T16832] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1150.619617][T16832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.640609][T16832] usb 3-1: config 0 descriptor?? [ 1150.660919][T16832] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1151.375024][T16832] gspca_sonixj: reg_w1 err -110 [ 1151.380094][T16832] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1152.126748][T18911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.154540][T18911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.487545][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.496703][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.505825][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.514922][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.524124][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.533236][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.542369][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1152.551486][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1154.142643][T18934] __nla_validate_parse: 33 callbacks suppressed [ 1154.142679][T18934] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1154.228184][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1154.547107][ T972] usb 3-1: USB disconnect, device number 28 [ 1155.208373][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3664'. [ 1157.954484][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1158.601961][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1159.053218][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1159.062407][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1159.071571][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1159.080682][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1159.089820][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1159.239814][T16832] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1159.428844][ T30] audit: type=1400 audit(1745136776.723:4629): avc: denied { sys_chroot } for pid=19010 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1159.455066][ T30] audit: type=1400 audit(1745136776.723:4630): avc: denied { setgid } for pid=19010 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1159.502022][ T30] audit: type=1400 audit(1745136776.723:4631): avc: denied { setrlimit } for pid=19010 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1159.575381][T16832] usb 4-1: Using ep0 maxpacket: 16 [ 1159.732705][T16832] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1160.225932][T16832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.248645][T16832] usb 4-1: config 0 descriptor?? [ 1160.257524][T16832] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1161.057850][T19024] __nla_validate_parse: 41 callbacks suppressed [ 1161.057868][T19024] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3688'. [ 1161.254360][T19002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.273172][T19002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.883822][T16832] gspca_sonixj: reg_w1 err -110 [ 1162.888761][T16832] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1163.417978][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1163.469682][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.479574][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.489398][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.499373][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.509015][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.518786][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.529582][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1163.539794][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1165.963467][T16832] usb 4-1: USB disconnect, device number 35 [ 1166.136185][T19076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1166.136185][T19076] program syz.3.3704 not setting count and/or reply_len properly [ 1168.281280][T19069] __nla_validate_parse: 40 callbacks suppressed [ 1168.281299][T19069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1168.362600][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1171.371208][T19110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3711'. [ 1172.621244][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3718'. [ 1173.543028][ T30] audit: type=1326 audit(1745136790.843:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19131 comm="syz.4.3719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff93698e169 code=0x0 [ 1175.722832][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1175.732156][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1175.741419][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1175.750618][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1178.423569][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1183.013415][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1183.022587][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1183.031736][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1183.040856][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1184.833132][T19234] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1184.956129][T19243] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1184.956129][T19243] program syz.3.3748 not setting count and/or reply_len properly [ 1186.615986][T19266] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3755'. [ 1186.625421][T19266] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1195.526367][T19365] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1204.986900][T19468] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1204.986900][T19468] program syz.2.3811 not setting count and/or reply_len properly [ 1205.412084][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1209.153890][T19500] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1211.117433][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1211.117937][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1213.346986][T19561] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1213.346986][T19561] program syz.2.3837 not setting count and/or reply_len properly [ 1217.453466][T19613] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1217.453466][T19613] program syz.3.3850 not setting count and/or reply_len properly [ 1222.662859][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 1224.668450][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 1224.688174][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'. [ 1226.044738][T19728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1227.053869][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 1228.564879][T19757] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1228.564879][T19757] program syz.3.3891 not setting count and/or reply_len properly [ 1230.915329][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1230.925763][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1231.592728][T19789] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1235.446201][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1235.456033][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1235.933609][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1235.957136][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1240.178242][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1245.148796][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1260.210273][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1266.380924][T20210] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1266.412417][T20210] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1267.846228][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4019'. [ 1267.856108][T20234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4019'. [ 1272.149778][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1272.170420][T20285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1273.826211][T20300] syz.0.4032: attempt to access beyond end of device [ 1273.826211][T20300] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1273.855840][T20300] efs: cannot read volume header [ 1274.328409][T20300] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1274.338454][T20300] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1291.995346][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1295.581509][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1295.595173][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1302.980943][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1312.551842][T20719] blktrace: Concurrent blktraces are not allowed on loop0 [ 1312.645887][T20727] syz.1.4150: attempt to access beyond end of device [ 1312.645887][T20727] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1312.659069][T20727] efs: cannot read volume header [ 1312.674775][T20727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1312.684172][T20727] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1323.649503][ T31] INFO: task kworker/1:3:5822 blocked for more than 143 seconds. [ 1323.673400][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1323.829346][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1323.839145][ T31] task:kworker/1:3 state:D stack:21848 pid:5822 tgid:5822 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1323.868943][ T31] Workqueue: usb_hub_wq hub_event [ 1323.883959][ T31] Call Trace: [ 1323.906362][ T31] [ 1323.920067][ T31] __schedule+0x116f/0x5de0 [ 1323.951726][ T31] ? __lock_acquire+0xa90/0x1ba0 [ 1323.976083][ T31] ? __pfx___schedule+0x10/0x10 [ 1323.999302][ T31] ? find_held_lock+0x2b/0x80 [ 1324.032506][ T31] ? schedule+0x2d7/0x3a0 [ 1324.049523][ T31] schedule+0xe7/0x3a0 [ 1324.071404][ T31] usb_kill_urb+0x253/0x320 [ 1324.104525][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1324.176339][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1324.268056][ T31] usb_start_wait_urb+0x250/0x4b0 [ 1324.288877][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1324.296224][ T31] ? __asan_memset+0x23/0x50 [ 1324.301942][ T31] usb_control_msg+0x326/0x4a0 [ 1324.308491][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 1324.317208][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 1324.328176][ T31] hub_port_init+0x690/0x3a70 [ 1324.336880][ T31] hub_event+0x2c67/0x4fa0 [ 1324.346657][ T31] ? __pfx_hub_event+0x10/0x10 [ 1324.354255][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1324.362794][ T31] ? rcu_is_watching+0x12/0xc0 [ 1324.370911][ T31] process_one_work+0x9cc/0x1b70 [ 1324.375962][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 1324.382636][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1324.389530][ T31] ? assign_work+0x1a0/0x250 [ 1324.395082][ T31] worker_thread+0x6c8/0xf10 [ 1324.401016][ T31] ? __kthread_parkme+0x19e/0x250 [ 1324.406047][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1324.411295][ T31] kthread+0x3c2/0x780 [ 1324.415872][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.420830][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.425435][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.430403][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.435010][ T31] ? rcu_is_watching+0x12/0xc0 [ 1324.440105][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.444725][ T31] ret_from_fork+0x45/0x80 [ 1324.449139][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.453766][ T31] ret_from_fork_asm+0x1a/0x30 [ 1324.458559][ T31] [ 1324.461711][ T31] [ 1324.461711][ T31] Showing all locks held in the system: [ 1324.470293][ T31] 1 lock held by khungtaskd/31: [ 1324.475175][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1324.486493][ T31] 2 locks held by getty/5575: [ 1324.493552][ T31] #0: ffff888032abd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1324.503530][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1324.513875][ T31] 5 locks held by kworker/1:3/5822: [ 1324.519073][ T31] #0: ffff8880202ce948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1324.530051][ T31] #1: ffffc90002eb7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1324.542493][ T31] #2: ffff88802a46b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1324.551838][ T31] #3: ffff88802a46e510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 1324.562971][ T31] #4: ffff888027e8f168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 1324.572881][ T31] [ 1324.575244][ T31] ============================================= [ 1324.575244][ T31] [ 1324.586725][ T31] NMI backtrace for cpu 0 [ 1324.586736][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1324.586749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1324.586755][ T31] Call Trace: [ 1324.586759][ T31] [ 1324.586763][ T31] dump_stack_lvl+0x116/0x1f0 [ 1324.586780][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1324.586792][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1324.586804][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1324.586817][ T31] watchdog+0xf70/0x12c0 [ 1324.586830][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.586839][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1324.586853][ T31] ? __kthread_parkme+0x19e/0x250 [ 1324.586869][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.586879][ T31] kthread+0x3c2/0x780 [ 1324.586889][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586898][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586908][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586917][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586926][ T31] ? rcu_is_watching+0x12/0xc0 [ 1324.586939][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586949][ T31] ret_from_fork+0x45/0x80 [ 1324.586960][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.586970][ T31] ret_from_fork_asm+0x1a/0x30 [ 1324.586991][ T31] [ 1324.586995][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1324.719160][ C1] NMI backtrace for cpu 1 [ 1324.719173][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1324.719189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1324.719196][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1324.719217][ C1] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1324.719229][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1324.719241][ C1] RAX: 00000000061ebb89 RBX: 0000000000000001 RCX: ffffffff8b72a419 [ 1324.719249][ C1] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 1324.719257][ C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd [ 1324.719265][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 1324.719273][ C1] R13: ffff88801daf2440 R14: ffffffff90864910 R15: 0000000000000000 [ 1324.719281][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 1324.719294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.719303][ C1] CR2: 0000200000404030 CR3: 0000000029acc000 CR4: 00000000003526f0 [ 1324.719311][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1324.719318][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1324.719326][ C1] Call Trace: [ 1324.719330][ C1] [ 1324.719334][ C1] default_idle+0x13/0x20 [ 1324.719358][ C1] default_idle_call+0x6d/0xb0 [ 1324.719378][ C1] do_idle+0x391/0x510 [ 1324.719396][ C1] ? __pfx_do_idle+0x10/0x10 [ 1324.719413][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 1324.719434][ C1] cpu_startup_entry+0x4f/0x60 [ 1324.719449][ C1] start_secondary+0x21d/0x2b0 [ 1324.719462][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1324.719476][ C1] common_startup_64+0x13e/0x148 [ 1324.719497][ C1] [ 1324.720228][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1324.720239][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1324.720257][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1324.720266][ T31] Call Trace: [ 1324.720271][ T31] [ 1324.720277][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1324.720299][ T31] panic+0x71c/0x800 [ 1324.720313][ T31] ? __pfx_panic+0x10/0x10 [ 1324.720325][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1324.720344][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1324.720359][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1324.720375][ T31] ? watchdog+0xdda/0x12c0 [ 1324.720390][ T31] ? watchdog+0xdcd/0x12c0 [ 1324.720407][ T31] watchdog+0xdeb/0x12c0 [ 1324.720425][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.720439][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1324.720459][ T31] ? __kthread_parkme+0x19e/0x250 [ 1324.720481][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.720496][ T31] kthread+0x3c2/0x780 [ 1324.720511][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720524][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720538][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720552][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720565][ T31] ? rcu_is_watching+0x12/0xc0 [ 1324.720585][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720604][ T31] ret_from_fork+0x45/0x80 [ 1324.720618][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720633][ T31] ret_from_fork_asm+0x1a/0x30 [ 1324.720664][ T31] [ 1325.051833][ T31] Kernel Offset: disabled [ 1325.056131][ T31] Rebooting in 86400 seconds..